Hello Friends,

 I have WSUS server (Windows server 2016). We have multiple sites. Our Client computers reporting to single wsus server

 Some of the Windows 7 client machines are showing not yet reported status.

 I have tried lots of troubleshooting like renaming software distribution folder, susid deletion, various time ran wuauclt /detectnow and wuauclt /reportnow but still not resolved my issue.

However the Update is detecting/Installing from Microsoft Update website perfectly. The issue is only when I update through WSUS server.

If someone has any idea please help me

Amit Kumar

Hi guys, 

I have been working on a POC for my company, for Patch Management tools/Platforms. 
Patch Management has been a short-fall that the team has been trying to remediate. 

We have a dedicated Windows SOE, which we have highly customized. 

WSUS servers deploy approved patches, approved by our team. 

The SolarWinds product (on top of the WSUS service) provides the analytics that we need, but not necessarily the third party patching support. 

We have completed POCs for SolarWinds' Patch Manager and Ivanti's Patch. 
Both products have shortfalls. 

What have other SysAdmins' experiences been with deploying these products? 

What were the issues you faced? 

Why did you choose a specific product over another? 

In my organization we mostly use laptops with Windows 10 and Windows 7 installed. Our WSUS server is installed on Windows Server 2012 R2. We use Active Directory and Group Policy to manage workstations groups. The WSUS seems to be working properly.

Windows 7 get all their updates with no problems.

Windows 10 get all their updates, except the Feature Updates. Specifically Feature Updates 1607, 1703, 1709, 1803 cannot be installed. Not all workstations have problems with all the Feature Updates. If I update the laptop from Microsoft Update on receipt, then it will have a problem with the next Feature Update that will come (thankfully the 1809 update has not made it through) after joining our AD domain. The rest of the updates (Windows Defender definition, security rollups, etc) get installed flawlessly. When the feature update fails, no explanation is given.

Any suggestions?

Hi,

I tried to install RSAT for Win 10 1809.
I found many URL to "bypass" WSUS and install them from Windows Update : It works fine.

But ...

Is'it possible to add a classification in my WSUS Server to enable installation of RSAT capability from a client using my WSUS server ?

I ask that because my deployment process use a local adminstator to make installation et he has no internet access !

Thank you for your help.

Ludovic.

Dear all.

Please i need help.

I still trying to install a thirty part update software but i have some problem.

One of this is that this program report me a mismath between WSUS API server and WSUS API client on my two (upstream and downstream) servers.

Looking on the server console i see that the version is 6.2.9200.22297 instead in the mmc under Aubout update services i see 6.2.9200.22167

How i can have the same version? And is this the latest version of Wsus?

Sorry but i cannot post images........

Thanks

I am trying to migrate my WSUS environment from a Server 2008R2 virtual machine to a Server 2016 virtual machine. I have stood up a new 2016 virtual machine and installed the WSUS role on it. When running the WSUS Server Configuration Wizard, I set the Update Source to synchronize from the current WSUS server and set the new server as a Replica Server. Once the synchronization has completed, I go to check "All Updates"  and I see (0 updates of 145691 shown, 145691 total). The synchronization shows to have been successful on the overview page. I have tried setting up this 2016 Server as a WSUS Server and just synchronize with the 2008R2 WSUS Server, setting up the 2016 Server as a WSUS Server, exporting the WSUS Contents and DB from the 2008R2 Server then importing it into the 2016 server and have gotten the same results. Can anyone help me with this? I need to get the updates from the DB on the 2008R2 server to populate on the new WSUS server so I can decom the old WSUS server.



Hi All,

Want to double check if we can import the media packs for windows 10  N into wsus? We would like to use WSUS to deploy the media pack to our devices in the network.

regards,

Wilson

HI, 

Recently my clients were trying to download through WSUS KB4462917, KB4049411... some client were able to download and install the update and the other failed. 

After checking the reason I notice that the client that failed in installing this update are running windows 10 14393.1944, and the client which successfully installed the update running 14393.2551

Is there any way to upgrade from 14393.1944 to 14393.2551

Thanks

Hi everyone, My questions is How to identify if an update installed on windows 7 from WSUS Server? I want to understand this from client side but not server side.

