Quantcast
Channel: WSUS forum
Viewing all 12874 articles
Browse latest View live

WSUS Windows 7 Client not connecting with WSUS SERVER 2012 R2 Error " 80072ee2"

$
0
0

Hi ,
        I Have the Non- AD WSUS server 2012 R2 as WSUS server, and widnows 7 ent sp1 as WSUS Client  , the server and client are in teh same ip range and able to ping both server from client and client from server, and both are in teh same time zone(EST), But im getting the "80072ee2" when ever i tried to get the updates from client

Please help me on this

Thanks 

Balaji K



Post install is starting - Fatal Error: The system cannot find the path specified.

$
0
0

Hi,

WSUS post installation failed with the below error log. Any Suggestions pls. 

2015-02-04 09:47:03  Postinstall started
2015-02-04 09:47:03  Detected role services: Api, UI, WidDatabase, Services
2015-02-04 09:47:03  Start: LoadSettingsFromParameters
2015-02-04 09:47:03  Content local is: True
2015-02-04 09:47:03  Content directory is: D:\WSUS
2015-02-04 09:47:03  SQL instname is: 
2015-02-04 09:47:03  End: LoadSettingsFromParameters
2015-02-04 09:47:03  Start: Run
2015-02-04 09:47:03  Fetching WsusAdministratorsSid from registry store
2015-02-04 09:47:03  Value is S-1-5-21-738919999-2738570043-745769279-1003
2015-02-04 09:47:03  Fetching WsusReportersSid from registry store
2015-02-04 09:47:03  Value is S-1-5-21-738919999-2738570043-745769279-1004
2015-02-04 09:47:04  Configuring content directory...
2015-02-04 09:47:04  Configuring groups...
2015-02-04 09:47:04  Starting group configuration for WSUS Administrators...
2015-02-04 09:47:04  Found group in regsitry, attempting to use it...
2015-02-04 09:47:20  Writing group to registry...
2015-02-04 09:47:20  Finished group creation
2015-02-04 09:47:20  Starting group configuration for WSUS Reporters...
2015-02-04 09:47:20  Found group in regsitry, attempting to use it...
2015-02-04 09:47:20  Writing group to registry...
2015-02-04 09:47:20  Finished group creation
2015-02-04 09:47:20  Configuring permissions...
2015-02-04 09:47:20  Fetching content directory...
2015-02-04 09:47:20  Fetching ContentDir from registry store
2015-02-04 09:47:20  Value is D:\WSUS
2015-02-04 09:47:20  Fetching group SIDs...
2015-02-04 09:47:20  Fetching WsusAdministratorsSid from registry store
2015-02-04 09:47:20  Value is S-1-5-21-738919999-2738570043-745769279-1003
2015-02-04 09:47:20  Fetching WsusReportersSid from registry store
2015-02-04 09:47:20  Value is S-1-5-21-738919999-2738570043-745769279-1004
2015-02-04 09:47:20  Creating group principals...
2015-02-04 09:47:20  Granting directory permissions...
2015-02-04 09:47:20  Granting permissions on content directory...
2015-02-04 09:47:20  Granting registry permissions...
2015-02-04 09:47:20  Granting registry permissions...
2015-02-04 09:47:20  Granting registry permissions...
2015-02-04 09:47:20  Configuring shares...
2015-02-04 09:47:20  Configuring network shares...
2015-02-04 09:47:20  Fetching content directory...
2015-02-04 09:47:20  Fetching ContentDir from registry store
2015-02-04 09:47:20  Value is D:\WSUS
2015-02-04 09:47:20  Fetching WSUS admin SID...
2015-02-04 09:47:20  Fetching WsusAdministratorsSid from registry store
2015-02-04 09:47:20  Value is S-1-5-21-738919999-2738570043-745769279-1003
2015-02-04 09:47:20  Content directory is local, creating content shares...
2015-02-04 09:47:20  Creating share "UpdateServicesPackages" with path "D:\WSUS\UpdateServicesPackages" and description "A network share to be used by client systems for collecting all software packages (usually applications) published on this WSUS system."
2015-02-04 09:47:20  Deleting existing share...
2015-02-04 09:47:20  Creating share...
2015-02-04 09:47:20  Share successfully created
2015-02-04 09:47:20  Creating share "WsusContent" with path "D:\WSUS\WsusContent" and description "A network share to be used by Local Publishing to place published content on this WSUS system."
2015-02-04 09:47:20  Deleting existing share...
2015-02-04 09:47:20  Creating share...
2015-02-04 09:47:20  Share successfully created
2015-02-04 09:47:20  Creating share "WSUSTemp" with path "C:\Program Files\Update Services\LogFiles\WSUSTemp" and description "A network share used by Local Publishing from a Remote WSUS Console Instance."
2015-02-04 09:47:20  Deleting existing share...
2015-02-04 09:47:20  Creating share...
2015-02-04 09:47:20  Share successfully created
2015-02-04 09:47:20  Finished creating content shares
2015-02-04 09:47:20  Stopping service WSUSService
2015-02-04 09:47:20  Stopping service W3SVC
2015-02-04 09:47:21  Configuring WID database...
2015-02-04 09:47:21  Configuring the database...
2015-02-04 09:47:21  Establishing DB connection...
2015-02-04 09:47:21  Checking to see if database exists...
2015-02-04 09:47:21  Database exists
2015-02-04 09:47:21  Switching database to single user mode...
2015-02-04 09:47:24  Loading install type query...
2015-02-04 09:47:24  DECLARE @currentDBVersion       int
DECLARE @scriptMajorVersion     int = (9600)
DECLARE @scriptMinorVersion     int = (16384)
DECLARE @databaseMajorVersion   int 
DECLARE @databaseMinorVersion   int 
DECLARE @databaseBuildNumber    nvarchar(10)
IF NOT EXISTS(SELECT * FROM sys.databases WHERE name='SUSDB')
BEGIN
    SELECT 1
END
ELSE
BEGIN
    SET @currentDBVersion = (SELECT SchemaVersion FROM SUSDB.dbo.tbSchemaVersion WHERE ComponentName = 'CoreDB')
    SET @databaseBuildNumber = (SELECT BuildNumber FROM SUSDB.dbo.tbSchemaVersion WHERE ComponentName = 'CoreDB')
    DECLARE @delimiterPosition INT = CHARINDEX('.', @databaseBuildNumber)
    IF (@delimiterPosition = 0)
    BEGIN
        RAISERROR('Invalid schema version number', 16, 1) with nowait
        return 
    END 
    SET @databaseMajorVersion = SUBSTRING(@databaseBuildNumber, 1, @delimiterPosition - 1)
    SET @databaseMinorVersion = SUBSTRING(@databaseBuildNumber, (@delimiterPosition + 1), (10 - @delimiterPosition))
    IF @currentDBVersion < 926
    BEGIN
        SELECT 3
    END
    ELSE
    BEGIN
        IF (@scriptMajorVersion > @databaseMajorVersion OR
           (@scriptMajorVersion = @databaseMajorVersion AND @scriptMinorVersion > @databaseMinorVersion))
        BEGIN
            SELECT 2
        END
        ELSE IF (@scriptMajorVersion = @databaseMajorVersion AND
                 @scriptMinorVersion = @databaseMinorVersion)
        BEGIN
            SELECT 0
        END
        ELSE
        BEGIN
            SELECT 4
        END
    END
END

