+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 21
Windows Server 2008 R2 Thread, Problems with WSUS Server in Technical; Hi, Our WSUS server has been running for a few weeks now but none of our workstations seem to be ...
  1. #1
    Darylrese's Avatar
    Join Date
    Sep 2010
    Location
    Portsmouth
    Posts
    422
    Thank Post
    10
    Thanked 7 Times in 6 Posts
    Rep Power
    10

    Exclamation Problems with WSUS Server

    Hi,

    Our WSUS server has been running for a few weeks now but none of our workstations seem to be getting updates. The WSUS console states none of the computers have reported yet, all updates have been approved to the correct groups and are ready to go.

    WSUS.jpg


    We have a group policy in place for workstations to pull down updates from WSUS at 16:00 each day. As far as i can see the group policy is working, however we get the following error in event viewer on workstations just after 16:00hrs:

    EVENTVWR.jpg

    The company that put it in have been pretty useless so far telling us its just taking a long time to replicate, however i find it virtually impossible that it should take 3 weeks to do so! Any ideas? None of the clients / servers have been getting updates since the summer
    Last edited by Darylrese; 29th November 2012 at 10:08 AM.

  2. #2

    Join Date
    Nov 2012
    Location
    Lancashire
    Posts
    40
    Thank Post
    2
    Thanked 4 Times in 4 Posts
    Rep Power
    4
    Do you have the WSUS GPO's attached to the OU with computer accounts in?

  3. #3
    Darylrese's Avatar
    Join Date
    Sep 2010
    Location
    Portsmouth
    Posts
    422
    Thank Post
    10
    Thanked 7 Times in 6 Posts
    Rep Power
    10
    oh and here's the group policy in place on all workstations. Its linked at the top level under establishments

    Attachment 16111

  4. #4

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,804
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    Did you disable the proxy settings for WinHTTP on your clients after you implemented WSUS? Otherwise they will attempt to contact your WSUS server via your proxy (which probably doesn't work, depending on your setup).

  5. #5
    Darylrese's Avatar
    Join Date
    Sep 2010
    Location
    Portsmouth
    Posts
    422
    Thank Post
    10
    Thanked 7 Times in 6 Posts
    Rep Power
    10
    Nope, heres our proxy settings GPO, do i need to make changes to this?

    gpo proxy.jpg

  6. #6
    Mcshammer_dj's Avatar
    Join Date
    Feb 2007
    Location
    Portsmouth
    Posts
    941
    Thank Post
    35
    Thanked 164 Times in 132 Posts
    Rep Power
    94
    Try doing this:
    To reset the Windows Update components, follow these steps:

    1.Open a Windows Command Prompt Windows. To open a command prompt, click Start and then click Run. Copy and paste (or type) the following command in the Open box and then press ENTER:

