Hi Team,

I got issue , recently on my wsus server c:\windows\system32\drivers\etc\hosts file is missing, and this is workgroup environment. Now the issue is synchronization was not happening on wsus server. Can any help on this to get the wsus server synchronization.

G Sravan

Hey guys hopefully someone can help or has come across this issue.

We are currently running WSUS 3.2.7600.226 however when I try to search for Microsoft Edge updates it brings up no results. As a rule of thumb our organisation installs all critical and important updates. All other updates for other OS's and software come up fine it is never bringing up any results for Edge. Anyone come across this ?

Thanks :)

I ran the latest updates that my WSUS had downloaded. Now, none of my Win 8.1 and Win 2012 r2 boxes can connect to the WSUS box. The WSUS box can't even connect to itself.

I get the "There was a problem checking for updates."  The code is 80244007.  I've ensured the WSUS service and WSUS certificate service are both running (I've tried stopping the certificate service and just have the WSUS service running too).  Both scenarios render the same result.

The WSUS snap in doesn't work either.  It asks me to reset the server node and nothing happens.

Keep in mind, this JUST started happening after I had installed about 14 new updates tonight (If I could get into the mmc add in for WSUS, I could tell you just what updates were installed.  But I can't).

For what it's worth, here's the error I get from the snap in.

The WSUS administration console was unable to connect to the WSUS Server via the remote API.

Verify that the Update Services service, IIS and SQL are running on the server. If the problem persists, try restarting IIS, SQL, and the Update Services Service.

The WSUS administration console has encountered an unexpected error. This may be a transient error; try restarting the administration console. If this error persists,

Try removing the persisted preferences for the console by deleting the wsus file under %appdata%\Microsoft\MMC\.

System.IO.IOException -- The handshake failed due to an unexpected packet format.

Source
System

Stack Trace:
   at System.Net.Security.SslState.StartReadFrame(Byte[] buffer, Int32 readBytes, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
   at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
   at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
   at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
   at System.Net.TlsStream.ProcessAuthentication(LazyAsyncResult result)
   at System.Net.TlsStream.Write(Byte[] buffer, Int32 offset, Int32 size)
   at System.Net.ConnectStream.WriteHeaders(Boolean async)
** this exception was nested inside of the following exception **

System.Net.WebException -- The underlying connection was closed: An unexpected error occurred on a send.

Source
Microsoft.UpdateServices.Administration

Stack Trace:
   at Microsoft.UpdateServices.Administration.AdminProxy.CreateUpdateServer(Object[] args)
   at Microsoft.UpdateServices.UI.SnapIn.Scope.ServerSummaryScopeNode.GetUpdateServer(PersistedServerSettings settings)
   at Microsoft.UpdateServices.UI.SnapIn.Scope.ServerSummaryScopeNode.ConnectToServer()
   at Microsoft.UpdateServices.UI.SnapIn.Scope.ServerSummaryScopeNode.get_ServerTools()

I've got a WSUS 4.0 server that's failing to download a single update. The error message from EventID 364 is:

Content file download failed. Reason: File cert verification failure. Source File: /d/msdownload/update/software/crup/2016/04/windows10.0-kb3154879-x86_c7b4d1ac4829121785ae79b2df7550004eca089f.cab Destination File: c:\wsus\WsusContent\9F\C7B4D1AC4829121785AE79B2DF7550004ECA089F.cab

Thoughts?  I'm downloading directly from Microsoft, no proxy or upstream WSUS server.  It looks like the upstream file is corrupt or unsigned.

Not really a huge deal as I don't have any x86 Windows 10 clients, only x64, but still.

Hi All,

I am having issues with all my downstreams SBS servers not synhronising with my master WSUS which is on Server 2008R2. All of them come up with "error connecting to DataStore".  I have gone through all the forums and tried every suggestion without any luck. All of the Server 2012 downstream servers are working perfectly with the upstream 2008R2.

My next step is to make sure the upstream and all SBS downstreams are up to date ( they are currenlty all on  3.2.7600.226).