2015-02-04 09:47:24  Install type is: Reinstall
2015-02-04 09:47:24  Creating logins...
2015-02-04 09:47:24  Fetching account info for S-1-5-20
2015-02-04 09:47:24  Found principal
2015-02-04 09:47:24  Found account
2015-02-04 09:47:24  Got binary SID
2015-02-04 09:47:24  Fetching WsusAdministratorsSid from registry store
2015-02-04 09:47:24  Value is S-1-5-21-738919999-2738570043-745769279-1003
2015-02-04 09:47:24  Fetching account info for S-1-5-21-738919999-2738570043-745769279-1003
2015-02-04 09:47:24  Found principal
2015-02-04 09:47:24  Found account
2015-02-04 09:47:24  Got binary SID
2015-02-04 09:47:24  Setting content location...
2015-02-04 09:47:24  Fetching ContentDir from registry store
2015-02-04 09:47:24  Value is D:\WSUS
2015-02-04 09:47:24  Swtching DB to multi-user mode......
2015-02-04 09:47:25  Finished setting multi-user mode
2015-02-04 09:47:25  Writing DB settings to registry...
2015-02-04 09:47:25  Marking PostInstall done for UpdateServices-WidDatabase in the registry...
2015-02-04 09:47:25  Starting service W3SVC
2015-02-04 09:47:25  Configuring IIS...
2015-02-04 09:47:25  Start: ConfigureWebsite
2015-02-04 09:47:25  System.Runtime.InteropServices.COMException (0x80070003): The system cannot find the path specified.

   at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
   at System.DirectoryServices.DirectoryEntry.Bind()
   at System.DirectoryServices.DirectoryEntry.get_AdsObject()
   at System.DirectoryServices.PropertyValueCollection.PopulateList()
   at System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry entry, String propertyName)
   at System.DirectoryServices.PropertyCollection.get_Item(String propertyName)
   at Microsoft.UpdateServices.Administration.UseCustomWebSite..ctor()
   at Microsoft.UpdateServices.Administration.PostInstall.ConfigureWebsite(Int32 portNumber)
   at Microsoft.UpdateServices.Administration.PostInstall.Run()
   at Microsoft.UpdateServices.Administration.PostInstall.Execute(String[] arguments)

Syed

Issue with reinstallation of WSUS, Post install config fails

$
0
0

Hi

I am trying to reinstall WSUS role. Steps followed

1. Uninstallation of WSUS role and windows internal database, restarted the machine

2. Delete the Data file from Windows\WID folder

3. Deleted the update service registry form registries

4. Deleted WSUS administration site for IIS.

5. Deleted the  files from Program files\update services.( Retained WSUSutil in sub folder tools as this was not coming up with installation).

6. Restarted the machine.

7. Installed WSUS - Successful.

8. Tried to run the post install configuration from console.. It errored out.

9. Executed the command "wsusutil postinstall CONTENT_DIR=<<Folder path on WSUS server>>

10. It erred out and the content of the error log is as below.

2015-02-03 23:06:07  Starting service W3SVC
2015-02-03 23:06:07  Configuring IIS...
2015-02-03 23:06:07  Start: ConfigureWebsite
2015-02-03 23:06:07  Configuring website on port 8530
2015-02-03 23:06:08  System.ComponentModel.Win32Exception (0x80004005): The system cannot find the file specified
   at System.Diagnostics.Process.StartWithShellExecuteEx(ProcessStartInfo startInfo)
   at System.Diagnostics.Process.Start(ProcessStartInfo startInfo)
   at Microsoft.UpdateServices.Administration.UseCustomWebSite.ExecuteIisCustomAction(String arguments)
   at Microsoft.UpdateServices.Administration.UseCustomWebSite.Install(Int32 portNumber)
   at Microsoft.UpdateServices.Administration.UseCustomWebSite.InstallAndConfigure(IisConfiguration& iisConfiguration, Int32 newPortNumber)
   at Microsoft.UpdateServices.Administration.PostInstall.ConfigureWebsite(Int32 portNumber)
   at Microsoft.UpdateServices.Administration.PostInstall.Run()
   at Microsoft.UpdateServices.Administration.PostInstall.Execute(String[] arguments)

Any pointers on how to resolve this issue would be of great help. I can not uninstall IIS on this server as this is acting as only distribution point for my SCCM Setup.

Regards

Leela

List and approve update (script)

$
0
0

Hello,

We have 2 environments (test and production), with there own wsus server.
We approve updates in test and let the user test there applications, when the test is okay, then the updates can be approved in production.

Can we list all the approved updates and export it to a file. And can we use this file for an import to approve it in production ?

WSUS server not communicating with update.microsoft.com

$
0
0

WSUS is installed on Windows Server 2012.  Synchronization is failing in wsus.   We have added the exceptions to the network firewall using the article https://technet.microsoft.com/en-us/library/dd939870(WS.10).aspx.  Below is the error we are getting when synchronization fails.  The ip in the error below changes every time we try to sync and I can not do a DNS lookup on the ip.

WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: No connection could be made because the target machine actively refused it 65.55.163.222:443
at System.Net.HttpWebRequest.GetRequestStream(TransportContext& context)
   at System.Net.HttpWebRequest.GetRequestStream()
   at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
   at Microsoft.UpdateServices.ServerSyncWebServices.ServerSync.ServerSyncProxy.GetAuthConfig()
   at Microsoft.UpdateServices.ServerSync.ServerSyncLib.InternetGetServerAuthConfig(ServerSyncProxy proxy, WebServiceCommunicationHelper webServiceHelper)
   at Microsoft.UpdateServices.ServerSync.ServerSyncLib.Authenticate(AuthorizationManager authorizationManager, Boolean checkExpiration, ServerSyncProxy proxy, Cookie cookie, WebServiceCommunicationHelper webServiceHelper)
   at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.SyncConfigUpdatesFromUSS()
   at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.ExecuteSyncProtocol(Boolean allowRedirect)

Language packs: Everything's at 99%

$
0
0

Hi,

I've got WSUS on Server 2012 R2 and 10 Server 2012 R2 servers.

WSUS is quite happily installing all the patches, but they're all stuck at 99% compliance. They're all reporting back that the UK language pack KB2839636 isn't installed.

They all have English-UK set as their default language and display language. KB2839636 doesn't appear in Windows Update.

