+ Post New Thread
Page 2 of 5 FirstFirst 12345 LastLast
Results 16 to 30 of 63
Windows Server 2008 R2 Thread, How to Setup WSUS on 2003/2008/2008 R2 Server in Technical; Originally Posted by Michael If you open up Group Policy Management, expand the menu on the left, then look for ...
  1. #16

    Join Date
    Jul 2011
    Location
    Leicester
    Posts
    76
    Thank Post
    18
    Thanked 2 Times in 2 Posts
    Rep Power
    8
    Quote Originally Posted by Michael View Post
    If you open up Group Policy Management, expand the menu on the left, then look for 'Group Policy Objects'.

    This lists all GPOs in your domain. Locate the GPO you wish to add settings to, right click it and navigate to 'GPO Status'.

    Make sure 'Computer Configuration Settings Disabled' is not ticked, otherwise Ccomputer Configuration should be listed.
    Hi again Michael,

    i have found trhe above as suggested.... and i can confirm the 'Computer Configuration Settings Disabled" is not ticked.

    However can you advise where i look or goto for "To enable your workstations to report to your WSUS server, navigate to Computer Config > Policies > Admin Templates > Windows Components > Windows Update"

    im on the server.... no probs...looked in WSUS...cant find the above..... getting a lttle lost now..

    any advise (other that finding a new profession? lol)

    Many thanks in advance..

    Cookie

  2. #17

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,345
    Thank Post
    242
    Thanked 1,602 Times in 1,278 Posts
    Rep Power
    346
    On the same policy you right clicked, right click it again and select 'Edit', then on the left expand:

    Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Update

    Enable/Disable the policies as required.

  3. #18

    Join Date
    Jul 2011
    Location
    Leicester
    Posts
    76
    Thank Post
    18
    Thanked 2 Times in 2 Posts
    Rep Power
    8
    Quote Originally Posted by Michael View Post
    On the same policy you right clicked, right click it again and select 'Edit', then on the left expand:

    Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Update

    Enable/Disable the policies as required.
    Cool!! i found eveything.!!! and turns out the WSUS in GPO had already been configured.

    Only difference was the server name section... the guide says http://SERVERNAME however i've got http://SERVERNAME:8530 in there...

    Ive approved a load of updates etc in WSUS....

    however its still informing me that no machines have connected

    How do i rectify this?

    cheers once again

  4. #19

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,345
    Thank Post
    242
    Thanked 1,602 Times in 1,278 Posts
    Rep Power
    346
    It just means WSUS (when it was originally installed) wasn't put in the default IIS Site. If you did, then it should just read http://SERVERNAME

    As for your workstations, it can take upto 90 minutes (default Group Policy behaviour), or alternatively a reboot can force the update through quicker.

    If this still doesn't work, then it's difficult for me to say without knowing more about your Active Directory structure.

  5. Thanks to Michael from:

    cookie_monsta (22nd September 2011)

  6. #20

    Join Date
    Jul 2011
    Location
    Leicester
    Posts
    76
    Thank Post
    18
    Thanked 2 Times in 2 Posts
    Rep Power
    8
    wish this was a straight forward as this should be......good job i shave my head otherwise id be pulling my hair out lol

    after checking the WSUS console (or Update Services window as i see on the screen) i highlighted the server and in the middle panel under TO DO is says the following:
    "Your WSUS server currently shows that no computers are registered to receive updates"

    i have ran gpupdate /force on the server as well as my workstation (running Vista business with SP2) and it still not reporting on WSUS

    in terms of the computers within AD, they are listed in one group, then into sub division of the type (i.e. interactive white board and Key Stage group).

    The WSUS GPO is at the top of the tree so it should be pushed out to all machines....

    cheers again
    Last edited by cookie_monsta; 21st September 2011 at 01:31 PM.

  7. #21

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,345
    Thank Post
    242
    Thanked 1,602 Times in 1,278 Posts
    Rep Power
    346
    From what you're saying, yes the policy should be picked up. The best advice I can offer is to create a separate OU and a new policy, then move your workstation object (in AD) into it and experiment with the settings.

  8. Thanks to Michael from:

    cookie_monsta (22nd September 2011)

  9. #22

    Join Date
    Jul 2011
    Location
    Leicester
    Posts
    76
    Thank Post
    18
    Thanked 2 Times in 2 Posts
    Rep Power
    8
    Finally got machines to report to WSUS!!!!

    thank you Michael for all your help.... youve been a superstar!!

    Now to search the forums for help on creating users ids for the kids via powershell...

    and hopefully something in GPO to stop the kids from changing the resolution and stopping screen rotation....... ideas or links are always welcome

  10. #23

    Join Date
    Jul 2011
    Location
    Leicester
    Posts
    76
    Thank Post
    18
    Thanked 2 Times in 2 Posts
    Rep Power
    8
    Quote Originally Posted by elsiegee40 View Post

    2. You'll have 1 update not approved. It usually catches me out when I've managed to approve an update for some, but not all computers that need it. Double click on one of the 99% machines and scroll through the report to find which update it is and then approve it.
    Did this work for anyone?

