WSUS: Permanent Client Removal

[PnZrFsT]

Ok, I installled WSUS onto my win2k computer with no issues. After using GPMC on a client computer, I made a group policy and applied it to the computer on my network. They all log on to a domain called "nantucket", the domain controller of the "nantuclet" server is running windows 2003, and has had known issues with patches and updates. After finding the "nantucket"server controller on the WSUS console, I promplty removed it from the list of computers to get updated.
Thinking I had solved the problem, I went home and let the computers install their updates at 2:00 AM, When I came into work this morning, I found to my hooror that the "nantucket" server had added itself again and installed all the updates. The server is now down not suprisingly. My question is how do I remove a client from WSUS so that it can't add itself again until manually added again? I never want any of the computers running 200 or 2003 to recieve any updates unless I go to that individual computer and specify it to. Someone please help me!


Cliff Notes:
Applied GPO
Saw server that I didn't want to get Updates
Removed said server from WSUS
Server re-added itself overnight
Server is Hosed

My Question:
How do I permanently remove a computer from WSUS so that it can't re-add itself?

 

[Titleist]

PnZrFsT,

Make sure you also remove the server from the GPO that you set up. If you only remove the server from the WSUS console it will still get the update settings from the GPO.

HTH,
John

 

[LadySlinger]

I'm having a similar problem as well.

I Originally setup the Group Policy Object with 2 groups of computers from Active Directory: WSUS clients and WSUS Servers.
I have removed the one person that has software issues with the upgrades from WSUS. I then went into Active Directory and removed that client from the group WSUS Clients.
His computer still shows up in WSUS each time he logs in.
I know I must be missing something!! But What?

 

[PnZrFsT]

I've come as far as figuring out that they need to be removed from the group policy object as well. The problem is, I applied my GPO to the entire domain. I am unable to remove that one single computer, as far as I know. I don't want to have to add 117 computers individually because of this one computer.

 

[PnZrFsT]

I started making some OU's to group all of my computers in my company according to department, is there any way I can add more than on computer at a time?

 

[thule]

Microsoft recommends adding a seperate GPO for SUS. I created OU's for all my systems, then added two Policies to each OU, the second policy is for the SUS updates. You can also group your computers in SUS, and if I am not mistaken, deny updates to specific computers (don't quote me on that one).