Hi,

https://msdn.microsoft.com/en-us/library/bb902470(v=vs.85).aspx

i have been looking at the WSUS local publishing for publishing driver package.

Most of the information available for non-drivers, any help for driver package.

For quick testing, i have a driver package that is signed which will be installed during PnP, so i could build a metadata file, after that there is no details about how to publish the package.

Any help is appreciated.

Greetings Forum,

I have a Windows 2008R2 WSUS server on an isolated network that I have been fighting with for four days now. On many recent updates I get "The files for this update have not yet been downloaded". I look in the WSUSContent folder and there the "missing" update is. So here is my question. When I look at Update File Information for one of the many files that the system says is not there I see 3 lines:

1 for a -x64-express.cab file

1 for a -x64.psf file

1 for a -x64.cab file

My assumption is that to get the error that I am seeing none of these 3 files should be present. However the -x64.cab file is indeed present.

In the interest of full disclosure I did make the error of attempting to utilize express installation files a couple months ago on my external server and may have got things confused there. (I sure won't be doing that again)

I did re-install WSUS on both internal and external servers, minus the express setting, making sure that the WID got re-installed on both as well. I have also triple checked that all of the settings on the external and internal servers match and I am about out of ideas.

The last thing that I tried was to relocate the WSUS Repository in the internal server and that didn't change anything.

I am about out of ideas. In my environment building up a replacement internal server is about a 1 month process and I reall don't want to go down that road.

Please Advise,

Mark L. Farris CISSP

Maybe someone can help me. My searches running empty.

I have a great count of users with different printers, i don't know which printer they connect to their computers. If i look at the available printer drivers at catalog.update.microsoft.com, there are a great sum of printer drivers, where it's possible to match with the most of the users printer. If drivers are imported into WSUS and not approved i see, which client need a particular printer, after approving them, clients will be able to download and install them by Windows update. A huge amount of needed printer drivers are HP Printer Drivers and many of those are available at catalog.update.microsoft.com

My Problem is to import the printer driver into WSUS. If Windows 7 or Vista as Product and Drivers as Classification is selected i got no printer driver imported into WSUS. I don't want to import possible printer driver separately.

Is there an option or script available who makes me able to import those printer drivers into WSUS ?

Thanks for help

Is KB3045999 in MS15-038 for Windows 7 superseded by new KB or bulletin?  If KB3045999 (for Windows 7)  is not superseded then can this patch be added in the wsusscn2.cab file?

     Hi,

     Now I have a problem with my WSUS Server as below:

     1. My WSUS Server v3.2.7600.226 run on Windows server 2008R2. Update for Client Windows 7 and Windows Server 2008R2.

     2. After WSUS server sync update on 15Oct (include KB3073810) then Client and Server installed this update packet. Since then, All computer can't find update form WSUS server. Always show "windows is up to date".

     Please advice for me how to fix this problem.

     Thanks so much

Hi,

I keep having trouble with my WSUS Server. It won't update computers automatically.

Okay first a little backstory. About a month ago me and a fellow employee set up the WSUS Server. I made a huge mistake by allowing all the updates for computers that haven't been in a group. So basically all updates for all computers. At about 11am. The GPO was set so the Updates would download but not install. Long story short, I gave a bunch of people a short work day as about 100 computers startet installing about 200 updates. I stopped the WSUS service and denied all updates.

A week later I set up everything again. This time, I put it into waves. I got 6 waves for about 300 computers. The computers haven't been in the waves so I could set up everything properly. When everything was set properly, I put 4 PCs, which are currently not used, into the groups. All of them needed about 200 updates.

Sidenote: I logged onto them with a test user, basically the same as a normal employee. Just so I can test if it works without being an admin. The GPO is set to update schedule set to 10 am. Install daily, internal update path and so on. The settings are exactly the same as last time except for the update schedule.

