In the patching communities this question comes up quite a bit, so its worth having it recorded so its easy to find.
Q: Which update is the one I need to apply to enable WSUS to deploy Feature Updates for Windows 10?
A: KB3159706. You must install this update on any WSUS server that is intended to sync and distribute Windows 10 upgrades (and feature updates) that are released after May 1, 2016. Without this update applied to Windows Server 2012 or Windows Server 2012 R2, WSUS 4.0 will only be able to deploy quality updates. The actual update enables ESD decryption provision in WSUS in Windows Server 2012 and Windows Server 2012 R2.
NOTE: This update is only for those running Windows Server 2012 or Windows Server 2012 R2. WSUS 4.0 running on Windows Server 2016 already contains the extra capability.
Looking for an awesome, no-nonsense technical conference for IT Pros, Devs, and DevOps? IT/Dev Connections kicks off in San Francisco in 2017!