Re: Stop WSUS updates
The netstat -an on the Hub WSUS had hundreds of TCP connections to the WSUS port. I think the problem was that the GPO for the clients wasn't ever modified for their Spokes but still had them pointing either to the Hub or just in general to the MU server. We will work on that today now that I have more than 12kps to utilize from the T1 circuit - Original Message - From: Ken Schaefer To: NT System Admin Issues Sent: Wednesday, March 12, 2008 6:57 PM Subject: RE: Stop WSUS updates Why aren't your spoke WSUS servers updating from the hub WSUS server? And then your clients update from the closest WSUS server? Client1 Spoke WSUS - Hub WSUS - internet - MU server ^ Client2 Spoke WSUS --| If that's the case, then only the hub WSUS server would ever use the internet link. And it shouldn't be saturated for long. Why do you think it's WSUS and not something else? Cheers Ken From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Thursday, 13 March 2008 2:23 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates 25 LAN's with T1's tied to 1 T1 with Internet Access.(MAIN WSUS Resides) Internet LAN saturated. - Original Message - From: NTSysAdmin To: NT System Admin Issues Sent: Wednesday, March 12, 2008 11:21 AM Subject: RE: Stop WSUS updates I doubt it's wsus unless you just approved hundreds of patches. Last nights downloads didn't amount to anything much..plus, wsus won't saturate an internet connection. S From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 12:15 PM To: NT System Admin Issues Subject: Re: Stop WSUS updates Load started at 3:00am. That's when WSUS is set up to run downloads. We have a hub and spoke for our WAN setup. We killed the HUB thinking the spokes would cease but it appears as if the spoke servers are still pushing downloads and bybassing the HUB server to saturate the Internet link - Original Message - From: Ames Matthew B To: NT System Admin Issues Sent: Wednesday, March 12, 2008 11:12 AM Subject: RE: Stop WSUS updates Maybe they are going else where to get windows updates, like the internet, rather than your local wsus server? Or is someone just copying some large files around your network? Are you seeing a lot of network traffic to your wsus server, or just else where on your network? -- From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: 12 March 2008 15:06 To: NT System Admin Issues Subject: Re: Stop WSUS updates Ok I have them stopped. But the load is still to high. Could the PC's still be downloading even if WSUS and WWW is dead? - Original Message - From: Damien Solodow To: NT System Admin Issues Sent: Wednesday, March 12, 2008 11:04 AM Subject: RE: Stop WSUS updates Then stop the Wsus and www services on your wsus server. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 10:59 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates My network load is too high. I need to stop the WSUS. - Original Message - From: Miller Bonnie L. To: NT System Admin Issues Sent: Wednesday, March 12, 2008 10:28 AM Subject: RE: Stop WSUS updates What are you trying to prevent from happening? -Bonnie From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 AM To: NT System Admin Issues Subject: Stop WSUS updates To stop WSUS updates I need to do the following: 1.)Stop WWW on WSUS server. 2.)Reboot workstations that have downloading icon in system tray. Or is there more? __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: Stop WSUS updates
Could it be a bridge loop or a NIC jabbering on the network? From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 AM To: NT System Admin Issues Subject: Stop WSUS updates To stop WSUS updates I need to do the following: 1.)Stop WWW on WSUS server. 2.)Reboot workstations that have downloading icon in system tray. Or is there more? ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: Stop WSUS updates
What are you trying to prevent from happening? -Bonnie From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 AM To: NT System Admin Issues Subject: Stop WSUS updates To stop WSUS updates I need to do the following: 1.)Stop WWW on WSUS server. 2.)Reboot workstations that have downloading icon in system tray. Or is there more? ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: Stop WSUS updates
There's also an Update Services service that could be stopped. Depending on how far you want to go, you could also create or modify the WSUS GPO. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Posted At: Wednesday, March 12, 2008 10:21 AM Posted To: ntsysadmin Conversation: Stop WSUS updates Subject: Stop WSUS updates To stop WSUS updates I need to do the following: 1.)Stop WWW on WSUS server. 2.)Reboot workstations that have downloading icon in system tray. Or is there more? ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: Stop WSUS updates
Then stop the Wsus and www services on your wsus server. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 10:59 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates My network load is too high. I need to stop the WSUS. - Original Message - From: Miller Bonnie L. mailto:[EMAIL PROTECTED] To: NT System Admin Issues mailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 10:28 AM Subject: RE: Stop WSUS updates What are you trying to prevent from happening? -Bonnie From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 AM To: NT System Admin Issues Subject: Stop WSUS updates To stop WSUS updates I need to do the following: 1.)Stop WWW on WSUS server. 2.)Reboot workstations that have downloading icon in system tray. Or is there more? __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: Stop WSUS updates
Nope. They can't download files from a downed website. Are you sure WSUS is the cause of your load? From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 11:06 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates Ok I have them stopped. But the load is still to high. Could the PC's still be downloading even if WSUS and WWW is dead? - Original Message - From: Damien Solodow mailto:[EMAIL PROTECTED] To: NT System Admin Issues mailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 11:04 AM Subject: RE: Stop WSUS updates Then stop the Wsus and www services on your wsus server. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 10:59 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates My network load is too high. I need to stop the WSUS. - Original Message - From: Miller Bonnie L. mailto:[EMAIL PROTECTED] To: NT System Admin Issues mailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 10:28 AM Subject: RE: Stop WSUS updates What are you trying to prevent from happening? -Bonnie From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 AM To: NT System Admin Issues Subject: Stop WSUS updates To stop WSUS updates I need to do the following: 1.)Stop WWW on WSUS server. 2.)Reboot workstations that have downloading icon in system tray. Or is there more? __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: Stop WSUS updates
Maybe they are going else where to get windows updates, like the internet, rather than your local wsus server? Or is someone just copying some large files around your network? Are you seeing a lot of network traffic to your wsus server, or just else where on your network? From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: 12 March 2008 15:06 To: NT System Admin Issues Subject: Re: Stop WSUS updates Ok I have them stopped. But the load is still to high. Could the PC's still be downloading even if WSUS and WWW is dead? - Original Message - From: Damien Solodow mailto:[EMAIL PROTECTED] To: NT System Admin Issues mailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 11:04 AM Subject: RE: Stop WSUS updates Then stop the Wsus and www services on your wsus server. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 10:59 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates My network load is too high. I need to stop the WSUS. - Original Message - From: Miller Bonnie L. mailto:[EMAIL PROTECTED] To: NT System Admin Issues mailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 10:28 AM Subject: RE: Stop WSUS updates What are you trying to prevent from happening? -Bonnie From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 AM To: NT System Admin Issues Subject: Stop WSUS updates To stop WSUS updates I need to do the following: 1.)Stop WWW on WSUS server. 2.)Reboot workstations that have downloading icon in system tray. Or is there more? __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ The information contained in this E-Mail and any subsequent correspondence is private and is intended solely for the intended recipient(s). The information in this communication may be confidential and/or legally privileged. Nothing in this e-mail is intended to conclude a contract on behalf of QinetiQ or make QinetiQ subject to any other legally binding commitments, unless the e-mail contains an express statement to the contrary or incorporates a formal Purchase Order. For those other than the recipient any disclosure, copying, distribution, or any action taken or omitted to be taken in reliance on such information is prohibited and may be unlawful. Emails and other electronic communication with QinetiQ may be monitored and recorded for business purposes including security, audit and archival purposes. Any response to this email indicates consent to this. Telephone calls to QinetiQ may be monitored or recorded for quality control, security and other business purposes. QinetiQ Limited Registered in England Wales: Company Number:3796233 Registered office: 85 Buckingham Gate, London SW1E 6PD, United Kingdom Trading address: Cody Technology Park, Cody Building, Ively Road, Farnborough, Hampshire, GU14 0LX, United Kingdom http://www.QinetiQ.com/home/legal.html ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Re: Stop WSUS updates
99% - Original Message - From: Damien Solodow To: NT System Admin Issues Sent: Wednesday, March 12, 2008 11:11 AM Subject: RE: Stop WSUS updates Nope. They can't download files from a downed website. Are you sure WSUS is the cause of your load? From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 11:06 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates Ok I have them stopped. But the load is still to high. Could the PC's still be downloading even if WSUS and WWW is dead? - Original Message - From: Damien Solodow To: NT System Admin Issues Sent: Wednesday, March 12, 2008 11:04 AM Subject: RE: Stop WSUS updates Then stop the Wsus and www services on your wsus server. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 10:59 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates My network load is too high. I need to stop the WSUS. - Original Message - From: Miller Bonnie L. To: NT System Admin Issues Sent: Wednesday, March 12, 2008 10:28 AM Subject: RE: Stop WSUS updates What are you trying to prevent from happening? -Bonnie From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 AM To: NT System Admin Issues Subject: Stop WSUS updates To stop WSUS updates I need to do the following: 1.)Stop WWW on WSUS server. 2.)Reboot workstations that have downloading icon in system tray. Or is there more? __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: Stop WSUS updates
Are you still seeing a high volume of http traffic destined for your WSUS server? From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 11:13 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates 99% - Original Message - From: Damien Solodow mailto:[EMAIL PROTECTED] To: NT System Admin Issues mailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 11:11 AM Subject: RE: Stop WSUS updates Nope. They can't download files from a downed website. Are you sure WSUS is the cause of your load? From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 11:06 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates Ok I have them stopped. But the load is still to high. Could the PC's still be downloading even if WSUS and WWW is dead? - Original Message - From: Damien Solodow mailto:[EMAIL PROTECTED] To: NT System Admin Issues mailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 11:04 AM Subject: RE: Stop WSUS updates Then stop the Wsus and www services on your wsus server. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 10:59 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates My network load is too high. I need to stop the WSUS. - Original Message - From: Miller Bonnie L. mailto:[EMAIL PROTECTED] To: NT System Admin Issues mailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 10:28 AM Subject: RE: Stop WSUS updates What are you trying to prevent from happening? -Bonnie From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 AM To: NT System Admin Issues Subject: Stop WSUS updates To stop WSUS updates I need to do the following: 1.)Stop WWW on WSUS server. 2.)Reboot workstations that have downloading icon in system tray. Or is there more? __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email
Re: Stop WSUS updates
Load started at 3:00am. That's when WSUS is set up to run downloads. We have a hub and spoke for our WAN setup. We killed the HUB thinking the spokes would cease but it appears as if the spoke servers are still pushing downloads and bybassing the HUB server to saturate the Internet link - Original Message - From: Ames Matthew B To: NT System Admin Issues Sent: Wednesday, March 12, 2008 11:12 AM Subject: RE: Stop WSUS updates Maybe they are going else where to get windows updates, like the internet, rather than your local wsus server? Or is someone just copying some large files around your network? Are you seeing a lot of network traffic to your wsus server, or just else where on your network? -- From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: 12 March 2008 15:06 To: NT System Admin Issues Subject: Re: Stop WSUS updates Ok I have them stopped. But the load is still to high. Could the PC's still be downloading even if WSUS and WWW is dead? - Original Message - From: Damien Solodow To: NT System Admin Issues Sent: Wednesday, March 12, 2008 11:04 AM Subject: RE: Stop WSUS updates Then stop the Wsus and www services on your wsus server. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 10:59 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates My network load is too high. I need to stop the WSUS. - Original Message - From: Miller Bonnie L. To: NT System Admin Issues Sent: Wednesday, March 12, 2008 10:28 AM Subject: RE: Stop WSUS updates What are you trying to prevent from happening? -Bonnie From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 AM To: NT System Admin Issues Subject: Stop WSUS updates To stop WSUS updates I need to do the following: 1.)Stop WWW on WSUS server. 2.)Reboot workstations that have downloading icon in system tray. Or is there more? __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ The information contained in this E-Mail and any subsequent correspondence is private and is intended solely for the intended recipient(s). The information in this communication may be confidential and/or legally privileged. Nothing in this e-mail is intended to conclude a contract on behalf of QinetiQ or make QinetiQ subject to any other legally binding commitments, unless the e-mail contains an express statement to the contrary or incorporates a formal Purchase Order. For those other than the recipient any disclosure, copying, distribution, or any action taken or omitted to be taken in reliance on such information is prohibited and may be unlawful. Emails and other electronic communication with QinetiQ may be monitored and recorded for business purposes including security, audit and archival purposes. Any response to this email indicates consent to this. Telephone calls to QinetiQ may be monitored or recorded for quality control, security and other business purposes. QinetiQ Limited Registered in England Wales: Company Number:3796233 Registered office: 85 Buckingham Gate, London SW1E 6PD, United Kingdom Trading address: Cody Technology Park, Cody Building, Ively Road, Farnborough, Hampshire, GU14 0LX, United Kingdom http://www.QinetiQ.com/home/legal.html __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: Stop WSUS updates
Wait, are you saying you have multiple WSUS servers, and that's where you're seeing the traffic coming from? If it's the case, you need to stop the wsus, www and automatic updates services on all of them. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 11:15 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates Load started at 3:00am. That's when WSUS is set up to run downloads. We have a hub and spoke for our WAN setup. We killed the HUB thinking the spokes would cease but it appears as if the spoke servers are still pushing downloads and bybassing the HUB server to saturate the Internet link - Original Message - From: Ames Matthew B mailto:[EMAIL PROTECTED] To: NT System Admin Issues mailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 11:12 AM Subject: RE: Stop WSUS updates Maybe they are going else where to get windows updates, like the internet, rather than your local wsus server? Or is someone just copying some large files around your network? Are you seeing a lot of network traffic to your wsus server, or just else where on your network? From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: 12 March 2008 15:06 To: NT System Admin Issues Subject: Re: Stop WSUS updates Ok I have them stopped. But the load is still to high. Could the PC's still be downloading even if WSUS and WWW is dead? - Original Message - From: Damien Solodow mailto:[EMAIL PROTECTED] To: NT System Admin Issues mailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 11:04 AM Subject: RE: Stop WSUS updates Then stop the Wsus and www services on your wsus server. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 10:59 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates My network load is too high. I need to stop the WSUS. - Original Message - From: Miller Bonnie L. mailto:[EMAIL PROTECTED] To: NT System Admin Issues mailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 10:28 AM Subject: RE: Stop WSUS updates What are you trying to prevent from happening? -Bonnie From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 AM To: NT System Admin Issues Subject: Stop WSUS updates To stop WSUS updates I need to do the following: 1.)Stop WWW on WSUS server. 2.)Reboot workstations that have downloading icon in system tray. Or is there more? __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email
RE: Stop WSUS updates
David, Just to clarify your network traffic on the internal LAN is too high and you think its WSUS? Doesn't WSUS use BITS for all transfers and only makes use of available bandwidth? Plus on a local LAN is this really a problem (assuming at least 100 base hardware)? I would explore a bit more and see if you can track down some specifics. Are multiple machines connecting to the WSUS server and transferring content? Are they connecting and just stalling? Are they connecting at all or just trying like crazy? -troy From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 8:13 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates 99% - Original Message - From: Damien Solodowmailto:[EMAIL PROTECTED] To: NT System Admin Issuesmailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 11:11 AM Subject: RE: Stop WSUS updates Nope. They can't download files from a downed website. Are you sure WSUS is the cause of your load? From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 11:06 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates Ok I have them stopped. But the load is still to high. Could the PC's still be downloading even if WSUS and WWW is dead? - Original Message - From: Damien Solodowmailto:[EMAIL PROTECTED] To: NT System Admin Issuesmailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 11:04 AM Subject: RE: Stop WSUS updates Then stop the Wsus and www services on your wsus server. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 10:59 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates My network load is too high. I need to stop the WSUS. - Original Message - From: Miller Bonnie L.mailto:[EMAIL PROTECTED] To: NT System Admin Issuesmailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 10:28 AM Subject: RE: Stop WSUS updates What are you trying to prevent from happening? -Bonnie From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 AM To: NT System Admin Issues Subject: Stop WSUS updates To stop WSUS updates I need to do the following: 1.)Stop WWW on WSUS server. 2.)Reboot workstations that have downloading icon in system tray. Or is there more? __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Re: Stop WSUS updates
I have a web application on each server. This app will die with the www death, correct? - Original Message - From: Damien Solodow To: NT System Admin Issues Sent: Wednesday, March 12, 2008 11:19 AM Subject: RE: Stop WSUS updates Wait, are you saying you have multiple WSUS servers, and that's where you're seeing the traffic coming from? If it's the case, you need to stop the wsus, www and automatic updates services on all of them. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 11:15 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates Load started at 3:00am. That's when WSUS is set up to run downloads. We have a hub and spoke for our WAN setup. We killed the HUB thinking the spokes would cease but it appears as if the spoke servers are still pushing downloads and bybassing the HUB server to saturate the Internet link - Original Message - From: Ames Matthew B To: NT System Admin Issues Sent: Wednesday, March 12, 2008 11:12 AM Subject: RE: Stop WSUS updates Maybe they are going else where to get windows updates, like the internet, rather than your local wsus server? Or is someone just copying some large files around your network? Are you seeing a lot of network traffic to your wsus server, or just else where on your network? From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: 12 March 2008 15:06 To: NT System Admin Issues Subject: Re: Stop WSUS updates Ok I have them stopped. But the load is still to high. Could the PC's still be downloading even if WSUS and WWW is dead? - Original Message - From: Damien Solodow To: NT System Admin Issues Sent: Wednesday, March 12, 2008 11:04 AM Subject: RE: Stop WSUS updates Then stop the Wsus and www services on your wsus server. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 10:59 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates My network load is too high. I need to stop the WSUS. - Original Message - From: Miller Bonnie L. To: NT System Admin Issues Sent: Wednesday, March 12, 2008 10:28 AM Subject: RE: Stop WSUS updates What are you trying to prevent from happening? -Bonnie From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 AM To: NT System Admin Issues Subject: Stop WSUS updates To stop WSUS updates I need to do the following: 1.)Stop WWW on WSUS server. 2.)Reboot workstations that have downloading icon in system tray. Or is there more? __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ The information contained in this E-Mail and any subsequent correspondence is private and is intended solely for the intended recipient(s). The information in this communication may be confidential and/or legally privileged. Nothing in this e-mail is intended to conclude a contract on behalf of QinetiQ or make QinetiQ subject to any other legally binding commitments, unless the e-mail contains an express statement to the contrary or incorporates a formal Purchase Order. For those other than the recipient any disclosure, copying, distribution, or any action taken or omitted to be taken in reliance on such information is prohibited and may be unlawful. Emails and other electronic communication with QinetiQ may be monitored and recorded for business purposes including security, audit and archival purposes. Any response to this email indicates consent to this. Telephone calls to QinetiQ may be monitored or recorded for quality control, security and other business purposes. QinetiQ Limited Registered in England Wales: Company Number:3796233 Registered office: 85 Buckingham Gate, London SW1E 6PD, United Kingdom Trading address: Cody Technology Park, Cody Building, Ively Road, Farnborough, Hampshire, GU14 0LX, United Kingdom
Re: Stop WSUS updates
25 LAN's with T1's tied to 1 T1 with Internet Access.(MAIN WSUS Resides) Internet LAN saturated. - Original Message - From: NTSysAdmin To: NT System Admin Issues Sent: Wednesday, March 12, 2008 11:21 AM Subject: RE: Stop WSUS updates I doubt it's wsus unless you just approved hundreds of patches. Last nights downloads didn't amount to anything much..plus, wsus won't saturate an internet connection. S From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 12:15 PM To: NT System Admin Issues Subject: Re: Stop WSUS updates Load started at 3:00am. That's when WSUS is set up to run downloads. We have a hub and spoke for our WAN setup. We killed the HUB thinking the spokes would cease but it appears as if the spoke servers are still pushing downloads and bybassing the HUB server to saturate the Internet link - Original Message - From: Ames Matthew B To: NT System Admin Issues Sent: Wednesday, March 12, 2008 11:12 AM Subject: RE: Stop WSUS updates Maybe they are going else where to get windows updates, like the internet, rather than your local wsus server? Or is someone just copying some large files around your network? Are you seeing a lot of network traffic to your wsus server, or just else where on your network? From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: 12 March 2008 15:06 To: NT System Admin Issues Subject: Re: Stop WSUS updates Ok I have them stopped. But the load is still to high. Could the PC's still be downloading even if WSUS and WWW is dead? - Original Message - From: Damien Solodow To: NT System Admin Issues Sent: Wednesday, March 12, 2008 11:04 AM Subject: RE: Stop WSUS updates Then stop the Wsus and www services on your wsus server. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 10:59 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates My network load is too high. I need to stop the WSUS. - Original Message - From: Miller Bonnie L. To: NT System Admin Issues Sent: Wednesday, March 12, 2008 10:28 AM Subject: RE: Stop WSUS updates What are you trying to prevent from happening? -Bonnie From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 AM To: NT System Admin Issues Subject: Stop WSUS updates To stop WSUS updates I need to do the following: 1.)Stop WWW on WSUS server. 2.)Reboot workstations that have downloading icon in system tray. Or is there more? __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ The information contained in this E-Mail and any subsequent correspondence is private and is intended solely for the intended recipient(s). The information in this communication may be confidential and/or legally privileged. Nothing in this e-mail is intended to conclude a contract on behalf of QinetiQ or make QinetiQ subject to any other legally binding commitments, unless the e-mail contains an express statement to the contrary or incorporates a formal Purchase Order. For those other than the recipient any disclosure, copying, distribution, or any action taken or omitted to be taken in reliance on such information is prohibited and may be unlawful. Emails and other electronic communication with QinetiQ may be monitored and recorded for business purposes including security, audit and archival purposes. Any response to this email indicates consent to this. Telephone calls to QinetiQ may be monitored or recorded for quality control, security and other business purposes. QinetiQ Limited Registered in England Wales: Company Number:3796233 Registered office: 85 Buckingham Gate, London SW1E 6PD, United Kingdom Trading address: Cody Technology Park, Cody Building, Ively Road, Farnborough, Hampshire, GU14 0LX, United Kingdom http://www.QinetiQ.com/home/legal.html __ This email has been scanned
RE: Stop WSUS updates
The hubs will update over the t 1's then, only the main wsus should be using your internet connection and as I said, not a big download last night...10 mins max over a T1. At least that's how long mine took. S From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 12:23 PM To: NT System Admin Issues Subject: Re: Stop WSUS updates 25 LAN's with T1's tied to 1 T1 with Internet Access.(MAIN WSUS Resides) Internet LAN saturated. - Original Message - From: NTSysAdminmailto:[EMAIL PROTECTED] To: NT System Admin Issuesmailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 11:21 AM Subject: RE: Stop WSUS updates I doubt it's wsus unless you just approved hundreds of patches. Last nights downloads didn't amount to anything much..plus, wsus won't saturate an internet connection... S From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 12:15 PM To: NT System Admin Issues Subject: Re: Stop WSUS updates Load started at 3:00am. That's when WSUS is set up to run downloads. We have a hub and spoke for our WAN setup. We killed the HUB thinking the spokes would cease but it appears as if the spoke servers are still pushing downloads and bybassing the HUB server to saturate the Internet link - Original Message - From: Ames Matthew Bmailto:[EMAIL PROTECTED] To: NT System Admin Issuesmailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 11:12 AM Subject: RE: Stop WSUS updates Maybe they are going else where to get windows updates, like the internet, rather than your local wsus server? Or is someone just copying some large files around your network? Are you seeing a lot of network traffic to your wsus server, or just else where on your network? From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: 12 March 2008 15:06 To: NT System Admin Issues Subject: Re: Stop WSUS updates Ok I have them stopped. But the load is still to high. Could the PC's still be downloading even if WSUS and WWW is dead? - Original Message - From: Damien Solodowmailto:[EMAIL PROTECTED] To: NT System Admin Issuesmailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 11:04 AM Subject: RE: Stop WSUS updates Then stop the Wsus and www services on your wsus server. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 10:59 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates My network load is too high. I need to stop the WSUS. - Original Message - From: Miller Bonnie L.mailto:[EMAIL PROTECTED] To: NT System Admin Issuesmailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 10:28 AM Subject: RE: Stop WSUS updates What are you trying to prevent from happening? -Bonnie From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 AM To: NT System Admin Issues Subject: Stop WSUS updates To stop WSUS updates I need to do the following: 1.)Stop WWW on WSUS server. 2.)Reboot workstations that have downloading icon in system tray. Or is there more? __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ The information contained in this E-Mail and any subsequent correspondence is private and is intended solely for the intended recipient(s). The information in this communication may be confidential and/or legally privileged. Nothing in this e-mail is intended to conclude a contract on behalf of QinetiQ or make QinetiQ subject to any other legally binding commitments, unless the e-mail contains an express statement to the contrary or incorporates a formal Purchase Order. For those other than the recipient any disclosure, copying, distribution, or any action taken or omitted to be taken in reliance on such information is prohibited and may be unlawful. Emails and other electronic communication with QinetiQ may be monitored and recorded for business purposes including security, audit and archival purposes. Any response to this email indicates consent to this. Telephone calls to QinetiQ may be monitored or recorded for quality control, security and other business purposes. QinetiQ Limited Registered in England Wales: Company Number:3796233 Registered office: 85 Buckingham Gate, London
