WSUS clients

[FN-GM]

Hi

 

I installed WSUS on a server today. A lot of the clients have been picked up but they all have yellow exclamation marks next to them. I cannot see the update status of any computers even after several hours of being the manager.

 

Why is this please? Is there a problem or something.

 

Thank you

[Michael]

Although your workstations have registered themselves in your new WSUS install, it just means they haven't reported their installed/needed updates as yet.

 

If you want to speed up the process, click Start > Run and type:

 

wuauclt.exe /detectnow

 

This will force the workstation to report in a much shorter period of time. Depending what time you've configured in your GPOs will depend what time workstations 'check in'.

[FN-GM]

Hi, thanks for the advice. What policy need configuring so they will check in more often?

 

Thanks

[Michael]

I setup my policies as follows:

 

Computer Config > Admin Templates > Windows Components > Windows Updates

 

Do not display 'Install Updates and Shutdown' option in Shut Down Windows dialog box - Disabled

 

Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box - Not Configured

 

Configure Automatic Updates - Enabled

4 - Auto download and schedule install

0 - Everyday

10:00

 

Specify intranet Microsoft update service location - Enabled

http://servername

http://servername

 

Enable client-side targeting - Not Configured

 

Reschedule Automatic Updates scheduled installations - Enabled

15 Minutes

 

No auto restart for scheduled Automatic Updates installations - Enabled

 

Automatic Updates detection frequency - Enabled

1 Hour

 

Allow Automatic Updates immediate installation - Enabled

 

Delay Restart for scheduled installations - Not Configured

 

Re-prompt for restart with scheduled installations - Disabled

 

Allow non-administrators to receive update notifications - Disabled

 

Enable recommended updates via Automatic Updates - Disabled

 

Enabling Windows Update Power Management to automatically wake up the system to install scheduled updates - Not Configured

 

Allow signed content from intranet Microsoft update service location - Disabled

 

Hope this helps

[FN-GM]

Ours are very similar to that, the time for the install is at a different time though.

[Michael]

The time is optional (of course), but I set 10:00 because I know by this time teachers have arrived at school and turned their PC's on.

 

If your policies are similar to mine, then it's just a waiting game. WSUS will look much better after a few days.

 

I would also recommend (if you haven't done so) to install the Microsoft Report Viewer 2005 which works with WSUS 3.0.

[FN-GM]

Wall ours stay on 24-7. The laptops will downlaod the updates and not install until 8 pm.

 

Thanks for all your advice

[Michael]

You're welcome

[chrbb]

Sorry to hijack this thread - but do most people put staff laptops on wsus? Our staff laptops don't seem to pick up windows updates via windows updates website so i was wondering whether to include them in wsus, and not worry about the 6 week holidays as they are months out of date anyway.

[FN-GM]

We put them on, they are being picked up.

 

I might alter the install time, they are more lightly to be using them in school hours.

[Michael]

I setup all teacher laptops with WSUS. It keeps security of the network high as updates are automatically installed but also, you have a log of every machine and its updates.

[ricki]

Hi

 

We put all our laptops on wsus but I will warn you that staff dont always plug them into the network and so you will still have to service them and make sure they are up to date. But the wsus server will help you see which one to do first.

 

Richard

[Michael]

And look at it from a practicality point of view. I'd rather plug in 5 laptops, leave them for 20 minutes and go and have a drink rather than run Microsoft Update manually on each laptop!

[FN-GM]

Hi, just letting you know how i have gone today.

 

all the clients still say 0% apart from one that is on 1%

 

its just a waiting game now....

[Michael]

Could you check whether WSUS is still downloading the actual update files still? It can take a while (depending what products you've selected, and what type of update - Security, Critical, Service Pack etc...)

 

It can literally be gigabytes and gigabytes of data in practice. Your clients are checking in (which means they're fine), but if WSUS is still downloading the updates they obviously cannot be distributed as yet.

 

As long as you periodically monitor the situation, it is unfortunately still a waiting game. I just hope you have a decent internet connection!

[FN-GM]

Hi

 

The internet is 60 meg, it has downloaded all its updates and two clients have registered in at 90 odd percent so it looks like something is going on.

 

Thanks for you help

[elsiegee40]

When I'm setting up new machines, I tend to run Windows update manually on them rather than wait for WSUS. It's quicker!

[FN-GM]

We do but they soon get outdated

[powdarrmonkey]

WSUS just takes time to start off with, forget it for a week while it settles, then come back and deal with the problems it shows up.

[Edu-IT]

Wall ours stay on 24-7. The laptops will downlaod the updates and not install until 8 pm.

 

Thanks for all your advice

Has nobody commented on how much electricity is wasted because of that?

[FN-GM]

nope never, they go off in the holidays (apart from this one) but thats about it.

[georgebush]

Took a week to sort itself out for me, staff laptops took a while for them all to register, even then I set it to download and prompt for install due to the fact I couldnt predict a time when most would be connected.

 

Its settled down alot now, not perfect, but when the end user is involved little ever is

[FN-GM]

Thanks for the advice guys.

[Oops_my_bad]

We configure all our clients to use the DNS name of the wsus server - this exists internally and is the same externally - sorts out those pesky teachers who never bring them in

[FN-GM]

Thats an idea....