    In WSUS, my Vista machine is showing 100% complete (other XP sp3 machines are showing 98% or 99% complete) however my machine is constantly now telling me there is an update available...

    and its always Windows Malicious Removal tool - July 2010 (KB890830) .... and according to the history is installs successfully..... then minutes later it tell me there is another update available Windows Malicious Removal tool - February 2011 (KB890830 again this installs successfully.

    But, minutes later again it tells me that july 2010 version is ready for installtion.

    i have approved this update many times in WSUS.....and its getting annoying now...

    any firm fix for it out there?

    Thanks in advance

    Cookie

  11. #24

    Join Date
    May 2011
    Location
    Jus North of London, close but not too close
    Posts
    912
    Thank Post
    202
    Thanked 80 Times in 74 Posts
    Rep Power
    52
    Be carefull with Automatic Approval unless you are going to test first. There's nothing worse than an update causing problems or killing all your workstationsn thru a conflict with an app or driver.

  12. #25

    Join Date
    Jul 2011
    Location
    Leicester
    Posts
    76
    Thank Post
    18
    Thanked 2 Times in 2 Posts
    Rep Power
    8
    Quote Originally Posted by Davit2005 View Post
    Be carefull with Automatic Approval unless you are going to test first. There's nothing worse than an update causing problems or killing all your workstationsn thru a conflict with an app or driver.
    I know what your saying....

    our updates are firstly approved at the city council level and then we download them from their approved list on their WSUS server....

    i hope they test them first etc...

  13. #26

    Join Date
    Jul 2011
    Location
    Leicester
    Posts
    76
    Thank Post
    18
    Thanked 2 Times in 2 Posts
    Rep Power
    8
    ermm Hi....me again....

    WSUS is (if you havent gathered already) very very new to me..

    I have machines reporting in WSUS.... and even placed them in a group called ARH...

    however laptops (set of 12 toshiba laptops) i have switched on today....arent appearing in the unassigned groups....i have waited about 3 hours...

    did a gpupdate /force on both the laptops and server....nothing...

    only 1 of the 12 has appeared...

    however...i have 2 laptops that arent on any lists in WSUS....receiving updates..... #bizarre

    any ideas where or what im doing wrong?

    Thanks in advance

    Cookie
    Last edited by cookie_monsta; 23rd September 2011 at 02:01 PM.

  14. #27

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,345
    Thank Post
    242
    Thanked 1,602 Times in 1,278 Posts
    Rep Power
    346
    Save this as WSUS.bat and run it on the affected machines. If you're clever about it, set it as a Startup script to run once.

    Code:
    @echo off
    TITLE Logistix WSUS Reset Authorisation
    Echo Save the batch file "AU_Clean_SID.cmd". This batch file will do the following:
    Echo 1.    Stops the wuauserv service
    Echo 2.    Deletes the AccountDomainSid registry key (if it exists)
    Echo 3.    Deletes the PingID registry key (if it exists)
    Echo 4.    Deletes the SusClientId registry key (if it exists)
    Echo 5.    Restarts the wuauserv service
    Echo 6.    Resets the Authorization Cookie
    Echo 6.    More information on http://msmvps.com/Athif
    Pause
    @echo on
    net stop wuauserv
    REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v AccountDomainSid /f
    REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v PingID /f
    REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v SusClientId /f
    net start wuauserv
    wuauclt /resetauthorization /detectnow
    Pause

  15. #28

    Join Date
    Apr 2010
    Posts
    2,169
    Thank Post
    111
    Thanked 192 Times in 159 Posts
    Rep Power
    85
    Should we go for the 2010 version?

  16. #29


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    7,059
    Thank Post
    232
    Thanked 926 Times in 795 Posts
    Rep Power
    309
    Quote Originally Posted by edutech4schools View Post
    Should we go for the 2010 version?
    for wsus no point really unless you have a n other app that needs it

  17. #30

    Join Date
    Feb 2012
    Location
    Calical
    Posts
    6
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Hello Michael,

    Is there a way I can point my clients to the Wsus server with having to do it with GPO's. I work in an environment where I have limited access to AD and Group Policy management. I was hoping to figure out a way to have my 10 other Windows 2003 Servers to talk to the Wsus without having to GPOs.

    Your post was very helpful.

    Adam



SHARE:
+ Post New Thread
Page 2 of 5 FirstFirst 12345 LastLast

Similar Threads

  1. How to setup a windows server 2008
    By vlan2 in forum Windows Server 2008 R2
    Replies: 2
    Last Post: 15th February 2011, 01:47 PM
  2. Replies: 6
    Last Post: 11th July 2010, 11:15 AM
  3. Connect to a 2008 R2 server from a 2003 TS Client
    By dhoward_westexetc in forum Windows Server 2008 R2
    Replies: 1
    Last Post: 9th June 2010, 11:30 AM
  4. Replies: 5
    Last Post: 13th April 2010, 06:26 PM
  5. Essential tools to manage a Windows 2003/2008 domain?
    By reggiep in forum Windows Server 2000/2003
    Replies: 8
    Last Post: 6th May 2009, 10:47 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •