Windows 2000 clients not detected in WSUS 3.0 Console : Microsoft, WSUS, 3.0

May 17, 2008 10:52am pdt

1. KCTS 628,768
2. oBdA 268,832
3. ryansoto 219,935
4. RobWill 181,008
5. PlaceboC6 173,368
6. ChiefIT 172,482
7. LauraEHu... 168,762
8. Paka 159,362
9. leew 145,656
10. Burns2007 141,086
11. toniur 140,582
12. TechSoEasy 135,094
13. tsmvp 132,081
14. Jay_Jay70 126,676
15. Netman66 120,698

1. Netman66 3,151,421
2. oBdA 2,847,132
3. Jay_Jay70 2,449,268
4. KCTS 1,883,480
5. Sembee 1,753,797
6. TechSoEasy 1,450,782
7. leew 1,442,781
8. NJComput... 1,215,168
9. LauraEHu... 839,305
10. RobWill 830,282
11. TheCleaner 807,750
12. Chris-Dent 771,426
13. sirbounty 708,585
14. Pber 666,458
15. toniur 641,984

05.07.2008 at 08:45PM PDT, ID: 23385006

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

9.0

Windows 2000 clients not detected in WSUS 3.0 Console

Zone: Windows 2003 Server

Tags: Microsoft, WSUS, 3.0

I am getting extremely frustrated with this and I hope that there is someone that can help me with this. I have a Windows 2003 R2 Standard server running WSUS 3.0. I have about 25 pc on the network and 3 of them are Windows XP SP2 which all are detected in WSUS with no problems. The remaining PC's are Windows 2000 SP4 and only one is being detected. I am using a GPO to for WSUS and I have checked one of the PC's running 2000's "Windowsupdate.log" to see if it is getting the information from the GPO and it is. I run clientdiag on the same pc and everything is fine and passes. I have run from a command line "wuauclt /detectnow" with no errors and also "secedit /refreshpolicy machine_policy /enforce" and "secedit /refreshpolicy user_policy /enforce" with no problem. I update the Windows Update Agent without any trouble. I also ran the following script "net stop wuauserv
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v AccountDomainSid /f
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v PingID /f
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v SusClientId /f
net start wuauserv
wuauclt /resetauthorization /detectnow"
I have waited and waited and waited but still nothing. Only one 2000 machine is reporting to WSUS. I am assuming that someone cloned all of these machines but I am not sure. Please, if someone can help it would be much appreciated. Attached is the WindowsUpdatelog and my ClientDiag.

Attachments:

clientdiag.txt (1 KB) (File Type Details)

This is the Clientdiag results ran on the 2000 machine

windowsupdate.txt (1.9 MB) (File Type Details)

This is the WindowsUpdate.log on the same machine.

Start your free trial to view this solution

Question Stats

Zone: OS

Question Asked By: ddanyluk

Solution Provided By: Netman66

Participating Experts: 1

Solution Grade: B

Translate:

Loading Advertisement...

Microsoft

Internet Protocols
Applications

Development
OS

Hardware
Windows Security

Apple

Operating Systems
Hardware

Programming
Networking

Software

Internet

Search Engines
File Sharing
WebTrends / Stats
Spy / Ad Blockers

Web Browsers
New Net Users
Web Development
Chat / IM

Anti Spam
Web Servers
Anti-Virus
Email Clients

Gamers

Tips
Online / MMORPG
Puzzle
Emulators

Action / Adventure
Role Playing
Consoles
Game Programming

Strategy
Sports
Misc
Computer Games

Digital Living

Hardware
New Net Users
New Users

Software
Digital Music
Gaming World

Home Security
Apple
Networking Hardware

Virus & Spyware

Vulnerabilities
IDS
Encryption
Anti-Virus

Operating Systems Security
Software Firewalls
WebApplications
Cell Phones

Operating Systems
Internet
Hardware Firewalls

Hardware

Handhelds / PDAs
Displays / Monitors
Components
Networking Hardware

Peripherals
Laptops/Notebooks
Storage
Servers

Desktops
New Users
Misc
Apple

Software

System Utilities
Industry Specific
Network Management
Photos / Graphics
Page Layout
VMWare
Misc
Web Development

OS
CYGWIN
Voice Recognition
Message Queue
Quality Assurance
Security
Firewalls
MultiMedia Applications

Development
Database
Office / Productivity
Business Management
OS/2 Apps
Server Software
Internet / Email

ITPro

OS
Storage
Encryption
Operating Systems Security
Apple Hardware
Laptops & Notebooks
Servers
Networking Hardware
Peripherals

Devices
Displays / Monitors
WebTrends / Stats
Search Engines
Firewalls
WebApplications
IDS
Vulnerabilities
Email Clients

File Sharing
Spy / Ad Blockers
Web Browsers
Web Servers
Networking
Anti-Virus
Chat / IM
Anti Spam

Developer

Web Servers
Web Browsers
Game Programming
Dev Tools
Industry Specific
Office / Productivity

Database
CYGWIN
Web Development
Search Engines
File Sharing
WebTrends / Stats

Programming
Content Management
Application Servers
Protocols

Storage

Removable Backup Media
Storage Technology
Servers

Grid
Remote Access
Backup / Restore

Misc
Hard Drives

Miscellaneous
Security
Development
Linux
VMWare

MainFrame OS
Unix
Apple
OS / 2
AS / 400

BeOS
Microsoft
VMS / OpenVMS

Database

Oracle
Miscellaneous
MySQL
Software
Sybase
Contact Management
PostgreSQL
Data Manipulation
Clarion
InterSystems Cache

Siebel
MUMPS
OLAP
SQLBase
SAS
GIS & GPS
4GL
Berkeley DB
DB2
Informix

Interbase / Firebird
FoxPro
Reporting
LDAP
Filemaker Pro
MS SQL Server
dBase
MS Access

Security

Misc
Web Browsers
Software Firewalls
Operating Systems Security
File Sharing

Spy / Ad Blockers
Vulnerabilities
WebApplications
IDS
Anti-Virus

Encryption
Anti Spam
Email Clients
VPN
Chat / IM

Programming

Editors IDEs
Installation
Handhelds / PDAs
Multimedia Programming
System / Kernel

Algorithms
Game
Signal Processing
Project Management
Open Source

Database
Misc
Languages
Processor Platforms
Theory

Web Development

Scripting
Blogs
Web Servers
Software
Search Engines
Web Graphics
Images

Internet Marketing
Images and Photos
Components
Document Imaging
Web Languages/Standards
Illustration
WebApplications

Fonts
WebTrends / Stats
Authoring
Digital Camera Software
Miscellaneous

Networking

Protocols
Apple Networking
Network Management
Message Queue
Application Servers
Content Management
File Servers
Email Servers
Misc
Java Editors & IDEs

Wireless
Networking Hardware
Backup / Restore
System Utilities
ISPs & Hosting
Web Servers
Storage Technology
Removable Backup Media
Servers
Broadband

Grid
OS / 2
Novell Netware
Unix Networking
Windows Networking
Security
Telecommunications
Operating Systems
Linux Networking

Other

Community Advisor
Lounge
Community Support
New Net Users

Philosophy / Religion
Math / Science
Miscellaneous
URLs

Expert Lounge
Politics
Puzzles / Riddles

Community Support

Suggestions
New to EE
New Topics
Community Advisor

CleanUp
Announcements
General

Feedback
Input
EE Bugs

05.08.2008 at 02:55PM PDT, ID: 21528809

Rank: Genius

Netman66:

It sounds like those 2000 machines are imaged from a single, non-sysprepped image. They likely all have the same SID.

Remove one of them correctly from the domain.
Use NewSID: http://technet.microsoft.com/en-us/sysinternals/bb897418.aspx to change the SID on that machine.
Rejoin it to the domain.

See if it is picked up in WSUS now.

Make sure to protect any profile locally you need to save just in case.

Accepted Solution

05.09.2008 at 12:51AM PDT, ID: 21530991

ddanyluk:

Thank for replying and giving me some input. I thought this was the deal but it didn't work. I removed the pc from the domain, ran the utility and added back to the domain and waited for about 45 minutes and nothing.

05.09.2008 at 03:01AM PDT, ID: 21531409

Rank: Genius

Netman66:

Ok, then that's one thing out of the way.

After reviewing your logs, I found this:

2008-05-07 19:45:19 1168 494 AU # AU disabled through User preference

So, you need to find out what Policy you have blocked access to AU with. It could be a WMI filter, it could be you have removed the Authenticated Users group.
Automatic Updates should be configured in the Computer Configuration section, not the User Section. If you set the option in User Configuration for Disable and Remove links to Windows Update, then this also disable Automatic Updates.

Unfortunately, there isn't a nice GPRESULT tool for Windows 2000, so you have use RSoP on the server and target one of the Windows 2000 computers to see where the effective permissions are blocking AU.

Assisted Solution

05.09.2008 at 12:07PM PDT, ID: 21535637

ddanyluk:

Thanks Netman, I will research where this is being disabled at. I think it is actually on the local machine. Prior to my coming they never had AD and the previous IT guy was modifying the security via the local registry. I hate when people do this crap. I will check and see if that does the trick.

