Forcing defender to use WSUS not working

[Guest]

Hi

I have installed and configured defender on a test windows 2003 server. I
have applied the defender administrative template to the server through a
group policy to use a local WSUS server as against windows update for
updating signatures. I have applied another group policy that tells the
server to use a particular WSUS server in the intranet for updates. While i
have not yet configured my WSUS to download defender updates, i expected the
server to not be able to get any updates until i have configured WSUS to do
so.

However, when i click on 'get updates' on defender, the server still gets
the update presumably from windows update. how can i prevent this from
happening?

the objective is to configure all of my windows servers to get defender
updates through WSUS (and prevent connecting out to the internet)

help please !!!

 

[Bill Sanderson MVP]

I think you need a group with Policy expertise, which I'm not sure we have
here--I know I don't have it. I believe that the update attempts that your
servers are making are recorded--I think in %windir%\windowsupdate.log

You should look in that log file for the time that an update was
successfully made and see what's recorded there. It probably won't help--it
will likely just confirm your thinking that the updates are coming from
WindowsUpdate servers--but maybe there will be some bit of information that
will help.

For the real expertise, I'd advise one of the groups related to WSUS.

Pick a group from this page, on the left:

http://www.microsoft.com/technet/community/newsgroups/topics/sus.mspx

If you can post back a link, I'd be interested to follow the discussion
there and learn more myself--and maybe you can post a summary back here?