New server infrastructure - not reporting to WSUS

[RabbieBurns]

We've deployed a new server room recently, all 2012R2 VMs from template. Have provisioned around 30 new servers, one of them a new WSUS server.

 

I have modified and applied our existing WSUS GPO to point to the new server, all of our legacy 2008R2 servers have registered on the new WSUS, but only about 6 of the new ones are reporting.

 

Ive tried recreating the WSUS GPO directly on a 2012R2 server, tried the usual wuauclt /detectnow tricks from yesteryear.

 

Is there some trick I'm missing?

 

(I know I should really migrate our patch management to SCCM but thats a job for much later)

[Steve21]

Err one thing that springs to mind when I was doing ours as previous school was that you needed to put the new port number on it as it had changed.

 

e.g. http://WSUS:8530 rather than http://WSUS previously

 

Steve

[RabbieBurns]

Thanks Steve, yeh the GPO has that already configured.

[Steve21]

Thanks Steve, yeh the GPO has that already configured.

 

Patched up the servers too? There were a few WSUS fixes. Irony of WSUS patching WSUS

 

Example: Windows Update Client does not scan against WSUS 3.0 SP2 if HTTPS is configured and TLS 1.2 is not enabled

 

Steve

[RabbieBurns]

I had thought of that but the idea of manually trying to run windows updates on 30 servers during a 2 hour scheduled outage window is a bit troubling.

 

Did you happen to remember any of the other WSUS specific ones and I can try to download then script their install using wusa.exe

[ADMaster]

Have you tried a gpupdate and gpresult to ensure the settings applied?

[andy_white]

When they were deployed from the template did you run the customization to generate a new SID

 

Resolving the duplicate SUSClientID issue, or “Why don’t all my clients show up in the WSUS console?” - The Official WSUS/Software Update Support Team Blog - Site Home - TechNet Blogs

[FN-GM]

Did you sysprep the VM template?

[RabbieBurns]

When they were deployed from the template did you run the customization to generate a new SID

 

Resolving the duplicate SUSClientID issue, or “Why don’t all my clients show up in the WSUS console?” - The Official WSUS/Software Update Support Team Blog - Site Home - TechNet Blogs

 

Hi yes I have had that as an available startup script GPO and was something I had tried, but get a key not found on 2012R2

 

ERROR: The system was unable to find the specified registry key or value.
ERROR: The system was unable to find the specified registry key or value.

[RabbieBurns]

Did you sysprep the VM template?

 

That's a good question. I would have hoped they did but I shall find out.

[andy_white]

Hi yes I have had that as an available startup script GPO and was something I had tried, but get a key not found on 2012R2

 

ERROR: The system was unable to find the specified registry key or value.
ERROR: The system was unable to find the specified registry key or value.

 

I had the same issue because sysprep had not been run on all the servers. I ran the switch manually in a batch file and it seemed to resolve the issue. It still took about a day for servers to appear in WSUS.

[RabbieBurns]

I had the same issue because sysprep had not been run on all the servers. I ran the switch manually in a batch file and it seemed to resolve the issue. It still took about a day for servers to appear in WSUS.

 

actually this does seem to work. The two errors were for reg keys that didnt exist, but the 3rd key does and gets deleted.

I guess the few servers that I did have showing were the ones I tested this on, but saw that error and thought it wasnt working.

 

Ive managed to get 23 showing now. Hopefully they will report their status overnight..