stevendawson
asked on
WSUS Installation & Configuration Questions
Hi all,
I just installed WSUS on my box. All seemed to go well with the install and I got no unexpected results. Its up and running on port 8530 on the server.
I followed the instructions that Jeff - TechSoEasy provided me with in an earlier thread and this page does say that the documentation is being updated (whatever that may mean) http://sbsurl.com/wsus (I followed to the letter, with the exception that I created a partition exclusively for the WSUS data files 30GB drive F:\ )
I have created 2 groups - Server & Clients. Naturally the SBS box is in the server group and so far I have added a single PC to the Client group and both have had their status reported:-)
I also ran the original synchronization as specified in the documentation (succesfull) and set a scheduled synch overnight which also ran succesfully.
Now to the questions
On the Homepage of the WSUS in the To Do List I have an error, "One or more service components could not be found. Check your server status and ensure that the Windows Server Update Service is running. Non Running Service: SelfUpdate
Is that "Windows Server Update Service" called WSUS in the Services? if so I don't see it at all. I could have sworn it was there but I might be deluding myself?
I have spent a couple of hours trawling through technet and Googling and the most logical expanation I can find is a problem with Sharepoint which is described here http://technet2.microsoft.com/WindowsServer/en/Library/b23562a8-1a97-45c0-833e-084cd463d0371033.mspx?mfr=true
I don't want to just start changing stuff without being certain that I am doing the correct thing so any advice would be welcomed.
Learning more every day:-)
Thanks
Steve
I just installed WSUS on my box. All seemed to go well with the install and I got no unexpected results. Its up and running on port 8530 on the server.
I followed the instructions that Jeff - TechSoEasy provided me with in an earlier thread and this page does say that the documentation is being updated (whatever that may mean) http://sbsurl.com/wsus (I followed to the letter, with the exception that I created a partition exclusively for the WSUS data files 30GB drive F:\ )
I have created 2 groups - Server & Clients. Naturally the SBS box is in the server group and so far I have added a single PC to the Client group and both have had their status reported:-)
I also ran the original synchronization as specified in the documentation (succesfull) and set a scheduled synch overnight which also ran succesfully.
Now to the questions
On the Homepage of the WSUS in the To Do List I have an error, "One or more service components could not be found. Check your server status and ensure that the Windows Server Update Service is running. Non Running Service: SelfUpdate
Is that "Windows Server Update Service" called WSUS in the Services? if so I don't see it at all. I could have sworn it was there but I might be deluding myself?
I have spent a couple of hours trawling through technet and Googling and the most logical expanation I can find is a problem with Sharepoint which is described here http://technet2.microsoft.com/WindowsServer/en/Library/b23562a8-1a97-45c0-833e-084cd463d0371033.mspx?mfr=true
I don't want to just start changing stuff without being certain that I am doing the correct thing so any advice would be welcomed.
Learning more every day:-)
Thanks
Steve
ASKER
Hi Jeff
The XP machine is a clean install. It is already running SP2 and if I read and understood all the documentation correctly, that is exactly why it is able to automatically find the WSUS server?
SelfUpdate does indeed have "Granted Access" set and in fact in the documentation it states to check settings are the same on default web which they are.
Steve
The XP machine is a clean install. It is already running SP2 and if I read and understood all the documentation correctly, that is exactly why it is able to automatically find the WSUS server?
SelfUpdate does indeed have "Granted Access" set and in fact in the documentation it states to check settings are the same on default web which they are.
Steve
ASKER
Solution Found
I also have CRM3.0 installed on this SBS box and it seems that caused the problem because it required the use of my internal IP address. This article explains another issue that led to the solution to this problem. https://www.experts-exchange.com/questions/21895832/ConnectComputer-Failure-Problem.html#16964102
Regards
Steve
I also have CRM3.0 installed on this SBS box and it seems that caused the problem because it required the use of my internal IP address. This article explains another issue that led to the solution to this problem. https://www.experts-exchange.com/questions/21895832/ConnectComputer-Failure-Problem.html#16964102
Regards
Steve
Well, in reading the other question I'm rather confused... you shouldn't have more than one Internal IP Address... So the recommendation in that question is going to cause you problems in the future. There were actually two choices provided to you... one was to add an IP address, and the other was to use host headers.