Which is the latest version and where can i find the update download? Is it possible to run WSUS 6 on previous server version or is this only compatable with 2012?

Thanks!

Hello, in order to get rid of unneeded patches on my WSUS server (srv 2012 R2), Ihave emptied my WsusContent folder and run wsusutil.exe RESET. I did this by following the post at http://blogs.technet.com/b/gborger/archive/2009/02/27/what-to-do-when-your-wsuscontent-folder-grows-too-large.aspx.

From what I understand it looks like, even though you deselect certain programs and claissificatoin, e.g. you do not need any updates for Office 2010 or windows Vista ... anymore, this does not mean that WSUS does DELETE the already downloaded patches related. Therefore you need to do this wsusutil RESET after one deleted all patches from WsusContent folder.

So far so good, I did all this, figuring out that after wsusutil.exe RESET I ran into this problem described by Keith https://social.technet.microsoft.com/Forums/office/en-US/300a580c-80c7-44e7-905d-9b3299ba0043/rebuild-of-wsus-failed-due-to-reset-process-in-progress?forum=winserverwsus search for "tbSingletonData" in that post. Every time I run wsusutil.exe RESET my field "ResetStateMachineNeeded" at [SUSDB].[dbo].[tbSingletonData] changes to 1. I have to update that table in order to set it back to 0,otherwise I always get such a warning "Cannot save configuration because the server is still processing a previous configuration change."

However, my server now runs fine again, it also downloads NEW patches every night, but it never re-downloads patches which where downloaded before I have deleted WsusContent folders and files. Also, I figured out, that it never manages to display All Updates in Admin GUI, it loads forever until it hangs at some time. But new comes come in as they are released by Microsoft. However, after about 3 days now I still only have 108 patches with a total amount of about 450 MB, while before I had 300 GB. I have unselected a few products, but this might be maybe 20 % or so.

How can I reliably force my WSUS to redownload all updates it is aware of based on it's database, except the ones I have deselected from products and classifications? This was my initial intention.

kind regards,

Dieter Tontsch

mobileX AG

I need to work with our database team and want to make sure I can tell them what to expect.

According to the deployment guide the user account that installs WSUS needs sysadmin rights on the remote SQL server. Once installed, can those rights be removed entirely or demoted to something with fewer rights?

Somewhat related, does the install process set up machine permissions on the SQL server for the WSUS server?  If so, is it just read/write to the database or something more?

Hey guys.

I'm unable to run WSUS PowerShell commands on our upstream server. The error message states it "The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel". This isn't an issue on our downstream servers.

The upstream WSUS console is working fine and computers are able to download updates from it. Not sure when this started, but I did replace the SSL certs for all WSUS servers recently. Seems like if that was the issue, it'd effect the other servers as well.

Any help would be appreciated!

After installing update KB3148812 (https://support.microsoft.com/en-us/kb/3148812#bookmark-prerequisites) on my WSUS server, WSUS fails.  The MMC console crashes with Event 7053 "System.IndexOutOfRangeException" and the service eventually stops with Event 507:   "Update Services failed its initialization and stopped."  Prerequisite update 2919355 is installed on the system.

Anyone else having this problem or know the solution?  Removing it restores functionality, but will not allow Windows 10 updates after May 01, 2016.

Thanks.

Hello,

I am having issues setting up a downstream server. I am running Server 2012 R2 on both machines. Running SQL 2014 on Upstream that connects to Microsoft Update and running SQL 2014 Express on downstream server. WSUS install went great on upstream server, no tasks failed. On downstream server, I run the post installation task and it fails with:

"Fatal Error: The schema version of the database is from a newer version of WSUS than currently installed. You must either patch your WSUS erver to at least that version or drop the database."

Both servers are running the same version of SQL and WSUS. Below is the temp file WSUS created.