    cmd
    2.Stop the BITS service and the Windows Update service. To do this, type the following commands at a command prompt. Press ENTER after you type each command.
    ◦net stop bits
    ◦net stop wuauserv
    3.Delete the qmgr*.dat files. To do this, type the following command at a command prompt, and then press ENTER:
    Del "%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Downloader\qmgr*.dat"
    4.If this is your first attempt at resolving your Windows Update issues by using the steps in this article, go to step 5 without carrying out step 4. Step 4 should only be performed at this point in the troubleshooting if you cannot resolve your Windows Update issues after following all steps but step 4. The steps in step 4 are also performed by the "Aggressive" mode of the Fix it Solution above:
    a.Rename the following folders to *.BAK:
    ■%systemroot%\SoftwareDistribution\DataStore
    ■%systemroot%\SoftwareDistribution\Download
    ■%systemroot%\system32\catroot2
    To do this, type the following commands at a command prompt. Press ENTER after you type each command.
    ■Ren %systemroot%\SoftwareDistribution\DataStore *.bak
    ■Ren %systemroot%\SoftwareDistribution\Download *.bak
    ■Ren %systemroot%\system32\catroot2 *.bak
    b.Reset the BITS service and the Windows Update service to the default security descriptor. To do this, type the following commands at a command prompt. Press ENTER after you type each command.
    ■sc.exe sdset bits DA;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRS DRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPD TLOCRRC;;;PU)
    ■sc.exe sdset wuauserv DA;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRS DRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPD TLOCRRC;;;PU)
    5.Type the following command at a command prompt, and then press ENTER:
    cd /d %windir%\system32
    6.Reregister the BITS files and the Windows Update files. To do this, type the following commands at a command prompt. Press ENTER after you type each command.
    ◦regsvr32.exe atl.dll
    ◦regsvr32.exe urlmon.dll
    ◦regsvr32.exe mshtml.dll
    ◦regsvr32.exe shdocvw.dll
    ◦regsvr32.exe browseui.dll
    ◦regsvr32.exe jscript.dll
    ◦regsvr32.exe vbscript.dll
    ◦regsvr32.exe scrrun.dll
    ◦regsvr32.exe msxml.dll
    ◦regsvr32.exe msxml3.dll
    ◦regsvr32.exe msxml6.dll
    ◦regsvr32.exe actxprxy.dll
    ◦regsvr32.exe softpub.dll
    ◦regsvr32.exe wintrust.dll
    ◦regsvr32.exe dssenh.dll
    ◦regsvr32.exe rsaenh.dll
    ◦regsvr32.exe gpkcsp.dll
    ◦regsvr32.exe sccbase.dll
    ◦regsvr32.exe slbcsp.dll
    ◦regsvr32.exe cryptdlg.dll
    ◦regsvr32.exe oleaut32.dll
    ◦regsvr32.exe ole32.dll
    ◦regsvr32.exe shell32.dll
    ◦regsvr32.exe initpki.dll
    ◦regsvr32.exe wuapi.dll
    ◦regsvr32.exe wuaueng.dll
    ◦regsvr32.exe wuaueng1.dll
    ◦regsvr32.exe wucltui.dll
    ◦regsvr32.exe wups.dll
    ◦regsvr32.exe wups2.dll
    ◦regsvr32.exe wuweb.dll
    ◦regsvr32.exe qmgr.dll
    ◦regsvr32.exe qmgrprxy.dll
    ◦regsvr32.exe wucltux.dll
    ◦regsvr32.exe muweb.dll
    ◦regsvr32.exe wuwebv.dll
    7.Reset Winsock. To do this, type the following command at a command prompt, and then press ENTER:
    netsh reset winsock
    8.If you are running Windows XP or Windows Server 2003, you have to set the proxy settings. To do this, type the following command at a command prompt, and then press ENTER:
    proxycfg.exe -d
    9.Restart the BITS service and the Windows Update service. To do this, type the following commands at a command prompt. Press ENTER after you type each command.
    ◦net start bits
    ◦net start wuauserv
    10.If you are running Windows Vista or Windows Server 2008, clear the BITS queue. To do this, type the following command at a command prompt, and then press ENTER:
    bitsadmin.exe /reset /allusers
    11.Install the latest Windows Update Agent. For more information, click the following article number to view the article in the Microsoft Knowledge Base:
    949104
    (How to get the latest version of the Windows Update Agent )
    How to obtain the latest version of the Windows Update Agent to help manage updates on a computer
    12.Restart the computer.

  7. #7
    alan-d's Avatar
    Join Date
    Aug 2005
    Location
    Sutton Coldfield
    Posts
    2,414
    Thank Post
    360
    Thanked 256 Times in 187 Posts
    Rep Power
    75
    Try running this on a client not being picked up
    @echo Setting winhttp proxy
    netsh winhttp set proxy SERVERNAME:8530 "10.*"
    @echo Triggering detection after setting winhttp proxy
    net stop wuauserv
    net start wuauserv
    wuauclt /resetauthorization /detectnow

    A restart may be needed. If it works, save the above as a .bat and stick it in a GPO.
    Last edited by alan-d; 29th November 2012 at 10:42 AM.

  8. #8
    Darylrese's Avatar
    Join Date
    Sep 2010
    Location
    Portsmouth
    Posts
    422
    Thank Post
    10
    Thanked 7 Times in 6 Posts
    Rep Power
    10
    there are 2 clients that are reporting to WSUS and recieving updates, one server and one workstation. Checked and the proxy settings on those 2 are the same as the others on the network that arnt working

  9. #9
    Darylrese's Avatar
    Join Date
    Sep 2010
    Location
    Portsmouth
    Posts
    422
    Thank Post
    10
    Thanked 7 Times in 6 Posts
    Rep Power
    10
    Quote Originally Posted by alan-d View Post
    Try running this on a client not being picked up
    @echo Setting winhttp proxy
    netsh winhttp set proxy SERVERNAME:8530 "10.*"
    @echo Triggering detection after setting winhttp proxy
    net stop wuauserv
    net start wuauserv
    wuauclt /resetauthorization /detectnow

