Hello,

How are my Computer systems in my environment receiving August Updates when I have no deployments for software Groups? I have the registry keys on the computers to only pull down updates only from the primary server. The windowsupdate log show it pulling from the Primary server. Could it be pulling directly from the WSUS server?

Thanks so much for your help,

Mark

 The windowsupdate log show it pulling from the Primary server. Could it be pulling directly from the WSUS server?

Most likely not. Have you touched anything manually in WSUS?
Does UpdatesDeployment.log show that they were installed?

Installation Successful: Windows successfully installed the following update: Security Update for Microsoft Office

UpdatesDeployment.log

AutomaticUpdates Success Content Install Installation Successful: Windows successfully installed the following update: Security Update for Microsoft Office 2013 (KB3054816) 64-Bit Edition

Looks like AutomaticUpdates handled it?  Is there a registry Key I am missing? 

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]

"TargetGroupEnabled"=dword:00000001

"TargetGroup"="IS"

"WUServer"="http://*****:8530"

"WUStatusServer"="http://****:8530"

"DisableWindowsUpdateAccess"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]

"DetectionFrequencyEnabled"=dword:00000001

"DetectionFrequency"=dword:00000004

"UseWUServer"=dword:00000001

"NoAutoRebootWithLoggedOnUsers"=dword:00000001

Thanks,

Mark

I noticed someone had set Automatic Approval in wsus for Computers, would this cause automatic deployment of updates to all computers from wsus?  Otherwise, there are no deployment of software updates from software groups.

Thanks,

Mark

Yes, of course, as that's how WSUS works. You should never ever go into WSUS and perform any administration including approving updates when WSUS is integrated into ConfigMgr.