Hello PS Gurus,

        Is there a way to write a PowerShell script to summarize the patching status of computers that report to a central WSUS server? Can this be done using the built in PowerShell WSUS cmdlets? The report has to look similar to this....Any assistance would be greatly appreciated. 

Group----------------------------Complete---- Failed---Needed---Pend reboot ----------------

all computers                         999                 9               99            999

General                                   888                  8              88            888

DCs                                           111                  11              1                1

SharePoint                               22                    2               4               1

Servers                                    666                    1               1               1

Rick

Trying to synchronize with upstream WSUS.  It keeps failing with the following message:

OutOfMemoryException: Exception of type 'System.OutOfMemoryException' was thrown

I increasing the custom paging file size first and this did not work.  Also tried having the System manage the paging file size, no luck there either.  

System consists of Windows Server 2012 R2, WSUS role, WID, and other WSUS requirements.  

Any thoughts as to how I can resolve this?

Server 2012R2

WSUS

Windows 10 Pro 1607

I did not apply the KBs to have WSU push 1607. I used MediaCreateTool to create the ISO that I used on the client systems. Since then, WSUS is sporadic. I see "Downloading Updates 0%" for hours. I see office 2013, adobe flash, 1607 updates "failed".

So I tested on a single system. I broke the domain and was a standalone Microsoft account user. I went to settings-> Update & Security -> Windows Update. It came up with the same list that is still in download state on another system (WSUS controlled). 

It downloaded all the updates, applied them and requested a reboot. After the reboot, I rejoined the domain. Update history shows successfully installed.

I forewent the WSU push KBs because of all the threads on problems. I see the threads on WSUS about download & install problems after 1607.

I just want to know what is wrong and how to fix it. I cannot go around to the 15+ systems here and break/update/rejoin.

Thanks

John Lenz

We have a new WSUS server (Server 2012 R2 - WSUS 6.3.9600.18324) which has been up for approx one month. First update approval on 9/28/16 pulled down over 8K updates. Server was originally created with a 300GB C: drive and had to be expanded to 400GB as the C:\WSUS\WsusContent folder was filling up the drive. It has continued to max out this drive currently at 383GB. I have run the Server Cleanup Wizard which has not helped. Since the original approval on 9/28 I have since removed Win8.1 and Vista from the Products list as we no longer have any of those client OS's on the network.

As a comparison, our previous WSUS server (Server 2008 R2 - WSUS 3.2.7600.274) which is still up and syncing every night, only contains 146GB data and pulls down updates for many more products.

Hank Vare

Hello,

Can you have a 2016 downstream server with a 2008R2 upstream server?

Thanks,

HI Guys , 

good Day 

I facing few issues , I've <g class="gr_ gr_528 gr-alert gr_spell gr_run_anim ContextualSpelling ins-del multiReplace" data-gr-id="528" id="528">Wsus</g> 3.0 version is fine to synchronizing to download Update from <g class="gr_ gr_776 gr-alert gr_gramm gr_run_anim Grammar multiReplace" data-gr-id="776" id="776">internet</g> as schedule so  I’m downloading updating for Windows Server 2012 R2 on VMs and Physical Servers but it's taking too long and keep showing me Error:80072EE2 & Error:80072F8F. This error is not letting me update my windows. My clock is updated and also all machines (servers only) are connected to the domain. What can be the possible solution for this<g class="gr_ gr_918 gr-alert gr_gramm gr_run_anim Punctuation multiReplace" data-gr-id="918" id="918">issues.</g> please guide me through this thanks .

Ameen A.Sak 

Hi all, first of all, my apologies if I'm not posting in the wrong forum, but I don't know where to start.

In my Company, Windows update is managed by SCCM, we have no group policy in place that tell machines what the wsus server is, in stead the SCCM Client Agent tells them, and it works fine. Machines are updating as expected.

The firewall people told me that several machine (Win7, Win10, Server 2008R2) are attempting to connect to ip 13.107.4.50 au.download.windowsupdate.com they tell me there is something wrong with the WSUS settings.

I noticed that it happens at startup of the machine, but not always.

Can anyone point me in the right direction, where should i look?

Is this normal behavior?

I'm trying to do a WSUS export and the cab file keeps failing due to the size being too large.  I found the thread where there was a hotfix so that a gzip file could be created on a Windows Server 2012.  However when I got to the following link 

https://support.microsoft.com/en-us/kb/2819484

When I run the hotfix that is available for download for Windows Server 2012 (I've tried both the link via email and the Windows Catalog), it says that it is not applicable for this system (Windows Server 2012). It appears that maybe the link is pointing to a wrong file?

