How to Block WSUS Updates ?

How do I stop WSUS 3.0 from trying to update a workstation that does not
appear in the list of Computers ? I have an IP, but the workstation is not
even a member of the COMPANY domain and never appears in the list of COMPANY
computers.

Suggestions welcome

Right pew, wrong church. Forwarded to WSUS newsgroup
(microsoft.public.windows.server.update_services) via crosspost as a
convenience to OP.

On the web:
http://www.microsoft.com/communities... date_services

In your newsreader:
news://msnews.microsoft.com/microsof...pdate_services
--
~PAÞ

nobody wrote:
> How do I stop WSUS 3.0 from trying to update a workstation that does not
> appear in the list of Computers ? I have an IP, but the workstation is not
> even a member of the COMPANY domain and never appears in the list of
> COMPANY
> computers.
>
> Suggestions welcome

nobody wrote:

> How do I stop WSUS 3.0 from trying to update a workstation that does not
> appear in the list of Computers ? I have an IP, but the workstation is not
> even a member of the COMPANY domain and never appears in the list of COMPANY
> computers.

Starting with the basics: the WSUS server responds to requests from
workstations, it doesn't initiate the update process itself. So the
misconfiguration, if any, is on the affected client.

My first question is: if the workstation doesn't appear in the computer list,
what makes you think it is trying to update itself? Put another way, how did
you find out about this workstation in the first place?

Is the IP address within your internal network? Can your network operators
track it down for you?

Harry.

The workstation in question appears to be getting overloaded with traffic
every morning these past 2 days. Outside consultant says our corporate WSUS
is trying to update it.
Workstation in question does not appear in the list of computers anywhere. I
was under the impression that if a machine does not appear in the list and
does not "join" the COMPANY domain, WSUS couldn't touch it. No ?



"Harry Johnston [MVP]" wrote:

> nobody wrote:
>
> > How do I stop WSUS 3.0 from trying to update a workstation that does not
> > appear in the list of Computers ? I have an IP, but the workstation is not
> > even a member of the COMPANY domain and never appears in the list of COMPANY
> > computers.
>
> Starting with the basics: the WSUS server responds to requests from
> workstations, it doesn't initiate the update process itself. So the
> misconfiguration, if any, is on the affected client.
>
> My first question is: if the workstation doesn't appear in the computer list,
> what makes you think it is trying to update itself? Put another way, how did
> you find out about this workstation in the first place?
>
> Is the IP address within your internal network? Can your network operators
> track it down for you?
>
> Harry.
>

Disable the Automtaic Updates service and see if it still happens.

You can also look at the C:\Windows\Windowsupdate.log and see where it's
trying to get updates.

There are lots of reasons a meachine could be overloaded with traffic.

"nobody" <nobody@discussions.microsoft.com> wrote in message
news:4B69AD2B-576A-4922-9D3D-9A87A81D0E32@microsoft.com...
> The workstation in question appears to be getting overloaded with traffic
> every morning these past 2 days. Outside consultant says our corporate
> WSUS
> is trying to update it.
> Workstation in question does not appear in the list of computers anywhere.
> I
> was under the impression that if a machine does not appear in the list and
> does not "join" the COMPANY domain, WSUS couldn't touch it. No ?
>
>
>
> "Harry Johnston [MVP]" wrote:
>
>> nobody wrote:
>>
>> > How do I stop WSUS 3.0 from trying to update a workstation that does
>> not
>> > appear in the list of Computers ? I have an IP, but the workstation is
>> not
>> > even a member of the COMPANY domain and never appears in the list of
>> COMPANY
>> > computers.
>>
>> Starting with the basics: the WSUS server responds to requests from
>> workstations, it doesn't initiate the update process itself. So the
>> misconfiguration, if any, is on the affected client.
>>
>> My first question is: if the workstation doesn't appear in the computer
>> list,
>> what makes you think it is trying to update itself? Put another way, how
>> did
>> you find out about this workstation in the first place?
>>
>> Is the IP address within your internal network? Can your network
>> operators
>> track it down for you?
>>
>> Harry.
>>

nobody wrote:

> The workstation in question appears to be getting overloaded with traffic
> every morning these past 2 days. Outside consultant says our corporate WSUS
> is trying to update it.

Follow Tom's advice. As he says, the best place to look is on the affected
client - that's where whatever the problem is will have to be corrected. The
only thing you could usefully do on the server is to look in the IIS logs for
the IP address in question to see whether it is in fact talking to the WSUS
server or not.

> Workstation in question does not appear in the list of computers anywhere. I
> was under the impression that if a machine does not appear in the list and
> does not "join" the COMPANY domain, WSUS couldn't touch it. No ?

If a workstation isn't joined to the domain, it can't be affected by the WSUS
group policy. However, it could still be manually configured to use your WSUS
server.

The WSUS list of computers shows all computers which have successfully made
contact with the server. If the machine isn't on the list, it isn't likely that
it is overloading with traffic from the server - but the IIS logs would be a
better place to look, as there are various reasons why a client might not appear
in the list.

Harry.

Thanks for the advise. That was exactly my understanding of how WSUS updates
computers, but this consultant professes to have extensive experience with
WSUS. I contacted him earlier this week asking for his assistance on how to
stop our WSUS from updating his server, but have not heard back. I will ask
him to check the log file next.

Thanks again

"Lawrence Garvin" wrote:

> "nobody" <nobody@discussions.microsoft.com> wrote in message
> news:4B69AD2B-576A-4922-9D3D-9A87A81D0E32@microsoft.com...
> > The workstation in question appears to be getting overloaded with traffic
> > every morning these past 2 days. Outside consultant says our corporate
> > WSUS
> > is trying to update it.
>
> <sigh>.. among other things.. you need a new "outside consultant"....
>
>
> --
> Lawrence Garvin, M.S., MCITP(x2), MCTS(x5), MCP(x7), MCBMSP
> Senior Data Architect, APQC, Houston, Texas
> Microsoft MVP - Software Distribution (2005-2008)
>
> MS WSUS Website: http://www.microsoft.com/wsus
> My Websites: http://www.onsitechsolutions.com;
> http://wsusinfo.onsitechsolutions.com
> My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin
>