Quantcast
Channel: WSUS forum
Viewing all 12874 articles
Browse latest View live

Windows Operating Systems list in WSUS Tables

$
0
0

This may be a strange question, I decided to connect to the WSUS DB and poke around and although I see an incomplete Operating System list in the OSMap table, I can't seem to find where anything above Windows 2003 is listed... I see in the ComputerTargetDetails table that Major and Minor OS versions are listed by number (6.2) but can't find where this database is mapping that to Windows 2012 R2 etc to list this in the Console Application. I ran a stored procedure against the entire DB for specific criteria and can't find it anywhere! Was this hard coded into the console application? Does it reference AD?

Thanks!
Tony


Upstream Server in Diffrent Forest

$
0
0

Hi Experts

According to requirement, we need to install WSUS Upstream Server in one management domain (xyz.com) and need to patch/install updates in Client domains (client1.com) using Downstream Server in autonomous mode.

Do you think this is possible? How authentication will happen between Upstream and Downstream using autonomous mode?


Thanks Cloudy Lynx

WSUS Caching issue

$
0
0

Hi,

I am experiencing an issue with WSUS that I hope someone can help with.

I currently have a GPO setup for Windows Update, option 3, download and prompt to install. Once I approve updates to these so that it caches them down ready for instalaltion, it's causing high CPU usage and spiking every hour or so.

If I move these servers out of a 'caching' group that doesn't have the updates applied then it stops happening.

I recently replaced our existing WSUS Server 2003 with a new WSUS Server 2012 and ever since then this has began happening.

Nothing on the GPO side of things has changed.

Any help gratefully received

Thanks

WSUS 2012r2

$
0
0

Hi All,

I have WSUS 2012r2 installed. On the WSUS server I have a computer group for production workstations and one for test workstations. In AD I have an OU for production workstations and a OU for test workstations both with client side targeting enabled.  One workstation that I have in the test workstations OU in AD was not in the test workstation group on the WSUS server - it was in the unassigned group.  This workstation had not communicated with the WSUS server. For this reason, when I did the first push of MS updates the workstation in question did not receive them.  I found the problem and corrected it about a week after the push with the workstation now reporting status in the workstation test group on WSUS.  A little over a week has past since I made the correction but the workstation never got the updates that I push out previously, should it have?  Or will it get them during my next push of updates?


Francisco Mercado Jr.

When new 2012 R2 WSUS server installed, existing downstream clients generate a WebException: The request failed with HTTP Status 404: Not Found error.

$
0
0

After doing some research on this error and piecing the puzzle pieces together it appears that the downstream servers were set to port 80, and the new upstream server is configured by default to utilize port 8530.  So, you need to do one of two things.  Change the upstream port to port 80 (or 443 if SSL is utilized), or change the downstream servers to port 8530.  Here's the process:

1. In the WSUS console on the downstream server, go to Options and then click on Update source.

2. Change the port number to 8530 and click on OK.

3. Try to kick off the synchronization again.


WSUS Post Installation Task fails with"The request failed with HTTP status 405: Method Not Allowed"

$
0
0

I am trying to install WSUS on a Hyper-V guest server 2012 R2 but it is failing on the post installation task. I have done this on a number of other similar system without any problems.

I have uninstalled WSUS, IIS and WID then re-installed but still get the same error.

I have obviously done something different on this system but cannot see what.

Log from the installation is:

