USB restriction GPO cause Windows 10 update to not work

Hello Guys,

Now we are officially all Windows 10 environment with Version 1909 in all the systems. As a migration step, I recreated all the group policies for Windows 10 devices. Now we have got the GPO setting that prevents device drivers from being installed on our Windows 10 Pro systems, including a custom warning and administrator override. This prevents users from plugging in USB devices without me handy (like cameras, phone chargers, thumb drives or even unapproved keyboard/mouse.) We typically install all approved drivers before adding to the domain.


The prevention and approval part generally works fine, but what I have realized now is that it also stops Windows Updates from updating device drivers from the web leading to numerous failed updates.

I never thought I could face this problem. Is there a way to allow these updates without manual installation or do I need to find another way to do this?