Is there a way to have roaming clients check into an internal WSUS server via VPN or whatever to see which updates are approved/declined, but when it actually comes to downloading the patches it ...

I have a Domain and a WSUS instance at home. There are two computers that I've removed from service, removed from the Domain, and removed from WSUS, but they reappear in WSUS after a short time (under ...