ipconfigHELP Posted May 22, 2007 Posted May 22, 2007 Hi everyone, Can anyone help me regarding WSUS 1. Where can I download WSUS? 2. How do I install WSUS? and 3. Whats thew best form of practice? any help would be great
DSapseid Posted May 22, 2007 Posted May 22, 2007 Our LEA provide us with their own WSUS which works like a dream so i might be worth a phone call to see if yours does the same.
mattx Posted May 22, 2007 Posted May 22, 2007 DL it from: http://www.microsoft.com/technet/windowsserver/wsus/20/downloads/tools/WSUS.mspx DL and read the Operations Guide - [ all the documentation is on that link ] I have it syncing up everyday at 03:30am, clients do checking at 12 noon, they will DL the updates and wait till the next day before installing them. They DO NOT automatically reboot - [ a setting in the group policy ] Forgot to add - ver 3 link: http://www.microsoft.com/technet/windowsserver/wsus/30/default.mspx
quietriot1983 Posted January 14, 2011 Posted January 14, 2011 I have it syncing up everyday at 03:30am, clients do checking at 12 noon, they will DL the updates and wait till the next day before installing them. They DO NOT automatically reboot - [ a setting in the group policy ] Sorry for the epic bumpage, but can you post your GPO settings? I can't get WSUS to see anything, it constantly says that 0 computers are registered to receive updates.
3s-gtech Posted January 14, 2011 Posted January 14, 2011 See attached. This is set in the machine OU. 2
Admiral208 Posted January 14, 2011 Posted January 14, 2011 Have you made sure that IIS is running and that the WSUS site is started? That was a mistake I made. go to one of the clients and type wuauclt /resetauthorization /detectnow at the command line. That will force the client to show in WSUS 1
quietriot1983 Posted January 14, 2011 Posted January 14, 2011 Thanks, it is synchronising at the minute, so will investigate once it's done, I suspect I'm being stupid and this is because this is the first sync.
quietriot1983 Posted January 17, 2011 Posted January 17, 2011 Ok, it doesn't seem to matter whether I use the Update Services console or GPO to assign computers to groups, no computers appear in the list...even after hefty amounts of GPupdate-ing. Am I missing something really obvious?
Admiral208 Posted January 17, 2011 Posted January 17, 2011 have a look at the WSUS Client Diagnostics Tool here. might throw some light on the situation. 1
quietriot1983 Posted January 17, 2011 Posted January 17, 2011 Haha, this is brilliant! I've somehow managed to get one classroom's machines appearing, and one of the ICT Suite machines. But the Suite machine changes as I go round and force gpupdate...!
Admiral208 Posted January 17, 2011 Posted January 17, 2011 Do you clone the machines? rem Fixes problem with client machines not showing up on the server due to imaging method reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v AccountDomainSid /f reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v PingID /f reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v SusClientId /f cls @echo Triggering detection after resetting WSUS client identity net stop wuauserv net start wuauserv wuauclt /resetauthorization /detectnow pop that into a batch file and run on a computer. see if it makes a difference. 1
TechSupp Posted January 17, 2011 Posted January 17, 2011 Yes, try that script, got a few connecting for me last week when I found it. Would there be any mileage putting this as a startup script to make sure all computers are connecting as not sure how to check which PC's are not connecting from all our PC's on the network (other than manually going through a prinrted list).
quietriot1983 Posted January 17, 2011 Posted January 17, 2011 I ran the batch file on two machines (Ict-09 and ICT-10) and the same thing happened, 10 appeared in the list, and then after running it on 9, 10 disappeared and 9 appeared!
sted Posted January 17, 2011 Posted January 17, 2011 id use newsid and check the suite pcs dont have the same sid as i believe thats how wsus differentiates pcs
3s-gtech Posted January 17, 2011 Posted January 17, 2011 Was just going to suggest - NewSID (Windows XP only). That sounds very much like the issue. You'll need to run it on every machine that's been cloned (or sysprep them if you haven't already, but that's another debate).
Admiral208 Posted January 17, 2011 Posted January 17, 2011 have a look at the WSUS Client Diagnostics Tool here. might throw some light on the situation. Did you run this tool? What were the results? did you make sure that you ran the batch file as an admin? manually delete the SusClientID reg key. reboot. wuauclt /detectnow
quietriot1983 Posted January 17, 2011 Posted January 17, 2011 Weird, if I do it manually (and reboot)...it works straightaway.
Admiral208 Posted January 17, 2011 Posted January 17, 2011 that says to me that the batch file didnt execute properly. make sure you are running the file as an admin. try logging in as local admin and running just the part of the batch file to delete the reg keys.
quietriot1983 Posted January 17, 2011 Posted January 17, 2011 Will have to log them all on and try it manually in one fell swoop, I think. Got 2 of 3 appearing now, but they rotate depending on which order I log on. Will report back shortly! EDIT: Sorry Ad, didn't see your post. I was running the batch file as a network admin, which should also be local admin, will try just logging on locally first.
quietriot1983 Posted January 18, 2011 Posted January 18, 2011 OK Finally got all 16 Suite machines showing! I had to log on locally, then manually stop the auto update service, delete the two reg keys, restart the update service, reboot and voila!
quietriot1983 Posted January 18, 2011 Posted January 18, 2011 Glad its working now. Thanks for all your help!
quietriot1983 Posted January 20, 2011 Posted January 20, 2011 Ok next step...! WSUS is set to sync at 3am, and that seems to be working fine. The GPO setting is that computers download and schedule updates for 12pm, although a) it doesn't seem to be doing anything, as you still have to 'install updates and shut down', and b) windowsupdate.log states that after logon, the AU schedule is set to Friday at 3pm...when you go into the windows update settings locally, it does indeed state Friday 3pm, but these options are greyed out, as you might expect.
Admiral208 Posted January 20, 2011 Posted January 20, 2011 a) there is an option within GP to download and install. The first option within the GP is "Do not display 'download and install' option in shut down... , You will want to check the Allow immediate installation of updates too. b) if you have set the group policy to download updates at a certain time, then if you try to change it locally, you wont be able to. Check the policy to make sure that the time you want is correct. Have you changed the time recently? run a gpupdate /force and check again.
quietriot1983 Posted January 21, 2011 Posted January 21, 2011 http://i.imgur.com/JxHKW.jpg That's the policy settings at the moment, the auto updates is set to option 4 at 12pm. I guess the thing that is confusing me is that I'm not sure whether it should be installing quietly in the background, and waiting for any restart to be done by the user, or whether it just does everything it needs to after selecting 'shut down and install updates'
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now