Operating System Updates is not designed to support the installation of Windows Updates that are approved via WSUS. Although an endpoint can be pointed to look for updates on a WSUS location (by setting a specific intranet Microsoft update service location), the HEIMDAL Agent is not able to discover the updates approved in WSUS and install them. This is why we recommend allowing HEIMDAL's OS Updates to manage them by searching and installing them right from the Microsoft Update servers.
What happens with the Operating Systems Updates in the following scenarios?
1. Using OS Updates together with WSUS and Server Source on Default, the HEIMDAL Agent will check for updates on WSUS but it will not be able to list them in the HEIMDAL Dashboard or install any.
2. Using OS Updates together with WSUS and Server Source on Windows Update, the HEIMDAL Agent will check for updates on the Microsoft Update servers, list them in the HEIMDAL Dashboard, and allow you to install them (according to the Group Policy settings).
3. Using OS Updates only and Server Source on Default, the HEIMDAL Agent will check for updates on the specific intranet Microsoft update service location (if specified) or on the Microsoft Default source. Any discovered update will be listed and installed (according to the Group Policy settings).
4. Using OS Updates only and Server Source on Windows Update, the HEIMDAL Agent will check for updates on the Microsoft Update servers, list them in the HEIMDAL Dashboard, and allow you to install them (according to the Group Policy settings).