Hey everyone!

I have a plan to deploy a few downstream WSUS servers. I can't understand one thing and need help. In the AD I create OU for a remote office and move some PCs in this OU. In GP management I create a new GPO for that OU.

Which server do I need to specify in the GPO for the remote office? Root or replica?

Deploying autonomous WSUS servers is an easy way but I've got more than 20 remote offices without remote administrators and it will be more difficult to manage them

Thanks

Hi there.  I've done a fair amount of research and attempted multiple suggestions from other threads about this issue but nothing has worked so I'm hoping someone can provide me with some information about the Database Error message I'm getting when running Server Cleanup Wizard in WSUS version 6.3.9600.18838.  I can run all the options except the first one and get this error when running it.  Help would really be appreciated.  Thanks.

FIRST ERROR in EVENT LOG    

The WSUS administration console was unable to connect to the WSUS Server Database.

Verify that SQL server is running on the WSUS Server. If the problem persists, try restarting SQL.

System.Data.SqlClient.SqlException -- Execution Timeout Expired.  The timeout period elapsed prior to completion of the operation or the server is not responding.

SECOND ERROR in EVENT LOG

The description for Event ID 0 from source WSusCertServer cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

Hello,

We want to update windows server on premise from wsus server on azure. What is the best way to proceed and what are the prerequisites.

Thank you

Yves

WSUS Version 6.2.9200.22167

Windows Server 2012

I have about 100 updates that are getting this error.  I'm watching the downloads through powershell with this command:

bitsadmin /list /allusers

All of the files seem to eventually download, yet this keeps persisting.

Hi,

WSUS post installation failed with the below error log. Any Suggestions pls. 

Syed

Hi,

I have several Windows 7 and Windows 10 machines on the network. Some of the Windows 10 machines(not all) don't get updates from WSUS server and getting from Microsoft using the Internet. My Windows 7 machines haven't this issue. The users are domain users and logged on with the domain user account on their computers. And GPO is successfully applied to the machines. Any help would be appreciated.

Hi Team,

I have WSUS standalone with WID. I need to pull the report from SQL for below status based on approved patches. 

> Waiting to get install

> Approved updates installed and waiting for reboot

> Approved updates installed and rebooted successfully.

Please help.

Regards, Santhosh B S

FOR MICROSOFT:

Hello,

today after installation of  KB4480970 (automatically by Windows Update as Important) to our Windows 2008 R2 Standard Server the server stopped serve Clients by shared storage (haven't tried anything else).  The Client has issued an error Invalid handle and couldn't connect (tried on Windows 7 Pro SP1 clients with installed KB4480970 only). After uninstallation it started work again, so the problem is positively in the KB4480970. Pls stop distribute the KB4480970 to the Windows 2008 R2 Server and correct the behavior. Thank You in advance.

So I'm currently trying to get my 2016 WSUS server to update manually, via "Start>Settings>Windows Update" I have gone through a plethora of google searches attempting to figure out why I cannot download updates. Currently the error I'm getting is this:

"There were problems installing some updates, but we'll try again later. If you keep seeing this and want to search the web or contact support for more information, this may help:"

Then it gives me two of the updates I'm trying to install (which were approved via WSUS but not installing automatically or manually) and Error 0x80244019.

On top of that, ALL of my 2016 servers are not pulling updates from WSUS. All approved updates are showing "Install" under status and yet none of them are actually installing. I'm assuming it has something to do with the above. As I've tried manually updating some other test servers and get similar errors, but same end result of no updates.

Only thing that seemed to work on the test machines was to add the following to the registry:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Update

DisableWindowsUpdateAccess

DoNotConnectToWindowsUpdateInternetLocations

Both keys set to 0 allowed me to manually download updates.

Any help would be appreciated and hopefully save my hair from being ripped out further.

