Hello,
I've been desperately trying to figure out what's going on. Twice now in the last month, our DMZ servers, which belong to computer groups in WSUS that's separated for manual patching, have been apparently been added to several other patch groups (ones that we deadline patches for automatic patching). Both times, a coworker was interacting with SolarWinds Patch Manager to push out a third party patch to the environment. I can't figure out anything he did that would cause the change in membership to the computer groups but it's happening and those servers are installing patches and rebooting autotmatically(which we don't want). All the WSUS servers are using the Update Services console and not Group Policy or registry to assign to groups. GPO has client side targeting disabled in our regular network and DMZ. But only the DMZ servers are being added to all these other groups. Has anyone ever seen this before? It's becoming an issue because we have to check server membership before we approve/deadline monthly patches.