Thanks

Hi Team,

I have one Server 2008R2 where the "Install Updates" button is missing, so is the "check online for updates" button.

This server is part of a Group policy to download but not install updates, next to about 40 other servers which all work as expected.

(See screenshot below)


I removed the server from the GP for testing but the behavior is the same.
I found a reg key:  

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate\DisableWindowsUpdateAccess Which was set to 1, I changed that to 0 but had the same behavior.

I am out of ideas?

Server is throwing this error : SCCM and WSUS Sync error.

Sync failed: The operation has timed out

Microsoft.UpdateServices.Internal.DatabaseAccess.ApiRemotingCompressionProxy.GetWebResponse

prakash

So I had a spare 2TB hard drive and I decided to mess around with WSUS on my domain.

Initially the plan was to have a local update repository for all the possible drivers and updates i may ever need, the problem is when I initially set it up for the first time i literally just clicked All products and everything for all products not even thinking that every single update and driver for every microsoft OS and software would take 2TB. 

So that alone didn't work because IIS's sql instance completely crashed, so now i'm running the DB on a proper SQL 2017 which can take a lot more and this time i was a little more sensible and chose only everything for the OS's I am currently using to figure out how much space is required.

It's been running for a while the folder is over 1TB now I have literally no idea how much space you need if you select this or that so literally feel like this whole thing can finish any second or could be 1TB out of 100TB and it will never ever end and my disk will run out of space before I have a chance of ever seeing this background sync finish and until then obviously can't do any updates on my domain because i get the usual:

There were problems installing some updates, but we'll try again later. If you keep seeing this and want to search the web or contact support for information, this may help:

 Definition Update for Windows Defender Antivirus - KB2267602 (Definition 1.281.308.0) - Error 0x80248007

So call it a rant or a question but is there a way to estimate how much space each product and whatever option you select on WSUS will take? Otherwise how can one figure out if they need a 2TB hard drive or a 10TB hard drive for their repository. I'm also running data deduplication which helps but certainly ain't gonna have much more than a few GBs if that of effect.

If there is a website, a way to calculate or if someone from Microsoft can literally right click properties and tell us what the folder sizes are on your servers or something would be nice :D

Hi everyone,

I'm very new to WSUS, so i have a few questions. Firstly let me introduce my computer environment. I have Windows Server 2008 R2 Enterprise Edition on my computer and i used it as a WSUS server.  3 virtual servers (windows server 2003, 2003SP2 and 2008) are installed with VMWare on my OS. All servers have a dedicated IP addresses and can ping each other. The firewall is off and remote access is enabled. All the communication line seems working well. My client servers (servers on wmware) are added to WSUS server. I have only changed 2 configurations in Local Group Policy Editor. I configured "Specify intranet Microsoft Update Service Location" to point my WSUS server and secondly i configured "Automatic Updates" to "Allow Local Admin to Choose Settings".

What i want to do is to manage my client servers' updates with C#. I have a list (ex: txt file) that holds the KB articles of updates, update names and which need these updates. I want to write an application which will read the input file and start installing updates to necessary servers by using WSUS.

I don't know which classes or methods i need to use. Do you have any documents for me to read or any pattern for me to follow. Any guidance will be appriciated.

(PS: As far as i searched on the internet, i see that Powershell has some capabilities on controlling WSUS. If my problem can be solved with Powershell, where should i begin? (But my first option is still solution with C# =))

WSUS installation won't finish the post-installation tasks. See below last bit of lines from the tmp error report.]

Server 2012 Standard.

Any advice?

