Admiral208 Posted January 21, 2011 Posted January 21, 2011 Ok next step...! WSUS is set to sync at 3am, and that seems to be working fine. The GPO setting is that computers download and schedule updates for 12pm, although a) it doesn't seem to be doing anything, as you still have to 'install updates and shut down', and b) windowsupdate.log states that after logon, the AU schedule is set to Friday at 3pm...when you go into the windows update settings locally, it does indeed state Friday 3pm, but these options are greyed out, as you might expect. the reason that its still displaying install updates and shutdown is because you have disabled the option to 'Do not display...'. that should be enabled. are the updates being installed?? if you look in the WSUS console it will give you a couple of pie charts to give you that info.
quietriot1983 Posted January 21, 2011 Posted January 21, 2011 Sorry, been caught up with a couple of other things today, so not had much time to have a look. Just popped on though, and last night's synchronisation downloaded 6 new updates, but they all still show as 'needed', and 12pm has been and gone! Interesting side note, the 30 netbooks we have, which were also cloned machines, have now shown up successfully, without me having to do any messing about with SIDs.
quietriot1983 Posted January 28, 2011 Posted January 28, 2011 Well I've left WSUS alone for a few days, and although it is syncing and what not, I'm still not wholly convinced it's actually doing updates at 11am. One of the client machines has this in the logs, still: 2011-01-28 09:09:27:392 1216 144 Agent * WSUS server: http://GATEWAY 2011-01-28 09:09:27:392 1216 144 Agent * WSUS status server: http://GATEWAY 2011-01-28 09:09:27:392 1216 144 Agent * Target group: ICT Suite 2011-01-28 09:09:27:392 1216 144 Agent * Windows Update access disabled: No 2011-01-28 09:09:27:436 1216 144 DnldMgr Download manager restoring 0 downloads 2011-01-28 09:09:27:526 1216 144 AU ########### AU: Initializing Automatic Updates ########### 2011-01-28 09:09:27:526 1216 144 AU AU setting next detection timeout to 2011-01-28 09:09:27 2011-01-28 09:09:27:526 1216 144 AU AU setting next sqm report timeout to 2011-01-28 09:09:27 2011-01-28 09:09:27:526 1216 144 AU # WSUS server: http://GATEWAY 2011-01-28 09:09:27:526 1216 144 AU # Detection frequency: 18 2011-01-28 09:09:27:526 1216 144 AU # Target group: ICT Suite 2011-01-28 09:09:27:548 1216 144 AU # Approval type: Scheduled (Policy) 2011-01-28 09:09:27:548 1216 144 AU # Scheduled install day/time: Friday at 15:00 2011-01-28 09:09:27:548 1216 144 AU # Auto-install minor updates: Yes (Policy) So it is still insisting on Friday 3pm...
Admiral208 Posted January 28, 2011 Posted January 28, 2011 what if you try removing the time schedule policy. gpupdate /force. change the time locally. reinstate policy.see if the time changes back to Friday at 3pm.
mats Posted January 28, 2011 Posted January 28, 2011 Save yourself the effort of running commands on lots of different machines - use psexec from the excellent pstools collection (free). \pstools\psexec -u administrator -p xxx %1 gpupdate /force /boot /target:computer Runs gpupdate on machine %1 (stick admin password where xxx is). For a roomfull, list the machine names in machines.txt and run \psexec -u administrator -p xxx @machines.txt gpupdate /force /boot /target:computer
quietriot1983 Posted January 31, 2011 Posted January 31, 2011 Well even after forcing several gpupdates, the updates are still set to Friday 3pm in both windowsupdate.log and on the settings themselves, which are also greyed out.
