RabbieBurns Posted March 31, 2015 Posted March 31, 2015 We've deployed a new server room recently, all 2012R2 VMs from template. Have provisioned around 30 new servers, one of them a new WSUS server. I have modified and applied our existing WSUS GPO to point to the new server, all of our legacy 2008R2 servers have registered on the new WSUS, but only about 6 of the new ones are reporting. Ive tried recreating the WSUS GPO directly on a 2012R2 server, tried the usual wuauclt /detectnow tricks from yesteryear. Is there some trick I'm missing? (I know I should really migrate our patch management to SCCM but thats a job for much later)
Steve21 Posted March 31, 2015 Posted March 31, 2015 Err one thing that springs to mind when I was doing ours as previous school was that you needed to put the new port number on it as it had changed. e.g. http://WSUS:8530 rather than http://WSUS previously Steve 1
RabbieBurns Posted March 31, 2015 Author Posted March 31, 2015 Thanks Steve, yeh the GPO has that already configured.
Steve21 Posted March 31, 2015 Posted March 31, 2015 Thanks Steve, yeh the GPO has that already configured. Patched up the servers too? There were a few WSUS fixes. Irony of WSUS patching WSUS Example: Windows Update Client does not scan against WSUS 3.0 SP2 if HTTPS is configured and TLS 1.2 is not enabled Steve 1
RabbieBurns Posted March 31, 2015 Author Posted March 31, 2015 I had thought of that but the idea of manually trying to run windows updates on 30 servers during a 2 hour scheduled outage window is a bit troubling. Did you happen to remember any of the other WSUS specific ones and I can try to download then script their install using wusa.exe
ADMaster Posted March 31, 2015 Posted March 31, 2015 Have you tried a gpupdate and gpresult to ensure the settings applied?
andy_white Posted March 31, 2015 Posted March 31, 2015 When they were deployed from the template did you run the customization to generate a new SID Resolving the duplicate SUSClientID issue, or “Why don’t all my clients show up in the WSUS console?†- The Official WSUS/Software Update Support Team Blog - Site Home - TechNet Blogs 1
RabbieBurns Posted March 31, 2015 Author Posted March 31, 2015 When they were deployed from the template did you run the customization to generate a new SID Resolving the duplicate SUSClientID issue, or “Why don’t all my clients show up in the WSUS console?†- The Official WSUS/Software Update Support Team Blog - Site Home - TechNet Blogs Hi yes I have had that as an available startup script GPO and was something I had tried, but get a key not found on 2012R2 ERROR: The system was unable to find the specified registry key or value. ERROR: The system was unable to find the specified registry key or value.
RabbieBurns Posted March 31, 2015 Author Posted March 31, 2015 Did you sysprep the VM template? That's a good question. I would have hoped they did but I shall find out.
andy_white Posted March 31, 2015 Posted March 31, 2015 Hi yes I have had that as an available startup script GPO and was something I had tried, but get a key not found on 2012R2 ERROR: The system was unable to find the specified registry key or value. ERROR: The system was unable to find the specified registry key or value. I had the same issue because sysprep had not been run on all the servers. I ran the switch manually in a batch file and it seemed to resolve the issue. It still took about a day for servers to appear in WSUS.
RabbieBurns Posted March 31, 2015 Author Posted March 31, 2015 I had the same issue because sysprep had not been run on all the servers. I ran the switch manually in a batch file and it seemed to resolve the issue. It still took about a day for servers to appear in WSUS. actually this does seem to work. The two errors were for reg keys that didnt exist, but the 3rd key does and gets deleted. I guess the few servers that I did have showing were the ones I tested this on, but saw that error and thought it wasnt working. Ive managed to get 23 showing now. Hopefully they will report their status overnight..
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now