Using Host Headers was really the right way to go and what should have been done.
Jeff
TechSoEasy
Using Host Headers was really the right way to go and what should have been done.
Jeff
TechSoEasy
ASKER
Hi Jeff,
Oh, I got it wrong then!
What happened was as I used the suggestion 1 from that other post and it worked OK I figured that he was reccomending that order, i.e thats first choice.
the other suggestion
2. add the fully qualified domain name of your server ( if not in use by any other web site) to the HTTP host header feild and assign it your internal IP address.
Can you give me further clarification on how to add host headers and what I should use in them? I'd soonercorrect it now so I can be sure it will be best configured for the future.
Thanks
Steve
Oh, I got it wrong then!
What happened was as I used the suggestion 1 from that other post and it worked OK I figured that he was reccomending that order, i.e thats first choice.
the other suggestion
2. add the fully qualified domain name of your server ( if not in use by any other web site) to the HTTP host header feild and assign it your internal IP address.
Can you give me further clarification on how to add host headers and what I should use in them? I'd soonercorrect it now so I can be sure it will be best configured for the future.
Thanks
Steve
Well, taking a step back... did you follow all steps in http://sbsurl.com/crm for your install? Did you follow-up with any issues that may be in http://sbsurl.com/crmtrouble ?
Because you can't use a host header on the SQL Reporting site... but you don't need to.
CRM should be accessed via https://SBSServerName:5555
Then, did you follow all the steps in the document linked from http://sbsurl.com/wsus? Specifically did you create a NEW web site for WSUS that is configured to use port 8530?
This would make it so that you would get to the Admin page at http://SBSServerName:8530/WSUSAdmin
And you would configure your client computers to access WSUS at http://SBSServerName:8530
There generally isn't a need for host headers in these configurations.
Jeff
TechSoEasy
Because you can't use a host header on the SQL Reporting site... but you don't need to.
CRM should be accessed via https://SBSServerName:5555
Then, did you follow all the steps in the document linked from http://sbsurl.com/wsus? Specifically did you create a NEW web site for WSUS that is configured to use port 8530?
This would make it so that you would get to the Admin page at http://SBSServerName:8530/WSUSAdmin
And you would configure your client computers to access WSUS at http://SBSServerName:8530
There generally isn't a need for host headers in these configurations.
Jeff
TechSoEasy
ASKER
Hi Jeff,
Yes to all of your questions. I followed them all to the letter and everything is available using the URLs and ports as you describe above.
Just to clarify a couple of things.
THIS ORIGINAL QUESTION
"On the Homepage of the WSUS in the To Do List I have an error, "One or more service components could not be found."
I no longer have this error.
The Other Question - About problems with /connectcomputer https://www.experts-exchange.com/questions/21895832/ConnectComputer-Failure-Problem.html#16964102
When I fixed that by adding the additional IP then the WSUS proplem went away. Maybe that was totally unrelated? Certainly the WSUS install appears to be working fine and is updating every day as per its schedule.
Perhaps I should remove that extra IP and try and connect another computer with /connectcomputer?
Thanks as always,
Steve
Yes to all of your questions. I followed them all to the letter and everything is available using the URLs and ports as you describe above.
Just to clarify a couple of things.
THIS ORIGINAL QUESTION
"On the Homepage of the WSUS in the To Do List I have an error, "One or more service components could not be found."
I no longer have this error.
The Other Question - About problems with /connectcomputer https://www.experts-exchange.com/questions/21895832/ConnectComputer-Failure-Problem.html#16964102
When I fixed that by adding the additional IP then the WSUS proplem went away. Maybe that was totally unrelated? Certainly the WSUS install appears to be working fine and is updating every day as per its schedule.
Perhaps I should remove that extra IP and try and connect another computer with /connectcomputer?
Thanks as always,
Steve
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Hi Jeff
OK, first thing is that I have removed the additional IP from the card. (if its wrong then its wrong so I took it out)
All of these are accessible from the internal network
WSUS at http://SBSServerName:8530 while http://SBSServerName/Exchange or http://SBSServerName/Remote would still work
and these work from the external IP address.
http://SBSServerName/Exchange or http://SBSServerName/Remote
but WSUS at http://SBSServerName:8530 does not work external IP (That did not surprise me before as I knew the port was closed on the router) anyway, I opened up 8530 and it is still not accessible from the external IP. I assume it should be and I have something else wrong then?
Steve
OK, first thing is that I have removed the additional IP from the card. (if its wrong then its wrong so I took it out)
All of these are accessible from the internal network
WSUS at http://SBSServerName:8530 while http://SBSServerName/Exchange or http://SBSServerName/Remote would still work
and these work from the external IP address.
http://SBSServerName/Exchange or http://SBSServerName/Remote
but WSUS at http://SBSServerName:8530 does not work external IP (That did not surprise me before as I knew the port was closed on the router) anyway, I opened up 8530 and it is still not accessible from the external IP. I assume it should be and I have something else wrong then?
Steve
WSUS should NOT work externally! Why would you want it to??
Does https://SBSServerName:5555 work for your CRM?
Jeff
TechSoEasy
Does https://SBSServerName:5555 work for your CRM?
Jeff
TechSoEasy
ASKER
Hi Jeff,
I agree, I wouldnt want it to work externally but you included it in your comment...
----------
So, it doesn't make sense to me that you could access WSUS at http://SBSServerName:8530 while http://SBSServerName/Exchange or http://SBSServerName/Remote would still work. Or even more importantly, do those work from your External IP address?
----------
So I thought maybe it "Should Work Externally"
I'll close that port back down then. So now I need to try adding another PC to the network using /connectcomputer and see if I still have the original problem. If I do I'll open another ticket.
Either way this WSUS problem has gone.
Thanks again Jeff.
Steve
I agree, I wouldnt want it to work externally but you included it in your comment...
----------
So, it doesn't make sense to me that you could access WSUS at http://SBSServerName:8530 while http://SBSServerName/Exchange or http://SBSServerName/Remote would still work. Or even more importantly, do those work from your External IP address?
----------
So I thought maybe it "Should Work Externally"
I'll close that port back down then. So now I need to try adding another PC to the network using /connectcomputer and see if I still have the original problem. If I do I'll open another ticket.
Either way this WSUS problem has gone.
Thanks again Jeff.
Steve
I was referring to the /Exchange and /Remote URL's not the first one... sorry about that confusion.
Jeff
TechSoEasy
Jeff
TechSoEasy
ASKER
Hi Jeff,
I'm not 100% certain of how this problem was resolved but I have accepted the answer that most helped in the understanding of the question.
As usual, thanks for your help.
I have another question open which you may be able to help with. If you have the opportunity I'd appreciated your opinion.
Best Regards
Steve
https://www.experts-exchange.com/questions/21899461/CRM-Deployment-Manager-shows-PC-as-a-user.html
I'm not 100% certain of how this problem was resolved but I have accepted the answer that most helped in the understanding of the question.
As usual, thanks for your help.
I have another question open which you may be able to help with. If you have the opportunity I'd appreciated your opinion.
Best Regards
Steve
https://www.experts-exchange.com/questions/21899461/CRM-Deployment-Manager-shows-PC-as-a-user.html
It was resolved by removing the extra IP address from your NIC configuration.
Jeff
TechSoEasy
Jeff
TechSoEasy
Okay... that being said... the error message is somewhat misleading. The first sentence is more important than the second... it's saying that it can't find the service which means either permissions or port assignment OR your XP machine does not have either Service Pack 1 or Service Pack 2 installed.
If the XP Machine does not have any service packs installed, please install SP2 manually.
Otherwise, please open the Server Management Console > Advanced Management > Internet Information Services > Web Sites > Default Web Site. Right click on SelfUpdate > Properties > Directory Security Tab. Click the Edit... button under IP address and domain name restrictions, and make sure that "Granted Access" is selected.
If none of that is the problem, please post back.
Jeff
TechSoEasy