Well, there is nothing in that log indicating that its "Bypassing to Microsoft" for updates. Are any of the client machines imaged?
http://msmvps.com/blogs/athif/pages/66376.aspx
