Announcement

Collapse
No announcement yet.

WSUS not functioning at all

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • WSUS not functioning at all

    Hi,
    I have Windows Server 2003 STD machine. I downloaded WSUS pack last week. It's version 2.x . I enabled IIS before installation as requirement says so.

    WSUS installation went smoothly. The respective Win2k3 PC is not a DC..Just conencted to my domain & holds no roll.

    Problem : Client unable to contact WSUS server for updates.

    Details : I didnt make any changes in IIS "Default web site" . I made changes in a demo PC which is Windows XP Professional with SP2 & connected to my domain via LAN.

    IN "Group Policy Settings" > Windows Componnats ( Computer Management ) I gave URL of local WSUS server & also set "Target group path" . Still the demo PC unable to connect to WSUS server.

    I done syncronisation at WSUS server yesterday & it shows that sync successful showing all updates. I went through several doc's @ Microsoft WSUS home page but I cant find any suitable solution.

    Any work around ?
    All in 1
    Solaris,Linux & Windows admin + networking.

  • #2
    Re: WSUS not functioning at all

    Hi

    You must be getting some errors on at least the client PC relating to this please post the errors
    The Univurse is still winning!

    W2K AD, WSUS, RIS 2003. ISA also AVG Server
    ** If contributors help you, recognise them and give reputation points where appropriate **

    Comment


    • #3
      Re: WSUS not functioning at all

      On the client...

      1. Ensure your client is receiving the correct GPO which instructs it to connect to the WSUS server for Automatic Updates (gpresult.exe)

      2. Run wuauclt.exe /detectnow

      3. Check %systemroot%\Windows Update.log for error messages or clues as to what the problem is.
      VCDX3 #34, VCDX4, VCDX5, VCAP4-DCA #14, VCAP4-DCD #35, VCAP5-DCD, VCPx4, vEXPERTx4, MCSEx3, MCSAx2, MCP, CCAx2, A+
      boche.net - VMware Virtualization Evangelist
      My advice has no warranties. Follow at your own risk.

      Comment


      • #4
        Re: WSUS not functioning at all

        you can use the clientdiag utility.

        run it on the demo machine and it will tell you what is the situation of your client and what could be the problem....

        to download client diag and more troubleshooting tips:
        http://www.wsuswiki.com/TroubleshootingClientSetup
        Yaniv Feldman
        Microsoft Security Regional Director
        Microsoft Management Expert
        MCSA, MCSE, MCT

        Comment


        • #5
          Re: WSUS not functioning at all

          I also tried by forcing "gpdate /force" command. Policy for that perticular client machine havent been applied. I edit setting for Local computer. Is it neccesary to create a separate GPO on DC and link that GPO to computer/users ?

          There is no error. When I click on "Windows Updates" it goes to Microsoft's update server. And when I type "http://machine name/selfupdate" it shows me dir's in selfupdate folder which is located on WSUS server and configured using IIS.

          Following is a snap after running "gpupdate.exe" via cmd .

          Code:
          Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v
          Copyright (C) Microsoft Corp. 1981-2001
          
          Created On 5/23/2007 at 3:03:26 PM
          
          
          RSOP results for domain name\user on comp name : Logging Mode
          ------------------------------------------------------
          
          OS Type:                     Microsoft Windows XP Professional
          OS Configuration:            Member Workstation
          OS Version:                  5.1.2600
          Domain Name:                 ABC
          Domain Type:                 Windows 2000
          Site Name:                   Default-First-Site-Name
          Roaming Profile:
          Local Profile:               C:\Documents and Settings\user
          Connected over a slow link?: No
          
          
          COMPUTER SETTINGS
          ------------------
              CN=comp name,CN=Computers,DC=domain name,DC=com
              Last time Group Policy was applied: 5/23/2007 at 2:02:50 PM
              Group Policy was applied from:      abc.xyz.com
              Group Policy slow link threshold:   500 kbps
          
              Applied Group Policy Objects
              -----------------------------
                  Default Domain Policy
                  Local Group Policy
          
              The computer is a part of the following security groups:
              --------------------------------------------------------
                  BUILTIN\Administrators
                  Everyone
                  BUILTIN\Users
                  NT AUTHORITY\NETWORK
                  NT AUTHORITY\Authenticated Users
                  BUCKET$
                  Domain Computers
          
          
          USER SETTINGS
          --------------
              CN=My Name,CN=Users,DC=ABC,DC=com
              Last time Group Policy was applied: 5/23/2007 at 2:13:07 PM
              Group Policy was applied from:      abc.xyz.com
              Group Policy slow link threshold:   500 kbps
          
              Applied Group Policy Objects
              -----------------------------
                  Default Domain Policy
          
              The following GPOs were not applied because they were filtered out
              -------------------------------------------------------------------
                  Local Group Policy
                      Filtering:  Not Applied (Empty)
          
              The user is a part of the following security groups:
              ----------------------------------------------------
                  Domain Users
                  Everyone
                  BUILTIN\Administrators
                  BUILTIN\Users
                  NT AUTHORITY\INTERACTIVE
                  NT AUTHORITY\Authenticated Users
                  LOCAL
          It means local computer policy is not applied to the PC. I changed few setting including use "Intranet server for Windows udpates" and 2 more settings.


          Any1 of you already using WSUS server ? If yes, how did you set up ?
          All in 1
          Solaris,Linux & Windows admin + networking.

          Comment


          • #6
            Re: WSUS not functioning at all

            Your listing of the gpresult.exe shows two computer policies applying:
            Default Domain Policy (this one you edit using dsa.msc or gpmc.msc)
            Local Group Policy (this one you edit using gpedit.msc)

            It doesn't matter what GPO you use to apply the Windows Update settings to the client, so long as the GPO applies. Personally I don't like to make many changes to the default domain policy. For WSUS, I'll create a separate computer GPO, and link it to the OUs containing the computers/servers needing the GPO applied.

            Yes I have set up many WSUS servers. Mostly single instance WSUS servers, a few parent/child relationship WSUS servers. Due to the AD structure I usually see and the fact that WSUS is used to update both workstations and servers alike, I'll usually create two GPOs: 1. containing the majority of the Windows Update settings including the rollout schedule. The second one containing client side targeting mechanism which is needed to distinguish between workstations and servers because usually the two functional groups of machines will be in different OUs in AD and I want to see the separated out in the WSUS console. I haven't done too much with WSUS 3.0 yet other than set up a few servers back in the beta period.
            Last edited by jasonboche; 23rd May 2007, 12:41.
            VCDX3 #34, VCDX4, VCDX5, VCAP4-DCA #14, VCAP4-DCD #35, VCAP5-DCD, VCPx4, vEXPERTx4, MCSEx3, MCSAx2, MCP, CCAx2, A+
            boche.net - VMware Virtualization Evangelist
            My advice has no warranties. Follow at your own risk.

            Comment


            • #7
              Re: WSUS not functioning at all

              Hi

              You can test if WSUS works on local group policy first.(it's easier to test WSUS though)

              1. On your XP workstation. try to ping the WSUS server or its IP . make sure your pc can talk to the WSUS server

              2. open local group policy (gpedit.msc)
              Computer configuration ->Administrative templates->windows components->Windows Update ->

              at " specify intranet microsoft update service location" you should use something like

              http://server001.abc.com

              if you have a port for WSUS then put the port number at end :8530


              when you have WSUS works on local GPO, you can start to configure it on domain GPO.

              Comment

              Working...
              X