Hello,
I have a client where the desired configuration should be 'Synchronize from Microsoft Update' however it keeps switching by itself to 'Synchronize from windows server update services server'. I can change it to 'Synchronize from Microsoft Update' but then next time I take a look it has switched back to 'Synchronize from windows server update services server'.
Any help is appreciated.
Hi,
I have a WSUS infrastructure with a Win2k12 server at the head.
Some of the non WSUS servers are getting very high CPU utilization when they check for updates. The CPU will peg for 10 minutes or more. Has anyone seen this before? Is there a client update or hotfix that I need to run?
Silverlight is not an application I would consider being appropriate for installation on server operating systems, so I'm wondering why it's being offered by WSUS to servers? Is there any way to stop it doing this? I do want it for my clients, just not for servers.
I'm aware I can simply not approve Silverlight for my servers group, however this still means WSUS thinks it is a required update, therefore my reporting will never be 100%. Whenever I see that a server needs some updates in the WSUS console I have to wonder whether they are the annoying Silverlight updates or an actual important update that I care about, so I have to go in and check the report each time.
I can't see any way to decline it just for the servers group either, which I guess would solve the problem.
I came across an old post related to this; it looks like the WSUS team acknowledged this issue and were looking at fixing it but nothing seemed to come of this:
https://social.technet.microsoft.com/Forums/windowsserver/en-US/42231b43-8948-49b5-a784-c6dd9abffe27/silverlight-2-wsus-windows-server-2008-core?forum=winservercore
Is there anyone out there from the WSUS team who could comment on this please?
Cheers
Hello,
Need some assistance with creating certificates on WSUS v. 6.3 / Windows server 2012 r2.
I see that the self signed certificates creates in IIS expire in 1 year after being created.
Is it possible to create a certificate and set my own expiration date? If so any help would be greatly appreciated.
Thanks
Hello,
I noticed that my WSUS certificate is getting close to expiring.
Windows Sevrer 2012 R2
Can someone go through the process to renew the certificate?
Can I just choose - 'enable automatic rebind of renewed certificate'?
Will I need to touch every PC in the office and make a change?
We currently do not have a domain setup.
Has anyone installed 3075853 on a 2012 R2 server with WSUS?
I installed the August updates on a system in a lab environment and after 24 hours, noticed clients were no longer updating in the WSUS console. I found in the application log that it was complaining about the web reporting service was not working. I uninstalled that update, rebooted, and now a couple clients are reporting with no errors in the application log. Anyone else have issues with this update on a WSUS server?
first i know if you set automatic Update disable through GPO that mean WUA will stop in User machines and this not reflect to windows update service but this reflect to update received "from computers"in SCCM about status of user machines through deployment process
our company policy need to disable Automatic update through GPO to be control what update meet with our requirement ,,
and through status of deployment i saw many of computers in Progress "Non-compliant" but when re-enable Automatic update
all machines download and install and in preivous status i checked many of clients logs like"updatedeployment.log - wuahandler.log - clientlocation.log" the update received but without install, how can i make control to avoid computer machine to auto update with install just through SCCM
Greetings all!
I have an issue that has perplexed me for a while. We have a network of Windows 7 Pro computer on a 2008R2 domain, using a group policy specifying all computer use WSUS for updates. For the most part, they all work fine. But I have noticed that a number of them will work just fine overnight while the PC is on, but nobody logged in, until the next morning when someone logs in. Then in the log you will start to see errors with Windows Update. After looking closely, i see that when it works as it should the events saying all is well are of a type of Automatic Update, which is correct. But, after a user logs in, those errors shows as type Windows Update. More digging found that they are indeed reaching out to Microsoft servers, and are being blocked since we don't want them going there on their own. How do I stop them from going to the Internet, and just use WSUS like they should? I have tried to stop Windows Update on the client, delete the SofwareDistribution directory, and reboot the machine to have them more or less start over, but that did not work. Nor, did using the ResetAuthorization command. I am at a loss as to how to stop them, and also why do these computers switch once a user logs in? I don't get that.. Any Ideas??
Marty
I never have automatic updates on. In order to force install windows 10 I deleted all contents of Downloads folder in the software distribution folder in C/Windows. After that my windows update has pretty much gone bonkers. 3 updates are being repeatedly re offered even after they are successfully installed. Also their actual size doesn't match with the size on the more info page of the update on microsoft. Now I have the notification that windows 10 is ready to download in the get windows 10 app but when I open windows update to start download it shows the same 3 updates.
Please suggest a resolution. I have tried the troubleshooter, fixit, stopping and restarting services everything I could get my hands on through forums.
The three updates are:
kb2919355
kb2990967
kb3063843
I have manually installed two of these. I downloaded the 700 mb kb2919355 package for standalone install but it shows "update is not applicable for your computer". OS-Windows 8.1
Hello,<o:p></o:p>
We have a branch office connected via a VPN with a 2012 R2 WSUS server and trying to configure it to talk to HQ WSUS servers as an upstream server on port 80. There are 2 firewalls between the 2 WSUS servers but all access is allowed. We get the following error when configuring the upstream server on branch WSUS. Any thoughts would be much appreciated.