How can I get this update installed and get 100%?

P.S. I hate language packs :)

Gary

Problem reinstalling WSUS on Windows Server 2012R2 with SCCM 2012R2 CU3

$
0
0

I've cleaned off WSUS and removed the IIS service.

* Uninstalled WSUS
* Uninstalled IIS
* Deleted relevant REG keys
* Removed Update Service directory
* Removed WID Directory
* Removed IIS directories

After doing all this, I did a sfc /scannow (Corruption found and repaired) and dism /online /cleanup-image /restorehealtj

Following this, I re-added IIS and WSUS. The post configuration fails (From the Server Manager) and leaves a log saying:

2014-11-10 08:52:25  Postinstall started
2014-11-10 08:52:25  Detected role services: Database, UI, Services
2014-11-10 08:52:25  Start: LoadSettingsFromXml
2014-11-10 08:52:25  Start: GetConfigValue with filename=UpdateServices-Services.xml item=ContentLocal
2014-11-10 08:52:25  System.TypeInitializationException: The type initializer for 'Microsoft.UpdateServices.Internal.UtilConstants' threw an exception. ---> System.IO.InvalidDataException: Invalid installation directory
   at Microsoft.UpdateServices.Internal.SetupInfo.GetInstallDirectory()
   at Microsoft.UpdateServices.Internal.UtilConstants..cctor()
   --- End of inner exception stack trace ---
   at Microsoft.UpdateServices.Administration.PostInstall.GetConfigValue(String filename, String item)
   at Microsoft.UpdateServices.Administration.PostInstall.LoadSettingsFromXml()
   at Microsoft.UpdateServices.Administration.PostInstall.Initalize(Parameters parameters)
   at Microsoft.UpdateServices.Administration.PostInstall.Execute(String[] arguments)

Since that doesn't work I use the WsusUtil.exe postinstall content_dir=D:\Sources\WSUS command to try finishing the configuration. That kicks off a new error:

2014-11-10 12:47:32  Configuring IIS...
2014-11-10 12:47:32  Start: ConfigureWebsite
2014-11-10 12:47:33  Configuring website on port 8530
2014-11-10 12:47:33  System.ComponentModel.Win32Exception (0x80004005): The system cannot find the file specified
   at System.Diagnostics.Process.StartWithShellExecuteEx(ProcessStartInfo startInfo)
   at System.Diagnostics.Process.Start(ProcessStartInfo startInfo)
   at Microsoft.UpdateServices.Administration.UseCustomWebSite.ExecuteIisCustomAction(String arguments)
   at Microsoft.UpdateServices.Administration.UseCustomWebSite.Install(Int32 portNumber)
   at Microsoft.UpdateServices.Administration.UseCustomWebSite.InstallAndConfigure(IisConfiguration& iisConfiguration, Int32 newPortNumber)
   at Microsoft.UpdateServices.Administration.PostInstall.ConfigureWebsite(Int32 portNumber)
   at Microsoft.UpdateServices.Administration.PostInstall.Run()
   at Microsoft.UpdateServices.Administration.PostInstall.Execute(String[] arguments)

Regardless of how I try to clean, what I remove it always comes back to this with the post-install configuration failing in the server manager, and the wsusutil.exe configuration kicking off the failure during configuration of the IIS service.

The server is 2012 R2 with all the latest updates. It is also running SCCM 2012 R2 CU3.

KB2919355 will not install and corruption will not repair

$
0
0

I cannot get the major update from spring 2014 to install on one of our production servers. I am installing this update using the offline file. I have used the Windows Update client to download it as well and I end up with the same result.

These are the things I have tried with no success.

sfc /scannow (works fine, no errors are found by this)

dism /online /remove-package /packagename:Package_for_KB2919355~31bf3856ad364e35  ~amd64~~6.3.1.14 (remove the failed package, it works.)

dism /online /cleanup-image /startcomponentcleanup /resetbase (clean up WinSxS folder)

Reboot, try again, fails.

Mount a clean install.wim to C:\mount and ran the following

dism.exe /online /cleanup-image /restorehealth /Source:C:\mount\Windows /LimitAccess (fails as well)

Dism /Online /Cleanup-Image /ScanHealth (gives me this)

Deployment Image Servicing and Management tool
Version: 6.3.9600.16384

Image Version: 6.3.9600.16384

[==========================100.0%==========================]
The component store is repairable.
The operation completed successfully.

I have confirmed this:

Try going to: "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools"
If this folder does not exist (because you changed a few folders around to make the start screen look better for example)
You just go to: "C:\ProgramData\Microsoft\Windows\Start Menu\Programs"
and add a new folder "System Tools"

Any help would be appreciated on this matter.

