WSUS - Computers

[BatchFile]

I'm being dense here.

 

Setting up a new WSUS server on a newish DC.

 

I've installed it (good start) and

Synchronised it (2993 updates downloaded)

BUT

1. There's no computers showing

2. I can't see the individual updates (just the fact that there 's 2993 of them)

 

What have I forgotten to do?

[alan-d]

Told the clients via GPO that it is there?

[jamesreedersmith]

Change Group policy so the pcs all point to it?

[sted]

tell wsus to accept pcs via gpo

[BatchFile]

Told the clients via GPO that it is there?

 

Change Group policy so the pcs all point to it?

 

I'm just doing one for now - I've put it in a test OU with blocked inheritance - pretty much the only policy that applies to it is the one that sets up the updates and it's pointing to WSUS. gpresult confirms this is working ok

 

tell wsus to accept pcs via gpo

 

I had that set the other way - I've changed it now but still no joy

 

Should I be able to pull the computers from the domain into WSUS or do they only appear once they've tried to connect?

[sted]

I'm just doing one for now - I've put it in a test OU with blocked inheritance - pretty much the only policy that applies to it is the one that sets up the updates and it's pointing to WSUS. gpresult confirms this is working ok

 

 

 

I had that set the other way - I've changed it now but still no joy

 

Should I be able to pull the computers from the domain into WSUS or do they only appear once they've tried to connect?

 

they only appear when they look for updates go to a pc check the policy is applying and is pointed at correct server AND port (usually 8530) and then run

wuauclt /detectnow

see if it turns up in the console

[BatchFile]

I'm going to leave this till next week now. Just found a possible cause.

 

Con--ficker running on the server I was setting up.

 

Ah well:o

[e_g_r]

I'm going to leave this till next week now. Just found a possible cause.

 

Con--ficker running on the server I was setting up.

 

Ah well:o

 

Confiker, isolate your machines and check the network quick. It can spread very quickly once its on a network.

[BatchFile]

Confiker, isolate your machines and check the network quick. It can spread very quickly once its on a network.

 

Don't panic! we had this a couple of weeks ago and it's almost cleaned up - all the workstations, laptops etc. are cleaned and running with their firewalls up and no exceptions allowed, to prevent reinfection. Obviously we can't do that with the servers, so I'm coming in on Monday (holidays start today) to isolate them and clean them up once and for all to kill the beastie off.

[azrael78]

They may not show up if their Windows Update Agent isn't working properly or any of the Windows Update architecture is damaged.

 

A good idea is to put 2 PCs into the WSUS GPO (so they get pointed to it).

Have one as is, tell it to look for updates and do the wuauclt /detectnow command.

 

The other one - install the latest version of Windows Update Agent and BITS.

Reboot it and then do above.

 

Eh... just saw you got hit by conficker. Sorry to hear about that man.

 

Az

[chazzy2501]

When setting up WSUS did you choose the default port settings? If not you may have to configure the firewall on the wsus server and you'd have to add that port into the GPO ("http://wsusserver:port"). You have to create the computer groups you've specified in the GPO on the WSUS first it won't create them for you.

 

They may also be case sensitive!

 

( I don't know how to disable smilies thats supposed to be semicolon the the letter p of port)

Edited January 8, 2010 by chazzy2501

[BatchFile]

Thanks all, seems to be working OK now - I've no idea what changed; I just kept fiddling with the GPO settings until it worked, not that I've deliberately done much different to what I did in the first place:confused:

[tazz]

Don't panic! we had this a couple of weeks ago and it's almost cleaned up - all the workstations, laptops etc. are cleaned and running with their firewalls up and no exceptions allowed, to prevent reinfection. Obviously we can't do that with the servers, so I'm coming in on Monday (holidays start today) to isolate them and clean them up once and for all to kill the beastie off.

 

Not even exceptions for your Anti-virus?