2 questions about Windows Updates

1. We run the SUS auto-updates and distribute thru AD GPO, but some users
(Windows 2000 Professional) say they get the Microsoft rainbow-colored
indicator (by the time) "every day", even though their installing the updates
each day. Why is this happening?

2. Is there a version number for the Windows Updates component that is on
the PC. I notice that if I manually go to Windows Updates on some PCs
(Windows 2000 Professional), it will say it needs to download a newer version
of the Windows-Updates-component on the PC. It seems like all PCs are
receiving the Auto-updates, but just not sure if I need to run a manual
update on these.

Thanks.