Here's my problem:

I need to be able to burn updates with the manifest file to CD so I can manually run the updates on remote users. We used to do this in SMS, but have been unable to find anything on doing this with the SCCM/WUS clients. Is there an autorization.xml or similar file we could include with the updates like SMS, otherwise the users may be manually installing updates that are unneeded.

My environment will not allow me to set up for internet publishing of updates for remote users (field techs, etc.). The users get the policy for the updates and the notification from establishing a VPN connection, but I have to set my boundaries so no pushes go out through the VPN or RAS. Can I override their settings through group policy, and if so how could I reset when they get back in the office? CanI prevent the policy from going through these boundaries?

Now the clients in the field continually get the notifications and windows that updates are constantly downloading unsuccessfully until we can get them back on campus, sometimes this may be months.

I know SCCM provides the internet option which would solve this, and BITS would not kill the VPN tunnel, but I can't get that to fly with management

Any ideas?

thx

Yes, I know this is an old post, but Im trying to clean them up. Did you solve this problem, if so what was the solution?

If Management will not allow it then there isnt a lot that you can do about it.  I would show them your overall percentages compliancy for SU and when they ask why the numbers are so low. I would tell them about all of your VPN clients and this is the major reason for the low compliancy rates.