Re: Stop WSUS updates
Sure they can. They get thier files from a shared folder on the server. On Wed, Mar 12, 2008 at 11:11 AM, Damien Solodow [EMAIL PROTECTED] wrote: Nope. They can't download files from a downed website. Are you sure WSUS is the cause of your load? From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 11:06 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates To: NT System Admin Issues Subject: Re: Stop WSUS updates Ok I have them stopped. But the load is still to high. Could the PC's still be downloading even if WSUS and WWW is dead? - Original Message - From: Damien Solodow To: NT System Admin Issues Sent: Wednesday, March 12, 2008 11:04 AM Subject: RE: Stop WSUS updates Then stop the Wsus and www services on your wsus server. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 10:59 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates My network load is too high. I need to stop the WSUS. - Original Message - From: Miller Bonnie L. To: NT System Admin Issues Sent: Wednesday, March 12, 2008 10:28 AM Subject: RE: Stop WSUS updates What are you trying to prevent from happening? -Bonnie From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 AM To: NT System Admin Issues Subject: Stop WSUS updates To stop WSUS updates I need to do the following: 1.)Stop WWW on WSUS server. 2.)Reboot workstations that have downloading icon in system tray. Or is there more? __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ -- ME2 ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Re: Stop WSUS updates
I think BITS is also involved. - Original Message - From: Miller Bonnie L. To: NT System Admin Issues Sent: Wednesday, March 12, 2008 11:23 AM Subject: RE: Stop WSUS updates Drop to a cmd on your WSUS server. Run Netstat -an And see what it's still connected to/what is connected to it. I've had trouble with our chained WSUS servers still downloading before with just WWW and Update services stopped. IIRC, I think you also have to stop BITS on the server, and some services might restart if they are not set to disabled. -Bonnie From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 8:15 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates Load started at 3:00am. That's when WSUS is set up to run downloads. We have a hub and spoke for our WAN setup. We killed the HUB thinking the spokes would cease but it appears as if the spoke servers are still pushing downloads and bybassing the HUB server to saturate the Internet link - Original Message - From: Ames Matthew B To: NT System Admin Issues Sent: Wednesday, March 12, 2008 11:12 AM Subject: RE: Stop WSUS updates Maybe they are going else where to get windows updates, like the internet, rather than your local wsus server? Or is someone just copying some large files around your network? Are you seeing a lot of network traffic to your wsus server, or just else where on your network? From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: 12 March 2008 15:06 To: NT System Admin Issues Subject: Re: Stop WSUS updates Ok I have them stopped. But the load is still to high. Could the PC's still be downloading even if WSUS and WWW is dead? - Original Message - From: Damien Solodow To: NT System Admin Issues Sent: Wednesday, March 12, 2008 11:04 AM Subject: RE: Stop WSUS updates Then stop the Wsus and www services on your wsus server. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 10:59 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates My network load is too high. I need to stop the WSUS. - Original Message - From: Miller Bonnie L. To: NT System Admin Issues Sent: Wednesday, March 12, 2008 10:28 AM Subject: RE: Stop WSUS updates What are you trying to prevent from happening? -Bonnie From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 AM To: NT System Admin Issues Subject: Stop WSUS updates To stop WSUS updates I need to do the following: 1.)Stop WWW on WSUS server. 2.)Reboot workstations that have downloading icon in system tray. Or is there more? __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ The information contained in this E-Mail and any subsequent correspondence is private and is intended solely for the intended recipient(s). The information in this communication may be confidential and/or legally privileged. Nothing in this e-mail is intended to conclude a contract on behalf of QinetiQ or make QinetiQ subject to any other legally binding commitments, unless the e-mail contains an express statement to the contrary or incorporates a formal Purchase Order. For those other than the recipient any disclosure, copying, distribution, or any action taken or omitted to be taken in reliance on such information is prohibited and may be unlawful. Emails and other electronic communication with QinetiQ may be monitored and recorded for business purposes including security, audit and archival purposes. Any response to this email indicates consent to this. Telephone calls to QinetiQ may be monitored or recorded for quality control, security and other business purposes. QinetiQ Limited Registered in England Wales: Company Number:3796233 Registered office: 85 Buckingham Gate, London SW1E 6PD, United Kingdom
Re: Stop WSUS updates
Thanks. - Original Message - From: Damien Solodow To: NT System Admin Issues Sent: Wednesday, March 12, 2008 11:23 AM Subject: RE: Stop WSUS updates Correct. If you want to avoid that, in IIS manager you can stop the wsus site instead. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 11:21 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates I have a web application on each server. This app will die with the www death, correct? - Original Message - From: Damien Solodow To: NT System Admin Issues Sent: Wednesday, March 12, 2008 11:19 AM Subject: RE: Stop WSUS updates Wait, are you saying you have multiple WSUS servers, and that's where you're seeing the traffic coming from? If it's the case, you need to stop the wsus, www and automatic updates services on all of them. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 11:15 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates Load started at 3:00am. That's when WSUS is set up to run downloads. We have a hub and spoke for our WAN setup. We killed the HUB thinking the spokes would cease but it appears as if the spoke servers are still pushing downloads and bybassing the HUB server to saturate the Internet link - Original Message - From: Ames Matthew B To: NT System Admin Issues Sent: Wednesday, March 12, 2008 11:12 AM Subject: RE: Stop WSUS updates Maybe they are going else where to get windows updates, like the internet, rather than your local wsus server? Or is someone just copying some large files around your network? Are you seeing a lot of network traffic to your wsus server, or just else where on your network? -- From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: 12 March 2008 15:06 To: NT System Admin Issues Subject: Re: Stop WSUS updates Ok I have them stopped. But the load is still to high. Could the PC's still be downloading even if WSUS and WWW is dead? - Original Message - From: Damien Solodow To: NT System Admin Issues Sent: Wednesday, March 12, 2008 11:04 AM Subject: RE: Stop WSUS updates Then stop the Wsus and www services on your wsus server. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 10:59 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates My network load is too high. I need to stop the WSUS. - Original Message - From: Miller Bonnie L. To: NT System Admin Issues Sent: Wednesday, March 12, 2008 10:28 AM Subject: RE: Stop WSUS updates What are you trying to prevent from happening? -Bonnie From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 AM To: NT System Admin Issues Subject: Stop WSUS updates To stop WSUS updates I need to do the following: 1.)Stop WWW on WSUS server. 2.)Reboot workstations that have downloading icon in system tray. Or is there more? __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ The information contained in this E-Mail and any subsequent correspondence is private and is intended solely for the intended recipient(s). The information in this communication may be confidential and/or legally privileged. Nothing in this e-mail is intended to conclude a contract on behalf of QinetiQ or make QinetiQ subject to any other legally binding commitments, unless the e-mail contains an express statement to the contrary or incorporates a formal Purchase Order. For those other than the recipient any disclosure, copying, distribution, or any action taken or omitted to be taken in reliance on such information is prohibited and may
