can WSUS scan clients for missing patches

for products that are not marked to synchronize from Microsoft Updates?

Sorry Mr T but I don't believe that would be possible. You do know that you
can have it synchronize for products but never download the actual patches
unless you approve so there really wouldn't be any harm in doing so. You can
also change your synchronization settings back.

- Tharbad

"Mr T" wrote:

> for products that are not marked to synchronize from Microsoft Updates?
>
>
>

"Mr T" <> wrote in message
news:...

> Can WSUS scan clients for missing patches
> for products that are not marked to synchronize from Microsoft Updates?

First, WSUS does not scan clients, the Windows Update Agent on the client
scans the database of the WSUS Server (or AU/WU/MU) for "available updates",
and then determines if those "available updates" are applicable to the
machine.

So, second, in order for the WUA to scan clients for missing patches, the
patches *must* be present in the WSUS server update database - which means
the WSUS Server must be synchronizing the product and classification that
contains those updates.

So, in short, the answer to your question is: No.

But now, you also know the reason why. :-)


--
Lawrence Garvin, M.S., MCITP:EA, MCDBA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)

MS WSUS Website: http://www.microsoft.com/wsus
My Websites: http://www.onsitechsolutions.com;
http://wsusinfo.onsitechsolutions.com
My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin