WSUS clients

[FN-GM]

Hi

I installed WSUS on a server today. A lot of the clients have been picked up but they all have yellow exclamation marks next to them. I cannot see the update status of any computers even after several hours of being the manager.

Why is this please? Is there a problem or something.

Thank you

[Michael]

Although your workstations have registered themselves in your new WSUS install, it just means they haven't reported their installed/needed updates as yet.

If you want to speed up the process, click Start > Run and type:

wuauclt.exe /detectnow

This will force the workstation to report in a much shorter period of time. Depending what time you've configured in your GPOs will depend what time workstations 'check in'.

[FN-GM]

Hi, thanks for the advice. What policy need configuring so they will check in more often?

Thanks

[Michael]

I setup my policies as follows:

Computer Config > Admin Templates > Windows Components > Windows Updates

Do not display 'Install Updates and Shutdown' option in Shut Down Windows dialog box - Disabled

Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box - Not Configured

Configure Automatic Updates - Enabled
4 - Auto download and schedule install
0 - Everyday
10:00

Specify intranet Microsoft update service location - Enabled
http://servername
http://servername

Enable client-side targeting - Not Configured

Reschedule Automatic Updates scheduled installations - Enabled
15 Minutes

No auto restart for scheduled Automatic Updates installations - Enabled

Automatic Updates detection frequency - Enabled
1 Hour

Allow Automatic Updates immediate installation - Enabled

Delay Restart for scheduled installations - Not Configured

Re-prompt for restart with scheduled installations - Disabled

Allow non-administrators to receive update notifications - Disabled

Enable recommended updates via Automatic Updates - Disabled

Enabling Windows Update Power Management to automatically wake up the system to install scheduled updates - Not Configured

Allow signed content from intranet Microsoft update service location - Disabled

Hope this helps

[FN-GM]

Ours are very similar to that, the time for the install is at a different time though.

[Michael]

The time is optional (of course), but I set 10:00 because I know by this time teachers have arrived at school and turned their PC's on.

If your policies are similar to mine, then it's just a waiting game. WSUS will look much better after a few days.

I would also recommend (if you haven't done so) to install the Microsoft Report Viewer 2005 which works with WSUS 3.0.

[FN-GM]

Wall ours stay on 24-7. The laptops will downlaod the updates and not install until 8 pm.

Thanks for all your advice

[Michael]

You're welcome

[chrbb]

Sorry to hijack this thread - but do most people put staff laptops on wsus? Our staff laptops don't seem to pick up windows updates via windows updates website so i was wondering whether to include them in wsus, and not worry about the 6 week holidays as they are months out of date anyway.

[FN-GM]

We put them on, they are being picked up.

I might alter the install time, they are more lightly to be using them in school hours.

[Michael]

I setup all teacher laptops with WSUS. It keeps security of the network high as updates are automatically installed but also, you have a log of every machine and its updates.

[ricki]

Hi

We put all our laptops on wsus but I will warn you that staff dont always plug them into the network and so you will still have to service them and make sure they are up to date. But the wsus server will help you see which one to do first.

Richard

[Michael]

And look at it from a practicality point of view. I'd rather plug in 5 laptops, leave them for 20 minutes and go and have a drink rather than run Microsoft Update manually on each laptop!

[FN-GM]

Hi, just letting you know how i have gone today.

all the clients still say 0% apart from one that is on 1%

its just a waiting game now....

[Michael]

Could you check whether WSUS is still downloading the actual update files still? It can take a while (depending what products you've selected, and what type of update - Security, Critical, Service Pack etc...)

It can literally be gigabytes and gigabytes of data in practice. Your clients are checking in (which means they're fine), but if WSUS is still downloading the updates they obviously cannot be distributed as yet.

As long as you periodically monitor the situation, it is unfortunately still a waiting game. I just hope you have a decent internet connection!