I'm running into a problem when I update my WSUS server (Windows 2012 R2) with "any" of the 13 patches from 04/21/16 breaks WSUS. Any patch that required a reboot. To test, I tried each patch individually. Each one would break WSUS after the reboot except for KB3103616. I didn't have any issue with that one patch. I also avoided installing KB3148812 based on the Technet article, but it did not fix the issue. It still fails to connect to the database and clients cannot connect.

https://social.technet.microsoft.com/Forums/en-US/786be517-1d38-4d42-901c-0e586f755453/update-kb3148812-breaks-my-wsus-server?forum=winserverwsus

Log Name:      Application
Source:        MSSQL$MICROSOFT##WID
Date:          4/22/2016 10:04:52 AM
Event ID:      18456
Task Category: Logon
Level:         Information
Keywords:      Classic,Audit Failure
User:          NETWORK SERVICE
Computer:      my_wsus_server.domain.edu
Description:
Login failed for user 'NT AUTHORITY\NETWORK SERVICE'. Reason: Failed to open the explicitly specified database 'SUSDB'. [CLIENT: <named pipe>]
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MSSQL$MICROSOFT##WID" />
    <EventID Qualifiers="49152">18456</EventID>
    <Level>0</Level>
    <Task>4</Task>
    <Keywords>0x90000000000000</Keywords>
    <TimeCreated SystemTime="2016-04-22T14:04:52.000000000Z" />
    <EventRecordID>14775</EventRecordID>
    <Channel>Application</Channel>
    <Computer>thimble.richmond.edu</Computer>
    <Security UserID="S-1-5-20" />
  </System>
  <EventData>
    <Data>NT AUTHORITY\NETWORK SERVICE</Data>
    <Data> Reason: Failed to open the explicitly specified database 'SUSDB'.</Data>
    <Data> [CLIENT: &lt;named pipe&gt;]</Data>
    <Binary>184800000E000000170000005400480049004D0042004C0045005C004D004900430052004F0053004F0046005400230023005700490044000000070000006D00610073007400650072000000</Binary>
  </EventData>
</Event>

Is there a tool in the WSUS or a third party Microsoft tool that would advise what windows updates were approved on what date? Also is there a way to figure out how big each update in MB is to get a better understanding how many updates each computer would receive and how much data each pc would have to download?

If there are none and you would need to run SQL queries what is the default username and password for the SA account so I can work with my Dev team to pull a query for this.

Hi All,

We have a requirement to install the below Hotfix to some servers.

https://support.microsoft.com/en-us/kb/981845

Now, I understand that we cannot automatically synchronize Hotfixes (unlike normal updates) to WSUS and we have to import the Hotfix from Microsoft update catalog. Now the issue is when I am searching the KB number - KB981845 in MS update catalog, I am not getting any results.

I have assumed the KB number as KB981845 from the headers n the URL although it wasn't explicitly mentioned in the article. Can someone help me by pointing out what exactly am I missing here?

Thanks in advance,

Hi,

after a reboot (April updates installation) the WSUS MMC on our 2012r2 server, returns a connection error.

At boot time the services are all started correctly without any error or warning. Sometimes when we try to start the MMC, an event 7031 (The WSUS Service service terminated unexpectedly ......) is logged in the System Event log, but every time we try to start the MMC an event 7032 (The WSUS administration console was unable to connect to the WSUS Server via the remote API....) is logged in the application log and there are also a lot of event ids 18456 (Login failed for user 'NT AUTHORITY\NETWORK SERVICE'. Reason: Failed to open the explicitly specified database 'SUSDB'. [CLIENT: <named pipe>]).

From the IIS side, as far as I can check, telnetting on port 8530 gives a response but the website is not loading.

Already tried or checked:

- KB2720211 can give this kind of error but it is not installed on our server

- Allow service to interact with desktop check box (https://social.technet.microsoft.com/Forums/windowsserver/en-US/d24fe704-1a3d-431d-82b5-d6d004a96ff7/connection-error-wsus-console?forum=winserverwsus )

- checking/changing the .Net Framework version (https://jamessummerlin.com/2012/08/28/wsus-connection-error/ ) and (http://www.dell.com/support/article/mk/en/mkdhs1/SLN286548/en )

Every other article found on the web, ends up by a reinstalling WSUS (!!); has anyone a better suggestion ?

