Greetings. I have been trying to solve a WSUS problem for a few weeks. Any help would be appreciated.
I have two servers running Windows SBS and four client computers running XP or XP Tablet. One server is the WSUS server (WSUS 3.0 SP1) on port 8530 and all of the computers are directed to obtain their updates from the intranet server by the WSUS GPO.
I first noticed the problem when I realized that none of the computers, including the computer hosting the WSUS server, had reported in for nearly 5 months. They seemed to be downloading updates though. Try as I might, I cannot get the connections to
work properly. It is particularly frustrating because everything had been working just fine for over a year.
I am pretty sure the problem is in my GPO because running ClientDiag gives me:
WSUS Client Diagnostics Tool
Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is not running. PASS
Wuaueng.dll version 7.6.7600.256. . . . . . . . . . . . PASS
This version is WSUS 2.0
Checking AU Settings
AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
Option is from Policy settings
Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use
Checking Connection to WSUS/SUS Server
WUServer = WUA
WUStatusServer = http://rrserver:8530
UseWuServer is disabled . . . . . . . . . . . . . . . . FAIL
VerifyWUServerURL() failed with hr=0x80072ee6
The URL does not use a recognized protocol
When I gpupdate /force, the results change:
WSUS Client Diagnostics Tool
Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is not running. PASS
Wuaueng.dll version 7.6.7600.256. . . . . . . . . . . . PASS
This version is WSUS 2.0
Checking AU Settings
AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
Option is from Policy settings
Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use
Checking Connection to WSUS/SUS Server
WUServer = http://rrserver:8530
WUStatusServer = http://rrserver:8530
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
Connection to server. . . . . . . . . . . . . . . . . . PASS
SelfUpdate folder is present. . . . . . . . . . . . . . PASS
These results look good, but after waiting about one minute, they change back to the first results.
When I run gpresult.exe I get:
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.
C:\Documents and Settings\pmontany>gpresult.exe
Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001
Created On 10/15/2012 at 7:34:37 AM
RSOP results for RIVERROCKSURGIC\pmontany on RECEPTION : Logging Mode
----------------------------------------------------------------------
OS Type: Microsoft Windows XP Professional
OS Configuration: Member Workstation
OS Version: 5.1.2600
Domain Name: RIVERROCKSURGIC
Domain Type: Windows 2000
Site Name: Default-First-Site-Name
Roaming Profile:
Local Profile: C:\Documents and Settings\pmontany
Connected over a slow link?: No
COMPUTER SETTINGS
------------------
CN=Reception,OU=SBSComputers,OU=Computers,OU=MyBusiness,DC=RiverRockSurgical
,DC=local
Last time Group Policy was applied: 10/15/2012 at 7:20:01 AM
Group Policy was applied from: rrserver.RiverRockSurgical.local
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
-----------------------------
Small Business Server Windows Firewall
Small Business Server Client Computer
Small Business Server Remote Assistance Policy
Small Business Server Lockout Policy
Small Business Server Domain Password Policy
Default Domain Policy
Windows Server Update Services
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2
Small Business Server - Windows Vista policy
Filtering: Denied (WMI Filter)
WMI Filter: Vista
Small Business Server Folder Redirection
Filtering: Not Applied (Empty)
Local Group Policy
Filtering: Not Applied (Empty)
The computer is a part of the following security groups:
--------------------------------------------------------
BUILTIN\Administrators
Everyone
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
Reception$
Domain Computers
USER SETTINGS
--------------
CN=Paul Montany,OU=SBSUsers,OU=Users,OU=MyBusiness,DC=RiverRockSurgical,DC=l
ocal
Last time Group Policy was applied: 10/15/2012 at 7:33:29 AM
Group Policy was applied from: rrserver.RiverRockSurgical.local
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
-----------------------------
Small Business Server Folder Redirection
Default Domain Policy
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2
Windows Server Update Services
Filtering: Disabled (GPO)
Small Business Server - Windows Vista policy
Filtering: Denied (WMI Filter)
WMI Filter: Vista
Small Business Server Client Computer
Filtering: Not Applied (Empty)
Small Business Server Lockout Policy
Filtering: Disabled (GPO)
Small Business Server Remote Assistance Policy
Filtering: Disabled (GPO)
Local Group Policy
Filtering: Not Applied (Empty)
Small Business Server Domain Password Policy
Filtering: Not Applied (Empty)
Small Business Server Windows Firewall
Filtering: Not Applied (Empty)
The user is a part of the following security groups:
----------------------------------------------------
Domain Users
Everyone
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
Domain Admins
SBS Mobile Users
SBS Report Users
Web Workplace Users
Offer Remote Assistance Helpers
It looks to me like something is overriding my WSUS GPO, but I have checked all of the settings for all of my GPOs, and none of them have any WSUS settings.
Any ideas? Thank you.