05.09.2008 at 01:06PM PDT, ID: 21536042

ddanyluk:

Okay, so I checked on my GPO's and I only have 2 and nothing is really set on the user side. So I went to the local machine and went into the register to HKLM\Software\Microsoft\Policies\Windows Update and notice that the NoAutoUpdate key was in there so someone added this key and it was set to 1 for the value which means to disable it. I set it to 0 to enable it and restarted the machine. Waited about 20 to 30 minutes and still nothing. Please Natman, if you have any other ideas.

05.09.2008 at 01:21PM PDT, ID: 21536154

Rank: Genius

Netman66:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\ is the key we need to focus on.

In your logs it appears you have a Target Group of Windows 2000. Personally, I wouldn't use Target groups in such a small environment. If you can, remove this group so that all PCs report to All Computers.

Otherwise, we need to se the target group in the registry or by GPO. This is where you need to segregate the XP and 2000 workstations via OUs - so that your GPOs can set Target Groups per OU (and thus by OS).

To set Target Groups in the registry in the key above create 2 DWORD values:

TargetGroupEnabled = 1
and
TargetGroup = Windows 2000 <= or whatever your target group is.

On the flip side, these may already be set and don't match your config. In this case change them or remove Targetting completely from both client and WSUS server.

Assisted Solution

05.09.2008 at 01:48PM PDT, ID: 21536318

ddanyluk:

So in regards to target groups, you are referring to the ones that I set in WSUS? Please elaberate on this. In the GPO I am not targeting any specifice OU I have it set on the top of the Forest

05.09.2008 at 02:27PM PDT, ID: 21536502

Rank: Genius

Netman66:

Targeting Groups are in WSUS.

If you have set them up in WSUS console but are not defining them in the GPO then it only partly works.

The simplest thing is to NOT define any in WSUS and therefore you won't need them in a GPO or in the registry of any client PC.

Assisted Solution

05.09.2008 at 02:40PM PDT, ID: 21536559

ddanyluk:

I removed the Targeting Group's in WSUS so all I have the "All Computer's Group" and "Unassigned Computers" I am waiting and still nothing. I am really not getting this.

05.09.2008 at 07:31PM PDT, ID: 21537619

Rank: Genius

Netman66:

Ok, now on the 2000 clients did you check those registry keys to make sure they don't have targeting enabled and/or a targeting group assigned?

Assisted Solution

05.09.2008 at 07:40PM PDT, ID: 21537635

ddanyluk:

I did check and those keys did not exist.

05.09.2008 at 08:45PM PDT, ID: 21537778

Rank: Genius

Netman66:

On your GPO that configures WSUS settings are there any target group settings enabled?

On one of the 2000 stations, run Secedit /refreshpolicy machine_policy and post the log from the client - or any AU event log errors.

05.09.2008 at 09:15PM PDT, ID: 21537841

ddanyluk:

Ther are no target group settings on my GPO for WSUS. I just ran the refreshpolicy and there isn't any errors in the event log. Attached is the new windows update log on the machine. I did notice that it says that the target group is (unassigned computers)? I don't have anything that is targeted. Is this by default?

UpdateLog.txt (1 KB) (File Type Details)

New Update Log

05.09.2008 at 09:53PM PDT, ID: 21537896

ddanyluk:

So I got it to work. I notice in the WindowsUpdate.log that it was defaulting to the target group (Unassigned Computers) so I went into the registry and made the change to target that group and set the value to 1 in the DWORD. I ran the wuauclt /detectnow and no errors then I ran the wuauclt /force and looked in the log and it was stating that AU was in interactive-only. I turned on AU in the control panel and ran wuauclt /force again and there were no errors. I went to the WSUS server and there it was. I really hope that I don't have to do this for all the other 15 PC's. What would you recommend.

05.09.2008 at 10:30PM PDT, ID: 21537955

ddanyluk:

Okay, so I am just going to award you the points. I went to the other machines and from the local settings in the Control Panel AU was turned off. I know that in XP it doesn't matter because the GPO will overwrite those settings. I just started enabling the AU on the 2000 machine to detect but no to download or install and now they are all showing up in WSUS like clock work. Why is this?

05.10.2008 at 04:07AM PDT, ID: 21538484

Rank: Genius

Netman66:

Not sure why those computers are not changing those settings by GPO. Whatever this old Admin did seemed to mess up those registry settings pretty bad.

20080236-EE-VQP-29 / EE_QW_2_20070628