Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Clients not connecting to my WSUS 3.0 server

Posted on 2007-09-28
12
Medium Priority
?
692 Views
Last Modified: 2008-01-09
When trying to get my clients to show up in my WSUS server 3.0 they are not showing up so i ran the client diag tool and got the following error's: AU does not have Policy set  and UseWsusServer is disabled. I am wondering what is going, I have the group policies set up to connect to the server and i am using the default website is there something i am missing?  
0
Comment
Question by:Nicholas Niggel
  • 6
  • 6
12 Comments
 
LVL 3

Expert Comment

by:cgbent
ID: 19978850
Is this happening for all your computers in the domain or just some?
Did you at one point have a GPO set for your stations to do their own update automatically? I have found that sometimes when updates are still pending installation by an administrators account that new policies will not take effect until you have manually installed those updates by logging in with a an admin account and forcing install from update website.

Please provide some more information like how were updates being performed before you installed the SUS server, have you verified through the registry on client machines that they have in fact pulled and applied the GPO containing your SUS information?

Any and all information is helpful.
0
 

Author Comment

by:Nicholas Niggel
ID: 19978934
The group policy at one point had the option of download and let me choose when to install. It is all computers in the domain. here maybe this will help

                This version is WSUS 2.0

Checking AU Settings
        AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
                Option is from Control Panel

Checking Proxy Configuration
        Checking for winhttp local machine Proxy settings . . . PASS
                Winhttp local machine access type
                        <Direct Connection>
                Winhttp local machine Proxy. . . . . . . . . .  NONE
                Winhttp local machine ProxyBypass. . . . . . .  NONE
        Checking User IE Proxy settings . . . . . . . . . . . . PASS
                User IE Proxy. . . . . . . . . . . . . . . . .  NONE
                User IE ProxyByPass. . . . . . . . . . . . . .  NONE
                User IE AutoConfig URL Proxy . . . . . . . . .  NONE
                User IE AutoDetect
                AutoDetect not in use

Checking Connection to WSUS/SUS Server
AU does not have Policy Set
AU does not have Policy Set
        UseWuServer is disabled . . . . . . . . . . . . . . . . FAIL

Press Enter to Complete
0
 
LVL 3

Expert Comment

by:cgbent
ID: 19979071
Ok can you answer the first question about is this happening to all machines in the domain? Also if you goto the update website from one of the client machine and have it check for updates, are there any available? In the event log on the client machines are there logs regarding group polocy processing or possibly notifications from userenv?
0
Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

 

Author Comment

by:Nicholas Niggel
ID: 19979136
this happening all machines on the domain. here is the diag from a client machine. So yes everyone on the domain can not connect to the WSUS Server. Yes all the machines are up to date i went around yesterday and ran updates and even had them reboot at the end of the day. I have not seen any errors from the group policy in the eevnt viewer

                This version is WSUS 2.0

Checking AU Settings
        AU Option is 3 : Notify Prior to Install. . . . . . . . PASS
                Option is from Control Panel

Checking Proxy Configuration
        Checking for winhttp local machine Proxy settings . . . PASS
                Winhttp local machine access type
                        <Direct Connection>
                Winhttp local machine Proxy. . . . . . . . . .  NONE
                Winhttp local machine ProxyBypass. . . . . . .  NONE
        Checking User IE Proxy settings . . . . . . . . . . . . PASS
                User IE Proxy. . . . . . . . . . . . . . . . .  NONE
                User IE ProxyByPass. . . . . . . . . . . . . .  NONE
                User IE AutoConfig URL Proxy . . . . . . . . .  NONE
                User IE AutoDetect
                AutoDetect not in use

Checking Connection to WSUS/SUS Server
AU does not have Policy Set
AU does not have Policy Set
        UseWuServer is disabled . . . . . . . . . . . . . . . . FAIL

