Windows Components › Windows Update › Manage updates offered from Windows Server Update Service
Specify source service for specific classes of Windows Updates
Supported on At least Windows Server 2022, or Windows 10 Version 2004
What it does
When this policy is enabled, devices will receive Windows updates for the classes listed from the specified update source: either Windows Update or Windows Server Update Service. Note: To receive any updates from the Windows Server Update Service you must have properly configured an intranet Microsoft update service location via the “Specify intranet Microsoft update service location” policy. If this policy is not configured or is disabled, the device will continue to detect updates per your other policy configurations. Note: If you are using “Do not allow deferral policies to cause scans against Windows Update” currently to ensure devices only scan against your specified server, we recommend configuring this policy instead or in addition to such.
What it writes
- Hive
- HKEY_LOCAL_MACHINE
- Registry key
Software\Policies\Microsoft\Windows\WindowsUpdate- When enabled
- Software\Policies\Microsoft\Windows\WindowsUpdate\AU\UseUpdateClassPolicySource = DWORD 1
- When disabled
- Software\Policies\Microsoft\Windows\WindowsUpdate\AU\UseUpdateClassPolicySource = DWORD 0
In Intune
No native CSP; import the ADMX (Intune-ready).
From Microsoft's Policy CSP DDF files (DDF v2 Files, February 2026), read 18 Oct 2026.
Options
| Option | Type | Registry value | Allowed values |
|---|---|---|---|
| Feature UpdatesRequiredDefault: Windows Server Update Services | Drop-down list | SetPolicyDrivenUpdateSourceForFeatureUpdates |
|
| Quality UpdatesRequiredDefault: Windows Server Update Services | Drop-down list | SetPolicyDrivenUpdateSourceForQualityUpdates |
|
| Driver UpdatesRequiredDefault: Windows Server Update Services | Drop-down list | SetPolicyDrivenUpdateSourceForDriverUpdates |
|
| Other UpdatesRequiredDefault: Windows Server Update Services | Drop-down list | SetPolicyDrivenUpdateSourceForOtherUpdates |
|
Configure and deploy
Choose a state and the option values; the output below is generated from the template for exactly that.
Enabled · Computer · template defaults
Registry file (.reg)
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate]
"SetPolicyDrivenUpdateSourceForDriverUpdates"=dword:00000001
"SetPolicyDrivenUpdateSourceForFeatureUpdates"=dword:00000001
"SetPolicyDrivenUpdateSourceForOtherUpdates"=dword:00000001
"SetPolicyDrivenUpdateSourceForQualityUpdates"=dword:00000001
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU]
"UseUpdateClassPolicySource"=dword:00000001
PowerShell
$ErrorActionPreference = 'Stop'
function Set-RegistryValue {
param(
[Parameter(Mandatory = $true)][string] $Path,
[Parameter(Mandatory = $true)][string] $Name,
[Parameter(Mandatory = $true)][string] $PropertyType,
[Parameter(Mandatory = $true)][object] $Value
)
if (-not (Test-Path -LiteralPath $Path)) {
New-Item -Path $Path -Force | Out-Null
}
New-ItemProperty -LiteralPath $Path -Name $Name -PropertyType $PropertyType -Value $Value -Force | Out-Null
}
function Remove-RegistryValue {
param(
[Parameter(Mandatory = $true)][string] $Path,
[Parameter(Mandatory = $true)][string] $Name
)
if (Test-Path -LiteralPath $Path) {
Remove-ItemProperty -LiteralPath $Path -Name $Name -Force -ErrorAction SilentlyContinue
}
}
function Clear-RegistryKeyValues {
param(
[Parameter(Mandatory = $true)][string] $Path
)
if (-not (Test-Path -LiteralPath $Path)) {
return
}
foreach ($propertyName in (Get-Item -LiteralPath $Path).Property) {
Remove-ItemProperty -LiteralPath $Path -Name $propertyName -Force -ErrorAction SilentlyContinue
}
}
# Policy: Specify source service for specific classes of Windows Updates
# Name: UpdateClassPolicySource_Title
# Scope: Machine
# State: Enabled
# Source: WindowsUpdate.admx
Set-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'UseUpdateClassPolicySource' -PropertyType 'DWord' -Value 1
Set-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate' -Name 'SetPolicyDrivenUpdateSourceForFeatureUpdates' -PropertyType 'DWord' -Value 1
Set-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate' -Name 'SetPolicyDrivenUpdateSourceForQualityUpdates' -PropertyType 'DWord' -Value 1
Set-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate' -Name 'SetPolicyDrivenUpdateSourceForDriverUpdates' -PropertyType 'DWord' -Value 1
Set-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate' -Name 'SetPolicyDrivenUpdateSourceForOtherUpdates' -PropertyType 'DWord' -Value 1
- The OMA-URI is an inferred ADMX-backed Policy CSP candidate derived from the source ADMX file name and policy name.
- Some Microsoft policies use built-in Policy CSP pages whose area names don't match the ADMX file name, so verify the candidate against Microsoft Learn before deployment.
ADMX profile candidate (OMA-URI)
./Device/Vendor/MSFT/Policy/Config/ADMX_WindowsUpdate/UpdateClassPolicySource_TitleADMX SyncML candidate
<SyncML xmlns="SYNCML:SYNCML1.2">
<SyncBody>
<Replace>
<CmdID>1</CmdID>
<Item>
<Meta>
<Format>chr</Format>
<Type>text/plain</Type>
</Meta>
<Target>
<LocURI>./Device/Vendor/MSFT/Policy/Config/ADMX_WindowsUpdate/UpdateClassPolicySource_Title</LocURI>
</Target>
<Data><enabled/>
<data id="CorpWUSetPolicyDrivenUpdateSourceForFeatureUpdates" value="0"/>
<data id="CorpWUSetPolicyDrivenUpdateSourceForQualityUpdates" value="0"/>
<data id="CorpWUSetPolicyDrivenUpdateSourceForDriverUpdates" value="0"/>
<data id="CorpWUSetPolicyDrivenUpdateSourceForOtherUpdates" value="0"/></Data>
</Item>
</Replace>
<Final/>
</SyncBody>
</SyncML>Intune remediation scripts
Detection
$ErrorActionPreference = 'Stop'
$reasons = [System.Collections.Generic.List[string]]::new()
function Test-RegistryValueExists {
param(
[Parameter(Mandatory = $true)][string] $Path,
[Parameter(Mandatory = $true)][string] $Name
)
if (-not (Test-Path -LiteralPath $Path)) {
return $false
}
return $null -ne (Get-ItemProperty -LiteralPath $Path -Name $Name -ErrorAction SilentlyContinue)
}
function Test-RegistryValueEquals {
param(
[Parameter(Mandatory = $true)][string] $Path,
[Parameter(Mandatory = $true)][string] $Name,
[Parameter(Mandatory = $true)][string] $Kind,
[Parameter(Mandatory = $true)][object] $Expected
)
if (-not (Test-Path -LiteralPath $Path)) {
return $false
}
$valueObject = Get-ItemProperty -LiteralPath $Path -Name $Name -ErrorAction SilentlyContinue
if ($null -eq $valueObject) {
return $false
}
$actual = $valueObject.$Name
switch ($Kind) {
'String' { return [string]$actual -ceq [string]$Expected }
'ExpandString' { return [string]$actual -ceq [string]$Expected }
'DWord' { return [uint32]$actual -eq [uint32]$Expected }
'QWord' { return [uint64]$actual -eq [uint64]$Expected }
'MultiString' {
$actualArray = @($actual)
$expectedArray = @($Expected)
if ($actualArray.Count -ne $expectedArray.Count) { return $false }
for ($index = 0; $index -lt $actualArray.Count; $index++) {
if ([string]$actualArray[$index] -cne [string]$expectedArray[$index]) { return $false }
}
return $true
}
'Binary' {
$actualArray = [byte[]]$actual
$expectedArray = [byte[]]$Expected
if ($actualArray.Length -ne $expectedArray.Length) { return $false }
for ($index = 0; $index -lt $actualArray.Length; $index++) {
if ($actualArray[$index] -ne $expectedArray[$index]) { return $false }
}
return $true
}
default { return [string]$actual -ceq [string]$Expected }
}
}
# Policy: Specify source service for specific classes of Windows Updates
# Name: UpdateClassPolicySource_Title
# Scope: Machine
# State: Enabled
# Source: WindowsUpdate.admx
$isMatch = Test-RegistryValueEquals -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'UseUpdateClassPolicySource' -Kind 'DWord' -Expected 1
if (-not $isMatch) {
$reasons.Add('Value mismatch: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\UseUpdateClassPolicySource') | Out-Null
}
$isMatch = Test-RegistryValueEquals -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate' -Name 'SetPolicyDrivenUpdateSourceForFeatureUpdates' -Kind 'DWord' -Expected 1
