Does WSUS force uninstallation of unapproved updates (prev. installed on clients)

dear all, i'm getting no hits on rather simple question.

i have wsus server handing out auto-approved updates 15 clients xp/vista/7 mix. <unnamed> company makes product not work particular update word 2007 issued in oct 2010.

thats fine, unapproved update , uninstalled clients using control panel / add remove|programs , features.

my question is: if staff member using notebook update using regular ms updates @ home , gets 'unapproved' update, brings notebook office , connects domain (sbs 2003). wsus server detect naughty patch has snuck in? wsus "the system" in cleverness, hunt down , destroy unapproved updates returning clients? or need manually check (script etc.) manually uninstall??

many tia answer one.

cheers,

ring0

 

---

kebugcheck(42);

what if staff member using notebook update using regular ms updates @ home , gets 'unapproved' update, brings notebook office , connects domain (sbs 2003). wsus server detect naughty patch has snuck in?

yes. wuagent report update installed to wsus server.

will wsus "the system" in cleverness, hunt down , destroy unapproved updates returning clients?

no. once update installed, it's installed.

or need manually check (script etc.)

nope.

then manually uninstall??

yep. , such reason why many organizations block access wu/mu when they've deployed wsus server.

---

lawrence garvin, m.s., mcitp:ea, mcdba, mcsa
principal/cto, onsite technology solutions, houston, texas
microsoft mvp - software distribution (2005-2011)
mvp profile: http://mvp.support.microsoft.com/profile/lawrence.garvin
blog: http://onsitechsolutions.spaces.live.com

Windows Server  >  WSUS