So if I'm not mistaken, the WSUS Server should start searching for updates and installing them around 10am. Right ? No. Nothing happens. I tried several things, checked AD permissions, checked WSUS settings, checked GPO. Everything is set exactly like last time.

Funny thing is, theres a laptop in the office. It was running and had an admin user logged in. It updated. So user permissions error I would guess. But why did it work the last time with no changes on that ?

When I booted one of the computers this morning, as someone turned it off, and went into the Update panel, it said 119 available. Well, good, but why not installing them?

gpresult says, that the GPO is active. Update log says, updates found. Obviously.

Why, for heavens sake, is shit going down when set to "Download but don't install" but nothing happens when it's set to "Download and install at set time".

I'm looking forward for any help with this.

Best wishes,

Chris

Hello there! I'm having a situation with the WSUS OFFLINE UPDATE INSTALLER, which I use in clients PC to update offline, I actually download local updates in my personal computer, so I copy the client folder in clients PC, so I made a script to automate this process, everything is going OK until the installer start, I have to press the START button in the WSUS OFFLINE UPDATE INSTALLER to make it work! is there an sentence or something that I can change to make it automatically, I mean if I run the .exe It start automatically updating...

I hope you can help me!

Thanks in advance,

Hi All,

           I have installed WSUS 3.0 SP2 on windows server 2003 , I would like to go for re-installation due to some problems.

Previously service was running on port number 8530 so I have configured all the clients giving URL http://server-name:8530 in registry editing . If I reinstall WSUS on same port number 8530 , do I need to configure all the clients again.

Or If I configure on port 80 , again do I need to configure all clients again.

thank you in advance.

Hi All

I'm asking this here after it was suggested that the Windows Server 2012 forum may not be the most appropriate.

I have a Windows 2012 Server thats hosting a number of VM's. Update policies are set via GPO from Corporate and on the face of it look ok. This particular server though has restarted on a few occasions of its own accord, typically overnight. Whilst the server will not be in use by Staff the backups are running at that time so they fail, which is hardly ideal!

Looking through the Event Viewer I can see this:-

Event ID: 1074, Source: User32

The process C:\Windows\system32\svchost.exe (UKHARHS101) has initiated the restart of computer UKHARHS101 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Recovery (Planned)
 Reason Code: 0x80020002
 Shutdown Type: restart
 Comment: 

My update settings in the registry are below:-

All servers should be installing their updates on a Sunday morning and rebooting then if its required, nothing critical is running  during that time slot.

Any advice on what to check next would be most appreciated.

Now I have a 2003R2 running WSUS 3.2. And 2008R2 running SCCM 2007 SP2 & SCUP 2011 (w/Shavlik). Clients gets updates via WSUS. All works well.

I want to build out a 2012 server that will have WSUS 6.2 & SCCM 2012R2 & SCUP 2011 (w/Shavlik).

I don't care if I migrate or not. Can I build this out as a new install? Will the clients see the new setup? Do I need to worry about the existing DB? Is there a write up on this? If I didn't have clients already attached then this would just be a new install...I just not sure what to expect if I don't migrate and build from new...

I'm having an issue with several servers that check into WSUS, but WSUS tells them there are no updates available. However, except for three more recent updates, the only updates on the server are from 2014 or earlier - the KB numbers are KB2975625 or earlier. The most recent ones that installed are 3021910, 3054203, and 3004545. There are no other KB3xxxxx patches installed.

I've done a reset on the WSUS database, did a server cleanup and removed all superseded, expired, unneeded updates and removed the unused updates/revisions too (this one took a while the first time around but eventually got through it).

I also deleted the contents of the c:\windows\softwaredistribution folder on the client end, and restarted Windows Update.

I tried declining approval on about a dozen KB3xxxxx patches that should have applied to these servers, had them check for updates, and went back and re-approved the patches again to see if that might help, and ran check for updates. Again, no success.

The WSUS server is Windows 2012 R2, the clients are either 2012 or 2012R2. The self update version on the client is 7.9.9600.16422

There are some servers that are successfully updating to current patches; its maybe 4-5 servers that aren't updating.

In the WindowsUpdate log, the only line that looks relevant is maybe this one (there's 7 of these lines):

WARNING: Failed to evaluate Installed rule, updateID {{long set of numbers/letters}}, hr - 80070057

I'm stumped - any suggestions?

Paul

Good Evening,

I have a problem with post-instalation configuration of WSUS on Windows Server 2012 R2 Essentials (after demoting the DC role, I would like to achieve Essentials in a non-domain lab environment). I receive error 0x80070003 The system cannot find the path specified. Here are the last lines in the log:

2015-11-05 00:34:47  Writing DB settings to registry...
2015-11-05 00:34:47  Marking PostInstall done for UpdateServices-WidDatabase in the registry...
2015-11-05 00:34:47  Starting service W3SVC
2015-11-05 00:34:48  Configuring IIS...
2015-11-05 00:34:48  Start: ConfigureWebsite
2015-11-05 00:34:48  System.Runtime.InteropServices.COMException (0x80070003): The system cannot find the path specified.

   at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
   at System.DirectoryServices.DirectoryEntry.Bind()
   at System.DirectoryServices.DirectoryEntry.get_AdsObject()
   at System.DirectoryServices.PropertyValueCollection.PopulateList()
   at System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry entry, String propertyName)
   at System.DirectoryServices.PropertyCollection.get_Item(String propertyName)
   at Microsoft.UpdateServices.Administration.UseCustomWebSite..ctor()
   at Microsoft.UpdateServices.Administration.PostInstall.ConfigureWebsite(Int32 portNumber)
   at Microsoft.UpdateServices.Administration.PostInstall.Run()
   at Microsoft.UpdateServices.Administration.PostInstall.Execute(String[] arguments)

Configuration works in default (domain) environment. However, I would like to have access to WSUS or foldering sharing by non-domain users

I set a WSUS server and tried to connect a computer in a non-domain envrionment. Both computers (i.e. computer and server) are visible and I can access the iuident.cab file from the client. However after configuring the Internal update server in the local group policy editor, the client is not visible in the WSUS console.

now when I try to access directly http://server/iuident.cab I receive the 404 error, even thought that when I type http//server/ I receive the IIS start page

I ran Solar Wind diagnostic tool and I have three errors:

1. Windows update agent version: Error (Input string was not in a correct format.)

2. content: Error: Forbidden (Incorrect proxy client configuration - use settings tab to test proxy configuration settings; may also be caused by misconfigured SSL implementation or access rights on WSUS server)

3. iuident.cab: Error: ConnectFailure (Cannot Connect – caused by a network infrastructure fault making the Windows Update unavailable to the client system)

Hi

I've been trying to update our isolated WSUS for a month or so now.  I have a fresh install of Server 2012 and installed WSUS along with the WID.  On our internet connected WSUS I have downloaded the updates and waiting for the "Updates needing files" to be 0.

I then robocopy /COPYALL the WSUScontent folder to USB and robocopy that off on to the isolated server.  Once that's copied (without errors) I then WSUSUTIL export/import which goes through in a couple of hours.

When opening WSUS and selecting an update I get the message:  "The files for this update have not yet been downloaded.  The update can be approved but will not be available to computers until the download is complete."

When I interrogate BITS there are queues on the system - this kicks in directly after the WSUS import.

The Download Status of WSUS reads:  Downloaded 17.21MB of 200,841MB

I have checked the settings in Update Files and Languages and it matches on both servers.

Not sure what else to do.  This is a fresh HyperV server and I have gone through all the steps numerous times including rebuilding the WSUS environment but get to the same point everytime...  help...

Olly

Hi I m ananda I want to installed wsus server in 2012 server but its getting error

The MSSQL$MICROSOFT##WID service was unable to log on as NT SERVICE\MSSQL$MICROSOFT##WID with the currently configured password due to the following error:

Logon failure: the user has not been granted the requested logon type at this computer.

