This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.

Remove From My Forums

Clients reaching few MS sites inspite of WSUS configured

Question
0

Sign in to vote

Hi,

We have WSUS server 2012 configured in our infra for patching.

we have found that client machines like windows 7 and windows 8 are scanning for patches through WSUS server and its getting installed.

But network team is claiming that there are many ICMP request going to DNS server on these wesites like URL: https://fe3.delivery.mp.microsoft.com/ClientWebService/client.asmx" and http://tlu.dl.delivery.mp.microsoft.com.

This ICMP flood is causing slower resolution of DNS.

Is this a default behaviour? Do we have any option to make clients to not to reach these sites. please help us.
Thanks
Sunny

Saturday, April 11, 2020 5:19 PM

All replies

0

Sign in to vote

Check with your network team what is the source for that urls.

If it's your WSUS server, then it's OK.

If that is your client PCs, please enable below group policy setting,

Do not connect to any Windows Update Internet locations

https://docs.microsoft.com/en-us/windows/deployment/update/waas-wu-settings#do-not-connect-to-any-windows-update-internet-locations

Make sure to configure delivery optimization/BITS for WSUS to prevent bandwidth issues.

https://docs.microsoft.com/en-us/windows/deployment/update/waas-delivery-optimization

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd939927(v=ws.10)?redirectedfrom=MSDN

please follow up best practice also,

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc720525(v=ws.10)?redirectedfrom=MSDN

Saturday, April 11, 2020 9:46 PM
0

Sign in to vote
Hi,

It's a default behaviour. Even when Windows Update is configured to receive updates from an intranet update service, it will periodically retrieve information from the public Windows Update service to enable future connections to Windows Update, and other services like Microsoft Update or the Microsoft Store.

You can use the following Group Policy to prevent clients from accessing Microsoft sites.
-[Do not connect to any Windows Update Internet locations] Computer Configuration\Administrative Templates\Windows Components\Windows update

Note: Enabling this policy will disable that functionality, and may cause connection to public services such as the Windows Store to stop working.

If you have any questions, please keep us in touch.

Regards,
Rita

Please remember to mark as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.
- Edited by Rita HuMicrosoft contingent staff Monday, April 13, 2020 9:17 AM
Monday, April 13, 2020 9:17 AM
0

Sign in to vote
Hi,

It seems there is no update for a couple of days. May we know the current status of the problem? Is there any other assistance we can provide?

If you have any questions, please keep us in touch.

Regards,
Rita

Please remember to mark as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.
- Edited by Rita HuMicrosoft contingent staff Thursday, April 16, 2020 8:12 AM
Thursday, April 16, 2020 8:08 AM
0

Sign in to vote

Hi,

It seems there is no update for a couple of days. May we know the current status of the problem? Is there any other assistance we can provide?

If you have any questions, please keep us in touch.

Regards,
Rita
Please remember to mark as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

Wednesday, April 29, 2020 2:40 AM