Jeremiah

We have an Active Directory domain (Win 2012 R2 DCs) that uses a Proxy Server ('Squid', ver. 3.5.20, on Linux) to reach the internet. There's a WSUS server (also Win 2012 R2) to handle patching. Patch Server has 17 GB free on C:, 174 GB free on D: (where it stores downloaded patches). It uses the Windows Internal Database and does not download the actual patch files until they are approved.

It had apparently been working fine, but at some point it started failing to download patches.  It synchronizes directly from Microsoft Update with no errors, gets the patch list, displays applicable patches, and we approve them.  Then it starts trying to download them and fails.  Application Log shows Event ID 364 Task Category 2 "Content file download failed.  Reason: The server did not return the file size.  The URL might point to dynamic content.  The Content-Length header is not available in the server's HTTP reply".  BITS looks like it's running, but the state says 'Ignores_Shutdown'.  I tried building a clean new VM with the intent of setting up a new WSUS server to experiment with.  It is not joined to the domain.  I tried to patch it directly from Microsoft Update, not going through my WSUS server.  It fails to download patches.  The failure looks like the same problem the WSUS server is having, but the error code is 0x80200011.  The WindowsUpdate.log file looks like the BITS job is being built correctly - at least, it seems to be pointing at the proxy server correctly - but every download job has a 'Download job failed because of insufficient range support' error.  I asked the network / proxy guys if the proxy server supports http 1.1, specifically the Range Request feature, but that have not responded.

I have searched and searched to find a solution to have WSUS prompt a user to reboot after applying updates on Windows 10.

I have applied every combination of GPO settings I can apply and nothing works.  Does anyone have a solution?

areyea

This situation started a few months ago.

When ever new updates emerge, they stuck at pending install, forever (I usually don't turn off my PC at all for days). In the mean time, my system start to be hogged by a process called the svhcost.exe (netsvc-p) which takes half my CPU and my disk activity alike. 

Windows 10 Pro 1803 OS build 17134.472 under domain environment. Update is automatically approved by WSUS.

I have a PC at home which auto updates just fine but most computer in my domain that are 1803, has this hiccup.

Image may be NSFW.
Clik here to view.

The process keeps reading the files I do not know detail of. But apparently it's related to Windows Update.

Image may be NSFW.
Clik here to view.

Image may be NSFW.
Clik here to view.

In the mean time the system get laggy coz all the CPU eaten up. The settings windows is ridiculously slow in response and often shows up white. Until I finally I found out that I can go to "Advanced options" and flip the option "Allow metered network". After I flip the options, update start to show 0% and then start installing.

Mind this: I need to FLIP this option every time new updates come and the system is acting up. Letting it stay on or off just do not make a different.

Image may be NSFW.
Clik here to view.

Does any one experience this? I can't think of a valid explanation. 

Hi, I need help on re-installing WSUS 3.0 SP2 in Win Server 2008 R2 SP1

It has been installed before without any problems but we had to remove it and re-install however; keep encountering this problem.

Problem signature:
Problem Event Name: WSUSSetup
Installer Name: WusSetup.exe
Installer Version: 3.2.7600.226
Error Code: 80070643
Custom Action: unknown
OS Version: 6.1.7601.2.1.0.272.7
Locale ID: 1036

2011-11-16 22:28:07 Success MWUSSetup Validating pre-requisites...
2011-11-16 22:28:07 Error MWUSSetup WSUS is outdated. But this will not block setup (Error 0x00000000: The operation completed successfully.)
2011-11-16 22:28:21 Success MWUSSetup Initializing installation details
2011-11-16 22:28:21 Success MWUSSetup Skipping Asp.Net install since not running on win2k3...
2011-11-16 22:28:21 Success MWUSSetup Installing wYukon using ocsetup
2011-11-16 22:28:21 Success MWUSSetup Installing Windows Internal database using ocsetup with command line as "ocsetup "WSSEE" /quiet restart"
2011-11-16 22:28:26 Error MWUSSetup The process ocsetup "WSSEE" /quiet restart returned error: 0x643 (Error 0x80070643: Fatal error during installation.)
2011-11-16 22:28:26 Error MWUSSetup ExecCmd failed (Error 0x80070643: Fatal error during installation.)
2011-11-16 22:28:26 Error MWUSSetup Install Windows Internal database: Failed to execute "ocsetup "WSSEE" /quiet restart" (Error 0x80070643: Fatal error during installation.)
2011-11-16 22:28:26 Error MWUSSetup CInstallDriver::PerformSetup: Installation of wYukon failed (Error 0x80070643: Fatal error during installation.)
2011-11-16 22:28:26 Error MWUSSetup CSetupDriver::LaunchSetup: Setup failed (Error 0x80070643: Fatal error during installation.)

I have tried several procedures that I have found but still keep on encountering this problem

Hi,

Are the Updates for the tools "Enterprise WDK (EWDK)" provided by WSUS?

(https://docs.microsoft.com/en-us/windows-hardware/drivers/download-the-wdk)

If yes, which products and classifications should be activated under "OPTIONS > Products and Classification" to download the updates?

Best regards

Birdal

Hello,

We have WSUS server and being used to deploy patches for set of machines to which WSUS server is joined to through GPO. We have one more set of machines in different domain in same forest\network but we cannot deploy GPO on that domain due to some restrictions.

In this scenario, does modifying the registry settings on client will work? or Is there any other alternative way to redirecting the client to our WSUS?

Appreciate any comments

Regards,

Sunil 

Hi there,

For whatever reason, the upgrade to Windows 10 version 1809 is not syncing to my WSUS server. Other updates are syncing just fine. Is there a reason for this?

Hello,

I've already done a basic script to get a report of approved updates by queried computer, but in some cases the results are reporting some 'NotApproved' updates

$computername='testcomputer.mydomain.com'

$updatescope = New-Object Microsoft.UpdateServices.Administration.UpdateScope
$updateScope.ApprovedStates = [Microsoft.UpdateServices.Administration.ApprovedStates]::LatestRevisionApproved  # Includes updates whose latest revision is approved.
$updateScope.UpdateApprovalActions = [Microsoft.UpdateServices.Administration.UpdateApprovalActions]::Install

$updatescope.ExcludedInstallationStates=@('NotApplicable','Installed')

$mycomputer=$wsus.GetComputerTargetbyName($computername) 

foreach ($update in $mycomputer.GetUpdateInstallationInfoPerUpdate($updateScope) ) {
        $updateinfo=$update.getupdate()
        [pscustomobject][Ordered]@{
           Status=$update.UpdateInstallationState
           Approval=$update.UpdateApprovalAction
           ArrivalDate=get-date $updateinfo.ArrivalDate -format dd-MMM-yyyy
           Title=$updateinfo.title
        }
      }  

This code produces a short report of pending updates on the majority of my computers, but In some I got results like these

     Status    Approval ArrivalDate Title                                                                                                                              
      ------    -------- ----------- -----                                                                                                                              
NotInstalled NotApproved 08-Aug-2017 Update for Windows Server 2012 R2 (KB4033428)                                                                                      
NotInstalled NotApproved 10-Jan-2018 Microsoft .NET Framework 4.7 for Windows 8.1 and Windows Server 2012 R2 for x64 (KB3186539)                                        
NotInstalled NotApproved 11-Jul-2018 Microsoft .NET Framework 4.7.1 for Windows 8.1 and Windows Server 2012 R2 for x64 (KB4033369)                                      
NotInstalled NotApproved 24-Jul-2018 Update for Windows Server 2012 R2 (KB4339284)                                                                                      
NotInstalled NotApproved 10-Oct-2018 2018-10 Security Only Quality Update for Windows Server 2012 R2 for x64-based Systems (KB4462941)                                   
NotInstalled NotApproved 18-Oct-2018 Update for Windows Server 2012 R2 (KB4462901)

What is the reason that some computers are reporting 'NotApproved' action? Is the following filter the appropriate by my purposes -> [Microsoft.UpdateServices.Administration.UpdateApprovalActions]::Install

Or should I add a second filtering like -> $mycomputer.GetUpdateInstallationInfoPerUpdate($updateScope) | where {$_.UpdateApprovalAction -ne 'NotApproved'}

Best Regards

Hi Team,

i am getting the below error on post installation of WSUS server.