2015-07-16 22:24:47  Postinstall started
2015-07-16 22:24:47  Detected role services: Api, UI, WidDatabase, Services
2015-07-16 22:24:47  Start: LoadSettingsFromXml
2015-07-16 22:24:47  Start: GetConfigValue with filename=UpdateServices-Services.xml item=ContentLocal
2015-07-16 22:24:47  Value is true
2015-07-16 22:24:47  End: GetConfigValue
2015-07-16 22:24:47  Start: GetConfigValue with filename=UpdateServices-Services.xml item=ContentDirectory
2015-07-16 22:24:47  Value is F:\WSUS
2015-07-16 22:24:47  End: GetConfigValue
2015-07-16 22:24:47  Content directory is F:\WSUS
2015-07-16 22:24:47  Database roleservice is not installed
2015-07-16 22:24:47  End: LoadSettingsFromXml
2015-07-16 22:24:47  Start: Run
2015-07-16 22:24:47  Fetching WsusAdministratorsSid from registry store
2015-07-16 22:24:47  Value is S-1-5-21-60817473-2732258804-334072484-1109
2015-07-16 22:24:47  Fetching WsusReportersSid from registry store
2015-07-16 22:24:47  Value is S-1-5-21-60817473-2732258804-334072484-1108
2015-07-16 22:24:47  Configuring content directory...
2015-07-16 22:24:47  Configuring groups...
2015-07-16 22:24:47  Starting group configuration for WSUS Administrators...
2015-07-16 22:24:47  Found group in regsitry, attempting to use it...
2015-07-16 22:24:47  Searching for existing group...
2015-07-16 22:24:47  Existing group was found
2015-07-16 22:24:47  Writing group to registry...
2015-07-16 22:24:47  Finished group creation
2015-07-16 22:24:47  Starting group configuration for WSUS Reporters...
2015-07-16 22:24:47  Found group in regsitry, attempting to use it...
2015-07-16 22:24:47  Searching for existing group...
2015-07-16 22:24:47  Existing group was found
2015-07-16 22:24:47  Writing group to registry...
2015-07-16 22:24:47  Finished group creation
2015-07-16 22:24:47  Configuring permissions...
2015-07-16 22:24:47  Fetching content directory...
2015-07-16 22:24:47  Fetching ContentDir from registry store
2015-07-16 22:24:47  Value is F:\WSUS
2015-07-16 22:24:47  Fetching group SIDs...
2015-07-16 22:24:47  Fetching WsusAdministratorsSid from registry store
2015-07-16 22:24:47  Value is S-1-5-21-60817473-2732258804-334072484-1109
2015-07-16 22:24:47  Fetching WsusReportersSid from registry store
2015-07-16 22:24:47  Value is S-1-5-21-60817473-2732258804-334072484-1108
2015-07-16 22:24:47  Creating group principals...
2015-07-16 22:24:47  Granting directory permissions...
2015-07-16 22:24:47  Granting permissions on content directory...
2015-07-16 22:24:47  Granting registry permissions...
2015-07-16 22:24:47  Granting registry permissions...
2015-07-16 22:24:47  Granting registry permissions...
2015-07-16 22:24:47  Configuring shares...
2015-07-16 22:24:47  Configuring network shares...
2015-07-16 22:24:47  Fetching content directory...
2015-07-16 22:24:47  Fetching ContentDir from registry store
2015-07-16 22:24:47  Value is F:\WSUS
2015-07-16 22:24:47  Fetching WSUS admin SID...
2015-07-16 22:24:47  Fetching WsusAdministratorsSid from registry store
2015-07-16 22:24:47  Value is S-1-5-21-60817473-2732258804-334072484-1109
2015-07-16 22:24:47  Content directory is local, creating content shares...
2015-07-16 22:24:47  Creating share "UpdateServicesPackages" with path "F:\WSUS\UpdateServicesPackages" and description "A network share to be used by client systems for collecting all software packages (usually applications) published on this WSUS system."
2015-07-16 22:24:47  Deleting existing share...
2015-07-16 22:24:47  Creating share...
2015-07-16 22:24:47  Share successfully created
2015-07-16 22:24:47  Creating share "WsusContent" with path "F:\WSUS\WsusContent" and description "A network share to be used by Local Publishing to place published content on this WSUS system."
2015-07-16 22:24:47  Deleting existing share...
2015-07-16 22:24:47  Creating share...
2015-07-16 22:24:47  Share successfully created
2015-07-16 22:24:47  Creating share "WSUSTemp" with path "C:\Program Files\Update Services\LogFiles\WSUSTemp" and description "A network share used by Local Publishing from a Remote WSUS Console Instance."
2015-07-16 22:24:48  Deleting existing share...
2015-07-16 22:24:48  Creating share...
2015-07-16 22:24:48  Share successfully created
2015-07-16 22:24:48  Finished creating content shares
2015-07-16 22:24:48  Stopping service WSUSService
2015-07-16 22:24:48  Stopping service W3SVC
2015-07-16 22:24:49  Configuring WID database...
2015-07-16 22:24:49  Configuring the database...
2015-07-16 22:24:49  Establishing DB connection...
2015-07-16 22:24:49  Checking to see if database exists...
2015-07-16 22:24:49  Database exists
2015-07-16 22:24:49  Switching database to single user mode...
2015-07-16 22:24:52  Loading install type query...
2015-07-16 22:24:52  DECLARE @currentDBVersion       int
DECLARE @scriptMajorVersion     int = (9600)
DECLARE @scriptMinorVersion     int = (16384)
DECLARE @databaseMajorVersion   int
DECLARE @databaseMinorVersion   int
DECLARE @databaseBuildNumber    nvarchar(10)
IF NOT EXISTS(SELECT * FROM sys.databases WHERE name='SUSDB')
BEGIN
    SELECT 1
END
ELSE
BEGIN
    SET @currentDBVersion = (SELECT SchemaVersion FROM SUSDB.dbo.tbSchemaVersion WHERE ComponentName = 'CoreDB')
    SET @databaseBuildNumber = (SELECT BuildNumber FROM SUSDB.dbo.tbSchemaVersion WHERE ComponentName = 'CoreDB')
    DECLARE @delimiterPosition INT = CHARINDEX('.', @databaseBuildNumber)
    IF (@delimiterPosition = 0)
    BEGIN
        RAISERROR('Invalid schema version number', 16, 1) with nowait
        return
    END
    SET @databaseMajorVersion = SUBSTRING(@databaseBuildNumber, 1, @delimiterPosition - 1)
    SET @databaseMinorVersion = SUBSTRING(@databaseBuildNumber, (@delimiterPosition + 1), (10 - @delimiterPosition))
    IF @currentDBVersion < 926
    BEGIN
        SELECT 3
    END
    ELSE
    BEGIN
        IF (@scriptMajorVersion > @databaseMajorVersion OR
           (@scriptMajorVersion = @databaseMajorVersion AND @scriptMinorVersion > @databaseMinorVersion))
        BEGIN
            SELECT 2
        END
        ELSE IF (@scriptMajorVersion = @databaseMajorVersion AND
                 @scriptMinorVersion = @databaseMinorVersion)
        BEGIN
            SELECT 0
        END
        ELSE
        BEGIN
            SELECT 4
        END
    END
END