 Service: MSSQL$MICROSOFT##WID

Domain and account: NT SERVICE\MSSQL$MICROSOFT##WID

 This service account does not have the required user right "Log on as a service."

 User Action

 Assign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster.

 If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right.

Please let me know if you have any ideas. Thanks!

I seem to have problems with my WSUS server. I recently moved the service from server1 to server2. I did a fresh install of WSUS on server 2 and copied the WSUS database from server1 to server2. 

Now, some (most) of the clients do not show up in the WSUS console and they do not download updates. The console shows a total of 126 computers when there should be over 800. Below is an extract from WindowsUpdate.txt from 1 of the clients after I stopped and started the AU service, waited 30 minutes and ran  wuauclt /resetauthorization /detectnow

Any ideas why my clients don't show up in the console and why it says no updates available?

I keep getting an error message in the windows update log

Failed job file: URL = http://(servername)/Content/B9/DC7DF214D50A32AD0E8A8D0EA4D7C1C5DE9847B9.cab, local path = C:\Windows\SoftwareDistribution\Download\1d7a0c4992a37f41a7e93ae52bbaa90b\wxpnse-x-none.cab

Error 0x80244019 occurred while downloading update; notifying dependent calls.

Any idea as to why the updates keep failing when trying to install. I am new to WSUS so I am just trying to get things working.

Thanks

I have a brand new network of new servers all running 2012 R2.    These were updating fine to an older WSUS server running 2008 R2.    I installed WSUS role on one of my new 2012 R2 servers, and now get 0x80072EFE on a 2012 R2 client trying to pull updates from the new 2012 R2 WSUS server.  

My old registry entry on the client (to pull from the old 2008 R2 wsus server) was:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"WUServer"="http://oldserver.abc.com"
"WUStatusServer"="http://oldserver.abc.com"
"TargetGroupEnabled"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"UseWUServer"=dword:00000001
"NoAutoUpdate"=dword:00000001

My new registry entries are as follows.  Later, in troubleshooting, I edited those 2 lines to add a port I read wsus uses now in 2012?, but no help.

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"WUServer"="http://newserver.abc.com:8531"
"WUStatusServer"="http://newserver.abc.com:8531"
"TargetGroupEnabled"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"UseWUServer"=dword:00000001
"NoAutoUpdate"=dword:00000001

The new server has all security/critical updates installed as of 10/30/15, so unless there is some oddball hotfix I need that for some good reason isn't pushed by Microsoft, I should be fully up to date.  I also tried the Windows Update troubleshooter, as well as doing wuauclt with the detectnow and resetauthorization.

Below is from log:

2015-10-30    10:58:59:051     996    3758    Agent    ** START **  Agent: Finding updates [CallerId = AutomaticUpdatesWuApp  Id = 1]
2015-10-30    10:58:59:051     996    3758    Agent    *********
2015-10-30    10:58:59:051     996    3758    Agent      * Online = Yes; Ignore download priority = No
2015-10-30    10:58:59:051     996    3758    Agent      * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
2015-10-30    10:58:59:051     996    3758    Agent      * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
2015-10-30    10:58:59:051     996    3758    Agent      * Search Scope = {Machine & All Users}
2015-10-30    10:58:59:051     996    3758    Agent      * Caller SID for Applicability: S-1-5-21-2656506770-2242833916-2264700936-500
2015-10-30    10:58:59:051     996    3758    Agent      * RegisterService is set
2015-10-30    10:58:59:051     996    3758    EP    Got WSUS Client/Server URL: "http://newserver.abc.com:8531/ClientWebService/client.asmx"
2015-10-30    10:58:59:051     996    3758    Setup    Checking for agent SelfUpdate
2015-10-30    10:58:59:051     996    3758    Setup    Client version: Core: 7.9.9600.18066  Aux: 7.9.9600.18066
2015-10-30    10:58:59:051     996    3758    EP    Got WSUS SelfUpdate URL: "http://newserver.abc.com:8531/selfupdate"
2015-10-30    10:58:59:051     996    3758    Misc    WARNING: Send failed with hr = 80072efe.
2015-10-30    10:58:59:051     996    3758    Misc    WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
2015-10-30    10:58:59:051     996    3758    Misc    WARNING: Send request failed, hr:0x80072efe
2015-10-30    10:58:59:051     996    3758    Misc    WARNING: WinHttp: SendRequestUsingProxy failed for <http://newserver.abc.com:8531/selfupdate/wuident.cab>. error 0x80072efe
2015-10-30    10:58:59:051     996    3758    Misc    WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2015-10-30    10:58:59:051     996    3758    Misc    WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2015-10-30    10:58:59:051     996    3758    Misc    WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2015-10-30    10:58:59:051     996    3758    Misc    WARNING: DownloadFileInternal failed for http://newserver.abc.com:8531/selfupdate/wuident.cab: error 0x80072efe
2015-10-30    10:58:59:051     996    3758    Setup    FATAL: DownloadCab failed, err = 0x80072EFE
2015-10-30    10:58:59:051     996    3758    Setup    WARNING: SelfUpdate check failed to download package information, err = 0x80072EFE
2015-10-30    10:58:59:051     996    3758    Setup    FATAL: SelfUpdate check failed, err = 0x80072EFE
2015-10-30    10:58:59:051     996    3758    Agent      * WARNING: Skipping scan, self-update check returned 0x80072EFE
2015-10-30    10:58:59:051     996    3758    DtaStor    FATAL: CSusEseSession::DeleteSLSData failed, hresult 0x80248007
2015-10-30    10:58:59:051     996    3758    SLS    WARNING: PurgeCache failed with hresult 0x80248007 ...
2015-10-30    10:58:59:051     996    3758    Agent    WARNING: Failed to purge SLSClient with 0x80072efe.  Continuing...
2015-10-30    10:58:59:067     996    3758    Agent      * WARNING: Exit code = 0x80072EFE
2015-10-30    10:58:59:067     996    3758    Agent    *********
2015-10-30    10:58:59:067     996    3758    Agent    **  END  **  Agent: Finding updates [CallerId = AutomaticUpdatesWuApp  Id = 1]
2015-10-30    10:58:59:067     996    3758    Agent    *************
2015-10-30    10:58:59:067     996    3758    Agent    WARNING: WU client failed Searching for update with error 0x80072efe
2015-10-30    10:58:59:067     996    3758    IdleTmr    WU operation (CSearchCall::Init ID 1, operation # 7) stopped; does use network; is not at background priority
2015-10-30    10:58:59:067     996    3758    IdleTmr    Decremented idle timer priority operation counter to 1
2015-10-30    10:58:59:067     996    3754    AU    >>##  RESUMED  ## AU: Search for updates [CallId = {FC1DB01A-69C3-4375-8A60-A9C2C829D786} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}]
2015-10-30    10:58:59:067     996    3754    AU      # WARNING: Search callback failed, result = 0x80072EFE
2015-10-30    10:58:59:067     996    3754    AU    #########
2015-10-30    10:58:59:067     996    3754    AU    ##  END  ##  AU: Search for updates  [CallId = {FC1DB01A-69C3-4375-8A60-A9C2C829D786} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}]
2015-10-30    10:58:59:067     996    3754    AU    #############
2015-10-30    10:58:59:067     996    3754    AU    All AU searches complete.
2015-10-30    10:58:59:067     996    3754    AU      # WARNING: Failed to find updates with error code 80072efe

spnewbie

Dear all ,

We have one server Wsus which distribute all update in my infrastructure.
We have one server RDS (2008 R2)  when I would like install update (office,Security update or new software) it is very very slow . For example : 4 office update (10 Mb) the server taking 3-4 hours .
We have no probleme configuration between Wsus and this server

Thanks for help.