kevin.bailey Posted December 13, 2012 Report post Posted December 13, 2012 I've got all of my DMZ clients setup as Internet-based clients with all certificates in place. Software packages download and install fine. However, software updates will not download. They seem stuck at 0%. From what I understand and from looking at the logs, Internet-based clients will look to Microsoft update site first for updates and then it should look to SCCM. Is this correct? is there any way to change the first option to be SCCM? None of my DMZ clients have Internet access, so they seem stuck. I've left my machines downloading updates overnight and they are still stuck at 0%. Any help would be appreciated. Quote Share this post Link to post Share on other sites More sharing options...
Peter van der Woude Posted December 13, 2012 Report post Posted December 13, 2012 Nope the first place for a managed client should be a DP. The only way to let a client look online is by using GPO, so I hope you don't have them configured? Quote Share this post Link to post Share on other sites More sharing options...
kevin.bailey Posted December 13, 2012 Report post Posted December 13, 2012 so you're saying that the first place a Internet-based client would look is internal unless some policy is pointing it to the Microsoft update site, correct? These machines aren't on the domain, so there shouldn't be a GPO setting that policy. Let me double-check and make sure somebody didn't configure a local policy. Quote Share this post Link to post Share on other sites More sharing options...
kevin.bailey Posted December 14, 2012 Report post Posted December 14, 2012 so after drilling into the issue some more, it appears that the EULA's are having issues downloading for a couple updates. The downloads of the EULA's is attempting to use port 8530, which I don't have open through the firewall. 8531 is open. I'm not sure why this is. Quote Share this post Link to post Share on other sites More sharing options...