A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL Server is configured to allow remote connections. (provider: Named Pipes Provider, error: 40 - Could not open a connection to SQL Server) ---> System.ComponentModel.Win32Exception (0x80004005): The system cannot find the file specified

i am using WID 

the log files gives the below error.

2019-01-10 23:46:08  Postinstall started
2019-01-10 23:46:08  Detected role services: Api, UI, WidDatabase, Services
2019-01-10 23:46:08  Start: LoadSettingsFromParameters
2019-01-10 23:46:08  Content local is: True
2019-01-10 23:46:08  Content directory is: sccmsrvhamdbs11.abc.com
2019-01-10 23:46:08  SQL instname is: 
2019-01-10 23:46:08  End: LoadSettingsFromParameters
2019-01-10 23:46:08  Start: Run
2019-01-10 23:46:08  Fetching WsusAdministratorsSid from registry store
2019-01-10 23:46:08  Value is S-1-5-21-4268575216-2807771012-2215709554-1012
2019-01-10 23:46:08  Fetching WsusReportersSid from registry store
2019-01-10 23:46:08  Value is S-1-5-21-4268575216-2807771012-2215709554-1013
2019-01-10 23:47:07  Configuring content directory...
2019-01-10 23:47:07  Configuring groups...
2019-01-10 23:47:07  Starting group configuration for WSUS Administrators...
2019-01-10 23:47:07  Found group in regsitry, attempting to use it...
2019-01-10 23:47:10  Writing group to registry...
2019-01-10 23:47:10  Finished group creation
2019-01-10 23:47:10  Starting group configuration for WSUS Reporters...
2019-01-10 23:47:10  Found group in regsitry, attempting to use it...
2019-01-10 23:47:10  Writing group to registry...
2019-01-10 23:47:10  Finished group creation
2019-01-10 23:47:10  Configuring permissions...
2019-01-10 23:47:10  Fetching content directory...
2019-01-10 23:47:10  Fetching ContentDir from registry store
2019-01-10 23:47:10  Value is sccmsrvhamdbs11.abc.com
2019-01-10 23:47:10  Fetching group SIDs...
2019-01-10 23:47:10  Fetching WsusAdministratorsSid from registry store
2019-01-10 23:47:10  Value is S-1-5-21-4268575216-2807771012-2215709554-1012
2019-01-10 23:47:10  Fetching WsusReportersSid from registry store
2019-01-10 23:47:10  Value is S-1-5-21-4268575216-2807771012-2215709554-1013
2019-01-10 23:47:10  Creating group principals...
2019-01-10 23:47:10  Granting directory permissions...
2019-01-10 23:47:10  Granting permissions on content directory...
2019-01-10 23:47:10  Granting registry permissions...
2019-01-10 23:47:10  Granting registry permissions...
2019-01-10 23:47:10  Granting registry permissions...
2019-01-10 23:47:10  Configuring shares...
2019-01-10 23:47:10  Configuring network shares...
2019-01-10 23:47:10  Fetching content directory...
2019-01-10 23:47:10  Fetching ContentDir from registry store
2019-01-10 23:47:10  Value is sccmsrvhamdbs11.abc.com
2019-01-10 23:47:10  Fetching WSUS admin SID...
2019-01-10 23:47:10  Fetching WsusAdministratorsSid from registry store
2019-01-10 23:47:10  Value is S-1-5-21-4268575216-2807771012-2215709554-1012
2019-01-10 23:47:10  Content directory is local, creating content shares...
2019-01-10 23:47:10  Creating share "UpdateServicesPackages" with path "sccmsrvhamdbs11.abc.com\UpdateServicesPackages" and description "A network share to be used by client systems for collecting all software packages (usually applications) published on this WSUS system."
2019-01-10 23:47:10  Deleting existing share...
2019-01-10 23:47:10  Creating share...
2019-01-10 23:47:10  Share successfully created
2019-01-10 23:47:10  Creating share "WsusContent" with path "sccmsrvhamdbs11.abc.com\WsusContent" and description "A network share to be used by Local Publishing to place published content on this WSUS system."
2019-01-10 23:47:10  Deleting existing share...
2019-01-10 23:47:10  Creating share...
2019-01-10 23:47:10  Share successfully created
2019-01-10 23:47:10  Creating share "WSUSTemp" with path "C:\Program Files\Update Services\LogFiles\WSUSTemp" and description "A network share used by Local Publishing from a Remote WSUS Console Instance."
2019-01-10 23:47:11  Deleting existing share...
2019-01-10 23:47:11  Creating share...
2019-01-10 23:47:11  Share successfully created
2019-01-10 23:47:11  Finished creating content shares
2019-01-10 23:47:11  Stopping service WSUSService
2019-01-10 23:47:11  Stopping service W3SVC
2019-01-10 23:47:11  Configuring WID database...
2019-01-10 23:47:11  Configuring the database...
2019-01-10 23:47:11  Establishing DB connection...
2019-01-10 23:48:11  Re-Establishing Connection to execute Multi User Query ...
2019-01-10 23:48:11  System.Data.SqlClient.SqlException (0x80131904): A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL Server is configured to allow remote connections. (provider: Named Pipes Provider, error: 40 - Could not open a connection to SQL Server) ---> System.ComponentModel.Win32Exception (0x80004005): The system cannot find the file specified
   at System.Data.ProviderBase.DbConnectionPool.TryGetConnection(DbConnection owningObject, UInt32 waitForMultipleObjectsTimeout, Boolean allowCreate, Boolean onlyOneCheckConnection, DbConnectionOptions userOptions, DbConnectionInternal& connection)
   at System.Data.ProviderBase.DbConnectionPool.TryGetConnection(DbConnection owningObject, TaskCompletionSource`1 retry, DbConnectionOptions userOptions, DbConnectionInternal& connection)
   at System.Data.ProviderBase.DbConnectionFactory.TryGetConnection(DbConnection owningConnection, TaskCompletionSource`1 retry, DbConnectionOptions userOptions, DbConnectionInternal oldConnection, DbConnectionInternal& connection)
   at System.Data.ProviderBase.DbConnectionInternal.TryOpenConnectionInternal(DbConnection outerConnection, DbConnectionFactory connectionFactory, TaskCompletionSource`1 retry, DbConnectionOptions userOptions)
   at System.Data.SqlClient.SqlConnection.TryOpenInner(TaskCompletionSource`1 retry)
   at System.Data.SqlClient.SqlConnection.TryOpen(TaskCompletionSource`1 retry)
   at System.Data.SqlClient.SqlConnection.Open()
   at Microsoft.UpdateServices.DatabaseAccess.DBConnection.Connect(String connectionString)
   at Microsoft.UpdateServices.Administration.ConfigureDB.CreateDBConnection()
   at Microsoft.UpdateServices.Administration.ConfigureDB.TryEnsureDatabaseIsInMultiUserMode()
ClientConnectionId:00000000-0000-0000-0000-000000000000
Error Number:2,State:0,Class:20
2019-01-10 23:48:11  System.Data.SqlClient.SqlException (0x80131904): A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL Server is configured to allow remote connections. (provider: Named Pipes Provider, error: 40 - Could not open a connection to SQL Server) ---> System.ComponentModel.Win32Exception (0x80004005): The system cannot find the file specified