Re: Stop WSUS updates
Ha Ha. - Original Message - From: Ames Matthew B To: NT System Admin Issues Sent: Wednesday, March 12, 2008 11:23 AM Subject: RE: Stop WSUS updates maybe someone is downloading some torrents instead and scheduled the downloads to start at 3.00am to make it look like wsus activity :-) -- From: Steve Moffat [mailto:[EMAIL PROTECTED] On Behalf Of NTSysAdmin Sent: 12 March 2008 15:21 To: NT System Admin Issues Subject: RE: Stop WSUS updates I doubt it's wsus unless you just approved hundreds of patches. Last nights downloads didn't amount to anything much..plus, wsus won't saturate an internet connection. S From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 12:15 PM To: NT System Admin Issues Subject: Re: Stop WSUS updates Load started at 3:00am. That's when WSUS is set up to run downloads. We have a hub and spoke for our WAN setup. We killed the HUB thinking the spokes would cease but it appears as if the spoke servers are still pushing downloads and bybassing the HUB server to saturate the Internet link - Original Message - From: Ames Matthew B To: NT System Admin Issues Sent: Wednesday, March 12, 2008 11:12 AM Subject: RE: Stop WSUS updates Maybe they are going else where to get windows updates, like the internet, rather than your local wsus server? Or is someone just copying some large files around your network? Are you seeing a lot of network traffic to your wsus server, or just else where on your network? From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: 12 March 2008 15:06 To: NT System Admin Issues Subject: Re: Stop WSUS updates Ok I have them stopped. But the load is still to high. Could the PC's still be downloading even if WSUS and WWW is dead? - Original Message - From: Damien Solodow To: NT System Admin Issues Sent: Wednesday, March 12, 2008 11:04 AM Subject: RE: Stop WSUS updates Then stop the Wsus and www services on your wsus server. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 10:59 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates My network load is too high. I need to stop the WSUS. - Original Message - From: Miller Bonnie L. To: NT System Admin Issues Sent: Wednesday, March 12, 2008 10:28 AM Subject: RE: Stop WSUS updates What are you trying to prevent from happening? -Bonnie From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 AM To: NT System Admin Issues Subject: Stop WSUS updates To stop WSUS updates I need to do the following: 1.)Stop WWW on WSUS server. 2.)Reboot workstations that have downloading icon in system tray. Or is there more? __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ The information contained in this E-Mail and any subsequent correspondence is private and is intended solely for the intended recipient(s). The information in this communication may be confidential and/or legally privileged. Nothing in this e-mail is intended to conclude a contract on behalf of QinetiQ or make QinetiQ subject to any other legally binding commitments, unless the e-mail contains an express statement to the contrary or incorporates a formal Purchase Order. For those other than the recipient any disclosure, copying, distribution, or any action taken or omitted to be taken in reliance on such information is prohibited and may be unlawful. Emails and other electronic communication with QinetiQ may be monitored and recorded for business purposes including security, audit and archival purposes. Any response to this email indicates consent to this. Telephone calls to QinetiQ may be monitored or recorded for quality control, security and other business purposes. QinetiQ Limited Registered in England Wales: Company Number:3796233 Registered office: 85 Buckingham Gate, London SW1E
RE: Stop WSUS updates
maybe someone is downloading some torrents instead and scheduled the downloads to start at 3.00am to make it look like wsus activity :-) From: Steve Moffat [mailto:[EMAIL PROTECTED] On Behalf Of NTSysAdmin Sent: 12 March 2008 15:21 To: NT System Admin Issues Subject: RE: Stop WSUS updates I doubt it's wsus unless you just approved hundreds of patches. Last nights downloads didn't amount to anything much..plus, wsus won't saturate an internet connection... S From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 12:15 PM To: NT System Admin Issues Subject: Re: Stop WSUS updates Load started at 3:00am. That's when WSUS is set up to run downloads. We have a hub and spoke for our WAN setup. We killed the HUB thinking the spokes would cease but it appears as if the spoke servers are still pushing downloads and bybassing the HUB server to saturate the Internet link - Original Message - From: Ames Matthew B mailto:[EMAIL PROTECTED] To: NT System Admin Issues mailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 11:12 AM Subject: RE: Stop WSUS updates Maybe they are going else where to get windows updates, like the internet, rather than your local wsus server? Or is someone just copying some large files around your network? Are you seeing a lot of network traffic to your wsus server, or just else where on your network? From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: 12 March 2008 15:06 To: NT System Admin Issues Subject: Re: Stop WSUS updates Ok I have them stopped. But the load is still to high. Could the PC's still be downloading even if WSUS and WWW is dead? - Original Message - From: Damien Solodow mailto:[EMAIL PROTECTED] To: NT System Admin Issues mailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 11:04 AM Subject: RE: Stop WSUS updates Then stop the Wsus and www services on your wsus server. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 10:59 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates My network load is too high. I need to stop the WSUS. - Original Message - From: Miller Bonnie L. mailto:[EMAIL PROTECTED] To: NT System Admin Issues mailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 10:28 AM Subject: RE: Stop WSUS updates What are you trying to prevent from happening? -Bonnie From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 AM To: NT System Admin Issues Subject: Stop WSUS updates To stop WSUS updates I need to do the following: 1.)Stop WWW on WSUS server. 2.)Reboot workstations that have downloading icon in system tray. Or is there more? __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email
RE: Stop WSUS updates
