WSUS 3.0 Bizzare Behavior

Posted on 2007-07-30
Last Modified: 2012-05-05
I recently upgraded to WSUS 3.0 from a previous version about a month ago (I don't remember what version). Every thing seemed to be OK, all the PCs appaered to tranfer into the new version. Then we strted replacing all of our desktop PCs about two weeks ago. So far I have replaced 120. The strange thing is that the new PCs do not all show up in WSUS. The first PC I added to the network shows up and the a rotationg list of a second PC shows up. For example the first new  PC that I added to the network is named EEC-WKS-BOS-001 which shows up in WSUS at all times. Then a second PC will show up, for example EEC-WKS-BOS-070. Then and hour later EEC-WKS-BOS-001 and EEC-WKS-BOS-052 will show up. An hour later EEC-WKS-BOS-002 and yet another PC will show up but never more than two at a time.

My workstations are all Dell Optiplex 745s and I am running WIN XP SP2. I used Ghost / SYSPREP to distribute the PCs. I am using the same image that I used on the previously leased PCs (which worked fine in WSUS). I am having the PCs join WSUS via a group policy. If I run RSOP it shows that the policy is applying itself to the PCs and the Automatic Updates is greyed out in control pannel as it should be. I am displayiong "Any" under the Computeres catagory in WSUS so it is not a view issue. I tried ininstalling WSUS. I uninstalled, deleted the folders it left behind and re-booted and re-installed. Same problem exists, WSUS still only displays 2 at a time. I see all my original PCs, the ones that have not been replaced by the new PCs and I see all my original laptops and servers but only two of the new PCs. we are an OU which is part of a larger domain. The policy is set at the OU level. I have made sure that all the PCs have been moved into the workstaion group under our OU.

Setting      State      GPO Name
Configure Automatic Updates                  Enabled      EEC-Default
Specify intranet Microsoft update service location            Enabled      EEC-Default
Enable client-side targeting                  Enabled      EEC-Default
Reschedule Automatic Updates scheduled installations      Enabled      EEC-Default
No auto-restart for scheduled Automatic Updates installations      Enabled      EEC-Default
Automatic Updates detection frequency                  Enabled      EEC-Default
Allow Automatic Updates immediate installation            Enabled      EEC-Default
Delay Restart for scheduled installations            Enabled      EEC-Default
Re-prompt for restart with scheduled installations            Enabled      EEC-Default

Any help would be greatly appreciated.
Question by:TimSharpe02118
    LVL 82

    Accepted Solution

    Have you applied sysprep already on the image that you're deploying, or are you deploying the image and then run syprep?
    Anyway, it could be that the WSUS SID was already present on the image you've created and is now the same on all clients; check here on how to resolve this:
    A Windows 2000-based or Windows XP-based computer that was set up by using a Windows 2000 or Windows XP image does not appear in the Windows Server Update Services (WSUS) console

    Here's a batch that makes things easier:
    Potential duplicate clients using the same WSUS SID
    LVL 25

    Expert Comment

    by:Ron M
    open regedit...

    goto > [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
    You should see the following keys....

    IF not...check the GPO again...   If all else fails...delete the gpo and recreate/relink it.

    Author Comment

    My PCs do not  have those registry keys:
    "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v AccountDomainSid /f
    "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v PingID /f
    "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v

    This is what my PCs HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate look like.

    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update]
    "DetectionStartTime"="2004.08.11 04:04:15"
    "NextDetectionTime"="2007-07-30 15:21:39"
    "ScheduledInstallDate"="2007-07-30 16:00:00"
    "BalloonTime"="2007-07-30 12:43:54"


    My PCs HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate keys look like this which is correct.

    Windows Registry Editor Version 5.00



    Author Comment

    Even though my PCs did not contain the PingID and the  AccountDomainSid registryy keys I used the referenced batch file to delete the SusClientId and then reauthorize and that did the trick. My batch file looked like this. I just added it to the login script.
    net stop wuauserv
    REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v SusClientId /f
    net start wuauserv
    wuauclt /resetauthorization /detectnow

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Join & Write a Comment

    It is a known fact that servers reach the end of their lives. Some get there quicker than others, based on age, manufacturer, usage and several other factors. However, if your organization has spent time deploying Microsoft's Active Directory server…
    I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
    Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
    This video discusses moving either the default database or any database to a new volume.

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now