2015-07-16 22:24:52  Install type is: Reinstall
2015-07-16 22:24:52  Creating logins...
2015-07-16 22:24:52  Fetching account info for S-1-5-20
2015-07-16 22:24:52  Found principal
2015-07-16 22:24:52  Found account
2015-07-16 22:24:52  Got binary SID
2015-07-16 22:24:52  Fetching WsusAdministratorsSid from registry store
2015-07-16 22:24:52  Value is S-1-5-21-60817473-2732258804-334072484-1109
2015-07-16 22:24:52  Fetching account info for S-1-5-21-60817473-2732258804-334072484-1109
2015-07-16 22:24:52  Fetching account info for S-1-5-21-60817473-2732258804-334072484-1109
2015-07-16 22:24:52  Found principal
2015-07-16 22:24:52  Found account
2015-07-16 22:24:52  Got binary SID
2015-07-16 22:24:52  Setting content location...
2015-07-16 22:24:52  Fetching ContentDir from registry store
2015-07-16 22:24:52  Value is F:\WSUS
2015-07-16 22:24:52  Swtching DB to multi-user mode......
2015-07-16 22:24:54  Finished setting multi-user mode
2015-07-16 22:24:54  Writing DB settings to registry...
2015-07-16 22:24:54  Marking PostInstall done for UpdateServices-WidDatabase in the registry...
2015-07-16 22:24:54  Starting service W3SVC
2015-07-16 22:24:54  Configuring IIS...
2015-07-16 22:24:54  Start: ConfigureWebsite
2015-07-16 22:24:54  Configuring website on port 8530
2015-07-16 22:25:16  2015-07-16 22:24:55  Info      IISCustomAction    Performing Setup Action, Command /Install
2015-07-16 22:25:15  Info      IISCustomAction    Command /Install Succeeded

2015-07-16 22:25:16  End: ConfigureWebsite
2015-07-16 22:25:16  Configuring performance counters...
2015-07-16 22:25:16  Configuring Stats.NET perf counter...
2015-07-16 22:25:16  Configuring reporting perf counter...
2015-07-16 22:25:16  Configuring client webservice perf counter...
2015-07-16 22:25:16  Configuring server sync webservice perf counter...
2015-07-16 22:25:16  Configuring API remoting perf counter...
2015-07-16 22:25:16  Bringing services online...
2015-07-16 22:25:16  Checking initialization status...
2015-07-16 22:25:16  Database needs initialization.
2015-07-16 22:25:16  StartServer starting...
2015-07-16 22:25:16  Generating encryption key to write to the registry...
2015-07-16 22:25:16  Generating encryption key to write to the database...
2015-07-16 22:25:17  Generating encryption key succeeded...
2015-07-16 22:25:17  Setting WSUSService to autostart...
2015-07-16 22:25:17  WSUSService is set to autostart.
2015-07-16 22:25:17  Starting WSUSService...
2015-07-16 22:25:17  WSUSService is now started.
2015-07-16 22:25:17  Importing default detectoids.
2015-07-16 22:25:17  Importing CriticalUpdates.xml...
2015-07-16 22:25:17  Importing Drivers.xml...
2015-07-16 22:25:17  Importing FeaturePacks.xml...
2015-07-16 22:25:17  Importing MicrosoftCorporation.xml...
2015-07-16 22:25:17  Importing SecurityUpdates.xml...
2015-07-16 22:25:17  Importing ServicePacks.xml...
2015-07-16 22:25:17  Importing Tools.xml...
2015-07-16 22:25:17  Importing UpdateRollups.xml...
2015-07-16 22:25:17  Importing Updates.xml...
2015-07-16 22:25:17  Importing Windows.xml...
2015-07-16 22:25:17  Importing Windows2000family.xml...
2015-07-16 22:25:17  Importing WindowsServer2003DatacenterEdition.xml...
2015-07-16 22:25:17  Importing WindowsServer2003Family.xml...
2015-07-16 22:25:17  Importing WindowsXPfamily.xml...
2015-07-16 22:25:17  Importing LocalPublisher.xml...
2015-07-16 22:25:17  Importing LocallyPublishedPackages.xml...
2015-07-16 22:25:17  Importing Applications.xml...
2015-07-16 22:25:17  Importing Exchange.xml...
2015-07-16 22:25:17  Importing Office.xml...
2015-07-16 22:25:17  Importing SQL.xml...
2015-07-16 22:25:17  Importing Exchange2000Server.xml...
2015-07-16 22:25:17  Importing ExchangeServer2003.xml...
2015-07-16 22:25:17  Importing OfficeXP.xml...
2015-07-16 22:25:17  Importing Office2003.xml...
2015-07-16 22:25:17  Importing SQLServer.xml...
2015-07-16 22:25:17  Importing WindowsXP64BitEditionVersion2003.xml...
2015-07-16 22:25:17  Importing DefinitionUpdateSusXml.xml...
2015-07-16 22:25:17  Importing ClientServicingApiDetectoid.xml...
2015-07-16 22:25:17  Importing default detectoids succeeded.
2015-07-16 22:25:17  Creating default subscription.
2015-07-16 22:25:17  Instantiating UpdateServer
2015-07-16 22:25:18  CreateDefaultSubscription failed. Exception: System.Net.WebException: The request failed with HTTP status 405: Method Not Allowed.
   at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
   at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
   at Microsoft.UpdateServices.Internal.ApiRemoting.GetServerVersion()
   at Microsoft.UpdateServices.Internal.DatabaseAccess.AdminDataAccessProxy.GetServerVersion()
   at Microsoft.UpdateServices.Internal.BaseApi.UpdateServer.CreateUpdateServer(String serverName, Boolean useSecureConnection, Int32 portNumber)
   at Microsoft.UpdateServices.Internal.BaseApi.UpdateServer..ctor(Boolean bypassApiRemoting)
   at Microsoft.UpdateServices.Setup.StartServer.StartServer.CreateDefaultSubscription()
2015-07-16 22:25:18  StartServer encountered errors. Exception=The request failed with HTTP status 405: Method Not Allowed.
2015-07-16 22:25:18  Microsoft.UpdateServices.Administration.CommandException: Failed to start and configure the WSUS service
   at Microsoft.UpdateServices.Administration.PostInstall.Run()
   at Microsoft.UpdateServices.Administration.PostInstall.Execute(String[] arguments)

Anyone else seen this error?

Thanks

Mike

The server is failing to download some updates. Event ID 10032. No Error 364. Windows Server 2003 SP2

$
0
0

Ran a wsusutil.exe reset command which ran for 896 hours. Eventually after getting fed up of waiting, installed the 2828185 patch.

Restarted the DB. Sucessfully sync'd the server.

Even though the files were in their relevant folders, WSUS was unable to download the files.

I have resorted to uninstalling the database and WSUS on the server completely and did a fresh install with a new db.

BITS error was resolved, but still seeing the error 10032. The server is failing to download some updates.

Please help!!!

Having issues connecting clients to a new Server 2012 WSUS instance

$
0
0

Hello,

I just stood up a Server-2012 box, along with 

SCCM 2012

SCUP 2011

and added WSUS 6.3.9600 on port :8530

I have SCUP up & going correctly

I have SCCM up & going correctly

I cannot get any clients to sync to WSUS, except for the WSUS server box using local GP. 

I can ping the server ok, I cannot add the port (http://servername:8530) and ping it ok

I can open a IE browser and go to: http://servername:8530,  I get attachment 1

Any thoughts?


Issues importing WSUS data on disconnected machine

$
0
0

I'm attempting to copy my WSUS data from a machine that has internet access to a machine that isn't connected to the internet and the transfers are not 100% accurate.

On the internet, I have a Windows 2012 R2 server with the WSUS feature activated. I synchronize in the evening so that all updates are downloaded by morning. I have a powershell script that runs in the morning to run some WSUS cleanups and export the metadata.  I run WSUS RESET each weekend to ensure that everything is up to date.

I then synchronize the metadata export and the WSUS content to an external drive.  I use robocopy.exe to synchronize because there is > 340GB of WSUS data.

I then bring the external drive to my non-internet machine and basically reverse the process: copy the WSUS Content data; copy the metadata; import the metadata; use powershell scripts to run WSUS cleanups and run WSUS Reset.

The number of patches on my internet machine is ~60,000 and the number of files to download is 0 while on my unconnected machine the number of patches is ~65,000 and the number of files to download is ~43,000.  After about 3 hours, the numbers haven't changed.

Both machines use Windows 2012 R2, have the same version of WSUS (6.3.9600.16384) and have the patch for supporting more than 2GB of data (i.e. xml.gz format).

The counts should be the same on both machines or at least a lot closer. Any ideas/suggestions?

Missing SUSDB after Post-installation WSUS

$
0
0

Hi,

I've tried both Post-installation through GUI and Powershell,

I got an local SQL Server 2012 hosted on the same Machine where I will be installing WSUS.

Somehow, no matter what I do, SUSDB wont show up under my SQLSERVERNAME/Databases after the Post-installation is done.

According to Log files everything looks fine and no error messages are visible. Even in GUI it says connection is fine towards my SQL Server before I click "Install" in my Post-installation wizard.

Any thoughts?

Actual Data is not showing on the Upstream server

$
0
0

Hi All,

please help me here, on my WSUS related query.

We have total 26 Downstream server and 1 Upstream server in our environment.

The problem is that the Local systems (50 Systems) are getting updates from the local downstream server in the properly manner, and showing in the reports as compliant when we fetch local report from the downstream server, but when we fetch the report from the Upstream server, those systems(50 Systems)  showing as non-compliant.

 

  1. We Re-create WSUS database.
  2. We update the service pack for the WSUS server.
  3. Run Multiple Sync.
  4. Rebooted the server after every trouble shoot.

 

 Please share you inputs on this..

Regards,

Deepak Seth


Check for updates takes 30 minutes on Windows 2008 R2 SP1 servers

$
0
0

We patch every month our servers as soon as they come out. In our environment we have Windows 2003, Windows 2008 R2 Sp1 and Windows 2012 servers. The problem is only present on Windows 2008 servers and the problem is that checking for updates takes a long time (20 to 40 minutes). When it happens the svchost (netsvcs) process is using 1 CPU, has high mem usage and according to windowsupdates.log is in its "PT: Synchronizing extended update info" phase. We used procmon to analyse what the process is doing, but it doesn't seem to do a lot. We have tight patching windows so these long times cause problems for us. Any advise on how to speed this process up (e.g back to 2, 3 minutes what it used to be and what it is on Windows 2012)?

High CPU while running wuauctl /detectnow

$
0
0

Hi,

I have a WSUS infrastructure with a Win2k12 server at the head. 

Some of the non WSUS servers are getting very high CPU utilization when they check for updates. The CPU will peg for 10 minutes or more. Has anyone seen this before? Is there a client update or hotfix that I need to run? 

svchost & trustedinstaller consuming 100% cpu for 15-20 minutes

$
0
0

Hi,

We have approved Augusts updates on monday. Since then all targeted systems CPU is peaking to 100% for 15-20 minutes on every "check for updates" interval... in our case every 2 hours. svchost (wuauserv service) and TrustedInstaller are the culprits.

I can already confirm the issue occurs on virtual machines (vmware), running a perfmon trace on a physical system now.

Anyone experiencing this issue also? Or any idea what might be causing this? I know it is normal behavior Windows checks for updates and the cpu peaks briefly but a peak of 20 minutes every interval doesn't seem normal to me.

Grts. 



Microsoft.UpdateServices.Administration library on Windows 10

$
0
0

How to install the Microsoft.UpdateServices.Administration library on Windows 10, to develop applications that work with WSUS ?

The WSUS installer does not run on Windows 10!


WSUS roles install on Server 2012 Fails

$
0
0

Hi I m ananda I want to installed wsus server in 2012 server but its getting error

The MSSQL$MICROSOFT##WID service was unable to log on as NT SERVICE\MSSQL$MICROSOFT##WID with the currently configured password due to the following error:

Logon failure: the user has not been granted the requested logon type at this computer.

 Service: MSSQL$MICROSOFT##WID

Domain and account: NT SERVICE\MSSQL$MICROSOFT##WID

 This service account does not have the required user right "Log on as a service."

 User Action

 Assign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster.

 If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right.

Please let me know if you have any ideas. Thanks!

Getting past WSUS Cleanup Wizard time out, removing unnecessary updates.

$
0
0

Standard problem with WSUS Cleanup Wizard timing out without removing any unnecessary updates. SBS2K8. WSUS 3. 6000+ unnecessary updates awaiting approval. Huge database. Unresponsive SQL server. Lot of people have this problem:
http://social.technet.microsoft.com/Forums/en-US/9724778f-c1a0-4d24-82e4-8b2d054257d6/wsus-hangs-on-cleanup-wizard-for-unused-updates-then-disconnects-from-console?forum=winserverwsus

Drives are regularly defragged in the background. Not gonna shut down the server and have down time just to fix this.

Tried the reindexing script from
http://technet.microsoft.com/en-us/library/dd939795(WS.10).aspx
, (don't copy the command line, it has weird characters in it, just type it in manually.) and it completes but it didn't improve anything.

Found this:
http://wsus.codeplex.com/releases/view/17612
and it also times out.

Found this comment:
For anyone who is getting Timeout Expired with obsolete updates. I have a solution! Use server name : "
\\.\pipe\MSSQL$MICROSOFT##SSEE\sql\query
" to connect with SQL managment studio. Once connected manually run "
exec spGetObsoleteUpdatesToCleanup
". This will return a list of obsolete ID's. For each one run "
exec spDeleteUpdate @localUpdateID=000000
", where 000000 is the ID. For myself I found the first ID in the list took a full 37 minutes to delete and then after that I could run the cleanup through the GUI as per usual.

by jjdacl on Apr 23 at 12:55 PM 

Found that you actually need to do:
USE SUSDB
GO
exec spGetObsoleteUpdatesToCleanup

And to connect in the first place, I had to hit Options, and select named pipe from the middle pull down. 

