9 times out of 10, this has to do with GPOs and policies.
From an Administrative Command Prompt on an affected client, run the following:
gpresult /h gpo.htm
and share the result with your favourite method or pastebin it so that we can see it.
Also, take a look at parts 4 and 5 of my blog series as they deal with Policies and applying GPOs for an inheritance setup.
https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-4-creating-your-gpos-for-an-inheritance-setup/
Feel free to read the rest of the blog series and other guides on my site.
Adam Marshall, MCSE: Security
https://www.ajtek.ca
Microsoft MVP - Windows and Devices for IT