Windows Server 2008 R2 Thread, Problems with WSUS Server in Technical; Hi,
Our WSUS server has been running for a few weeks now but none of our workstations seem to be ...
29th November 2012, 11:06 AM #1
Problems with WSUS Server
Our WSUS server has been running for a few weeks now but none of our workstations seem to be getting updates. The WSUS console states none of the computers have reported yet, all updates have been approved to the correct groups and are ready to go.
We have a group policy in place for workstations to pull down updates from WSUS at 16:00 each day. As far as i can see the group policy is working, however we get the following error in event viewer on workstations just after 16:00hrs:
The company that put it in have been pretty useless so far telling us its just taking a long time to replicate, however i find it virtually impossible that it should take 3 weeks to do so! Any ideas? None of the clients / servers have been getting updates since the summer
Last edited by Darylrese; 29th November 2012 at 11:08 AM.
IDG Tech News
29th November 2012, 11:09 AM #2
- Rep Power
Do you have the WSUS GPO's attached to the OU with computer accounts in?
29th November 2012, 11:10 AM #3
oh and here's the group policy in place on all workstations. Its linked at the top level under establishments
29th November 2012, 11:19 AM #4
Did you disable the proxy settings for WinHTTP on your clients after you implemented WSUS? Otherwise they will attempt to contact your WSUS server via your proxy (which probably doesn't work, depending on your setup).
29th November 2012, 11:25 AM #5
Nope, heres our proxy settings GPO, do i need to make changes to this?
29th November 2012, 11:36 AM #6
Try doing this:
To reset the Windows Update components, follow these steps:
1.Open a Windows Command Prompt Windows. To open a command prompt, click Start and then click Run. Copy and paste (or type) the following command in the Open box and then press ENTER:
2.Stop the BITS service and the Windows Update service. To do this, type the following commands at a command prompt. Press ENTER after you type each command.
◦net stop bits
◦net stop wuauserv
3.Delete the qmgr*.dat files. To do this, type the following command at a command prompt, and then press ENTER:
Del "%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Downloader\qmgr*.dat"
4.If this is your first attempt at resolving your Windows Update issues by using the steps in this article, go to step 5 without carrying out step 4. Step 4 should only be performed at this point in the troubleshooting if you cannot resolve your Windows Update issues after following all steps but step 4. The steps in step 4 are also performed by the "Aggressive" mode of the Fix it Solution above:
a.Rename the following folders to *.BAK:
To do this, type the following commands at a command prompt. Press ENTER after you type each command.
■Ren %systemroot%\SoftwareDistribution\DataStore *.bak
■Ren %systemroot%\SoftwareDistribution\Download *.bak
■Ren %systemroot%\system32\catroot2 *.bak
b.Reset the BITS service and the Windows Update service to the default security descriptor. To do this, type the following commands at a command prompt. Press ENTER after you type each command.
■sc.exe sdset bits DA;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRS DRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPD TLOCRRC;;;PU)
■sc.exe sdset wuauserv DA;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRS DRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPD TLOCRRC;;;PU)
5.Type the following command at a command prompt, and then press ENTER:
cd /d %windir%\system32
6.Reregister the BITS files and the Windows Update files. To do this, type the following commands at a command prompt. Press ENTER after you type each command.
7.Reset Winsock. To do this, type the following command at a command prompt, and then press ENTER:
netsh reset winsock
8.If you are running Windows XP or Windows Server 2003, you have to set the proxy settings. To do this, type the following command at a command prompt, and then press ENTER:
9.Restart the BITS service and the Windows Update service. To do this, type the following commands at a command prompt. Press ENTER after you type each command.
◦net start bits
◦net start wuauserv
10.If you are running Windows Vista or Windows Server 2008, clear the BITS queue. To do this, type the following command at a command prompt, and then press ENTER:
bitsadmin.exe /reset /allusers
11.Install the latest Windows Update Agent. For more information, click the following article number to view the article in the Microsoft Knowledge Base:
(How to get the latest version of the Windows Update Agent )
How to obtain the latest version of the Windows Update Agent to help manage updates on a computer
12.Restart the computer.
29th November 2012, 11:39 AM #7
Try running this on a client not being picked up
@echo Setting winhttp proxy
netsh winhttp set proxy SERVERNAME:8530 "10.*"
@echo Triggering detection after setting winhttp proxy
net stop wuauserv
net start wuauserv
wuauclt /resetauthorization /detectnow
A restart may be needed. If it works, save the above as a .bat and stick it in a GPO.
Last edited by alan-d; 29th November 2012 at 11:42 AM.
29th November 2012, 12:12 PM #8
there are 2 clients that are reporting to WSUS and recieving updates, one server and one workstation. Checked and the proxy settings on those 2 are the same as the others on the network that arnt working
29th November 2012, 12:59 PM #9
Many thanks, will try this script now. In the line netsh winhttp set proxy SERVERNAME:8530 "10.*" is this the proxy server for sername or wsus server? Ive tried it as
Originally Posted by alan-d
netsh winhttp set proxy 10.160.2.6:8080 "10.*" (which is our proxy server) but it says access denied
EDIT: Not to worry, it has to be elevated to run as administrator. Should this now pull down updates as soon as the script has finnished?
Last edited by Darylrese; 29th November 2012 at 01:10 PM.
29th November 2012, 01:32 PM #10
Yes. the last line triggers the Windows Update service on the client to start scanning - can take a few minutes though.
Originally Posted by Darylrese
If you are running this on a machine which has already registered with the WSUS server you may be better to change the last line to:
This will reduce the likelyhood of duplicates in the WSUS console.
Last edited by Ergo; 29th November 2012 at 01:36 PM.
29th November 2012, 01:43 PM #11
Thanks as always Dave! Cheers for the script alan.
I am getting the following error in event viewer still:
I tried it on the one workstation that is reporting and working with WSUS and its given the same error
Last edited by Darylrese; 29th November 2012 at 01:50 PM.
29th November 2012, 01:55 PM #12
I cannot see the GPO you have deploying WSUS settings to the client (looks like edugeek forum has lost the picture?) so if you could send the settings would be useful. I would recommend explicitly putting an exception for the WSUS server (name or IP depending on how you have specified it) in your proxy settings. Also important to ensure you have populated both settings (server address and reporting address).
Also there is a Windows Update log file which is in C:\Windows\WindowsUpdate.log so it would be useful to look in there for more detailed error information. I would not recommend posting the whole file as it can get quite big!
29th November 2012, 01:57 PM #13
Sorry about that Dave, it seems to have gone missing! Here it is again:
29th November 2012, 02:05 PM #14
Hmm maybe I'm missing something here. Looking at the first screenshot, workstations are reporting in but they're just reporting 0%. I presume if you delete a computer from WSUS, it then re-appears after a while? This would prove workstations reporting in is OK.
I suspect the problem is with your WSUS server somewhere, seeing as everything is reading 0%. If you follow my userguide here, it may give you some ideas what's going on.
29th November 2012, 02:08 PM #15
Nope, they all display as 'Not yet Reported' so i dont think they are reporting atall
By sacrej in forum Windows Server 2008
Last Post: 1st April 2010, 09:23 AM
By srochford in forum Windows
Last Post: 2nd July 2008, 11:00 PM
By Warren-Plus in forum Gaming
Last Post: 23rd February 2008, 08:44 PM
By timbo343 in forum Windows
Last Post: 5th June 2007, 10:38 AM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)