Logs are in here: dism.log and cbs.log and a picture!

https://onedrive.live.com/?cid=ba16ae946915e690&id=BA16AE946915E690%2115238&action=Share


SSL VPN users need updates through our internal WSUS

$
0
0

Hi

We have lot of users working from home connecting through SSL VPN, we want to use our Internal WSUS server for deploying windows updates.

please let me know what is the best way to handle this scenario.

Event ID 10032 & 364 on WSUS server

$
0
0

I'm seeing the following errors on our WSUS server:

Log Name:      Application
Source:        Windows Server Update Services
Date:          9/28/2014 5:12:47 AM
Event ID:      10032
Task Category: 7
Level:         Error
Keywords:      Classic
User:          N/A
Computer:     {server.domain.com}
Description:
The server is failing to download some updates.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Server Update Services" />
    <EventID Qualifiers="0">10032</EventID>
    <Level>2</Level>
    <Task>7</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-09-28T10:12:47.000Z" />
    <EventRecordID>8069</EventRecordID>
    <Channel>Application</Channel>
    <Computer>{servername}.{domain}.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>The server is failing to download some updates.</Data>
  </EventData>
</Event>


Log Name:      Application
Source:        Windows Server Update Services
Date:          9/28/2014 3:05:12 AM
Event ID:      364
Task Category: 2
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      {server.domain.com}
Description:
Content file download failed. Reason: File cert verification failure. Source File: /msdownload/update/software/crup/2012/08/csi-x-none_a67aa308af03c7a5884974abe6fd834591b0f3a3.cab Destination File: c:\WSUS\WsusContent\A3\A67AA308AF03C7A5884974ABE6FD834591B0F3A3.cab.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Server Update Services" />
    <EventID Qualifiers="0">364</EventID>
    <Level>2</Level>
    <Task>2</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-09-28T08:05:12.000Z" />
    <EventRecordID>8051</EventRecordID>
    <Channel>Application</Channel>
    <Computer>{ server.domain.com} >
    <Security />
  </System>
  <EventData>
    <Data>Content file download failed. Reason: File cert verification failure. Source File: /msdownload/update/software/crup/2012/08/csi-x-none_a67aa308af03c7a5884974abe6fd834591b0f3a3.cab Destination File: c:\WSUS\WsusContent\A3\A67AA308AF03C7A5884974ABE6FD834591B0F3A3.cab.</Data>
  </EventData>
</Event>

I pulled this from the SoftwareDistributionLog:
2015-02-04 08:06:53.421 UTCInfoWsusService.26CabUtilities.CheckCertificateSignatureFile cert verification failed for c:\WSUS\WsusContent\A3\A67AA308AF03C7A5884974ABE6FD834591B0F3A3.cab with 2148204801
2015-02-04 08:06:53.421 UTCWarningWsusService.26ContentSyncAgent.ProcessBITSNotificationQueueInvalid file deleted: c:\WSUS\WsusContent\A3\A67AA308AF03C7A5884974ABE6FD834591B0F3A3.cab
2015-02-04 08:06:53.421 UTCInfoWsusService.26ContentSyncAgent.ContentSyncSPFireStateMachineEventContentSyncAgent firing Event: FileVerificationFailed for Item: 21d2460c-e9d5-4706-b06e-264477e4f6bb
2015-02-04 08:06:53.452 UTCInfoWsusService.26EventLogEventReporter.ReportEventEventId=364,Type=Error,Category=Synchronization,Message=Content file download failed. Reason: File cert verification failure. Source File: /msdownload/update/software/crup/2012/08/csi-x-none_a67aa308af03c7a5884974abe6fd834591b0f3a3.cab Destination File: c:\WSUS\WsusContent\A3\A67AA308AF03C7A5884974ABE6FD834591B0F3A3.cab.
2015-02-04 08:06:53.546 UTCInfoWsusService.26ContentSyncAgent.WakeUpWorkerThreadProcContentSyncAgent found no more Jobs, thread exitting
2015-02-04 08:06:53.546 UTCInfoWsusService.26EventLogEventReporter.ReportEventEventId=363,Type=Information,Category=Synchronization,Message=Content synchronization succeeded.

I’ve tried to follow the instructions in this article:
http://www.winvistatips.com/threads/wsus-keeps-gettign-content-file-download-failed-reason-crc-verification-failure-errors.748027/

Starting with Step 1, “Mark the update as ‘Not Approved’ on the WSUS Server” – How exactly do I determine which KB this relates to in order to mark it not approved?  I don’t see anything in the log or event viewer that gives me any type of cross reference to find that information.  


