|  | How to Block WSUS Updates ? | | |
| | | nobody |  |
|  Posted: Thu Sep 04, 2008 4:08 pm Post subject: How to Block WSUS Updates ? |  |
How do I stop WSUS 3.0 from trying to update a workstation that does not
appear in the list of Computers ? I have an IP, but the workstation is not
even a member of the COMPANY domain and never appears in the list of COMPANY
computers.
Suggestions welcome |
| |
| | | PA Bear [MS MVP] | |
| | Posted: Thu Sep 04, 2008 7:27 pm Post subject: Re: How to Block WSUS Updates ? | |
Right pew, wrong church. Forwarded to WSUS newsgroup
(microsoft.public.windows.server.update_services) via crosspost as a
convenience to OP.
On the web:
LINK
In your newsreader:
LINK
--
~PAÞ
nobody wrote:
| Quote: | How do I stop WSUS 3.0 from trying to update a workstation that does not
appear in the list of Computers ? I have an IP, but the workstation is not
even a member of the COMPANY domain and never appears in the list of
COMPANY
computers.
Suggestions welcome |
|
| |
| | | Harry Johnston [MVP] | |
| | Posted: Thu Sep 04, 2008 11:04 pm Post subject: Re: How to Block WSUS Updates ? | |
nobody wrote:
| Quote: | How do I stop WSUS 3.0 from trying to update a workstation that does not
appear in the list of Computers ? I have an IP, but the workstation is not
even a member of the COMPANY domain and never appears in the list of COMPANY
computers.
|
Starting with the basics: the WSUS server responds to requests from
workstations, it doesn't initiate the update process itself. So the
misconfiguration, if any, is on the affected client.
My first question is: if the workstation doesn't appear in the computer list,
what makes you think it is trying to update itself? Put another way, how did
you find out about this workstation in the first place?
Is the IP address within your internal network? Can your network operators
track it down for you?
Harry. |
| |
| | | Tom Steger | |
| | Posted: Fri Sep 05, 2008 9:56 pm Post subject: Re: How to Block WSUS Updates ? | |
| |  | |
Disable the Automtaic Updates service and see if it still happens.
You can also look at the C:\Windows\Windowsupdate.log and see where it's
trying to get updates.
There are lots of reasons a meachine could be overloaded with traffic.
"nobody" <nobody@discussions.microsoft.com> wrote in message
news:4B69AD2B-576A-4922-9D3D-9A87A81D0E32@microsoft.com...
| Quote: | The workstation in question appears to be getting overloaded with traffic
every morning these past 2 days. Outside consultant says our corporate
WSUS
is trying to update it.
Workstation in question does not appear in the list of computers anywhere.
I
was under the impression that if a machine does not appear in the list and
does not "join" the COMPANY domain, WSUS couldn't touch it. No ?
"Harry Johnston [MVP]" wrote:
nobody wrote:
How do I stop WSUS 3.0 from trying to update a workstation that does
not
appear in the list of Computers ? I have an IP, but the workstation is
not
even a member of the COMPANY domain and never appears in the list of
COMPANY
computers.
Starting with the basics: the WSUS server responds to requests from
workstations, it doesn't initiate the update process itself. So the
misconfiguration, if any, is on the affected client.
My first question is: if the workstation doesn't appear in the computer
list,
what makes you think it is trying to update itself? Put another way, how
did
you find out about this workstation in the first place?
Is the IP address within your internal network? Can your network
operators
track it down for you?
Harry.
|
|
| |
| | | Tom Steger | |
| | Posted: Fri Sep 05, 2008 9:56 pm Post subject: Re: How to Block WSUS Updates ? | |
| | | |
Disable the Automtaic Updates service and see if it still happens.
You can also look at the C:\Windows\Windowsupdate.log and see where it's
trying to get updates.
There are lots of reasons a meachine could be overloaded with traffic.
"nobody" <nobody@discussions.microsoft.com> wrote in message
news:4B69AD2B-576A-4922-9D3D-9A87A81D0E32@microsoft.com...
| Quote: | The workstation in question appears to be getting overloaded with traffic
every morning these past 2 days. Outside consultant says our corporate
WSUS
is trying to update it.
Workstation in question does not appear in the list of computers anywhere.
I
was under the impression that if a machine does not appear in the list and
does not "join" the COMPANY domain, WSUS couldn't touch it. No ?
"Harry Johnston [MVP]" wrote:
nobody wrote:
How do I stop WSUS 3.0 from trying to update a workstation that does
not
appear in the list of Computers ? I have an IP, but the workstation is
not
even a member of the COMPANY domain and never appears in the list of
COMPANY
computers.
Starting with the basics: the WSUS server responds to requests from
workstations, it doesn't initiate the update process itself. So the
misconfiguration, if any, is on the affected client.
My first question is: if the workstation doesn't appear in the computer
list,
what makes you think it is trying to update itself? Put another way, how
did
you find out about this workstation in the first place?
Is the IP address within your internal network? Can your network
operators
track it down for you?
Harry.
|
|
| |
| | | Harry Johnston [MVP] | |
| | Posted: Sun Sep 07, 2008 6:34 pm Post subject: Re: How to Block WSUS Updates ? | |
| | | |
nobody wrote:
| Quote: | The workstation in question appears to be getting overloaded with traffic
every morning these past 2 days. Outside consultant says our corporate WSUS
is trying to update it.
|
Follow Tom's advice. As he says, the best place to look is on the affected
client - that's where whatever the problem is will have to be corrected. The
only thing you could usefully do on the server is to look in the IIS logs for
the IP address in question to see whether it is in fact talking to the WSUS
server or not.
| Quote: | Workstation in question does not appear in the list of computers anywhere. I
was under the impression that if a machine does not appear in the list and
does not "join" the COMPANY domain, WSUS couldn't touch it. No ?
|
If a workstation isn't joined to the domain, it can't be affected by the WSUS
group policy. However, it could still be manually configured to use your WSUS
server.
The WSUS list of computers shows all computers which have successfully made
contact with the server. If the machine isn't on the list, it isn't likely that
it is overloading with traffic from the server - but the IIS logs would be a
better place to look, as there are various reasons why a client might not appear
in the list.
Harry. |
| |
| | | nobody | |
| | Posted: Fri Sep 12, 2008 4:16 pm Post subject: Re: How to Block WSUS Updates ? | |
| | | |
Thanks for the advise. That was exactly my understanding of how WSUS updates
computers, but this consultant professes to have extensive experience with
WSUS. I contacted him earlier this week asking for his assistance on how to
stop our WSUS from updating his server, but have not heard back. I will ask
him to check the log file next.
Thanks again
"Lawrence Garvin" wrote:
| Quote: | "nobody" <nobody@discussions.microsoft.com> wrote in message
news:4B69AD2B-576A-4922-9D3D-9A87A81D0E32@microsoft.com...
The workstation in question appears to be getting overloaded with traffic
every morning these past 2 days. Outside consultant says our corporate
WSUS
is trying to update it.
sigh>.. among other things.. you need a new "outside consultant"....
--
Lawrence Garvin, M.S., MCITP(x2), MCTS(x5), MCP(x7), MCBMSP
Senior Data Architect, APQC, Houston, Texas
Microsoft MVP - Software Distribution (2005-2008)
MS WSUS Website: LINK
My Websites: LINK
LINK
My MVP Profile: LINK
|
|
| |
|
|
