Why does WSUS install rejected updates?

Question

Windows Server

Previously, updates were accepted for installation, but caused errors on workstations. After that, the updates were marked as rejected on WSUS and removed from the workstations. However, WSUS continues to download these updates to the workstations. Why does WSUS install rejected updates? OS: Windows Server 2003. WSUS Version 3.2.7600.226.

Answer 1

Most likely, the updates were downloaded and remained locally on the computer, and from there they are pulled up by the update center.
Corrective action algorithm:
1. Stop services: Windows Update, BITS Background Intelligent Transfer Service, Cryptography Services.
2. Service folders of the update center catroot2, SoftwareDistribution, downloader rename to catrootold, etc. (which, if something went wrong, can be used as backups).
3. All previously stopped services start again.
4. Run an immediate query of the WSUS server for updates and reset the authorization on the server and client (Wuauclt.exe /Detectnow /resetAuthorization).