+ Post New Thread
Results 1 to 8 of 8
Windows Thread, WSUS causing me grief! in Technical; Hi Guys / Gals, Having some problems with some of our machines and WSUS . We have a WSUS server ...
  1. #1

    Join Date
    Jan 2008
    Posts
    172
    Thank Post
    18
    Thanked 10 Times in 9 Posts
    Rep Power
    15

    WSUS causing me grief!

    Hi Guys / Gals,

    Having some problems with some of our machines and WSUS. We have a WSUS server setup and running on a 2008 R2 server. We tell our machines to use this by group policy. If I do a rsop on the clients, I can see they have picked up this policy. However, looking at our firewall logs I see a lot of clients going out to the net using "ms-update" (Its a Palo Alto firewall so it can identify traffic/apps regardless of destination port).

    Looking at the WSUS console, it can see all the machines and has seen them all recently. It reports most of them are 99%. This is fine as I never expect to see them at 100%. Im just a bit confused as to why machines are going out to the net. Is there a difference between windows update and ms-update? I know Microsoft release updates for other vendors / drivers etc. Could this be what the clients are going outside for?

    Any ideas?!?

  2. #2

    elsiegee40's Avatar
    Join Date
    Jan 2007
    Location
    Kent
    Posts
    9,762
    Thank Post
    1,813
    Thanked 2,226 Times in 1,643 Posts
    Rep Power
    800
    Quote Originally Posted by m1ddy View Post
    Hi Guys / Gals,

    Having some problems with some of our machines and WSUS. We have a WSUS server setup and running on a 2008 R2 server. We tell our machines to use this by group policy. If I do a rsop on the clients, I can see they have picked up this policy. However, looking at our firewall logs I see a lot of clients going out to the net using "ms-update" (Its a Palo Alto firewall so it can identify traffic/apps regardless of destination port).

    Looking at the WSUS console, it can see all the machines and has seen them all recently. It reports most of them are 99%. This is fine as I never expect to see them at 100%. Im just a bit confused as to why machines are going out to the net. Is there a difference between windows update and ms-update? I know Microsoft release updates for other vendors / drivers etc. Could this be what the clients are going outside for?

    Any ideas?!?
    Windows update is what it says- updates for Windows.

    If you want updates for Office, Silverlight... then Microsoft Update is what's needed.

    At home.

    Your network PCs shouldn't be using either of them without an administrator sat in front of the screen doing it manually.

  3. #3
    Cache's Avatar
    Join Date
    Apr 2008
    Location
    Cumbria
    Posts
    1,227
    Thank Post
    455
    Thanked 178 Times in 175 Posts
    Blog Entries
    3
    Rep Power
    65
    They aren't going out to get the root certificates update are they? I can't remember the exact url, but I know because our proxy needs auth that there are always failures in the event log because it can't contact it.

  4. #4

    Join Date
    Jan 2008
    Posts
    172
    Thank Post
    18
    Thanked 10 Times in 9 Posts
    Rep Power
    15
    Quote Originally Posted by elsiegee40 View Post
    Windows update is what it says- updates for Windows.

    If you want updates for Office, Silverlight... then Microsoft Update is what's needed.

    At home.

    Your network PCs shouldn't be using either of them without an administrator sat in front of the screen doing it manually.
    Surely thats impractical if you have several hundred workstations?

  5. #5
    denon101's Avatar
    Join Date
    Jul 2008
    Location
    Stuck in the server room......
    Posts
    395
    Thank Post
    54
    Thanked 37 Times in 35 Posts
    Rep Power
    21
    No elsiegee40 means that you should only be using windows update at home. So use WSUS in an environment with many machines.

  6. #6
    chrbb's Avatar
    Join Date
    Oct 2005
    Location
    Midlands
    Posts
    1,508
    Thank Post
    141
    Thanked 67 Times in 62 Posts
    Rep Power
    47
    Have you checked the windows updates logs on the individual machines? Do you have your wsus server setup to download and distribute all updates, service packs etc. mine get their office, windows defender and anything else microsoft from the wsus server.
    Just a thought as I typed in the words windows defender, are they going online for windows defender updates?
    Or are these laptops that are used at home with a local admin user?

  7. #7
    chrisbrown's Avatar
    Join Date
    Aug 2010
    Location
    Melbourne, Australia
    Posts
    103
    Thank Post
    2
    Thanked 16 Times in 14 Posts
    Rep Power
    17
    I'm at home and about to go to bed, but WSUS has an option to use it just for cataloguing and approving updates. When this is enabled, workstations will still download their updates from the internet whilst reporting back to your WSUS box. Perhaps check this? It's in options somewhere. You only need to configure it on your top-most server, replica servers will pull this down.

  8. #8
    chrisbrown's Avatar
    Join Date
    Aug 2010
    Location
    Melbourne, Australia
    Posts
    103
    Thank Post
    2
    Thanked 16 Times in 14 Posts
    Rep Power
    17
    This is the setting I was thinking of...Hopefully this helps with sorting your issue...


SHARE:
+ Post New Thread

Similar Threads

  1. Fibres giving us grief !
    By grahamd22 in forum Wireless Networks
    Replies: 7
    Last Post: 12th March 2010, 12:55 PM
  2. 2 DHCP servers causing grief
    By user20085 in forum Wireless Networks
    Replies: 6
    Last Post: 13th May 2008, 02:40 AM
  3. Replies: 1
    Last Post: 7th December 2007, 07:58 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •