Microsoft Store gets blocked when KSC is acting as WSUS [KSC for Windows]

[Antipova Anna]

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials.

 

Problem

When you assign KSC as WSUS all hosts are not able to download anything from Microsoft Store. It is a Microsoft's design limitation.

Description

When KSC acts as WSUS group policy (GPO) "DoNotConnectToWindowsUpdateInternetLocations" is applied to the hosts. It is needed to prohibit hosts from downloading updates from the Internet (it is relevant for Windows 10/Server 2016). Such limitation blocks the ability to download applications from Microsoft Store.

Microsoft explanation

More details about this behavior can be found in the following link:
https://cloudblogs.microsoft.com/windowsserver/2017/01/09/why-wsus-and-sccm-managed-clients-are-reaching-out-to-microsoft-online/

Solution

In case if you need this ability back and don't mind hosts download updates from the Internet, you can apply the following solution:

1. Stop KSC server service

2. Open registry editor "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\KasperskyLab\Components\34\1093\1.0.0.0\ServerFlags"

3. Create server flag KLWUS_WUA_DISABLE_CONN_TO_INET = 0

4. Start KSC server service

A restart of KSC Server might be required in some cases.