if (-not $isMatch) {
$reasons.Add('Value mismatch: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\SetPolicyDrivenUpdateSourceForFeatureUpdates') | Out-Null
}
$isMatch = Test-RegistryValueEquals -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate' -Name 'SetPolicyDrivenUpdateSourceForQualityUpdates' -Kind 'DWord' -Expected 1
if (-not $isMatch) {
$reasons.Add('Value mismatch: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\SetPolicyDrivenUpdateSourceForQualityUpdates') | Out-Null
}
$isMatch = Test-RegistryValueEquals -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate' -Name 'SetPolicyDrivenUpdateSourceForDriverUpdates' -Kind 'DWord' -Expected 1
if (-not $isMatch) {
$reasons.Add('Value mismatch: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\SetPolicyDrivenUpdateSourceForDriverUpdates') | Out-Null
}
$isMatch = Test-RegistryValueEquals -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate' -Name 'SetPolicyDrivenUpdateSourceForOtherUpdates' -Kind 'DWord' -Expected 1
if (-not $isMatch) {
$reasons.Add('Value mismatch: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\SetPolicyDrivenUpdateSourceForOtherUpdates') | Out-Null
}
if ($reasons.Count -eq 0) {
Write-Output 'Compliant'
exit 0
}
$reasons | ForEach-Object { Write-Output $_ }
exit 1
Remediation
$ErrorActionPreference = 'Stop'
function Set-RegistryValue {
param(
[Parameter(Mandatory = $true)][string] $Path,
[Parameter(Mandatory = $true)][string] $Name,
[Parameter(Mandatory = $true)][string] $PropertyType,
[Parameter(Mandatory = $true)][object] $Value
)
if (-not (Test-Path -LiteralPath $Path)) {
New-Item -Path $Path -Force | Out-Null
}
New-ItemProperty -LiteralPath $Path -Name $Name -PropertyType $PropertyType -Value $Value -Force | Out-Null
}
function Remove-RegistryValue {
param(
[Parameter(Mandatory = $true)][string] $Path,
[Parameter(Mandatory = $true)][string] $Name
)
if (Test-Path -LiteralPath $Path) {
Remove-ItemProperty -LiteralPath $Path -Name $Name -Force -ErrorAction SilentlyContinue
}
}
function Clear-RegistryKeyValues {
param(
[Parameter(Mandatory = $true)][string] $Path
)
if (-not (Test-Path -LiteralPath $Path)) {
return
}
foreach ($propertyName in (Get-Item -LiteralPath $Path).Property) {
Remove-ItemProperty -LiteralPath $Path -Name $propertyName -Force -ErrorAction SilentlyContinue
}
}
# Policy: Specify source service for specific classes of Windows Updates
# Name: UpdateClassPolicySource_Title
# Scope: Machine
# State: Enabled
# Source: WindowsUpdate.admx
Set-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'UseUpdateClassPolicySource' -PropertyType 'DWord' -Value 1
Set-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate' -Name 'SetPolicyDrivenUpdateSourceForFeatureUpdates' -PropertyType 'DWord' -Value 1
Set-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate' -Name 'SetPolicyDrivenUpdateSourceForQualityUpdates' -PropertyType 'DWord' -Value 1
Set-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate' -Name 'SetPolicyDrivenUpdateSourceForDriverUpdates' -PropertyType 'DWord' -Value 1
Set-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate' -Name 'SetPolicyDrivenUpdateSourceForOtherUpdates' -PropertyType 'DWord' -Value 1
History 3 retained releases
- 23H2 · 1.015 Jul 2024
- Translations changed; choose a language above to compare its wording.
- 22H2 · 3.015 Jul 2024
- Description
… the specified update source: either Windows Update or Windows Server Update Service.
[removed: ]Note: To receive any updates from the Windows Server Update Service you … the device will continue to detect updates per your other policy configurations.[removed: ]Note: If you are using “Do not allow deferral policies to cause …Whole description, marked
When this policy is enabled, devices will receive Windows updates for the classes listed from the specified update source: either Windows Update or Windows Server Update Service.
[removed: ]Note: To receive any updates from the Windows Server Update Service you must have properly configured an intranet Microsoft update service location via the “Specify intranet Microsoft update service location” policy. If this policy is not configured or is disabled, the device will continue to detect updates per your other policy configurations.[removed: ]Note: If you are using “Do not allow deferral policies to cause scans against Windows Update” currently to ensure devices only scan against your specified server, we recommend configuring this policy instead or in addition to such.
- Description
… the specified update source: either Windows Update or Windows Server Update Service.
- 22H2 · 1.015 Jul 2024
- Already present in the first release ChangeIntel keeps.
Template
- Internal name
UpdateClassPolicySource_Title- Namespace
Microsoft.Policies.WindowsUpdate- Template file
WindowsUpdate.admx- Release
- Windows 11 23H2 · 1.0 · file set
d784d0ea5f14a680…
Definition, editor controls and support
Definition
<policy class="Machine" displayName="$(string.UpdateClassPolicySource_Title)" explainText="$(string.UpdateClassPolicySource_Help)" key="Software\Policies\Microsoft\Windows\WindowsUpdate" name="UpdateClassPolicySource_Title" presentation="$(presentation.UpdateClassPolicySource_Title)" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
<parentCategory ref="Microsoft.Policies.WindowsUpdate:WSUSOffering" />
<supportedOn ref="Microsoft.Policies.WindowsUpdate:WU_SUPPORTED_Windows_Server_2022_Windows_10_0_2004" />
<enabledList>
<item key="Software\Policies\Microsoft\Windows\WindowsUpdate\AU" valueName="UseUpdateClassPolicySource">
<value>
<decimal value="1" />
</value>
</item>
</enabledList>
<disabledList>
<item key="Software\Policies\Microsoft\Windows\WindowsUpdate\AU" valueName="UseUpdateClassPolicySource">
<value>
<decimal value="0" />
</value>
</item>
</disabledList>
<elements>
<enum id="CorpWUSetPolicyDrivenUpdateSourceForFeatureUpdates" required="true" valueName="SetPolicyDrivenUpdateSourceForFeatureUpdates">
<item displayName="$(string.UpdateClassPolicySourceSelectionWSUS)">
<value>
<decimal value="1" />
</value>
</item>
<item displayName="$(string.UpdateClassPolicySourceSelectionWU)">
<value>
<decimal value="0" />
</value>
</item>
</enum>
<enum id="CorpWUSetPolicyDrivenUpdateSourceForQualityUpdates" required="true" valueName="SetPolicyDrivenUpdateSourceForQualityUpdates">
<item displayName="$(string.UpdateClassPolicySourceSelectionWSUS)">
<value>
<decimal value="1" />
</value>
</item>
<item displayName="$(string.UpdateClassPolicySourceSelectionWU)">
<value>
<decimal value="0" />
</value>
</item>
</enum>
<enum id="CorpWUSetPolicyDrivenUpdateSourceForDriverUpdates" required="true" valueName="SetPolicyDrivenUpdateSourceForDriverUpdates">
<item displayName="$(string.UpdateClassPolicySourceSelectionWSUS)">
<value>
<decimal value="1" />
</value>
</item>
<item displayName="$(string.UpdateClassPolicySourceSelectionWU)">
<value>
<decimal value="0" />
</value>
</item>
</enum>
<enum id="CorpWUSetPolicyDrivenUpdateSourceForOtherUpdates" required="true" valueName="SetPolicyDrivenUpdateSourceForOtherUpdates">
<item displayName="$(string.UpdateClassPolicySourceSelectionWSUS)">
<value>
<decimal value="1" />
</value>
</item>
<item displayName="$(string.UpdateClassPolicySourceSelectionWU)">
<value>
<decimal value="0" />
</value>
</item>
</enum>
</elements>
</policy>Editor controls
<presentation id="UpdateClassPolicySource_Title" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
<text>Specify source service for the following classes of Windows updates:</text>
<dropdownList defaultItem="0" noSort="true" refId="CorpWUSetPolicyDrivenUpdateSourceForFeatureUpdates">Feature Updates</dropdownList>
<dropdownList defaultItem="0" noSort="true" refId="CorpWUSetPolicyDrivenUpdateSourceForQualityUpdates">Quality Updates</dropdownList>
<dropdownList defaultItem="0" noSort="true" refId="CorpWUSetPolicyDrivenUpdateSourceForDriverUpdates">Driver Updates</dropdownList>
<dropdownList defaultItem="0" noSort="true" refId="CorpWUSetPolicyDrivenUpdateSourceForOtherUpdates">Other Updates</dropdownList>
</presentation>Supported platforms and category
Microsoft.Policies.Windows:category:WindowsComponents
<category displayName="$(string.WindowsComponents)" explainText="$(string.WindowsComponents_Help)" name="WindowsComponents" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions" />
Microsoft.Policies.WindowsUpdate:category:WSUSOffering
<category displayName="$(string.WSUSOffering)" name="WSUSOffering" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
<parentCategory ref="Microsoft.Policies.WindowsUpdate:WindowsUpdateCat" />
</category>
Microsoft.Policies.WindowsUpdate:category:WindowsUpdateCat
<category displayName="$(string.WindowsUpdateCat)" name="WindowsUpdateCat" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
<parentCategory ref="Microsoft.Policies.Windows:WindowsComponents" />
</category>
Microsoft.Policies.WindowsUpdate:definition:WU_SUPPORTED_Windows_Server_2022_Windows_10_0_2004
<definition displayName="$(string.WU_SUPPORTED_Windows_Server_2022_Windows_10_0_2004)" name="WU_SUPPORTED_Windows_Server_2022_Windows_10_0_2004" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
<or>
<range minVersionIndex="13" ref="unresolved(products):MicrosoftWindows" />
</or>
</definition>
Microsoft.Policies.WindowsUpdate:unresolved:unresolved(products):MicrosoftWindows
<unresolved reference="unresolved(products):MicrosoftWindows" />
Microsoft.Policies.Windows:category:WindowsComponents
<category displayName="$(string.WindowsComponents)" explainText="$(string.WindowsComponents_Help)" name="WindowsComponents" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions" />
<strings><string id="Microsoft.Policies.Windows:WindowsComponents">Windows Components</string><string id="Microsoft.Policies.Windows:WindowsComponents_Help">Contains settings for operating system components.</string></strings>
Microsoft.Policies.WindowsUpdate:category:WSUSOffering
<category displayName="$(string.WSUSOffering)" name="WSUSOffering" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
<parentCategory ref="Microsoft.Policies.WindowsUpdate:WindowsUpdateCat" />
</category>
<strings><string id="Microsoft.Policies.WindowsUpdate:WSUSOffering">Manage updates offered from Windows Server Update Service</string></strings>
Microsoft.Policies.WindowsUpdate:category:WindowsUpdateCat
<category displayName="$(string.WindowsUpdateCat)" name="WindowsUpdateCat" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
<parentCategory ref="Microsoft.Policies.Windows:WindowsComponents" />
</category>
<strings><string id="Microsoft.Policies.WindowsUpdate:WindowsUpdateCat">Windows Update</string></strings>
Microsoft.Policies.WindowsUpdate:definition:WU_SUPPORTED_Windows_Server_2022_Windows_10_0_2004
<definition displayName="$(string.WU_SUPPORTED_Windows_Server_2022_Windows_10_0_2004)" name="WU_SUPPORTED_Windows_Server_2022_Windows_10_0_2004" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
<or>
<range minVersionIndex="13" ref="unresolved(products):MicrosoftWindows" />
</or>
</definition>
<strings><string id="Microsoft.Policies.WindowsUpdate:WU_SUPPORTED_Windows_Server_2022_Windows_10_0_2004">At least Windows Server 2022, or Windows 10 Version 2004</string></strings>