How to enable signed intranet updates using Group Policy


If you are using custom updates for things Java or Adobe updates via WSUS and SCUP, then you need to ensure that you enable signed intranet updates for all your client machines.

The best way to do this is to use Group Policy. You should create a new Group Policy Object (GPO) and apply that to the OU’s in your Active Directory for machines that will need this setting.

The settings you need to create this GPO are below:

Create a new GPO and give it an appropriate (or inappropriate if you wish) name.

Then right click on the GPO and click Edit.

You then need to browse to the following location within the GPO:

Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Update

You should then see on the right side of the screen similar to below:

How to enable signed intranet updates using Group Policy 1

You then need to double click “Allow signed updates from an intranet Microsoft update service location” and click the Enable radio button like below:

How to enable signed intranet updates using Group Policy 2

You can then OK this box and you then can apply this GPO to the correct OU for your business.

How useful was this post?

Click on a star to rate it!

Average rating / 5. Vote count:

No votes so far! Be the first to rate this post.

We are sorry that this post was not useful for you!

Let us improve this post!

Tell us how we can improve this post?

Feedback is critical to our site so please, if this has helped you out, give the article a star rating above, it only takes one click! Thank You!

About A.J. Armstrong

Founder of TechyGeeksHome and Head Editor for over eight years! IT expert in multiple areas for over 21 years. Sharing experience and knowledge whenever possible! Making IT Happen.

View all posts by A.J. Armstrong

Leave us a message...

This site uses Akismet to reduce spam. Learn how your comment data is processed.