Machines not reporting to WSUS

[jtidd]

As title above i have alot of machines that have not reported back to WSUS for 116 days, 122 days and so on

 

What steps do i take

 

Thanks in advance

 

James

[glennda]

Are you setting this via Group Policy for them to check in with the server? Have the machines been moved OU's and a Group Policy therefore not applying?

 

Toby

[Matt_Brfc]

I had a similar issue some time again when I initially deployed WSUS and if I recall the issue was down to permission within IIS.

 

I recommend using group policy too, this way you can force your PC's to look at the WSUS server for the updates, once this has been applied and pushed out to the clients discovery will then stat to work and this will be reflected in the WSUS console.

[jtidd]

ok so what is the solution where do i check the permissions of IIS?

 

Do i need to check anything on the machines?

 

sorry new to this

[JonThompson]

Do you use ghosting software? (Symantec Ghost for example) It could be to do with duplicate security SIDS. There is a script online that you can run on PC's to clear this up.

[jtidd]

no we started using KMS in the summer, so maybe this could be a problem, any ideas?

 

 

we use WDS for imaging

 

Thanks

[CyberNerd]

try this on a client:

net stop wuauserv

reg.exe delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v PingID /f

reg.exe delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v AccountDomainSid /f

reg.exe delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v SusClientId /f

reg.exe delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v SusClientIDValidation /f

net start wuauserv

wuauclt.exe /resetauthorization /detectnow

[alan-d]

What OS are you using? There is a KB to fix this KB2720211

 

There have been problems with this KB though but can be fixed by editing the Server Registry as follows;

 

HKLM\Software\Microsoft\Update Services\Server\Setup\

Find wYukonInstalled and change the value from 1 to 0

 

Reinstall the KB above

 

Return to the above key and change the value back to 1.

[jtidd]

CYBERNERD: i have run this on affected machine, how do i know if it has worked?

 

ALAN-D : that KB is not installed on our WSUS server?

 

Thanks

[CyberNerd]

CYBERNERD: i have run this on affected machine, how do i know if it has worked?

 

 

Does it appear/update in WSUS?

[alan-d]

ALAN-D : that KB is not installed on our WSUS server?

 

Thanks

 

The KB is meant to fix your problem but some admins have a problem installing it hence my regedit.

[jtidd]

no after running cmd's it still shows that the machine has not contacted WSUS for 116 days

 

Thanks