All Devices Polling WSUS Offline Share

[Smiffy151]

Hi Guys

1st post so sorry if it's vague or in the wrong forum but hoping you can help please. I am responsible for maintaining my companies gold image, having manually updating with Microsoft Windows & Office updates for some time I came across WSUS Offline. I created a share to host WSUS Offline, downloaded the selected updates etc all ok.

I manage the image which is a VM running on a VMWare host, when i need to update the image which is Windows 10 1809 and Office 2010 I connect to the share (Not a mapped drive) and run the updater from the client directory. I've been doing this for some time now and only recently have our network team contacted me to say that multiple devices are trying to access the VMWare host and in turn the VM device to get updates. Obviously I don't want this happening as it is killing the bandwidth and plus we use a 3rd party to patch our estate devices.

I've hunted high and low for info on the clients in our estate to see if there is a reg entry, scheduled task etc but to no avail, I need to stop this asap can you offer any advice as to how I can stop the devices from polling and trying to get access to the vm ?

Hope that's enough info

TIA

Smiffy151

[boco]

Check the settings for Windows updates for the machines. Windows 10 has a "feature" that shares downloaded updates with all other Windows 10 machines in the same LAN (or even all PCs worldwide, if enabled).

If the VM has that feature enabled, other machines in the LAN will try to contact it and get the updates directly, rather than from MS.

That's not caused by WOU.


https://docs.microsoft.com/en-us/windows/deployment/update/waas-optimize-windows-10-updates

[aker]

You may try to enforce this feature to be disabled:
https://www.ghacks.net/2016/08/17/windows-10-update-delivery-optimization/

Some people advice to disable the service "Delivery Optimization" (translated from German to English, so the name might be slightly different). [Internal name of the service "Dosvc"]
I haven't tried that yet, as the attempt listed above works for me.

[Smiffy151]

Check the settings for Windows updates for the machines. Windows 10 has a "feature" that shares downloaded updates with all other Windows 10 machines in the same LAN (or even all PCs worldwide, if enabled).

If the VM has that feature enabled, other machines in the LAN will try to contact it and get the updates directly, rather than from MS.

That's not caused by WOU.


https://docs.microsoft.com/en-us/windows/deployment/update/waas-optimize-windows-10-updates

Thanks Boco

Checked this setting and nothing is enabled for 'delivery optimisation' on the VM, i'm beginning to consider pushing the 'CleanupRecall' batch file across our domain on all the windows that have been effected

[Smiffy151]

You may try to enforce this feature to be disabled:
https://www.ghacks.net/2016/08/17/windows-10-update-delivery-optimization/

Some people advice to disable the service "Delivery Optimization" (translated from German to English, so the name might be slightly different). [Internal name of the service "Dosvc"]
I haven't tried that yet, as the attempt listed above works for me.

Hi aker

Not enabled so service isn't running, really frustrating, checking wireshark and doing packet capture just shows multiple devices trying to contact the device. We've denied access to all devices outside our local vlan so we're not having a massive bandwidth issue but still allowing local traffic. Difficult to find out what is happening on each client. Seems like it's either first logon or scheduled...!