Disconnect WSUS server and Process of Approving Updates via Metadata.

$
0
0

Hi Folks:

I have recently setup 2 WSUS servers.   The first one has connectivity to the Internet and of course has access to Microsoft updates.   The second WSUS server is part of a disconnected network.   Both WSUS servers are supporting client workstations of various operating system versions.   The connected WSUS server is fairly easy, from a management viewpoint.   I simply check to see what updates are "Needed" and I approve them for download.   However, the disconnected WSUS server is the one that I need some advice on.   I want to have a fairly simply procedure for the disconnected WSUS server, but here is the procedure that I think would work:

  • Transfer metadata and updates via disc from the connected WSUS server to the disconnected WSUS server (using documented export/import procedure).
  • Check to see what is "Needed" updates on the disconnected WSUS server, once the WSUS server has had a chance to absorb all the imported metadata and updates.   This means that the disconnected WSUS server has determined from it's supported client workstations, what updates are required.
  • Generate a list of those "Needed" updates in some form, so that I can now approve those updates on the CONNECTED WSUS server for download.  
  • Once those updates have been downloaded to the connected WSUS server, transfer the updates and metadata again to the disconnected WSUS server.   Approve those updates, so that they can now be sent out to the client workstations on the disconnected network.

If that is my procedure (can someone like Lawrence Garvin), please let me know, if that sounds correct.   I'm concerned about the double export/import of the metadata and updates.

Also, I'm wondering if it would be better to have separate connected WSUS server for supporting the disconnected WSUS to keep things straight.

For example:

  • One connected WSUS servers supporting the set of client workstations, that are on the connect WSUS server's network.
  • One disconnected WSUS server supporting the set of client workstations that are on the disconnected WSUS server's network.
  • One more connected WSUS server, that would be used to download and transfer metadata and updates to the disconnect WSUS server.   The advantage in keeping this separate, is that you would never confuse approved updates between the connected network client workstations and the disconnected network client workstations.  Especially, if they have different versions of software, that require updating.  

Any input would be appreciated.

Server 2012 WSUS Post-deployment configuration fails - comprehending the log file

$
0
0

After installing Server 2012 Standard on ESX 5.1 I completed all available Windows Updates and proceeded to add the WSUS role.  I chose the default WID database and the role addition was seemingly successful.  Unfortunately, the Post-deployment Configuration failed.  A log file had been created in the AppData\Local\Temp folder but at initial glance it seemed to imply that my error was likely due to skipping a step during installation via PowerShell.  However, I didn't install using PowerShell and I set off to surf the Internets for clues on resolving this issue.  I searched about a dozen forums that with similar, but different issues until a comment by Lawrence Garvin (http://social.technet.microsoft.com/profile/lawrence%20garvin/?ws=usercard-inline) convinced me to go back and look at my log. 

2013-07-23 11:03:18  Postinstall started
2013-07-23 11:03:18  Detected role services: Api, UI, WidDatabase, Services
2013-07-23 11:03:18  Start: LoadSettingsFromXml
2013-07-23 11:03:18  Start: GetConfigValue with filename=UpdateServices-Services.xml item=ContentLocal
2013-07-23 11:03:18  Value is true
2013-07-23 11:03:18  End: GetConfigValue
2013-07-23 11:03:18  Start: GetConfigValue with filename=UpdateServices-Services.xml item=ContentDirectory
2013-07-23 11:03:18  Config file did not contain a value "ContentDirectory"
2013-07-23 11:03:18  Microsoft.UpdateServices.Administration.CommandException: A required configuration value was not found in the system. This is usually caused by installing WSUS through PowerShell and not specifying a configuration file. Review the article Managing WSUS Using PowerShell at TechNet Library (http://go.microsoft.com/fwlink/?LinkId=235499) for more information on the recommended steps to perform WSUS installation using PowerShell.
   at Microsoft.UpdateServices.Administration.PostInstall.GetConfigValue(String filename, String item)
   at Microsoft.UpdateServices.Administration.PostInstall.LoadSettingsFromXml()
   at Microsoft.UpdateServices.Administration.PostInstall.Initalize(Parameters parameters)
   at Microsoft.UpdateServices.Administration.PostInstall.Execute(String[] arguments)
Fatal Error: A required configuration value was not found in the system. This is usually caused by installing WSUS through PowerShell and not specifying a configuration file. Review the article Managing WSUS Using PowerShell at TechNet Library (http://go.microsoft.com/fwlink/?LinkId=235499) for more information on the recommended steps to perform WSUS installation using PowerShell.

