We are piloting the migration of updates form WSUS into SCCM
To begin with i created a test OU and moved 2 clients into.
The Scan went fine on them as i created GPO which overrides our default WSUS with the SUP address for this OU
I then Ran the report to see SCAN results for ALl Systems collection Expecting i will only see successful scan for these 2 clients
The Report i ran was : Scan 3 - Clients of a collection reporting a specific state secondary
However to my surprise i saw 2 additional Machines that have successfully completed the SCAN. (Both of them being Laptops)
I am not sure how that happened.
I checked WUAHandler log on the Laptops and i see surprisingly saw that the SUP address winning over the GPO . In my opinion the our main WSUS GPO was not applied and the laptops used Local setting the SCCM client setup after we enabled the Software Updates Client Agent .
Possibly they were using Laptop from outside.
Now that when i ran the Scan again (while they are in office) , the WUAHAndler does show the scan failed as the Main WSUS GPO applies again.
Q:What could cause this
Q:What can i do to make sure this doesnt happen.