    A restart may be needed. If it works, save the above as a .bat and stick it in a GPO.
    Many thanks, will try this script now. In the line netsh winhttp set proxy SERVERNAME:8530 "10.*" is this the proxy server for sername or wsus server? Ive tried it as

    netsh winhttp set proxy 10.160.2.6:8080 "10.*" (which is our proxy server) but it says access denied

    EDIT: Not to worry, it has to be elevated to run as administrator. Should this now pull down updates as soon as the script has finnished?
    Last edited by Darylrese; 29th November 2012 at 12:10 PM.

  10. #10
    Ergo's Avatar
    Join Date
    Sep 2012
    Location
    Nottingham
    Posts
    111
    Thank Post
    16
    Thanked 26 Times in 25 Posts
    Rep Power
    9
    Quote Originally Posted by Darylrese View Post
    Should this now pull down updates as soon as the script has finnished?
    Yes. the last line triggers the Windows Update service on the client to start scanning - can take a few minutes though.

    If you are running this on a machine which has already registered with the WSUS server you may be better to change the last line to:
    Code:
    wuauclt /detectnow
    This will reduce the likelyhood of duplicates in the WSUS console.

    Dave
    Last edited by Ergo; 29th November 2012 at 12:36 PM.

  11. #11
    Darylrese's Avatar
    Join Date
    Sep 2010
    Location
    Portsmouth
    Posts
    422
    Thank Post
    10
    Thanked 7 Times in 6 Posts
    Rep Power
    10
    Thanks as always Dave! Cheers for the script alan.

    I am getting the following error in event viewer still:

    Untitled.jpg

    I tried it on the one workstation that is reporting and working with WSUS and its given the same error
    Last edited by Darylrese; 29th November 2012 at 12:50 PM.

  12. #12
    Ergo's Avatar
    Join Date
    Sep 2012
    Location
    Nottingham
    Posts
    111
    Thank Post
    16
    Thanked 26 Times in 25 Posts
    Rep Power
    9
    Daryl,
    I cannot see the GPO you have deploying WSUS settings to the client (looks like edugeek forum has lost the picture?) so if you could send the settings would be useful. I would recommend explicitly putting an exception for the WSUS server (name or IP depending on how you have specified it) in your proxy settings. Also important to ensure you have populated both settings (server address and reporting address).

    Also there is a Windows Update log file which is in C:\Windows\WindowsUpdate.log so it would be useful to look in there for more detailed error information. I would not recommend posting the whole file as it can get quite big!

    Dave

  13. #13
    Darylrese's Avatar
    Join Date
    Sep 2010
    Location
    Portsmouth
    Posts
    422
    Thank Post
    10
    Thanked 7 Times in 6 Posts
    Rep Power
    10
    Sorry about that Dave, it seems to have gone missing! Here it is again:

    1.jpg

  14. #14

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,572 Times in 1,252 Posts
    Rep Power
    340
    Hmm maybe I'm missing something here. Looking at the first screenshot, workstations are reporting in but they're just reporting 0%. I presume if you delete a computer from WSUS, it then re-appears after a while? This would prove workstations reporting in is OK.

    I suspect the problem is with your WSUS server somewhere, seeing as everything is reading 0%. If you follow my userguide here, it may give you some ideas what's going on.

  15. #15
    Darylrese's Avatar
    Join Date
    Sep 2010
    Location
    Portsmouth
    Posts
    422
    Thank Post
    10
    Thanked 7 Times in 6 Posts
    Rep Power
    10
    Nope, they all display as 'Not yet Reported' so i dont think they are reporting atall

    Untitled.jpg

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. problem with terminal server
    By sacrej in forum Windows Server 2008
    Replies: 1
    Last Post: 1st April 2010, 08:23 AM
  2. Problems with WSUS failing to download updates
    By srochford in forum Windows
    Replies: 0
    Last Post: 2nd July 2008, 10:00 PM
  3. Java problem with Runescape server
    By Warren-Plus in forum Gaming
    Replies: 6
    Last Post: 23rd February 2008, 07:44 PM
  4. Problems with exchange server
    By timbo343 in forum Windows
    Replies: 6
    Last Post: 5th June 2007, 09:38 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •