Windows update not working outside of domain.

Tore Jacobsen
Tore Jacobsen used Ask the Experts™
Have a customer those pc's won't run windows update outside of the office.
When in the office, it works fine.

guess it's a GPO that says "only update by wsus sever" or some thing like that.

But can't seem to find it.
Any ideas?
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
When a user clicks Windows Updates manually, there is an option to check for updates from Microsoft versus your WSUS.
the GPO setting is at

Computer Configuration, Policies, Administrative Templates, Windows Components, Windows Update

"Specify intranet Microsoft update service location"
Tore JacobsenSystem adminstrator


One more thing.. We moved their server in to our location. So it's no longer in their office.
They log on to a Terminal server, and wanted us to host their server.
Guess we should take the computers out of the domain, but haven't yet because of the time it takes, and that some of the pc's are located in distant locations.

So a GPO will not hit the computers since they are never in our location and don't use VPN..
Is there a registrysetting perhaps.

You could also delete the GroupPolicy folder in c:\Windows\system32\

That should remove any local group policies
You can manage computers both inside and outside your AD environment.

So if the TS servers you are acquiring can access your subnet then make the following changes in LGPO.

gpedit.msc -> Computer Configuration -> Admin Templates -> Windows Components -> Windows Update ->

Specify intranet Microsoft update service location | Enabled & http://X.X.X.X (for both fields)

You can change the other values to mirror your current WSUS GPO setting.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial