Question: can wsus work in a workgroup?
Answer: Hi, Yes WSUS does support workgroup machines and can patch them. By default, WSUS 2016 use port 8530 for http, port 8531 for https. It's also recommended to do so.