If reinstalling WSUS is the only way to solve the problem, we would like to keep our settings (groups, downloads, approval settings, .....) and avoid to re-download all the updates; is it possible ?

Thank you in advance,

Best Regards,

Eric

Hi -

I have a number of machines with a bloated Windows\SoftwareDistribution folder.  I usually address this by:

1. Stopping the Automatic Updates service.
2. Deleting the Windows\SoftwareDistribution folder.
3. Restarting the Automatic Updates service.

I'm considering using a computer startup script to perform this task automatically.  Does anyone have a more elegant method of automating this task?

Thanks in advance for your input.

After moving the content and database following the the instructions on this thread http://social.technet.microsoft.com/Forums/windowsserver/en-US/8882e0ef-8331-4283-aa29-77af4d7fff04/moving-wsus-data

Moving the content was successful.  Detatching the Windows Internal database, moving the database and log files and remounting the database at the new drive location through SQL Studio Express was successful.  Restarting all the services was successful. IIS Admin and Update Services both are started.  I did IISreset and it worked with no errors.

However, clients fail to connect to the WSUS server when I check for updates manually and the console displays the error:

An error occurred trying to connect the WSUS server. This error can happen for a number of reasons. Check connectivity with the server. Please contact your network administrator if the problem persists. 

Click Reset Server Node to connect the server again.

The only info I found on this error said to clear some files out of the appdata directory, but this is not just a console display issue since the clients fail to connect.

Any suggestions on getting this working?

Hello,

we have a problem with upgrading windows 8.1 pro to Windows 10 via WSUS. We have following configuration:

Server:

OS: Windows Server 2012R2

have installed KB2919355 and KB3095113

MIME Type .esd with following option "application/octet-stream"

no duplicate MIME types in IIS

Client:

running Win 8.1 Pro version. we get error code 80240020, but cleaning Distribution folder did't help us. 

We ran WindowsUpdateDiagnostic, although it states that it has fixed recent update issues,  but we rerun the update the problem still exists.

Can you please advise?

Thanks in advance!

Kind Regards 

Ivo.

Hey guys,

we are having a strange issue with our SCCM 2012 / WSUS Server. The Server is W2k8R2 and we are installing Wsus 3.0 SP2.

Since Friday everything was working (Whole SCCM2012 with WSUS SUP installed). Then on Friday something happened and WSUS is no longer working. We already reinstalled it several times. But suddenly after the WSUS installation (tried .exe and Add or remove features) it is already broken.

- The Console only shows "Service unavailable" with a Button Reset Server Node

- All Services a Running

- When trying to open The WSUS Console the IIS Application Pool "Wsus Pool" is stopped

Here are some Event Logs:

Application Error:

Faulting application name: w3wp.exe, version: 7.5.7601.17514, time stamp: 0x4ce7afa2
Faulting module name: KERNELBASE.dll, version: 6.1.7601.17651, time stamp: 0x4e21213c
Exception code: 0xe0434352
Fault offset: 0x000000000000cacd
Faulting process id: 0x141c
Faulting application start time: 0x01cd64a70072cec1
Faulting application path: c:\windows\system32\inetsrv\w3wp.exe
Faulting module path: C:\Windows\system32\KERNELBASE.dll
Report Id: 3e5d5bdc-d09a-11e1-a2f5-00155d2c1824

Application Information (WAS is installed)
The description for Event ID 5002 from source Microsoft-Windows-WAS cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
WsusPool

I would really appreciate your help!!

Thanks a lot and best regards

Philipp

Hi, We are using windows update server which is in Win 2012 STD. Suddenly the updates are stopped to download the approved updates. It gives error that Updates are failed to download. This server is internet enabled and it is in the full access group in firewall policy. We are able to see the log of downloads but at the end of the wsus server it gives error. Please find below screenshot.

Please help.

Really weird issue where the download stops at the same point... please see attached image.

Alex Olver