computer using WSUS are getting alerts that they have updates

We recently have computers getting the Windows update alert.  When I tried to update a few it fails and states that it is being monitor by the Administrator.
This just recently started happening.  As far as I'm aware, computers using WSUS should never get those alerts.  Is this correct?

I have a new assistant IT person and I've assigned WSUS to him.  My suspicion is he has made a change by mistake.

Where should I look to solve this issue.
J.R. SitmanIT DirectorAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

David Johnson, CD, MVPOwnerCommented:
Your thinking is flawed.  WSUS is a pull not a push process and you've set the Windows update settings to notify, another option is to automatically download and notify for install, or automatically download and install.. These settings are all maintained in Group Policy in the Computer Policy Windows Update settings.

All WSUS does is it allows you to manage which updates are approved for installation and downloads 1 copy (if you have it set this way) for mass distribution to the network. (you can have it set to that updates are not stored locally but downloaded from Microsoft
J.R. SitmanIT DirectorAuthor Commented:
Thanks for the clarification.  I'll double check our settings.

Why would updates that do "not" apply to a computer get sent to the computer?
David Johnson, CD, MVPOwnerCommented:
they NEVER get sent to the computer.. sending implies getting PUSHED to the computer and it is a PULL operation .. The client queries the WSUS server for what is available and then downloads them either from MU or WSUS
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

Bill WoodCommented:
At the bottom of the message there is a link to check online for updates. That will work as long as you're connected.
David Johnson, CD, MVPOwnerCommented:
At the bottom of the message there is a link to check online for updates you can allow/disallow via group policy this setting
J.R. SitmanIT DirectorAuthor Commented:
At the bottom of "what" message?  So far from what I checked (only a few computer).  The computers that are 64 bit are failing with 32 bit installations.  I checked this in WSUS.

Why would 32 bit updates be attempting to update 64 bit computers?
if you get the messge that the updates are system managed then that would imply that group policy is being used to control WSUS. The only time the updates would be pushed out is if they had been approved to that group of cumputers. You can check to see if they have been approved in the WSUS console. You may also want to check the WSUS GPO to see what the deployment settings are also
J.R. SitmanIT DirectorAuthor Commented:
See attached.  How do we determine why these are failing?
you would need to have a look at the windowsupdate.log file in on the computer that its failing.   \\computer\windows\windowsupdate.log. On a side note what AV are you using, as ive seen symantec cause issues when trying to deploy updates to office 2013
you can also try and run this on the failed computer from a batch file. This will reset WSUS on that computer

@echo off
net stop wuauserv
 rmdir %windir%\softwaredistribution /s /q
 rmdir %windir%\system32\softwaredistribution /s /q
 regsvr32 /s wuaueng.dll
 regsvr32 /s wuaueng1.dll
 regsvr32 /s atl.dll
 regsvr32 /s wups.dll
 regsvr32 /s wups2.dll
 regsvr32 /s wuweb.dll
 regsvr32 /s wucltui.dll
 net start wuauserv
David Johnson, CD, MVPOwnerCommented:
your office is 32 bit ergo that is why they have 32bit updates
J.R. SitmanIT DirectorAuthor Commented:
I figured that out.  My bad.
J.R. SitmanIT DirectorAuthor Commented:
What is I remove the GPO, run updates on the computers and then put the GPO back?
Won't make a difference
J.R. SitmanIT DirectorAuthor Commented:
I had my assistant run your code on one computer.  Do we have to wait until tomorrow to check or is there a quicker way?
J.R. SitmanIT DirectorAuthor Commented:
Just want you to know disabling the GPO and manually running the updates, didn't help.  Hence you were correct "won't make a difference"
As other have stated posted / viewing the contents of the windowsupdate.log file would be extremely helpful.  
Any errors in the event logs on the WSUS server and / or workstations?
If it just Office updates that are failing?
Are any WSUS updates able to be installed on the workstation?
J.R. SitmanIT DirectorAuthor Commented:
it seems to not be a WSUS failure.  The office updates are failing.  I'm researching how to fix them, but so far no luck.  I'm also going to turn off "updates" in WSUS and only keep critical and security updates.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
J.R. SitmanIT DirectorAuthor Commented:
I don't want to mislead anyone reading this post.  It was not a WSUS problem, but an Office update problems
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.