SCCM / WSUS sync

[neonetman]

After a long and arduous process of getting our SCCM migration working, I'm now down to the last issue, which is getting SCCM to sync th WSUS update. It seems to have pulled a few updates in, but is now giving the following:-

 

 

wcm.log give this error:-

 

 

The server has unproxied access to the web

 

Any thoughts to save a semi-mad NM from total insanity?

[Steve21]

Open IIS and check the wsuspool under application pools. Is it in a stopped state or runnign still?

 

Steve

[sbrade47]

I've had something similar recently after recreating the software update point. If the wsus pool is in the stopped state it's likely hit its memory limit whilst syncing, and causes this error. Go into the wsus pool advanced settings and change the "private memory limit" under recycling to 4000000kb. When the sync runs you can monitor its memory usage under "IIS Worker Process" our SCCM topped out at about 3.5gb so this was enough to prevent the pool from stopping.

[free780]

Try and only select the products you need and tick the run wsus cleanup wizard.

[Steve21]

I've had something similar recently after recreating the software update point. If the wsus pool is in the stopped state it's likely hit its memory limit whilst syncing, and causes this error. Go into the wsus pool advanced settings and change the "private memory limit" under recycling to 4000000kb. When the sync runs you can monitor its memory usage under "IIS Worker Process" our SCCM topped out at about 3.5gb so this was enough to prevent the pool from stopping.

 

Aye, you might find you need 6-8GB if you're doing all updates/drivers/Win10 etc etc as 4 isn't always enough, but obviously that depends if the pool is stopped

 

Steve

[sbrade47]

Aye, you might find you need 6-8GB if you're doing all updates/drivers/Win10 etc etc as 4 isn't always enough, but obviously that depends if the pool is stopped

 

Steve

Yes should have mentioned that, the 4GB is ok for us as I only sync updates for a few products (Office,Windows,Server, SCEP etc). If you sync more product updates you may need to increase the value. When it next syncs watch the IIS worker process to see if it's still hitting the limit.