+ Post New Thread
Results 1 to 13 of 13
Windows Thread, WSUS Failing in Technical; Morning Guys, I am having real issues with WSUS ! There are literally hundreds of updates that need to start ...
  1. #1

    Join Date
    Jan 2008
    Posts
    172
    Thank Post
    18
    Thanked 10 Times in 9 Posts
    Rep Power
    15

    WSUS Failing

    Morning Guys,

    I am having real issues with WSUS!

    There are literally hundreds of updates that need to start to go out.

    The problem is.....I can sync fine with MS and it says its downloaded loads of updates. When approving them however, every single one has a red 'x' next to it and says "This update can be approved but will not be deployed until the files have downloaded" or something to that effect.

    I have tried reinstalling WSUS, removing the Windows internal DB, everything I can think of.

    This is on 2003 R2.

    Pulling my hair out!

    Jon

  2. #2
    cookie_monster's Avatar
    Join Date
    May 2007
    Location
    Derbyshire
    Posts
    4,196
    Thank Post
    392
    Thanked 278 Times in 239 Posts
    Rep Power
    74
    Is it still downloading them it takes ages when you first approve all of the patches.

  3. #3

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    Do you need to use a proxy to download files? If so, have you set it?

  4. #4

    Join Date
    Jan 2008
    Posts
    172
    Thank Post
    18
    Thanked 10 Times in 9 Posts
    Rep Power
    15
    We do use ISA, but I have set that up. Like i said, it syncs fine but all the updates just say they have not been downloaded. Now I may be getting confused, but if its synced 100% with no errors, the files MUST of been downloaded.

    All the updates were approved like 2 days a go and still have the red 'x' next to them.

  5. #5
    cookie_monster's Avatar
    Join Date
    May 2007
    Location
    Derbyshire
    Posts
    4,196
    Thank Post
    392
    Thanked 278 Times in 239 Posts
    Rep Power
    74
    It sounds like it's having trouble downloading the updates to me, syncing only downloads a list of the updates it downloads the patches as you approve them. I'd have a look at your ISA settings.

  6. #6

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    Maybe you banned .exe's and/or .msi files in ISA?

  7. #7

    Join Date
    Jan 2008
    Posts
    172
    Thank Post
    18
    Thanked 10 Times in 9 Posts
    Rep Power
    15
    Any idea what sort of rule I need to make in ISA to allow WSUS through?

  8. #8

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,590
    Thank Post
    109
    Thanked 762 Times in 593 Posts
    Rep Power
    180
    Quote Originally Posted by m1ddy View Post
    Any idea what sort of rule I need to make in ISA to allow WSUS through?
    Try adding a rule so that that server is allowed straight through (put it near the top of the list and allow all protocols to all destinations for all users for that particular machine). You can tighten this down again later if you like.

    Syncing simply gets the list of updates, they are not downloaded until you approve them (saves space/bandwidth).

  9. #9

    Join Date
    Jan 2008
    Posts
    172
    Thank Post
    18
    Thanked 10 Times in 9 Posts
    Rep Power
    15
    Thanks for all the responses guys.

    We already have a computer set in ISA called servers with the servers address ranges added.

    There is already a rule that allows all protocols outbound to internal/external networks. I would of thought this would of done the trick.

  10. #10
    gaz350's Avatar
    Join Date
    Jul 2007
    Location
    Rutland, east.leicestershire :P
    Posts
    579
    Thank Post
    47
    Thanked 49 Times in 41 Posts
    Rep Power
    28
    I feel your pain, after virtually reinstalling my entire wsus server, only to find out it was virus filtering on the proxy server causing issues.

    As you are downloading everything again i suggest you do it a bit more systematically(just done this myself). at 1st our box wanted 35GB, managed to get this down to 5GB which still took 2 days to download!

    1st off change all the current updates (view all) and set them all to unapproved.

    Then cancel all the downloads

    Then change the sync options just to small things like critical updates and set these for auto approval.

    Set any other updates you think you might need to Detect Only, then you can review what computers actually need, so your not downloading too much crap.

  11. #11

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,568 Times in 1,250 Posts
    Rep Power
    340
    In WSUS 3.0 to approve all updates you've downloaded, choose Options > Automatic Approvals

    Specify what types of updates you want to approve - Critical, Security, Update Rollups etc then click Run Rule

    As for the actual download of updates, it can take a while depending how many products you've selected and how many languages etc...

    When you synchronise, initially a list of updates are downloaded (which is what you're seeing), but the actual updates (the content) is downloaded bit by bit. Creating a WSUS server from new is a long process.

    For of those of you using WSUS 3.0 and maybe you wish to move WSUS to another server, it's much easier and quicker to move the existing database.

    1. Firstly, install WSUS 3.0 on your new server. At this point, enter proxy information and tick what applications you wish WSUS to distribute:

    For example: Office 2003, Windows Server 2003, Windows XP etc...

    2. Copy the WsusContent folder from your existing server to your new server. Make sure you re-create the share and permissions correctly!

    3. From the Run Menu, on your existing server run the following command:
    Code:
    "%ProgramFiles%\Update Services\Tools\wsusutil" export c:\export.cab c:\exportlog.txt
    4. Copy the export.cab file to C:\ on your new server

    5. From the Run Menu, on your new server run the following command:
    Code:
    "%ProgramFiles%\Update Services\Tools\wsusutil" import c:\export.cab c:\exportlog.txt
    When this process is complete, you should have WSUS 3.0 fully working as before. You now need to change your GPO, so clients look at your new WSUS server. Clients should start appearing within the Unassigned Computers group within a few hours.
    Once this is complete, you can uninstall and completely remove WSUS 3.0 from your original server.
    Last edited by Michael; 5th March 2008 at 09:52 PM.

  12. #12

    Join Date
    Jan 2008
    Posts
    172
    Thank Post
    18
    Thanked 10 Times in 9 Posts
    Rep Power
    15
    Well, its been about 4 days since I synced with MS. All of my updates all say 'this update failed to download'

    I have played with ISA and added a rule saying all networks, internal and external can send all traffic and this seemed to have no effect.

    I have tried manually telling random updates to download and it thinks about it for a minute or two then reports it as the download failed, the same as above.

    We are in hampshire, is anyone else in hampshire having the same problem? Do the council have an upstream server I can use to get the updates, rather than microsoft?

    Thanks guys.

  13. #13

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,568 Times in 1,250 Posts
    Rep Power
    340
    Within WSUS 3.0, under Proxy Settings there's an option to send passwords in clear text. Although technically this is insecure, I suggest you create an account such as "WSUS" and a random password so you can authenticate and connect to download updates.

    It sounds like WSUS started to download data, but has stopped for whatever reason.

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 3
    Last Post: 21st February 2008, 08:50 AM
  2. Failing Script.. sometimes.
    By jmair in forum Windows
    Replies: 8
    Last Post: 29th October 2007, 01:37 PM
  3. Replication between DC's failing
    By j17sparky in forum Windows
    Replies: 2
    Last Post: 1st December 2006, 09:07 AM
  4. Replies: 1
    Last Post: 8th November 2006, 09:57 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •