Weird issues WSUS clients some goin to internet for updates

Ok we got about 1000+pc's at this location and we have had bandwidth issues
for a few days i sniffed one of the clients and it was going to windows
update site...downloading and installing and prompting for restart. Now we
apply WSUS policy per SITE using AD sites and services. and its not every
client but alot of them, reason we use sites is this site is actually 4 sites
with in 50 mile radius. and eash have own WSUS and DC's. Any idea?

"kidem" <> wrote in message
news:76834441-CC5D-4771-B481-...
> Ok we got about 1000+pc's at this location and we have had bandwidth
> issues
> for a few days i sniffed one of the clients and it was going to windows
> update site...downloading and installing and prompting for restart. Now we
> apply WSUS policy per SITE using AD sites and services. and its not every
> client but alot of them, reason we use sites is this site is actually 4
> sites
> with in 50 mile radius. and eash have own WSUS and DC's. Any idea?


Sounds like, and you've provided some strong evidence on your own, that your
Group Policy is not being properly applied.

--
Lawrence Garvin, M.S., MCITP:EA, MCDBA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)

MS WSUS Website: http://www.microsoft.com/wsus
My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin

I forgot to add that i did RSOP and the policy is listed...

If a WSUS server is unavailable will the client go outside for the updates?

"Lawrence Garvin [MVP]" wrote:

> "kidem" <> wrote in message
> news:76834441-CC5D-4771-B481-...
> > Ok we got about 1000+pc's at this location and we have had bandwidth
> > issues
> > for a few days i sniffed one of the clients and it was going to windows
> > update site...downloading and installing and prompting for restart. Now we
> > apply WSUS policy per SITE using AD sites and services. and its not every
> > client but alot of them, reason we use sites is this site is actually 4
> > sites
> > with in 50 mile radius. and eash have own WSUS and DC's. Any idea?
>
>
> Sounds like, and you've provided some strong evidence on your own, that your
> Group Policy is not being properly applied.
>
> --
> Lawrence Garvin, M.S., MCITP:EA, MCDBA
> Principal/CTO, Onsite Technology Solutions, Houston, Texas
> Microsoft MVP - Software Distribution (2005-2009)
>
> MS WSUS Website: http://www.microsoft.com/wsus
> My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin
>

On Tue, 8 Sep 2009 13:30:02 -0700, kidem <>
wrote:

>I forgot to add that i did RSOP and the policy is listed...
>
>If a WSUS server is unavailable will the client go outside for the updates?

No.

>
>"Lawrence Garvin [MVP]" wrote:
>
>> "kidem" <> wrote in message
>> news:76834441-CC5D-4771-B481-...
>> > Ok we got about 1000+pc's at this location and we have had bandwidth
>> > issues
>> > for a few days i sniffed one of the clients and it was going to windows
>> > update site...downloading and installing and prompting for restart. Now we
>> > apply WSUS policy per SITE using AD sites and services. and its not every
>> > client but alot of them, reason we use sites is this site is actually 4
>> > sites
>> > with in 50 mile radius. and eash have own WSUS and DC's. Any idea?
>>
>>
>> Sounds like, and you've provided some strong evidence on your own, that your
>> Group Policy is not being properly applied.
>>
>> --
>> Lawrence Garvin, M.S., MCITP:EA, MCDBA
>> Principal/CTO, Onsite Technology Solutions, Houston, Texas
>> Microsoft MVP - Software Distribution (2005-2009)
>>
>> MS WSUS Website: http://www.microsoft.com/wsus
>> My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin
>>
--
Dave Mills
There are 10 types of people, those that understand binary and those that don't.

"kidem" <> wrote in message
newsC7D4811-B9D0-4E36-8B11-...
>I forgot to add that i did RSOP and the policy is listed...

Then perhaps your policy is *misconfigured*?

The fact that the policy is merely listed is inconclusive if the policy does
not have the correct values.


> If a WSUS server is unavailable will the client go outside for the
> updates?

No. It will record error codes of 0x80072efd indicating that it could not
connect to a WSUS Server at the specified URL.


--
Lawrence Garvin, M.S., MCITP:EA, MCDBA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)

MS WSUS Website: http://www.microsoft.com/wsus
My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin

Well i havent exactly checked the registry of the machines to see if it
mirrors the policy but i will. So would incorrect subnets linking the PC's to
the Site, as in instead of putting every subnet can you use 10.0.0.0/8 to
catch all the subnets even though they may be like 10.222.59.0/28 or
10.192.29.0/24 etc etc

"Dave Mills" wrote:

> On Tue, 8 Sep 2009 13:30:02 -0700, kidem <>
> wrote:
>
> >I forgot to add that i did RSOP and the policy is listed...
> >
> >If a WSUS server is unavailable will the client go outside for the updates?
>
> No.
>
> >
> >"Lawrence Garvin [MVP]" wrote:
> >
> >> "kidem" <> wrote in message
> >> news:76834441-CC5D-4771-B481-...
> >> > Ok we got about 1000+pc's at this location and we have had bandwidth
> >> > issues
> >> > for a few days i sniffed one of the clients and it was going to windows
> >> > update site...downloading and installing and prompting for restart. Now we
> >> > apply WSUS policy per SITE using AD sites and services. and its not every
> >> > client but alot of them, reason we use sites is this site is actually 4
> >> > sites
> >> > with in 50 mile radius. and eash have own WSUS and DC's. Any idea?
> >>
> >>
> >> Sounds like, and you've provided some strong evidence on your own, that your
> >> Group Policy is not being properly applied.
> >>
> >> --
> >> Lawrence Garvin, M.S., MCITP:EA, MCDBA
> >> Principal/CTO, Onsite Technology Solutions, Houston, Texas
> >> Microsoft MVP - Software Distribution (2005-2009)
> >>
> >> MS WSUS Website: http://www.microsoft.com/wsus
> >> My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin
> >>
> --
> Dave Mills
> There are 10 types of people, those that understand binary and those that don't.
>