I am currently working on an environment with standalone WSUS and GPO's being applied to set the Update source for all clients.
The managed clients within ConfigMgr have the SCEP agent installed and the ConfigMgr server is setup for Endpoint Protection and is managing them. Software updates is enabled in the default client settings. Is my only option to use the UNC share as the source for definition updates for the managed ConfigMgr clients? What I was hoping for was a way to have an integrated WSUS instance on the ConfigMgr server, which would only sync definition updates and then be able to use an ADR for deploying the definition updates into a software update group. Is this not possible if the same client machine also has GPO's applied to it for an standalone WSUS server so it can receive windows patches from a standalone WSUS server? Hatem Mohamed [email protected] (732)407-0504
