Cause
=====
Windows
10 的Duo Scan功能讓使用該作業系統會向WSUS和網際網路取的更新。
Action Plan
==============
-請在Windows 10的電腦上打開edit group policy，將以下兩個GPO給開啟
-在命令提示字元套用在電腦上執行gpupdate
/force直接套用GPO
-打開regedit，檢查HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate下是否有以下兩個key值
-測試windows update是否運作正常
必須開啟的GPO
- Do not connect to any
Windows Update Internet locations
Even when Windows Update is configured to receive updates from
an intranet update service, it will periodically retrieve information from the
public Windows Update service to enable future connections to Windows Update,
and other services like Microsoft Update or the Microsoft Store.
Use Computer Configuration\Administrative
Templates\Windows Components\Windows update\Do not connect to any Windows
Update Internet locations to enable this policy. When enabled, this
policy will disable the functionality described above, and may cause connection
to public services such as the Microsoft Store, Windows Update for Business and
Delivery Optimization to stop working.
- Do not allow update deferral policies to cause scans against
Windows Update
The new policy, “Do not allow update
deferral policies to cause scans against Windows Update”,
when enabled, will disable Dual Scan. This allows enterprises that wish to
configure deferral policies, the ability to do so without being concerned that
Dual Scan will override administrator intent.
Use Computer
Configuration\Administrative Templates\Windows Components\Windows update\Do
not allow update deferral policies to cause scans against Windows Update to enable
this policy. When enabled, this policy will disable the functionality described
above, and may cause connection to public services such as the Microsoft Store,
Windows Update for Business and Delivery Optimization to stop working.
More Information
==============
