Computers connect to akamai and/not to my WSUS Server

Question

Hi everyone,

I have a question about how WSUS works.

My WSUS server is on a domain with computers, clients connect to WSUS server to download Microsoft updates and install it.

That's right ?

WSUS configuration server :
Windows Server 2016

Update Services version : 10.0.14393.2007

Storage : ISCSI link created between WSUS Server and a Synology NAS. Updates are download on my WSUS but the location is on my Synology ISCSI

Computers --> Windows 10

Every morning when computers are on, they go to *.akamai.net to find updates, and my bandwidth don't like that...
Why they don't connect to WSUS (Computers are present in Wsus console, regedit is correct) to download Microsoft Updates ?

The problem is may be the storage ISCSI in my synology ?

Best Regards,

Answer 1

Hello JrmyMUNOZ-9354,

Thanks for your posting on Q&A.

It is recommended to refer to the below script to check the update source of the default:

Open the PowerShell as an administrator and post the below script:

$MUSM = New-Object -ComObject "Microsoft.Update.ServiceManager"  
   
$MUSM.Services | select Name, IsDefaultAUService  

 

If the update source is not WSUS, it is recommended to apply the following policy to prevent the clients to get updates from the Internet:

[Do not allow update deferral policies to cause scans against Windows Update]

If there are any updates about this issue, please keep us in touch.

Regards,
Rita

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Sounds a bit like dual scan
https://www.ajtek.ca/wsus/dual-scan-making-sense-of-why-so-many-admins-have-issues/

Refer to Part 4 of my blog series which deals with GPOs and policies.
https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-4-creating-your-gpos-for-an-inheritance-setup/

Also verify the NAS has the proper permissions on the content store
https://www.ajtek.ca/wsus/wsus-permissions-wsuscontent-registry-and-iis/

Answer 3

Hi!

Thanks for your answer !
I appreciate your help, I ran the powershell command and the result :

@Adam J. Marshall I will check your links and come back asap

Best Regards,

Answer 4

Hi @Adam J. Marshall

Also verify the NAS has the proper permissions on the content store
https://www.ajtek.ca/wsus/wsus-permissions-wsuscontent-registry-and-iis/

Check permissions are good

Refer to Part 4 of my blog series which deals with GPOs and policies.
https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-4-creating-your-gpos-for-an-inheritance-setup/
Group Policies are applied for servers and for Computers

I think it's Windows 10 Components don't find updates in WSUS database et so use Windows Update
for example : maps in Windows are update with Windows update.

I can block that with a Group Policy but this Policy block Windows Store too, and I don't want...

Best Regards,

Answer 5

Do you have the alternative download URL also filled out as I mention in part 4?