Are the clients still getting their updates from the Windows Update Web site? (I know for sure they are getting the group policy and updates from SUS as well.) Do both update mechanisms co-exist on some PCs? How can Windows Update be completely disabled?
Make sure those clients have updated their GPO settings completely. You can double-check by verifying that the registry modifications have been made and they are retained after the computer reboots.
This was first published in November 2003