This issue is likely with settings on end-points going directly to WU on web since SCCM is being used updates including IE have to be approved first unlike IE and critical patches on non-enterprise managed systems. Other wise there are two settings to prevent automatic updating of IE; the first one is shown above the second is to change WU setting to prevent Important updates from being automatically installed (IE updates are listed as Important). Not allowing any update may represent a significant risk so be careful. Other browsers like Chrome do not give the option of preventing update which is probably the best plan. Michael...
On Thu, Jan 30, 2014 at 1:34 PM, James Rankin <[email protected]> wrote: > He didn't quit because of this, did he? :-) > > > On 30 January 2014 19:31, Bonnie Pohlschneider <[email protected] > > wrote: > >> Something similar happened to us and we found that it was being applied >> on the machines that had Automatic Updates enabled. We also found that IE >> 10 and 11 were NOT in the list of updates that we could push through SCCM. >> This happened about two months ago and our SCCM guy has since quit so not >> sure if we're still seeing it or not. >> >> >> >> *Bonnie Pohlschneider* >> >> *Network Administrator, CRSI* >> >> Want to contact our support team? Our group can now be reached by >> emailing us at [email protected]. >> >> >> >> *From:* [email protected] [mailto: >> [email protected]] *On Behalf Of *Heaton, Joseph@Wildlife >> *Sent:* Thursday, January 30, 2014 12:39 PM >> *To:* NT System Admin Issues Discussion list >> *Subject:* [NTSysADM] Windows Updates went crazy last night >> >> >> >> We're running SCCM 2012, which manages all updates for our workstations. >> It's been working great for well over a year. Users have not been able to >> manually install updates, etc. >> >> >> >> This morning, I come into the office, and within the space of 15 minutes, >> 3 different people contact me saying they were updated to IE 10 or 11 >> overnight. Looking at their update history, they actually received quite a >> few updates overnight. >> >> >> >> I'm the only one here that packages and pushes updates through SCCM. I >> did nothing of the sort within the last couple of weeks. I'm trying to >> figure out why a large portion of my workstations suddenly decided last >> night to go out, download and install Windows Updates. >> >> >> >> SCCM - 2012 SP1 CU3 on the server, but most clients are still at base SP1. >> >> >> >> Anyone have any ideas? Did anyone else see this type of behavior last >> night? >> >> >> >> Thanks, >> >> >> >> Joe Heaton >> >> Enterprise Server Support >> >> Information Technology Operations Branch >> >> Data and Technology Division >> >> CA Department of Fish and Wildlife >> >> 1807 13th Street, Suite 201 >> >> Sacramento, CA 95811 >> >> Desk: (916) 323-1284 >> >> >> >> ------------------------------ >> >> Confidentiality Notice: This e-mail message, including any attachments, >> is for the sole use of the intended recipient(s) and may contain >> confidential and privileged information. Any unauthorized review, use, >> disclosure or distribution is prohibited. If you are not the intended >> recipient, please contact the sender by reply e-mail and destroy all copies >> of the original message. >> > > > > -- > *James Rankin* > --------------------- > RCL - Senior Technical Consultant (ACA, CCA, MCTS) | The Virtualization > Practice Analyst - Desktop Virtualization > http://appsensebigot.blogspot.co.uk > -- Michael L. Bell Lead Systems Analyst - Level 3 Support Patch Manager/Desktop Security E-mail and Text Privacy Notice: This message and any files transmitted with it may contain confidential or privileged information that is intended only for the use of the individual or entity to whom they are addressed. This information should be treated with the appropriate level of security to preclude the disclosure of sensitive or privileged information. If you are not the intended recipient, you are hereby advised that any disclosure, copying, distribution, or the taking of any action in reliance on the contents of this information is prohibited. If you have received this message in error, please notify the sender, delete this message from your machine's or device's memory, and destroy the hardcopy information. Thank you.