Upon closer inspection the specifics of my error were right there for me, I just had to look at it long enough to decipher the details.  What I now read is that Post-deployment configuration finds a file called UpdateServices-Services.xml (I found it in Windows\System32\ServerManager\ComponentConfiguration\).  It determines that ContentLocal=True which correctly indicates that my updates are to be stored locally.  It proceeds to inquire about the ContentDirectory, but comes back without a value.  Here are my UpdateServices-Services.xml file contents

<?xml version="1.0" encoding="utf-16"?><INSTANCE CLASSNAME="ServerComponent_UpdateServices_Services"><PROPERTY NAME="ContentDirectory" TYPE="string"></PROPERTY><PROPERTY NAME="ContentLocal" TYPE="boolean"><VALUE>true</VALUE></PROPERTY></INSTANCE>

I can see that the ContentLocal property did indeed have the value true, but the ContentDirectory property did not have a value.  I now needed to figure out if a String value could be specified in the same way a Boolean value was, or if it needed quotes around it, or was supposed to be specified more like an attribute (learned about that somewhere along the way).  I couldn't find any conclusive websites, and I didn't want to just try it for fear of the Post-deployment configuration running with an invalid ContentDirectory.  Once again I returned to my log file and searched for answers at the http://go.microsoft.com/fwlink/?LinkId=235499 that was indicated.  I didn't find any exact matches, but eventually I found a sample .xml file that specified a string value.  It specified it as <VALUE>string</VALUE> with no brackets, so I knew to specify mine as <VALUE>C:\LocalMSUpdateCache</VALUE> and saved it.  My UpdateServices-Services.xml now looks like this:

<?xml version="1.0" encoding="utf-16"?><INSTANCE CLASSNAME="ServerComponent_UpdateServices_Services"><PROPERTY NAME="ContentDirectory" TYPE="string"><VALUE>C:\LocalMSUpdateCache</VALUE></PROPERTY><PROPERTY NAME="ContentLocal" TYPE="boolean"><VALUE>true</VALUE></PROPERTY></INSTANCE>

I returned to Server Manager -> WSUS and re-attempted the Postdeployment configuration.  It completed successfully!

I'm glad that my fix was relatively simple and that Lawrence was particular about the details of the log file. 

1. My exact error isn't always going to be documented

2. Just because the log file looks unintelligible (I have thus far avoided both powershell and xml), doesn't mean it's useless.

Good luck to anyone with a similar issue.  You too may be able to figure it out yourself.

Configuration still processing

$
0
0

I just inherited WSUS from a former employee. I know next to nothing about WSUS. The version of Update Services is 6.2.9200, WSUS version is 3.0 SP2 and it's all running on Windows 2012 (64 bit).

I'm having two issues, the first is that I'm unable to make any configuration changes because of the following error message "Cannot save configuration because the server is still processing a previous configuration change.". I've been getting this error message for 3 days. Rebooting doesn't matter. BITS, WSUS Service are both running and sqlservr.exe is taking about 90+% of the CPU consistently.

Does anyone know how to terminate the configuration processing?

The second issue is that the Update Services console keeps disconnecting from the server node (i.e. Reset Server Node). The machine that WSUS is installed on is the machine where I'm managing the Update Services console. This is the error message I get:

The WSUS administration console has encountered an unexpected error. This may be a transient error; try restarting the administration console. If this error persists,

Try removing the persisted preferences for the console by deleting the wsus file under %appdata%\Microsoft\MMC\.

System.ObjectDisposedException -- Cannot access a disposed object.
Object name: 'UssConnectionSettingsDialog'.

Source
System.Windows.Forms

Stack Trace:
   at System.Windows.Forms.Control.MarshaledInvoke(Control caller, Delegate method, Object[] args, Boolean synchronous)
   at System.Windows.Forms.Control.Invoke(Delegate method, Object[] args)
   at Microsoft.UpdateServices.UI.SnapIn.Dialogs.BaseSettingsDialog.configurationStateChangeTimer_TimerCallback(Object state)

The problem is that there is no folder %appdata%\Microsoft\MMC.

Can someone please give me a clue as to how to keep the connection up?

Thanks,

Sam

Get actual disk size of all updates in particular WSUS category

$
0
0

Hi everyone!

I need a tool (maybe PoSh script, or SQL command) to get current files size on disk of WSUS updates category, e.g. Drivers.

Is there anywhere something that can help me?

Thanks!

No computers after WSUS installation

$
0
0

Dear All, Please help me, i install fresh wsus server on windows 2012r2 server and my domain controller is windows 2012 but after installation i didn't see any computers.