2018-11-23 21:35:31  Fetching ContentDir from registry store
2018-11-23 21:35:31  Value is C:\WSUS_updates
2018-11-23 21:35:31  Swtching DB to multi-user mode......
2018-11-23 21:35:32  Finished setting multi-user mode
2018-11-23 21:35:32  Writing DB settings to registry...
2018-11-23 21:35:32  Marking PostInstall done for UpdateServices-WidDatabase in the registry...
2018-11-23 21:35:32  Configuring IIS...
2018-11-23 21:35:32  Start: ConfigureWebsite
2018-11-23 21:35:32  System.Runtime.InteropServices.COMException (0x8007000D): The data is invalid.

   at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
   at System.DirectoryServices.DirectoryEntry.Bind()
   at System.DirectoryServices.DirectoryEntry.get_AdsObject()
   at System.DirectoryServices.PropertyValueCollection.PopulateList()
   at System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry entry, String propertyName)
   at System.DirectoryServices.PropertyCollection.get_Item(String propertyName)
   at Microsoft.UpdateServices.Administration.UseCustomWebSite..ctor()
   at Microsoft.UpdateServices.Administration.PostInstall.ConfigureWebsite(Int32 portNumber)
   at Microsoft.UpdateServices.Administration.PostInstall.Run()
   at Microsoft.UpdateServices.Administration.PostInstall.Execute(String[] arguments)
Fatal Error: The data is invalid.

Hey all, I have a workstation that's trying to download updates for Office 2010 but it only has Office 2013 installed. Here's one of the errors I'm getting:

Security Update for Microsoft Excel 2010 (KB4011660) 32-Bit Edition - Error 0x80070643

I've run the following string of commands but no joy:

net stop wuauserv
net stop cryptSvc
net stop bits
net stop msiserver
ren C:\Windows\SoftwareDistribution SoftwareDistribution.old
ren C:\Windows\System32\catroot2 Catroot2.old
net start wuauserv
net start cryptSvc
net start bits
net start msiserver

I found this script that helped with some random issues on other computers but again no joy:

https://answers.microsoft.com/en-us/windows/forum/windows_10-update/how-toreset-windows-update-components-in-windows/14b86efd-1420-4916-9832-829125b1e8a3

Anyone have any ideas, suggestions, or recommendations on what might be wrong and how to fix it?

Hey all, I have a workstation that's trying to download updates for Office 2010 but it only has Office 2013 installed. Here's one of the errors I'm getting:

Security Update for Microsoft Excel 2010 (KB4011660) 32-Bit Edition - Error 0x80070643

I've run the following string of commands but no joy:

net stop wuauserv
net stop cryptSvc
net stop bits
net stop msiserver
ren C:\Windows\SoftwareDistribution SoftwareDistribution.old
ren C:\Windows\System32\catroot2 Catroot2.old
net start wuauserv
net start cryptSvc
net start bits
net start msiserver

I found this script that helped with some random issues on other computers but again no joy:

https://answers.microsoft.com/en-us/windows/forum/windows_10-update/how-toreset-windows-update-components-in-windows/14b86efd-1420-4916-9832-829125b1e8a3

Anyone have any ideas, suggestions, or recommendations on what might be wrong and how to fix it?

After installing Server 2012 Standard on ESX 5.1 I completed all available Windows Updates and proceeded to add the WSUS role.  I chose the default WID database and the role addition was seemingly successful.  Unfortunately, the Post-deployment Configuration failed.  A log file had been created in the AppData\Local\Temp folder but at initial glance it seemed to imply that my error was likely due to skipping a step during installation via PowerShell.  However, I didn't install using PowerShell and I set off to surf the Internets for clues on resolving this issue.  I searched about a dozen forums that with similar, but different issues until a comment by Lawrence Garvin (http://social.technet.microsoft.com/profile/lawrence%20garvin/?ws=usercard-inline) convinced me to go back and look at my log. 