Press Enter to Complete

0
 

Author Comment

by:Nicholas Niggel
ID: 19979178
cg this from a client userenv

USERENV(2bc.2c0) 16:50:04:031 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2bc.568) 16:50:23:906 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2bc.8d4) 18:47:10:814 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2bc.8d4) 20:38:15:908 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2bc.8d4) 22:36:28:445 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2bc.8d4) 00:12:48:993 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2bc.8d4) 01:55:10:049 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2bc.8d4) 03:28:28:973 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2bc.8d4) 05:20:50:759 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2bc.8d4) 07:03:11:047 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2bc.8d4) 08:35:30:025 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2bc.5a4) 08:53:51:095 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2bc.8d4) 10:23:52:152 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2bc.f4c) 10:52:08:861 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
0
 
LVL 3

Expert Comment

by:cgbent
ID: 19979190
At this point then I am starting to think that you have some sort of policy processing failure, I do not believe that you would find the SUS server information on the client machines upon investigation. Is it possible you have a conflicting policy on the domain?

If you run the RSOP (Resultant Set of Policy)wizrd against one of the client machines, do the results have in them the settings for your SUS server?

0
 
LVL 3

Expert Comment

by:cgbent
ID: 19979266
also try this, can you UNC path to "\\yourdomainname.com\SYSVOL\yourdomaincontrollername.com\policies" ???
0
 

Author Comment

by:Nicholas Niggel
ID: 19979318
how do i run the RSOP wizard?
0
 

Author Comment

by:Nicholas Niggel
ID: 19979359
okay i am not seeing the SUS server after running RSOP.msc
0
 
LVL 3

Expert Comment

by:cgbent
ID: 19979386
Ok so the problem here is that your client machines are NOT processing the GPO that contains your SUS infromation. I would suggest removing and re creating the GPO for the SUS. First off you need to verify exactly what GPO that INI file is associated with. if you look through the policies folder on your domain controller, you should find one missing the GPT.ini file and then you can check the details of your GPO's to find the assocaited sid for it and delete and recreate. sometimes simply editing the gpo will recreate the ini file.
0
 

Author Comment

by:Nicholas Niggel
ID: 19979456
ok i am going to recreate the policy should i enable configure automatic updates or should i jut configure the intranet server?
0
 
LVL 3

Accepted Solution

by:
cgbent earned 2000 total points
ID: 19979514
you want to configure automatic updates too, here is an example of one of the RSOP settings for my SUS 2.0 server at a remote location

Windows Components/Windows Updatehide
Policy Setting
Allow Automatic Updates immediate installation Enabled
Allow non-administrators to receive update notifications Disabled
Allow signed content from intranet Microsoft update service location Enabled
Automatic Updates detection frequency Enabled
Check for updates at the following
interval (hours):  22
 
Policy Setting
Configure Automatic Updates Enabled
Configure automatic updating: 4 - Auto download and schedule the install
The following settings are only required
and applicable if 4 is selected.
Scheduled install day:  0 - Every day
Scheduled install time: 12:00
 
Policy Setting
Delay Restart for scheduled installations Disabled
Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box Disabled
Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box Disabled
Enable client-side targeting Enabled
Target group name for this computer Atd
 
Policy Setting
Enable recommended updates via Automatic Updates Enabled
Enabling Windows Update Power Management to automatically wake up the system to install scheduled updates Disabled
No auto-restart for scheduled Automatic Updates installations Enabled
Re-prompt for restart with scheduled installations Enabled
Wait the following period before
prompting again with a scheduled
restart (minutes):  30
 
Policy Setting
Specify intranet Microsoft update service location Enabled
Set the intranet update service for detecting updates: http://SUS:8530 
Set the intranet statistics server: http://SUS:8530 
(example: http://IntranetUpd01)

Hope this helps
 
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
This Micro Tutorial will teach you how to add a cinematic look to any film or video out there. There are very few simple steps that you will follow to do so. This will be demonstrated using Adobe Premiere Pro CS6.
Is your OST file inaccessible, Need to transfer OST file from one computer to another? Want to convert OST file to PST? If the answer to any of the above question is yes, then look no further. With the help of Stellar OST to PST Converter, you can e…

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question