Hi Marie:
Please verify the following for me:
a) the GPO assigned to the clients which overrides their Automatic Update settings is actually applying. There are several ways to do this. Client-side rsop.msc, or Run the modeling wizard from the GPO Management
b) the client machines protection filters (whatever they maybe, i.e. defender, symantec, etc.) actually show the systems as clean
Once those 2 are verified, you can try the following trick on the client systems by running the following commands in a batch file:
rem Fixes problem with client machines not showing up on the server due to imaging method
reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v AccountDomainSid /f
reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v PingID /f
reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v SusClientId /f
cls
@echo Triggering detection after resetting WSUS client identity
net stop wuauserv
net start wuauserv
wuauclt /resetauthorization /detectnow
Hope this helps! :)
--VTK