We help IT Professionals succeed at work.

Computers not showing up in Windows Server Update Services console

hawthornedirect
on
565 Views
Last Modified: 2010-08-05
I installed Windows Server Update Services on one of our domain controllers yesterday.  I made the required group policy adjustments so that the computers in the organizational unit should be referring to the server at port 8530 and I even ran the gpupdate /force on the domain controller and a few of the client computers.  No computers are showing up on the "Computers" list.  It's downloading updates just fine, but no computers.
Comment
Watch Question

CERTIFIED EXPERT

Commented:
Do you have a firewall on your clients? If so, make changes so wsus and the clients can connect to each other.

Commented:
enable NetBIOS over TCP/IP

Author

Commented:
We do have Officescan firewalls on our clients, but they allow traffic from other computers on the subnet.  I also tried turning them off just in case.  No help.

Regarding enabling NetBIOS over TCP/IP, would this need to be done on the server or on the clients or both?

Commented:
I'd try on the server first.  Then the clients, they need to be advertising.It is surprising how many Windows network tasks do not work with NetBios.  
CERTIFIED EXPERT

Commented:
Which OS are your clients. Do you have XP with the latest service pack? Try the ipnumber of the wsus in the policy (this will rule netbios out). If ip does work enable netbios on the client or use your fqdn (wsus.domain.local).

Author

Commented:
Most of our clients are on XP with SP2.  We also have some workstations still on Win2k with SP4.  I enabled NetBIOS over TCP/IP on the server and one of its clients, updated the group policies on both, yet still no computers in the server.  The server is also a client of itself, could that be a problem?

Author

Commented:
By the way, I have no problem communicating with the server via the remote web console.
CERTIFIED EXPERT

Commented:
Never tried that, a wsus server being client of himself. I think -but thats my first guess- that isn't going to work. Maybe anybody else will know that?

Did you try to use the fqdn or ip number?

Author

Commented:
I was mistaken about the server being a client.  It was actually in a different OU for domain controllers.  I was already using the fqdn in the group policy, so I tried changing to the IP number and ran gpupdate /force again.  No change on the server.  Could there be a problem with the IIS configuation?

We used to run WSUS on another server, but it didn't co-exist very well with Officescan and Diagwin so it was moved.  It had been working well before that however.
CERTIFIED EXPERT

Commented:
can you check with gpmc wich rsop the users/clients are getting? Are they getting the new servername with the new gpo?

Author

Commented:
RSOP?  How do I do that?
CERTIFIED EXPERT

Commented:
Resultant set of policy. When you install gpmc (http://www.microsoft.com/windowsserver2003/gpmc/default.mspx) in that program you can query a user's settings on a client.

Author

Commented:
Cool.  I hadn't realized I could do that.  I used the Group Policy Results Wizard on a few workstations to verify that the ones in the OU to receive updates from the WSUS server do reflect that group policy in their Applied GPO list.  However, there are still no computers showing up on the server's list.
CERTIFIED EXPERT

Commented:
Check on a client (make sure the gpo is applied) the following key: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\.

You will see a key named WUServer. This should point to your wsus server (http://servername)
The string value WUStatusServer normally have the same value (this string reports its status to a wsus server)

Author

Commented:
This is interesting, though I don't know what it signifies.  At the registry location you specified, the correct value is there.  However, at HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\hawthornedirect.com{bunchofnumbers}machine and several other similar keys it shows listings pointing at the old location.  Could this be part of the problem?
CERTIFIED EXPERT

Commented:
Where did you made the gpo settings for the WSUS, in the machine or userpart of the policy? Make the settings in the computerconfiguration. The userconfiguration of wsus you can forget.

Settings are: machine configuration>administrative templates>windows components/windows updates

Author

Commented:
That is where I made the change.  I followed the steps in Microsoft's documentation exactly.  And as I said, we had WSUS working before on another server.  The other server was not a domain controller however.
CERTIFIED EXPERT

Commented:
The server doesn't need to be a domain controller.

Author

Commented:
But is there a problem running WSUS on a domain controller?

Author

Commented:
You guys may have given up on this problem, but I'm noticing now that some of our other group policies aren't getting distributed to the clients.  I've found the error

"Windows cannot query for the list of Group Policy objects. A message that describes the reason for this was previously logged by the policy engine."

in the policy events for several of our client machines.  Any ideas as to what the problem is or how to fix it?
CERTIFIED EXPERT

Commented:
wsus can run on a domain controller.

Check your gpo's (rsop), and check which are applied.

Which event id (1000?) has the error and which source does it have.
CERTIFIED EXPERT
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION

Author

Commented:
I moved the WSUS functions to a server which was not a domain controller and everything started working normally.  Whatever the problem was, it was not worth messing around with it anymore.  Thanks for your efforts.

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.