Machines were forced to update to Mavericks 10.9.5 at login

[sgutierrez]

So this happened: Today of all days, some of the macs were auto updating themselves to 10.9.5 (we were running 10.9.4) at login. We doubled check the update server to make sure it was set to manual and that we didn't apply any policies or configurations from JSS. So we're a bit confused on why now of all days since it's release months ago that this is happening.

The jss server itself is also on 10.9.5

[rderewianko]

If you open one of the machines in the JSS & take a look at the history tab. You should be able to see under policy logs if anything's run that may perhaps be some kind of update. The JSS only does what its told and doesn't force updates.

The other option is those macs may not be contacting your update catalogue and may be going to apple instead.
This can be verified by typing the following in terminal "defaults read /Library/Preferences/com.apple.SoftwareUpdate CatalogURL"