After deploying a Vista OS to a client, I'm seeing a surge in network activity post build. The guilty port sending the data is 8530 (WSUS) and it's sending approx 1GB from the WSUS/CM server to a few, not all, clients that have just been re-imaged. Forefront is used, so a bit of activity downloading the def files in the softwareupdates.log, but nothing much. The WSUS Downloads foder doesn't hold much. I do have a 150 mb Datastore.edb file (seems not too excessive). Anyone shed any light on this? Driving me nuts! Thanks.

what does the windowsupdates.log file on one of those clients tell you ? is it applying loads of updates ? is it vista sp2 ? any group policies that could be forcing a download on the new machines ? My step by step SCCM Guides I'm on Twitter > ncbrady

windowsupdates just shows the FCS def files coming down, just what's expected. The core image is sp1. sp2 hasn't been made available via CM (long story) and it's definately not approved in the WSUS console. Just the usual GPOs, nothing which would be pushing a GB over port 8530 ??!! Cheers Niall.