Drop to a cmd on your WSUS server. Run Netstat -an And see what it's still connected to/what is connected to it. I've had trouble with our chained WSUS servers still downloading before with just WWW and Update services stopped. IIRC, I think you also have to stop BITS on the server, and some services might restart if they are not set to disabled. -Bonnie From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 8:15 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates Load started at 3:00am. That's when WSUS is set up to run downloads. We have a hub and spoke for our WAN setup. We killed the HUB thinking the spokes would cease but it appears as if the spoke servers are still pushing downloads and bybassing the HUB server to saturate the Internet link - Original Message - From: Ames Matthew Bmailto:[EMAIL PROTECTED] To: NT System Admin Issuesmailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 11:12 AM Subject: RE: Stop WSUS updates Maybe they are going else where to get windows updates, like the internet, rather than your local wsus server? Or is someone just copying some large files around your network? Are you seeing a lot of network traffic to your wsus server, or just else where on your network? From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: 12 March 2008 15:06 To: NT System Admin Issues Subject: Re: Stop WSUS updates Ok I have them stopped. But the load is still to high. Could the PC's still be downloading even if WSUS and WWW is dead? - Original Message - From: Damien Solodowmailto:[EMAIL PROTECTED] To: NT System Admin Issuesmailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 11:04 AM Subject: RE: Stop WSUS updates Then stop the Wsus and www services on your wsus server. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 10:59 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates My network load is too high. I need to stop the WSUS. - Original Message - From: Miller Bonnie L.mailto:[EMAIL PROTECTED] To: NT System Admin Issuesmailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 10:28 AM Subject: RE: Stop WSUS updates What are you trying to prevent from happening? -Bonnie From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 AM To: NT System Admin Issues Subject: Stop WSUS updates To stop WSUS updates I need to do the following: 1.)Stop WWW on WSUS server. 2.)Reboot workstations that have downloading icon in system tray. Or is there more? __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ The information contained in this E-Mail and any subsequent correspondence is private and is intended solely for the intended recipient(s). The information in this communication may be confidential and/or legally privileged. Nothing in this e-mail is intended to conclude a contract on behalf of QinetiQ or make QinetiQ subject to any other legally binding commitments, unless the e-mail contains an express statement to the contrary or incorporates a formal Purchase Order. For those other than the recipient any disclosure, copying, distribution, or any action taken or omitted to be taken in reliance on such information is prohibited and may be unlawful. Emails and other electronic communication with QinetiQ may be monitored and recorded for business purposes including security, audit and archival purposes. Any response to this email indicates consent to this. Telephone calls to QinetiQ may be monitored or recorded for quality control, security and other business purposes. QinetiQ Limited Registered in England Wales: Company Number:3796233 Registered office: 85 Buckingham Gate, London SW1E 6PD, United Kingdom Trading address: Cody Technology Park, Cody Building, Ively Road, Farnborough, Hampshire, GU14 0LX, United Kingdom http://www.QinetiQ.com/home/legal.html __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja
RE: Stop WSUS updates
Correct. If you want to avoid that, in IIS manager you can stop the wsus site instead. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 11:21 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates I have a web application on each server. This app will die with the www death, correct? - Original Message - From: Damien Solodow mailto:[EMAIL PROTECTED] To: NT System Admin Issues mailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 11:19 AM Subject: RE: Stop WSUS updates Wait, are you saying you have multiple WSUS servers, and that's where you're seeing the traffic coming from? If it's the case, you need to stop the wsus, www and automatic updates services on all of them. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 11:15 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates Load started at 3:00am. That's when WSUS is set up to run downloads. We have a hub and spoke for our WAN setup. We killed the HUB thinking the spokes would cease but it appears as if the spoke servers are still pushing downloads and bybassing the HUB server to saturate the Internet link - Original Message - From: Ames Matthew B mailto:[EMAIL PROTECTED] To: NT System Admin Issues mailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 11:12 AM Subject: RE: Stop WSUS updates Maybe they are going else where to get windows updates, like the internet, rather than your local wsus server? Or is someone just copying some large files around your network? Are you seeing a lot of network traffic to your wsus server, or just else where on your network? From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: 12 March 2008 15:06 To: NT System Admin Issues Subject: Re: Stop WSUS updates Ok I have them stopped. But the load is still to high. Could the PC's still be downloading even if WSUS and WWW is dead? - Original Message - From: Damien Solodow mailto:[EMAIL PROTECTED] To: NT System Admin Issues mailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 11:04 AM Subject: RE: Stop WSUS updates Then stop the Wsus and www services on your wsus server. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 10:59 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates My network load is too high. I need to stop the WSUS. - Original Message - From: Miller Bonnie L. mailto:[EMAIL PROTECTED] To: NT System Admin Issues mailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 10:28 AM Subject: RE: Stop WSUS updates What are you trying to prevent from happening? -Bonnie From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 AM To: NT System Admin Issues Subject: Stop WSUS updates To stop WSUS updates I need to do the following: 1.)Stop WWW on WSUS server. 2.)Reboot workstations that have downloading icon in system tray. Or is there more
RE: Stop WSUS updates
What version of WSUS? I know 3.0 uses http to download files, and I'm pretty sure 2.0 did as well. -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 11:29 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates Sure they can. They get thier files from a shared folder on the server. On Wed, Mar 12, 2008 at 11:11 AM, Damien Solodow [EMAIL PROTECTED] wrote: Nope. They can't download files from a downed website. Are you sure WSUS is the cause of your load? From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 11:06 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates To: NT System Admin Issues Subject: Re: Stop WSUS updates Ok I have them stopped. But the load is still to high. Could the PC's still be downloading even if WSUS and WWW is dead? - Original Message - From: Damien Solodow To: NT System Admin Issues Sent: Wednesday, March 12, 2008 11:04 AM Subject: RE: Stop WSUS updates Then stop the Wsus and www services on your wsus server. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 10:59 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates My network load is too high. I need to stop the WSUS. - Original Message - From: Miller Bonnie L. To: NT System Admin Issues Sent: Wednesday, March 12, 2008 10:28 AM Subject: RE: Stop WSUS updates What are you trying to prevent from happening? -Bonnie From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 AM To: NT System Admin Issues Subject: Stop WSUS updates To stop WSUS updates I need to do the following: 1.)Stop WWW on WSUS server. 2.)Reboot workstations that have downloading icon in system tray. Or is there more? __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ -- ME2 ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Re: Stop WSUS updates
We are on 3.0 - Original Message - From: Damien Solodow [EMAIL PROTECTED] To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 11:31 AM Subject: RE: Stop WSUS updates What version of WSUS? I know 3.0 uses http to download files, and I'm pretty sure 2.0 did as well. -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 11:29 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates Sure they can. They get thier files from a shared folder on the server. On Wed, Mar 12, 2008 at 11:11 AM, Damien Solodow [EMAIL PROTECTED] wrote: Nope. They can't download files from a downed website. Are you sure WSUS is the cause of your load? From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 11:06 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates To: NT System Admin Issues Subject: Re: Stop WSUS updates Ok I have them stopped. But the load is still to high. Could the PC's still be downloading even if WSUS and WWW is dead? - Original Message - From: Damien Solodow To: NT System Admin Issues Sent: Wednesday, March 12, 2008 11:04 AM Subject: RE: Stop WSUS updates Then stop the Wsus and www services on your wsus server. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 10:59 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates My network load is too high. I need to stop the WSUS. - Original Message - From: Miller Bonnie L. To: NT System Admin Issues Sent: Wednesday, March 12, 2008 10:28 AM Subject: RE: Stop WSUS updates What are you trying to prevent from happening? -Bonnie From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 AM To: NT System Admin Issues Subject: Stop WSUS updates To stop WSUS updates I need to do the following: 1.)Stop WWW on WSUS server. 2.)Reboot workstations that have downloading icon in system tray. Or is there more? __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ -- ME2 ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: Stop WSUS updates
David, so I'm following this thread and the recommendations are straight forward, do you see the following services running on the wsus servers: W3wp (how many instances) Wsusservice On the client do you see the wuauclt spawned from service? I would use pslist -t -s \\servername file:///\\servername to check all spawned services As for the BITS running services, to see the bits, try using the bitsadmin tool to see if there are any jobs still running. If you have the bitsadmin tool use the /cancel job switch. As everyone stated, once the service is down, there should not be any client connections requesting data, look at the logs on the client and the server end to verify there is no communication. Thomas From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 10:23 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates 25 LAN's with T1's tied to 1 T1 with Internet Access.(MAIN WSUS Resides) Internet LAN saturated. - Original Message - From: NTSysAdmin mailto:[EMAIL PROTECTED] To: NT System Admin Issues mailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 11:21 AM Subject: RE: Stop WSUS updates I doubt it's wsus unless you just approved hundreds of patches. Last nights downloads didn't amount to anything much..plus, wsus won't saturate an internet connection... S From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 12:15 PM To: NT System Admin Issues Subject: Re: Stop WSUS updates Load started at 3:00am. That's when WSUS is set up to run downloads. We have a hub and spoke for our WAN setup. We killed the HUB thinking the spokes would cease but it appears as if the spoke servers are still pushing downloads and bybassing the HUB server to saturate the Internet link - Original Message - From: Ames Matthew B mailto:[EMAIL PROTECTED] To: NT System Admin Issues mailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 11:12 AM Subject: RE: Stop WSUS updates Maybe they are going else where to get windows updates, like the internet, rather than your local wsus server? Or is someone just copying some large files around your network? Are you seeing a lot of network traffic to your wsus server, or just else where on your network? From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: 12 March 2008 15:06 To: NT System Admin Issues Subject: Re: Stop WSUS updates Ok I have them stopped. But the load is still to high. Could the PC's still be downloading even if WSUS and WWW is dead? - Original Message - From: Damien Solodow mailto:[EMAIL PROTECTED] To: NT System Admin Issues mailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 11:04 AM Subject: RE: Stop WSUS updates Then stop the Wsus and www services on your wsus server. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 10:59 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates My network load is too high. I need to stop the WSUS. - Original Message - From: Miller Bonnie L. mailto:[EMAIL PROTECTED] To: NT System Admin Issues mailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 10:28 AM Subject: RE: Stop WSUS updates What are you trying to prevent from happening? -Bonnie From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 AM To: NT System Admin Issues Subject: Stop WSUS updates To stop WSUS updates I need to do the following: 1.)Stop WWW
RE: Stop WSUS updates
Why aren't your spoke WSUS servers updating from the hub WSUS server? And then your clients update from the closest WSUS server? Client1 Spoke WSUS - Hub WSUS - internet - MU server ^ Client2 Spoke WSUS --| If that's the case, then only the hub WSUS server would ever use the internet link. And it shouldn't be saturated for long. Why do you think it's WSUS and not something else? Cheers Ken From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Thursday, 13 March 2008 2:23 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates 25 LAN's with T1's tied to 1 T1 with Internet Access.(MAIN WSUS Resides) Internet LAN saturated. - Original Message - From: NTSysAdminmailto:[EMAIL PROTECTED] To: NT System Admin Issuesmailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 11:21 AM Subject: RE: Stop WSUS updates I doubt it's wsus unless you just approved hundreds of patches. Last nights downloads didn't amount to anything much..plus, wsus won't saturate an internet connection... S From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 12:15 PM To: NT System Admin Issues Subject: Re: Stop WSUS updates Load started at 3:00am. That's when WSUS is set up to run downloads. We have a hub and spoke for our WAN setup. We killed the HUB thinking the spokes would cease but it appears as if the spoke servers are still pushing downloads and bybassing the HUB server to saturate the Internet link - Original Message - From: Ames Matthew Bmailto:[EMAIL PROTECTED] To: NT System Admin Issuesmailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 11:12 AM Subject: RE: Stop WSUS updates Maybe they are going else where to get windows updates, like the internet, rather than your local wsus server? Or is someone just copying some large files around your network? Are you seeing a lot of network traffic to your wsus server, or just else where on your network? From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: 12 March 2008 15:06 To: NT System Admin Issues Subject: Re: Stop WSUS updates Ok I have them stopped. But the load is still to high. Could the PC's still be downloading even if WSUS and WWW is dead? - Original Message - From: Damien Solodowmailto:[EMAIL PROTECTED] To: NT System Admin Issuesmailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 11:04 AM Subject: RE: Stop WSUS updates Then stop the Wsus and www services on your wsus server. From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 10:59 AM To: NT System Admin Issues Subject: Re: Stop WSUS updates My network load is too high. I need to stop the WSUS. - Original Message - From: Miller Bonnie L.mailto:[EMAIL PROTECTED] To: NT System Admin Issuesmailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, March 12, 2008 10:28 AM Subject: RE: Stop WSUS updates What are you trying to prevent from happening? -Bonnie From: David W. McSpadden [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 AM To: NT System Admin Issues Subject: Stop WSUS updates To stop WSUS updates I need to do the following: 1.)Stop WWW on WSUS server. 2.)Reboot workstations that have downloading icon in system tray. Or is there more? ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