First delete took 6 minutes and memory has spiked up to almost 15GB in use out of 16GB physical. But the WSUS console (Update Services) still shows the same number of old updates. Failure? I don't think so: I'm running the cleanup wizard again and so far it isn't timing out... It has run over night, and has made some progress; the bar has moved perhaps 5%. 

So... My take is that the SQL server causes this problem when there is to much data, because the indexes are poorly designed (not because the indexes need to be re-indexed) causing the first query to time out, which causes the cleanup to fail. Once you get past that first deletion, and have everything loaded into memory, the cleanup tool can stay connected long enough to delete each unneeded update.

Next step will be to find a command line method, such as:
http://wsus.codeplex.com/releases/view/17612
and put it into the task scheduler like Microsoft should have done at the beginning to keep this from getting out of hand.

P.S. Lawrence Garvin, please do NOT reply to this; I have no need of your arrogance.

iuident.cab disappeared from WSUS 2012 R2 install

$
0
0

I have a Windows Server 2012 R2 with the WSUS role installed. Its been working well for 2 years. But I noticed that my computers have gradually been dropping out of contact with WSUS over the last month by looking at the "Last Status Report" column in the WSUS console. Typical errors that show up in WindowsUpdate.log are

336 1328 SLS FATAL: SLS:CSLSRequest::RetrieveAdditionalAttributesIfRequired: CoCreateInstance failed with 0x80040154
336 1328 EP FATAL: Failed to obtain 9482F4B4-E343-43B6-B170-9A65BC822C77 redir SecondaryServiceAuth URL, error = 0x80245002

To troubleshoot, from the clients I tried Troubleshoot Problems with the Windows Update Client. I found out that iuident.cab is missing from C:\Program Files\Update Services\WebServices\Root of my WSUS server!! I cannot say for sure that it was there previously, but I assume its been there for 2 years. I am thinking that there are other problems in the WSUS install as well.

I did an uninstall and reinstall of WSUS on the same server. Before reinstalling, I made sure I deleted the "WSUS Administration" website and the WsusPool Application Pool from IIS Manager, and I deleted the folder C:\Program Files\Update Services\WebServices (this per the article WSUS install on Server 2012 Fails )

But after the reinstall, iuident.cab is still missing in C:\Program Files\Update Services\WebServices\Root. The client errors continue. How do I reinstall WSUS and get full functionality back?


Marko


Issue downloading content from MS via Proxy - WS 2008 R2

$
0
0
Hi All,

I have spent a little bit of time researching into an issue I am facing, and was hoping someone here has an answer to the problem.

WSUS is configured to use proxy settings (Via the Admin console); synchronisations are successful, however when attempting to download content from MS, I am being met with errors i.e. as below:
Event ID 364 - "Content file download failed. Reason: HTTP status 407: Proxy authentication is required."

A few people on the forums suggested it was a number of things, ranging from WinHTTP to setting the ConfigureSSLProxy via WSUSUtil.Exe, but I have had no such luck.

The site uses a PAC file for proxy auto-detection, so WinHTTP returns a result of "DIRECT", when running Netsh WinHTTP Import Proxy Source=IE. But even when I manually enter the proxy settings and re-run an import, the issue still persists.

With regards to the ConfigureSSLProxy property in WSUSUtil.Exe, Unfortunately this command truncates the last character of my proxy server, so I have had to use the -Disable switch to revert it back.

The network does have an upstream server, but I am unable to only select the products that I need for this specific site (Obviously if it were available on the upstream server). So I am faced with two possibilities:
1. Resolve this issue whereby the proxy settings configured (and working for sync at least), will apply to downloading content. Or,
2. Revert to using the upstream server (Whether or not I can restrict what I want available to approve).

Has anyone had any experiences with resolving the issue at hand? I have seen many posts and a lot of them point back to the proxy not being "configured". But, I have at least during testing, ensured that WinHTTP had proxy settings stored and that also the WSUS Admin Console has had the proxy and credentials specified.

WinHTTP Auth can only be done via application, so I am assuming that WSUS should be the conduit for proxy authentication. Please correct me if I am wrong.

Regards,



Sean.


'test update for supersedence'

$
0
0

Weird issue today, our WSUS server is showing update 'test update for supersedence' KB654589, description jhjkh

Anyone else have this ?

Regards

Viewing all 12874 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>