WSUS problem

[Guest2]

Our WSUS server is setup and running through group policy properly. The syncronizations are set to run at 2am which is what happened this morning. Yesterday morning new updates shows at 21. Group policy is then supposed to update the computers with the updates from the server at 10pm.

However, this morning a load of machines randomly started updating at 9am.

This will have been because users either shutdown their computers before they went home, in which case the updates will have ran just after 6am, or they shutdown before going home and the 6am autostartup is not on certain machine, so they run at 9am when turned on.

Is there any way of setting group policy to ignore updates unless machine is on between the times of 10pm and 6.30am?

Sync updates - 2am
Install updates - 10pm
Auto shutdown - 11.55pm
Auto startup - 6am

edit - the only other thing is to deny the policy to certain machines

 

[Guest2]

Interesting, ive found windows update settings in the default domain policy that refer specifically to 'Reschedule Automatic Updates scheduled installations' and 'Configure Automatic Updates'

Surely if automatic updates are disabled on the default domain policy, another WSUS policy will not be able to enable them (due to policy inheritance)