Admiral208 Posted January 31, 2011 Posted January 31, 2011 (edited) Is it picking up the time from any other policies you might have. Default domain policy or similar?? edit: run a gpresult and check all the other policies the computer is picking up. Edited January 31, 2011 by Admiral208
quietriot1983 Posted January 31, 2011 Posted January 31, 2011 Ha! I'm so stupid. Presumably when I was trying to get WSUS to do something, anything, I put various bits of the settings in other GPO's. Now that's all removed, the actual GPO for WSUS is working and the clients say they will update everyday at 12pm. We shall see after lunch if it's done anything!
quietriot1983 Posted February 1, 2011 Posted February 1, 2011 I'm assuming it's doing something now, as there's a lot of this type of garb in windowsupdate.log 2011-02-01 09:37:25:628 1212 1a8 AU ############# 2011-02-01 09:37:25:628 1212 1a8 AU ## START ## AU: Search for updates 2011-02-01 09:37:25:651 1212 1a8 AU ######### 2011-02-01 09:37:25:742 1212 1a8 AU <<## SUBMITTED ## AU: Search for updates [CallId = {D3B059FC-8C67-4DE6-AE35-1F5FD20133F6}] 2011-02-01 09:37:28:213 1212 560 Agent ************* 2011-02-01 09:37:28:213 1212 560 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates] 2011-02-01 09:37:28:213 1212 560 Agent ********* 2011-02-01 09:37:28:213 1212 560 Agent * Online = Yes; Ignore download priority = No 2011-02-01 09:37:28:213 1212 560 Agent * Criteria = "IsHidden=0 and IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and IsAssigned=1 or IsHidden=0 and IsInstalled=1 and DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and IsAssigned=1 and RebootRequired=1" 2011-02-01 09:37:28:213 1212 560 Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed 2011-02-01 09:37:28:213 1212 560 Agent * Search Scope = {Machine} 2011-02-01 09:37:28:281 1212 560 Misc Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab: 2011-02-01 09:37:28:417 1212 560 Misc Microsoft signed: Yes 2011-02-01 09:37:28:938 1212 560 Misc Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab: 2011-02-01 09:37:28:938 1212 560 Misc Microsoft signed: Yes 2011-02-01 09:37:29:255 1212 560 Misc Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wsus3setup.cab: 2011-02-01 09:37:29:255 1212 560 Misc Microsoft signed: Yes 2011-02-01 09:37:29:278 1212 560 Setup *********** Setup: Checking whether self-update is required *********** 2011-02-01 09:37:29:278 1212 560 Setup * Inf file: C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wsus3setup.inf 2011-02-01 09:37:29:323 1212 560 Setup Update NOT required for C:\WINDOWS\system32\cdm.dll: target version = 7.4.7600.226, required version = 7.4.7600.226 2011-02-01 09:37:29:346 1212 560 Setup Update NOT required for C:\WINDOWS\system32\wuapi.dll: target version = 7.4.7600.226, required version = 7.4.7600.226 2011-02-01 09:37:29:369 1212 560 Setup Update NOT required for C:\WINDOWS\system32\wuapi.dll.mui: target version = 7.4.7600.226, required version = 7.4.7600.226 2011-02-01 09:37:29:369 1212 560 Setup Update NOT required for C:\WINDOWS\system32\wuauclt.exe: target version = 7.4.7600.226, required version = 7.4.7600.226 2011-02-01 09:37:29:369 1212 560 Setup Update NOT required for C:\WINDOWS\system32\wuaucpl.cpl: target version = 7.4.7600.226, required version = 7.4.7600.226 2011-02-01 09:37:29:369 1212 560 Setup Update NOT required for C:\WINDOWS\system32\wuaucpl.cpl.mui: target version = 7.4.7600.226, required version = 7.4.7600.226 2011-02-01 09:37:29:369 1212 560 Setup Update NOT required for C:\WINDOWS\system32\wuaueng.dll: target version = 7.4.7600.226, required