"Allow"? I am not sure there is much of a choice with Windows 10. Microsoft seems to have done an end-run around the WSUS-managed networks I set up, as well... :(
Disclaimer - I have not had the time to go back in and see if it is something simple that has undone/overridden my group policies...