Any help would be greatly appreciated.

Hi,

Not sure if WSUS forum is the correct one, but its related :)

On allmost every Windows 10 machine I have problems when reading WindowsUpdateLog.

I run the command from an administrative prompt "Get-WindowsUpdatelog" and it generates the log and dump it to desktop, but the information in this file is like this...

1601.01.01 01:00:00.0000000 692   5220                  Unknown( 31): GUID=c232d8d6-c0ba-3f2d-4ee0-3c6f4b234595 (No Format Information found).
1601.01.01 01:00:00.0000000 692   5220                  Unknown( 18): GUID=d8f4d644-6ec0-4f3d-fa7c-f0d0a5b120ae (No Format Information found).
1601.01.01 01:00:00.0000000 692   5220                  Unknown( 13): GUID=4bc2bc11-e128-512d-d523-8da29c6efcde (No Format Information found).
1601.01.01 01:00:00.0000000 692   5220                  Unknown( 30): GUID=fa7f9ca7-a9ca-7c9a-be26-0e9e978abc58 (No Format Information found).
1601.01.01 01:00:00.0000000 692   5220                  Unknown( 75): GUID=660c3846-d8b2-5440-48f2-9b67dac5f6cf (No Format Information found).
1601.01.01 01:00:00.0000000 692   5220                  Unknown( 56): GUID=660c3846-d8b2-5440-48f2-9b67dac5f6cf (No Format Information found).
1601.01.01 01:00:00.0000000 692   5220                  Unknown( 25): GUID=fa7f9ca7-a9ca-7c9a-be26-0e9e978abc58 (No Format Information found).
1601.01.01 01:00:00.0000000 692   5220                  Unknown( 11): GUID=4bc2bc11-e128-512d-d523-8da29c6efcde (No Format Information found).

I have upgraded to the latest version 1511 and its the same problem here...

Thanks for answers.

/Regards Andreas

Hi all,

I have 2 questions regarding the WSUS Server I hope someone can help me since I can't find anything in the Internet.

1. How is it possible to find or sort my Clients on the WSUS to show me all Win10 1511 Builds and Win10 1607 Builds? I can only sort by OS and it only shows me Windows 10 (Version 10.0)...

2. Is it possible to set Alias to the Clients? We have historical name notation for example Win2012-E1 which doesn't give me much information. Is it Possible to create a new column for Aliases or Komment field?

Our WSUS environment is:

Win2012 R2
WSUS Version 6.3.9600.16384.

Thanks in advance

Regards
Michael

After installing Server 2012 Standard on ESX 5.1 I completed all available Windows Updates and proceeded to add the WSUS role.  I chose the default WID database and the role addition was seemingly successful.  Unfortunately, the Post-deployment Configuration failed.  A log file had been created in the AppData\Local\Temp folder but at initial glance it seemed to imply that my error was likely due to skipping a step during installation via PowerShell.  However, I didn't install using PowerShell and I set off to surf the Internets for clues on resolving this issue.  I searched about a dozen forums that with similar, but different issues until a comment by Lawrence Garvin (http://social.technet.microsoft.com/profile/lawrence%20garvin/?ws=usercard-inline) convinced me to go back and look at my log. 

2013-07-23 11:03:18  Postinstall started
2013-07-23 11:03:18  Detected role services: Api, UI, WidDatabase, Services
2013-07-23 11:03:18  Start: LoadSettingsFromXml
2013-07-23 11:03:18  Start: GetConfigValue with filename=UpdateServices-Services.xml item=ContentLocal
2013-07-23 11:03:18  Value is true
2013-07-23 11:03:18  End: GetConfigValue
2013-07-23 11:03:18  Start: GetConfigValue with filename=UpdateServices-Services.xml item=ContentDirectory
2013-07-23 11:03:18  Config file did not contain a value "ContentDirectory"
2013-07-23 11:03:18  Microsoft.UpdateServices.Administration.CommandException: A required configuration value was not found in the system. This is usually caused by installing WSUS through PowerShell and not specifying a configuration file. Review the article Managing WSUS Using PowerShell at TechNet Library (http://go.microsoft.com/fwlink/?LinkId=235499) for more information on the recommended steps to perform WSUS installation using PowerShell.
   at Microsoft.UpdateServices.Administration.PostInstall.GetConfigValue(String filename, String item)
   at Microsoft.UpdateServices.Administration.PostInstall.LoadSettingsFromXml()
   at Microsoft.UpdateServices.Administration.PostInstall.Initalize(Parameters parameters)
   at Microsoft.UpdateServices.Administration.PostInstall.Execute(String[] arguments)
Fatal Error: A required configuration value was not found in the system. This is usually caused by installing WSUS through PowerShell and not specifying a configuration file. Review the article Managing WSUS Using PowerShell at TechNet Library (http://go.microsoft.com/fwlink/?LinkId=235499) for more information on the recommended steps to perform WSUS installation using PowerShell.

