Hi
I am trying to setup an additional WSUS server on our network. We presently use WSUS 3 SP2 on a Windows Server 2008 standard that is also a domain controller. I want to install WSUS on a Windows Server 2012 standard member server in the domain and then remove the old WSUS from the 2008 domain controller.
I read through the 'Deploy Windows Server Update Services in Your Organisation' before starting this.
Everything was carried out using the domain administrator account.
I added the role to the 2012 server (which also has the Remote Access role) but after installation a notification appeared that the post-install tasks had failed.
I restarted the server and under Task Details and Notifications under the Server Manager's Dashboard is an entry stating that Post-deployment Configuration has failed.
I started WSUS from the Tools menu and was prompted for the content store location (which I had already provided during the initial installation - I had manually created a folder named WSUSContent and pointed it at that). I browsed to the location and set it. In the lower pane of the same window was a notification asking if the server should run the post-install tasks. I clicked Run and the following log was generated immediately:
2013-08-14 08:33:52 Postinstall started
2013-08-14 08:33:52 Detected role services: Api, UI, WidDatabase, Services
2013-08-14 08:33:52 Start: LoadSettingsFromParameters
2013-08-14 08:33:52 Content local is: True
2013-08-14 08:33:52 Content directory is: C:\WSUSContent
2013-08-14 08:33:52 SQL instname is:
2013-08-14 08:33:52 End: LoadSettingsFromParameters
2013-08-14 08:33:52 Start: Run
2013-08-14 08:33:52 Configuring content directory...
2013-08-14 08:33:52 Configuring groups...
2013-08-14 08:33:52 Starting group configuration for WSUS Administrators...
2013-08-14 08:33:52 Group does not already exist in the registry
2013-08-14 08:33:52 Searching for existing group...
2013-08-14 08:33:53 Group was not fount attempt to create it...
2013-08-14 08:33:53 Writing group to registry...
2013-08-14 08:33:53 Finished group creation
2013-08-14 08:33:53 Starting group configuration for WSUS Reporters...
2013-08-14 08:33:53 Group does not already exist in the registry
2013-08-14 08:33:53 Searching for existing group...
2013-08-14 08:33:53 Group was not fount attempt to create it...
2013-08-14 08:33:53 Writing group to registry...
2013-08-14 08:33:53 Finished group creation
2013-08-14 08:33:53 Configuring permissions...
2013-08-14 08:33:53 Fetching content directory...
2013-08-14 08:33:53 Fetching ContentDir from registry store
2013-08-14 08:33:53 Value is C:\WSUSContent
2013-08-14 08:33:53 Fetching group SIDs...
2013-08-14 08:33:53 Fetching WsusAdministratorsSid from registry store
2013-08-14 08:33:53 Value is S-1-5-21-1820295096-694618493-131162164-1007
2013-08-14 08:33:53 Fetching WsusReportersSid from registry store
2013-08-14 08:33:53 Value is S-1-5-21-1820295096-694618493-131162164-1008
2013-08-14 08:33:53 Creating group principals...
2013-08-14 08:33:55 Granting directory permissions...
2013-08-14 08:33:56 System.UnauthorizedAccessException: Attempted to perform an unauthorized operation.
at System.Security.AccessControl.Win32.SetSecurityInfo(ResourceType type, String name, SafeHandle handle, SecurityInfos securityInformation, SecurityIdentifier owner, SecurityIdentifier group, GenericAcl sacl, GenericAcl dacl)
at System.Security.AccessControl.NativeObjectSecurity.Persist(String name, SafeHandle handle, AccessControlSections includeSections, Object exceptionContext)
at System.Security.AccessControl.FileSystemSecurity.Persist(String fullPath)
at System.IO.DirectoryInfo.SetAccessControl(DirectorySecurity directorySecurity)
at Microsoft.UpdateServices.Administration.ConfigurePermissions.GrantDirectoryPermissions()
at Microsoft.UpdateServices.Administration.ConfigurePermissions.Configure()
at Microsoft.UpdateServices.Administration.PostInstall.Run()
at Microsoft.UpdateServices.Administration.PostInstall.Execute(String[] arguments)
Does anyone understand what this means? Can anyone help me configure WSUS successfully, please?
Thanks!