Few systems gettting windows patches from Microsoft in place of WSUS

We have WSUS in place but few systems downloading patches directly from microsoft in place of WSUS which choke our internet bandwidth. We have checked WSUS group policy on those systems and its publishing properly.
Please help on this.
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Brian PiercePhotographerCommented:
Use GPresult on one of the clients that has the problem or use the Results wizard in the GP Management tool to find which polices are actually being received by the client
DonNetwork AdministratorCommented:
Does running from command prompt <<<on these systems
reg query "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate"
confirm they are pointed to your WSUS server ?
DonNetwork AdministratorCommented:
Also on your WSUS server,  is it configured to store updates locally ?
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

pdixit1977Author Commented:
the person who is taking care of WSUS is not present so please let me know where i can see these setting exactly. Sorry== i m new to WSUS
Brian PiercePhotographerCommented:
Log onto the WSUS server and start the WSUS console, select OPTIONs from the panel on the left, Select Update Files and Languages

... I dont think this is the problem if only SOME machines are using MSUPDATE.
Brian PiercePhotographerCommented:
DonNetwork AdministratorCommented:
Did you confirm the registry setting?
pdixit1977Author Commented:
Sorry for the delayed response my friends.
Yes i did checked RSOP on few of these systems and WSUS policy was applying there.

I will check the registry thing today and let u know by tomorrow.
DonNetwork AdministratorCommented:
from command prompt <<<on these systems

reg query "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate"
will check the key for you
pdixit1977Author Commented:
yes, i cheked and found correct registry entry.
DonNetwork AdministratorCommented:
Ok, what is it that makes you believe that they are getting their updates from Microsoft and not your WSUS server ?
pdixit1977Author Commented:
I dont know thats why i am here. My network team reports me daily @ 9 AM that heavy downloading is occuring on network from microsoft IPs. Usually this happen if WSUS GP is not applying but checked and found it correct. we have 520 number of total systems and 483 systems are appearing in my WSUS console. Difference is normal because few systems are dead and few connects to client network directly.  
I was looking on a system on which GP was correct, registry entry was also correct but that systems was downloading 18 patches directly from microsoft and that was happening in front of me so i am confused why this abnormal behaviour is happening.
pdixit1977Author Commented:
can you please provide me the format/settings/configurations of a ideal WSUS group policy.  

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
pdixit1977Author Commented:
pdixit1977Author Commented:
Exact reason is still unknown but the given suggestion are really good.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.