2013-07-23 11:03:18  Postinstall started
2013-07-23 11:03:18  Detected role services: Api, UI, WidDatabase, Services
2013-07-23 11:03:18  Start: LoadSettingsFromXml
2013-07-23 11:03:18  Start: GetConfigValue with filename=UpdateServices-Services.xml item=ContentLocal
2013-07-23 11:03:18  Value is true
2013-07-23 11:03:18  End: GetConfigValue
2013-07-23 11:03:18  Start: GetConfigValue with filename=UpdateServices-Services.xml item=ContentDirectory
2013-07-23 11:03:18  Config file did not contain a value "ContentDirectory"
2013-07-23 11:03:18  Microsoft.UpdateServices.Administration.CommandException: A required configuration value was not found in the system. This is usually caused by installing WSUS through PowerShell and not specifying a configuration file. Review the article Managing WSUS Using PowerShell at TechNet Library (http://go.microsoft.com/fwlink/?LinkId=235499) for more information on the recommended steps to perform WSUS installation using PowerShell.
   at Microsoft.UpdateServices.Administration.PostInstall.GetConfigValue(String filename, String item)
   at Microsoft.UpdateServices.Administration.PostInstall.LoadSettingsFromXml()
   at Microsoft.UpdateServices.Administration.PostInstall.Initalize(Parameters parameters)
   at Microsoft.UpdateServices.Administration.PostInstall.Execute(String[] arguments)
Fatal Error: A required configuration value was not found in the system. This is usually caused by installing WSUS through PowerShell and not specifying a configuration file. Review the article Managing WSUS Using PowerShell at TechNet Library (http://go.microsoft.com/fwlink/?LinkId=235499) for more information on the recommended steps to perform WSUS installation using PowerShell.

Upon closer inspection the specifics of my error were right there for me, I just had to look at it long enough to decipher the details.  What I now read is that Post-deployment configuration finds a file called UpdateServices-Services.xml (I found it in Windows\System32\ServerManager\ComponentConfiguration\).  It determines that ContentLocal=True which correctly indicates that my updates are to be stored locally.  It proceeds to inquire about the ContentDirectory, but comes back without a value.  Here are my UpdateServices-Services.xml file contents

<?xml version="1.0" encoding="utf-16"?><INSTANCE CLASSNAME="ServerComponent_UpdateServices_Services"><PROPERTY NAME="ContentDirectory" TYPE="string"></PROPERTY><PROPERTY NAME="ContentLocal" TYPE="boolean"><VALUE>true</VALUE></PROPERTY></INSTANCE>

I can see that the ContentLocal property did indeed have the value true, but the ContentDirectory property did not have a value.  I now needed to figure out if a String value could be specified in the same way a Boolean value was, or if it needed quotes around it, or was supposed to be specified more like an attribute (learned about that somewhere along the way).  I couldn't find any conclusive websites, and I didn't want to just try it for fear of the Post-deployment configuration running with an invalid ContentDirectory.  Once again I returned to my log file and searched for answers at the http://go.microsoft.com/fwlink/?LinkId=235499 that was indicated.  I didn't find any exact matches, but eventually I found a sample .xml file that specified a string value.  It specified it as <VALUE>string</VALUE> with no brackets, so I knew to specify mine as <VALUE>C:\LocalMSUpdateCache</VALUE> and saved it.  My UpdateServices-Services.xml now looks like this:

<?xml version="1.0" encoding="utf-16"?><INSTANCE CLASSNAME="ServerComponent_UpdateServices_Services"><PROPERTY NAME="ContentDirectory" TYPE="string"><VALUE>C:\LocalMSUpdateCache</VALUE></PROPERTY><PROPERTY NAME="ContentLocal" TYPE="boolean"><VALUE>true</VALUE></PROPERTY></INSTANCE>

I returned to Server Manager -> WSUS and re-attempted the Postdeployment configuration.  It completed successfully!

I'm glad that my fix was relatively simple and that Lawrence was particular about the details of the log file. 

1. My exact error isn't always going to be documented

2. Just because the log file looks unintelligible (I have thus far avoided both powershell and xml), doesn't mean it's useless.

Good luck to anyone with a similar issue.  You too may be able to figure it out yourself.

Hello,

as the title suggests, I have two clients reporting a wrong IP address in WSUS. I am sure that both had the right one some time ago. So, my first question is: may this lead to some issues or not?

Secondly, for one client I run the following some days ago:

wuauclt /resetauthorization /reportnow

but WSUS continues to show the wrong IP address. Any suggestion?

Thank you.

Riccardo