version = 7.4.7600.226 2011-02-01 09:37:29:369 1212 560 Setup Update NOT required for C:\WINDOWS\system32\wuaueng.dll.mui: target version = 7.4.7600.226, required version = 7.4.7600.226 2011-02-01 09:37:29:369 1212 560 Setup Update NOT required for C:\WINDOWS\system32\wucltui.dll: target version = 7.4.7600.226, required version = 7.4.7600.226 2011-02-01 09:37:29:369 1212 560 Setup Update NOT required for C:\WINDOWS\system32\wucltui.dll.mui: target version = 7.4.7600.226, required version = 7.4.7600.226 2011-02-01 09:37:29:391 1212 560 Setup Update NOT required for C:\WINDOWS\system32\wups.dll: target version = 7.4.7600.226, required version = 7.4.7600.226 2011-02-01 09:37:29:391 1212 560 Setup Update NOT required for C:\WINDOWS\system32\wups2.dll: target version = 7.4.7600.226, required version = 7.4.7600.226 2011-02-01 09:37:29:414 1212 560 Setup Update NOT required for C:\WINDOWS\system32\wuweb.dll: target version = 7.4.7600.226, required version = 7.4.7600.226 2011-02-01 09:37:29:459 1212 560 Setup * IsUpdateRequired = No 2011-02-01 09:37:37:280 1212 560 PT +++++++++++ PT: Synchronizing server updates +++++++++++ 2011-02-01 09:37:37:348 1212 560 PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://GATEWAY/ClientWebService/client.asmx 2011-02-01 09:37:37:416 1212 560 PT WARNING: Cached cookie has expired or new PID is available 2011-02-01 09:37:37:416 1212 560 PT Initializing simple targeting cookie, clientId = 477d7d37-e3c3-4e13-a6fe-d01e7dfd5b03, target group = ICT Suite, DNS name = pacp-ict-10.stpauls.salford.org.uk 2011-02-01 09:37:37:416 1212 560 PT Server URL = http://GATEWAY/SimpleAuthWebService/SimpleAuth.asmx 2011-02-01 09:38:03:417 1212 560 PT +++++++++++ PT: Synchronizing extended update info +++++++++++ 2011-02-01 09:38:03:417 1212 560 PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://GATEWAY/ClientWebService/client.asmx 2011-02-01 09:38:10:693 1212 560 Agent Update {4F40B76E-D95C-4A34-9B61-C0B452822EED}.100 is pruned out due to potential supersedence 2011-02-01 09:38:10:693 1212 560 Agent * Added update {B6FF44FF-2DD5-4632-878C-251F71AB69B2}.100 to search result 2011-02-01 09:38:10:693 1212 560 Agent * Found 1 updates and 51 categories in search; evaluated appl. rules of 593 out of 1285 deployed entities 2011-02-01 09:38:11:441 1212 560 Agent ********* 2011-02-01 09:38:11:441 1212 560 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates] 2011-02-01 09:38:11:441 1212 560 Agent ************* 2011-02-01 09:38:11:464 1212 840 AU >>## RESUMED ## AU: Search for updates [CallId = {D3B059FC-8C67-4DE6-AE35-1F5FD20133F6}] 2011-02-01 09:38:11:464 1212 840 AU # 1 updates detected 2011-02-01 09:38:11:464 1212 840 AU ######### 2011-02-01 09:38:11:464 1212 840 AU ## END ## AU: Search for updates [CallId = {D3B059FC-8C67-4DE6-AE35-1F5FD20133F6}] 2011-02-01 09:38:11:464 1212 840 AU ############# 2011-02-01 09:38:11:464 1212 840 AU Featured notifications is disabled. 2011-02-01 09:38:11:464 1212 840 AU AU setting next detection timeout to 2011-02-02 00:26:59 2011-02-01 09:38:11:464 1212 840 AU Setting AU scheduled install time to 2011-02-01 12:00:00 2011-02-01 09:38:11:464 1212 840 AU Auto-approving update for download, updateId = {B6FF44FF-2DD5-4632-878C-251F71AB69B2}.100, ForUx=0, IsOwnerUx=0, HasDeadline=0, IsMinor=1 2011-02-01 09:38:11:464 1212 840 AU Auto-approved 1 update(s) for download (NOT for Ux) Granted it wasn't at 12pm, but that could have been because it missed yesterday's instance due to the GP not being updated until very close to 12pm.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now