We're running the latest WSUS server 3.0 sp-something-or-other. Add the admin template to domain group policy to get everyone into the pool, so to speak.
Now, for various reasons, I have two servers that I need to remove from the WSUS family. They need to go back to getting their updates from Microsoft.
I created a new OU ("Non WSUS Servers"). I created a new GPO as a copy of the Default Domain Policy ("non WSUS") and removed that wsus admin template.
Deleted the 2 servers from WSUS. Yet they keep getting added back in. Clearly I'm missing a step here -- any ideas?
While writing this, I noticed that my "Non WSUS Servers" OU "Group Policy Inheritance" lists my non WSUS GPO and then the Default Domain policy under it. Is that what's tripping me up?
(can you tell I'm not a GPO wizard? ;-) )