The VSE may download the update from HTTP instead of McAFee ePO kindly check wether the 2000 server is able to ping the McAfee ePO server and ePO windows 2000 server .
Are the agent logs on the Windows2000 machines showing any communication errors ?
Agent log typically found here:
C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\DB\Agent_<systemname>.log
Sounds like properties are not making it back to the ePO server perhaps.
Check the last agent connection time in the ePO console too.
Kindly use the status agent monitor select the option send and collect props , events,enforce policies etc wait for the result does the McAfee agent receives any error msg.
C:\program files\McAfee\Common Framework\CmdAgent.exe /s -Status Agent Monitor