Is there an fairly easy way to find out how many workstations in my net that does not use wsus update? I have a feeling that many of my workstations does in fact not use wsus update, but instead choose to go online and download the updates.
I don't want to do this manually, there is about a thousand workstations.
Thanks in advance.
Maclovin
If you know how many workstations you have, subtract the number of workstations listed in WSUS. You then have the number of workstations that are either updating directly from the Internet or not updating at all.
For a network with 1000+ machines you almost certainly have a domain. You can use Group Policy to enforce a WSUS policy, and ensure machines connect to your WSUS server and receive regular updates.
As Chris has stated, you can look at the computers that have "registered" with the WSUS server in the WSUS console and compare that to the computers in ADUC. The WSUS console has several computer related reports that you can run and save to an Excel spreadsheet. In ADUC you can create a query that finds all computers where the computer name has a value, which will list all of the computers in the domain regardless of their location (OU), the query results can then be exported as a tab or comma delimited file and can be opened in Excel and compared to the WSUS computer report.