How to enable signed intranet updates using Group Policy


Last updated on April 16th, 2023 at 11:25 pm

Read Time:56 Second

If you are using custom updates for things Java or Adobe updates via WSUS and SCUP, then you need to ensure that you enable signed intranet updates for all your client machines.

The best way to do this is to use Group Policy. You should create a new Group Policy Object (GPO) and apply that to the OU’s in your Active Directory for machines that will need this setting.

The settings you need to create this GPO are below:

Create a new GPO and give it an appropriate (or inappropriate if you wish) name.

Then right click on the GPO and click Edit.

You then need to browse to the following location within the GPO:

Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Update

You should then see on the right side of the screen similar to below:

How to enable signed intranet updates using Group Policy 1

You then need to double click “Allow signed updates from an intranet Microsoft update service location” and click the Enable radio button like below:

How to enable signed intranet updates using Group Policy 2

You can then OK this box and you then can apply this GPO to the correct OU for your business.

Avatar for Andrew Armstrong

About Post Author

Andrew Armstrong

Founder of TechyGeeksHome and Head Editor for over 15 years! IT expert in multiple areas for over 23 years. Sharing experience and knowledge whenever possible! Making IT Happen.
Click to rate this post!
[Total: 0 Average: 0]

Free Subscription

If you want to be notified when we post more quality guides like this one, sign up to our free subscription service and you will receive an email when a new post is live.

Join 542 other subscribers.

No need to worry, we will not be filling your inbox with spam and you can unsubscribe anytime you like.

Leave us a message...

This site uses Akismet to reduce spam. Learn how your comment data is processed.