Using a domain-based group policy object (GPO) is the standard way to configure WSUS and the WUA. Here are some typical questions when you are installing and configuring software updates:
• Is it necessary to create a domain-based GPO to support ConfigMgr software updates?
• What should be done with in-place Windows Updates domain GPOs?
You do not need to create a domain GPO to support ConfigMgr software updates. However, if you choose to create a domain GPO to support ConfigMgr client agent installation (see Chapter 9 for additional information on client installations) or use an existing domain GPO, you must configure the Windows Updates server option to point to the active SUP in the site, as shown in Figure 14.5. If you ...