Group policy is ok working message appear that managed by system administrator.

windows updated.

wsus server updated.

wsus console opening everything is ok but not working.

event logs no errors.

please advise.

Shakaki


WSUS server and client configuration issues

$
0
0

I just inherited WSUS from my predecessor (it was turned off because of a full disk) so I’m still learning how to use it. Turning it back on I changed where updates should come from, they were stored locally and now I’m pulling them down off of the Microsoft Update location. What I’m seeing is that I have a bunch of computers that WSUS “sees” but are showing “Failed or Needed” status. Unless I visit each machine and manually do the updates this status does not change. Additionally I have some client computers (Windows 7) that are not showing up as managed by WSUS. If I reading this right I’m running version Update Services 6.2.9200.16384 on Management Console 3.0 Version 6.2 (build 9200) on Windows Server 2012.

How can I force WSUS to automatically update the “Failed and Needed” devices?

How can I get those clients that are not being managed by WSUS to be managed?

Some of the things that I have done so far on the server and clients are:

-         Create a GPO (see attached for WSUS)

-         wuauclt/detectnow

-         wuauclt /reportnow

-         wuauclt.exe /detectnow

-         gpupdate /force after modifying the GPO

I even ran the SolarWinds WSUS diagnostic (as a non-administrator) and got this as the output:

# Solarwinds® Diagnostic Tool for the WSUS Agent # 1/23/2015

Machine state

  User rights:  User does not have administrative rights (Administrator rights are not available)

  Update service status:  Running

  Background Intelligent Transfer service status:   Running

  OS Version:  Windows 8.1 Pro

  Windows update agent version:   7.9.9600.17489 (WU Agent is OK)

Windows Update Agent configuration settings

  Automatic Update:    Enabled

  Options:  Automatically download and notify of installation

  Use WSUS Server: Not found (There is no such key)

  Windows Update Server:  Not found (There is no such key)

  Windows Update Status Server:  Not found (There is no such key)

  WSUS URLs are identical:  Values are empty

WSUS Server Connectivity -- Connectivity check is impossible

So, my questions are:

-         What tool do I use to configure the client machine?

-         How do I get WSUS to update my clients?

Thanks

Sam

WSUS client issue

$
0
0

I have two questions:

1) Which way is better to change WSUS server --migrate  from the old one to a new one or build a brand new one and deploy directly from the new server to the client

2) Is there a  powershell script to remove all SUSID from all PCs' registry --300 PCs . I found a few powershell scripts but it didn't work well.

Thanks!

Tim


Lost Entries in WSUS Console Tree - How do I get back?

$
0
0

OK, I feel stupid asking this, because I'm sure the answer is easy, but I've searched and not found anything on this (maybe too easy to have been asked before, or maybe I just didn't include the right keywords in my search attempts):

This applies to the current version of WSUS in Windows Server 2012 R2.

I right clicked and selected "New Window from Here" on the Options icon in the MMC Console tree on the left of the WSUS window. I had thought this would open a new window so I'd have 2 WSUS windows open so I could look at multiple pages on my screen at the same time. Unfortunately, that's not what "New Windows from Here" did. Instead, it changed the view in the existing window to Options and removed everything from the Console Tree in the left pane except for Options.

To be clear, nothing is wrong with WSUS -- it's working fine. I just screwed up the management console so I can't see anything except the Options page now, can't get to the reports or the page where I can review Sync status, approve updates, etc. I can now only access the Options page.

I've closed and restarted the WSUS MMC. I clicked on File | Options... and deleted the profile changes. Nothing has restored the console tree. How do I get this back?

As an aside, while I feel stupid for not being able to restore the Console tree, I also think it's poor UI design that "New Window from Here" changes the existing window with no obvious "back" option, instead of opening a new window, as the command's name implies will happen. Even for us administrators, when there is a GUI option, at least this kind of simple navigation should be safe and intuitive.

Thanks,
Colin


Colin

WSUS Approval using Input File

$
0
0
I have the list of Microsoft patches (KB) that need to be approved in WSUS for selective computer groups. How can I automate this task? Manual approval will take a long time.

problems with windows update on newly installed Server 2008 R2 SP1

$
0
0

Windows update cannot currently check for updates because the service is not running. You may need to restart your computer

I have tried all postings saying I should stop windows update service then delete contents of C:\Windows\SoftwareDistribution restart the service and run wu.  no good.  I tried the Mr. Fixit and windowsupdateagent7.6 and nothing has worked. Does anyone have any other ideas before I have to do a complete Re install?

Viewing all 12874 articles
Browse latest View live


Latest Images

<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>