   at System.Data.SqlClient.SqlInternalConnectionTds..ctor(DbConnectionPoolIdentity identity, SqlConnectionString connectionOptions, SqlCredential credential, Object providerInfo, String newPassword, SecureString newSecurePassword, Boolean redirectedUserInstance, SqlConnectionString userConnectionOptions, SessionData reconnectSessionData, DbConnectionPool pool, String accessToken, Boolean applyTransientFaultHandling, SqlAuthenticationProviderManager sqlAuthProviderManager)
   at System.Data.SqlClient.SqlConnectionFactory.CreateConnection(DbConnectionOptions options, DbConnectionPoolKey poolKey, Object poolGroupProviderInfo, DbConnectionPool pool, DbConnection owningConnection, DbConnectionOptions userOptions)
   at System.Data.ProviderBase.DbConnectionFactory.CreatePooledConnection(DbConnectionPool pool, DbConnection owningObject, DbConnectionOptions options, DbConnectionPoolKey poolKey, DbConnectionOptions userOptions)
   at System.Data.ProviderBase.DbConnectionPool.CreateObject(DbConnection owningObject, DbConnectionOptions userOptions, DbConnectionInternal oldConnection)
   at System.Data.ProviderBase.DbConnectionPool.UserCreateRequest(DbConnection owningObject, DbConnectionOptions userOptions, DbConnectionInternal oldConnection)
   at System.Data.ProviderBase.DbConnectionPool.TryGetConnection(DbConnection owningObject, UInt32 waitForMultipleObjectsTimeout, Boolean allowCreate, Boolean onlyOneCheckConnection, DbConnectionOptions userOptions, DbConnectionInternal& connection)
   at System.Data.ProviderBase.DbConnectionPool.TryGetConnection(DbConnection owningObject, TaskCompletionSource`1 retry, DbConnectionOptions userOptions, DbConnectionInternal& connection)
   at System.Data.ProviderBase.DbConnectionFactory.TryGetConnection(DbConnection owningConnection, TaskCompletionSource`1 retry, DbConnectionOptions userOptions, DbConnectionInternal oldConnection, DbConnectionInternal& connection)
   at System.Data.ProviderBase.DbConnectionInternal.TryOpenConnectionInternal(DbConnection outerConnection, DbConnectionFactory connectionFactory, TaskCompletionSource`1 retry, DbConnectionOptions userOptions)
   at System.Data.SqlClient.SqlConnection.TryOpenInner(TaskCompletionSource`1 retry)
   at System.Data.SqlClient.SqlConnection.TryOpen(TaskCompletionSource`1 retry)
   at System.Data.SqlClient.SqlConnection.Open()
   at Microsoft.UpdateServices.DatabaseAccess.DBConnection.Connect(String connectionString)
   at Microsoft.UpdateServices.Administration.ConfigureDB.CreateDBConnection()
   at Microsoft.UpdateServices.Administration.ConfigureDB.ConnectToDB()
   at Microsoft.UpdateServices.Administration.ConfigureDB.Configure()
   at Microsoft.UpdateServices.Administration.ConfigureDB.Run(String instanceName, Action`1 logWriter, Boolean contentLocal)
   at Microsoft.UpdateServices.Administration.PostInstall.Run()
   at Microsoft.UpdateServices.Administration.PostInstall.Execute(String[] arguments)
ClientConnectionId:00000000-0000-0000-0000-000000000000
Error Number:2,State:0,Class:20

TechGUy,System Administrator.

I have a licensed copy of MS office 2019, trying to install it on a windows Server with Terminal services on. 

<Configuration>
  <Add OfficeClientEdition="64">
    <Product ID="ProPlus2019Retail">
      <Language ID="en-us" />
    </Product>
    <Product ID="VisioPro2019Volume">
      <Language ID="en-us" />
    </Product>
  </Add>
</Configuration>