Thanks
I have been writing the following script to retrieve information from WSUS 3.2 and am getting returned information with the last command under PowerShell 4.0
However when this script is run under PowerShell 2.0 no information is returned
[reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration")
$wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer();
$approveState = 'Microsoft.UpdateServices.Administration.ApprovedStates' -as [type]
$installableitem = 'Microsoft.UpdateServices.Administration.FileForInstallableItem' -as [type]
$ApprovedFiles = @()
$Removable=0
$NotRemovable=0
$updateScope = New-Object Microsoft.UpdateServices.Administration.UpdateScope -Property @{
ApprovedStates = $approveState::LatestRevisionApproved#,NotApproved,Declined,HasStaleUpdateApprovals,LatestRevisionApproved
}
$Approved = $wsus.GetUpdates($updateScope)
Write-Host Approved Update $Approved.count
If ($Approved.count -GT 0) {
$Counter = 0
$Approved | ForEach-Object {
$ApprovedFiles += $_.Getinstallableitems().files.fileuri.segments
}
}
this is important as I am tiring to run this script on SBS 2011 server which can only run PowerShell 2.0.
Any assistance with this or an equivalent command appreciated
Thanks
Hi, We update our Windows clients every month, but we only apply Security updates.
I would like to convince my management to apply also the Critical updates to our Windows clients on a monthly basis, even de not Critical windows update.
The management doesn't want me to patch the Windows clients because they are afraid a windows update could break a home made business application. They are convinced that there is an official statement from Microsoft that states that security updates never make functional changes and therefore can't break anything.
Now they ask me to proof that Critical updates en non critical updates won't make functional changes to the Windows client.
Is their such an official document out there?
This is the closest i get:
support.microsoft.com/en-us/kb/824684
Feature pack (New product functionality) ... -> so the other categories won't have functional changes... = assumption.
I have an older WSUS server running on Windows 2008 R2. Everything works fine on there. I created a new WSUS install on a Windows 2012 R2 server. I did NOT migrate settings from the old WSUS server. This is a clean install that I'm manually migrating to.
I created a computer group on the new WSUS server for "Servers" and approved updates that correlate to the servers. I then pointed my servers to the new WSUS server and made them part of the Servers group.
Windows 2012 R2 clients run fine. Windows 2008 R2 clients (and I think Windows 7) all have periods now where the CPU spikes to 100% for periods of time off and on as they check for updates. I created a second computer group on the new WSUS server that has no updates approved and moved the Windows 2008 R2 clients to that, and then everything is fine again (other than I can't push updates to those). I'm not sure why this is happening. I don't know if this is due to the new WSUS server, or an update from the last few months. I'm about 3 months behind. I've read there is an update for IE that can cause this issue.
I'm not 100% sure, but I believe if I install the approved updates on the Windows 2008 R2 clients, the CPU issues go away... until I approve the next updates.
Hi,
Let's explain my situation... All servers in my organization are set to use WSUS and install the updates (once approved) on a specific day and then reboot. Except that I have some servers that their membership (they are not part of the computer group where the updates are approved) in WSUS is different and do not install the updates.
Once the updates have been installed on all the servers... Then I change the membership of those servers and install manually all the missing updates to those server but not reboot server right away. I contact the different group and have them reboot their own servers (some servers have a specific reboot procedure). But now with 2012 R2, in the Windows Update window, there is a message that mention that the "PC will automatically restart in 1 day...". Some group schedule their servers to reboot during the week-end which usually is in more than 1 days.
How to disable this feature so the servers won't reboot automatically and disturb the environment.
Thank you,
Martin
I recently inherited a task of fixing a non-functioning WSUS server running on Windows 2012. Theoretically, there should be about 15 servers checking in, but only 2 domain controllers have appeared so far.
Some of the clients cannot ping the WSUS server, so its possible there's some network communication issues. I've been playing with one that can ping it though to see if I can find something wrong with the WSUS configuration itself.
I'm going through this reference -> cc708627 in the TechNet library (the forum won't let me post the complete URL)
This URL to test the source update tree fails
If I go to the URL for WSUS server address plus port #; I get a "403 - Forbidden: Access is Denied" error
The Update Files configuration option is set to "Download update files to this server only when updates are approved"
Not sure where to go from here.
Paul G.
So my bad, reinstalled IIS to try to resolve another problem and killed WSUS. I have done the following:
1. Reinstalled IIS
2. Reinstalled WSUS (Old content, Old DB, Old Website) - did not work
2. Reinstalled WSUS (New Content, New DB, New Website) - still does not work
Everything looks OK in WSUS MMC except no client computers. NO clients can connect to WSUS server (including the WSUS machine) all clients get same error 802402C. GPO has not changed as the server machine name has not changed. Any help w/diagnosis would be appreciated.
Mike
OS: Windows 2008 R2
Application:WSUS
My WSUS Server is having a lot of problems.
Now the Windows Internal Database won't start. I get this error every time I start it. I tried this technote: http://social.technet.microsoft.com/wiki/contents/articles/13827.windows-server-2008-event-id-257-system-catalog-database-integrity.aspx
The Windows Internal Database (MICROSOFT##SSEE) service terminated with service-specific error %%17058. Log Name: System, Source: Service Control Manager, Event ID 7024. I find no technotes for this error.
Hi:
I have a server with Windows Server 2012 R2 and WSUS deployed.
WSUS Synchronization Status is ok, but Download Status look like has some problem.
Over a week, still download nothing.
I used WSUS check tools(WsusUtil.exe), the report shows that everything is ok.
I don't know what's the problem about it.
Could you help me?
Thanks a lot.