Upon closer inspection the specifics of my error were right there for me, I just had to look at it long enough to decipher the details.  What I now read is that Post-deployment configuration finds a file called UpdateServices-Services.xml (I found it in Windows\System32\ServerManager\ComponentConfiguration\).  It determines that ContentLocal=True which correctly indicates that my updates are to be stored locally.  It proceeds to inquire about the ContentDirectory, but comes back without a value.  Here are my UpdateServices-Services.xml file contents

<?xml version="1.0" encoding="utf-16"?><INSTANCE CLASSNAME="ServerComponent_UpdateServices_Services"><PROPERTY NAME="ContentDirectory" TYPE="string"></PROPERTY><PROPERTY NAME="ContentLocal" TYPE="boolean"><VALUE>true</VALUE></PROPERTY></INSTANCE>

I can see that the ContentLocal property did indeed have the value true, but the ContentDirectory property did not have a value.  I now needed to figure out if a String value could be specified in the same way a Boolean value was, or if it needed quotes around it, or was supposed to be specified more like an attribute (learned about that somewhere along the way).  I couldn't find any conclusive websites, and I didn't want to just try it for fear of the Post-deployment configuration running with an invalid ContentDirectory.  Once again I returned to my log file and searched for answers at the http://go.microsoft.com/fwlink/?LinkId=235499 that was indicated.  I didn't find any exact matches, but eventually I found a sample .xml file that specified a string value.  It specified it as <VALUE>string</VALUE> with no brackets, so I knew to specify mine as <VALUE>C:\LocalMSUpdateCache</VALUE> and saved it.  My UpdateServices-Services.xml now looks like this:

<?xml version="1.0" encoding="utf-16"?><INSTANCE CLASSNAME="ServerComponent_UpdateServices_Services"><PROPERTY NAME="ContentDirectory" TYPE="string"><VALUE>C:\LocalMSUpdateCache</VALUE></PROPERTY><PROPERTY NAME="ContentLocal" TYPE="boolean"><VALUE>true</VALUE></PROPERTY></INSTANCE>

I returned to Server Manager -> WSUS and re-attempted the Postdeployment configuration.  It completed successfully!

I'm glad that my fix was relatively simple and that Lawrence was particular about the details of the log file. 

1. My exact error isn't always going to be documented

2. Just because the log file looks unintelligible (I have thus far avoided both powershell and xml), doesn't mean it's useless.

Good luck to anyone with a similar issue.  You too may be able to figure it out yourself.

We have one Windows 10 laptop that is showing in WSUS  with the Last Contact column in the report showing the current date and time, but the Last Status Report column remains at a date last month and No Status Count column rises daily.

Since the Last Contact column keeps updating, I know there is communication, but I don't know why the Last Status Repors will not update. I already ran the Windows Update repair tool.

What else can be done to fix this?

Hey all, just installed KB3159706 on my WS 2012 R2 WSUS Server at 2PM on 5/5/2016.  This was supposed to fix/issues when KB3148812 was released a few weeks ago.  Don't install KB3159706, it breaks WSUS.

C'mon Microsoft, get your stuff together.  I'm tired of this amateur hour BS.

Hello again all,

I'm trying to set up WSUS so I can get SCCM to manage Windows update.

I actually had WSUS up and running last week, but I stupidly right clicked on the WSUS services and tried to change some settings, and now it stopped working.  I've removed WSUS, and re-added it, but everytime I do the "Post-Installation Configuration" It errors out "Fatal Error:  Failed to start and configure WSUS service" and gives the below log

2015-05-11 13:13:19  StartServer starting...
2015-05-11 13:13:19  Generating encryption key to write to the registry...
2015-05-11 13:13:19  Generating encryption key to write to the database...
2015-05-11 13:13:20  Generation of encryption key to save to the database failed. Error=System.InvalidOperationException: Cannot save configuration because the server is still processing a previous configuration change. ---> System.Data.SqlClient.SqlException: spSetConfiguration was called while a Reset Process was Needed/InProgress cannot change Configuration at this time
   at Microsoft.UpdateServices.DatabaseAccess.DBConnection.DrainObsoleteConnections(SqlException e)
   at Microsoft.UpdateServices.DatabaseAccess.DBConnection.ExecuteCommandNoResult()
   at Microsoft.UpdateServices.Internal.NoResultSPHandler.ExecuteStoredProcedure(DBConnection connection)
   at Microsoft.UpdateServices.Internal.GenericDataAccess.ExecuteSP(String spName, DBParameterCollection args, IExecuteSPHandler handler, Int32 queryTimeoutInSeconds)
   at Microsoft.UpdateServices.Internal.GenericDataAccess.ExecuteSP(String spName, DBParameterCollection args, IExecuteSPHandler handler)
   at Microsoft.UpdateServices.Internal.DatabaseAccess.AdminDataAccess.ExecuteSPSetConfiguration(ConfigurationTableRow row, IDictionary changedLanguages, IEnumerable`1 programKeys)
   --- End of inner exception stack trace ---
   at Microsoft.UpdateServices.Internal.DatabaseAccess.AdminDataAccess.ExecuteSPSetConfiguration(ConfigurationTableRow row, IDictionary changedLanguages, IEnumerable`1 programKeys)
   at Microsoft.UpdateServices.Internal.BaseApi.UpdateServerConfiguration.Save(Boolean detectConfigChange)
   at Microsoft.UpdateServices.Setup.StartServer.StartServer.GenerateNewDatabaseEncryptionKey()
2015-05-11 13:13:20  StartServer encountered errors. Exception=Cannot save configuration because the server is still processing a previous configuration change.
2015-05-11 13:13:20  Microsoft.UpdateServices.Administration.CommandException: Failed to start and configure the WSUS service
   at Microsoft.UpdateServices.Administration.PostInstall.Run()
   at Microsoft.UpdateServices.Administration.PostInstall.Execute(String[] arguments)
Fatal Error: Failed to start and configure the WSUS service

I'm wondering, if there's some sort of database that doesn't remove when I try to "Remove Roles and Features".

I've also tried to go into IIS, and manually remove the "WSUS Administration" node and reconfigure WSUS like suggested in http://networkerslog.blogspot.ca/2012/11/wsus-installation-on-windows-server.html but no success.

We did have a WSUS server running on a Server 2008 box, but that has been disabled in the GPO 

I'm able to get Microsoft updates, and this was working last week, so I know it's not a firewall setting... just don't know what else I can look at.

Hello all,

I can't seem to connect to my WSUS server anymore through the MMC. When I try, I get the following error message:

Cannot connect to 'ServerName'. SQL server may not be running on the server.

I don't know what caused this problem, it just stopped working one day. I'm not sure if it is related or not, but I'm getting the following error message in the application event log.

Login failed for user 'NT AUTHORITY\NETWORK SERVICE'. [CLIENT: <named pipe>]

Unfortunately, I'm not too familiar with SQL. When I installed WSUS over a year ago, I chose all defaults, so I believe that the express version of SQL is installed. Any help that you could give me would be great.

Thanks,

Joe

I'm getting this error when installing the WSUS

OS : Windows 2008 R2

Windows Server Update Services: Installation failed
   Error: The update was found but could not be downloaded. Please check your network connectivity or contact your Administrator to ensure that the update is approved for this computer.

windows 2012 r2

WSUS - Installed the suggest patches from this link: https://support.microsoft.com/en-us/kb/3159706

Before installing KB 3159706, server was not downloading upgrade. Now successfully downloading and pushing to client; however, client is failing

Windows clients are receiving the 1607 upgrade but getting errors and not installing.

Requested file 14393.0.160715-1616.rs1_release_CLIENTProfessionalVL_VOL_x64fre_en-us.esd has no decrypt information
2016/10/07 15:48:08.8788941 4556  6580  Handler         Installer completed. Process return code = 0x80248008, result = 0x80248008, callback pending = False

Thanks

Hi,

The last couple of cumulative updates for windows 10 Pro 1607 have gotten stuck downloading at 45% when using wsus ? e.g. KB 3199209

I have noted that windows when updating language packs are also getting stuck.

Anyone had any luck getting to the bottom of this?

Stuart