Windows Server 2012 or Windows 8 always connects to Windows Update locations in a WSUS environment

Applies to: Windows Server 2012 DatacenterWindows Server 2012 DatacenterWindows Server 2012 Standard

Symptoms


Assume that you set up a Windows Server Update Services (WSUS) environment. When you run Windows Update on a client computer that is running Windows RT, Windows 8, or Windows Server 2012, the Windows Update client software periodically tries to access a Microsoft URL, even though you have configured the computer to receive its updates from the WSUS server. This issue occurs even if you have set the Turn off access to all Windows Update features and Do not connect to any Windows Update Internet locations Group Policy options to block access.

Note This issue does not cause updates to be downloaded unexpectedly from the Windows Update and Microsoft Update services. However, it may cause delays in Windows Update operations.

How to obtain this update


To resolve this issue, we have released an update for Windows RT, Windows 8, and Windows Server 2012.

This update allows for the Do not connect to any Windows Update Internet locations policy to function on client computers that are running Windows RT, Windows 8, or Windows Server 2012. 

Note After you enable this policy, computers will be prevented from accessing the Windows Store.

Method 1: Windows Update

This update is available from Windows Update.

Method 2: Microsoft Download Center

The following files are available for download from the Microsoft Download Center:
Operating systemUpdate
All supported x86-based versions of Windows 8Download Download the package now.
All supported x64-based versions of Windows 8Download Download the package now.
All supported x64-based versions of Windows Server 2012Download Download the package now.
Note The update for Windows RT can be obtained only from Windows Update.

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591 How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Update detail information


Prerequisites

There are no prerequisites for installing this update.

Registry information

To apply this update, you do not have to make any changes to the registry.

Restart requirement

You may have to restart the computer after you apply this update.

Update replacement information

This update does not replace a previously released update.

Status


Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

More Information


Starting with Windows 8, Windows RT, and Windows Server 2012, Windows Update implements a new mechanism to dynamically determine what services are available. As part of this mechanism, the Windows Update client software periodically tries to contact a Microsoft host. The existing Turn off access to all Windows Update features policy that controls access to the Windows Update and Microsoft Update services does not control access to this new service discovery mechanism.

Beginning with Windows 8.1 and Windows Server 2012 R2, a new Do not connect to any Windows Update Internet locations policy is added. This policy is used to suppress this mechanism and to force the Windows Update client software to access only known services.


For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates