Link to home
Start Free TrialLog in
Avatar of kpurchase
kpurchase

asked on

How do I get client's PC's to report in WSUS console?

Hello,
I am a student Intern, and I have been trying to get WSUS to run for months. Our WSUS 3.0 server is running Windows Server 2003 Standard SP2. In the WSUS console the client PC's are showing up but the "Last Status Report' date is over 5 months for all of the PC's. Our client PC's are running Windows XP Pro SP2. I have enabled client-side targeting and I believe the Group Policy is working properly. For some reason the clients cannot self-update. I verified that the Self Update Virtual directory is there. I am not sure if the clients cannot connect or if its a security issue that is blocking the clients from connecting. Here are the results from the ClientDiag. Any help is greatly appreciated.

WSUS Client Diagnostics Tool

Checking Machine State
        Checking for admin rights to run tool . . . . . . . . . PASS
        Automatic Updates Service is running. . . . . . . . . . PASS
        Background Intelligent Transfer Service is running. . . PASS
        Wuaueng.dll version 7.0.6000.381. . . . . . . . . . . . PASS
                This version is WSUS 2.0

Checking AU Settings
        AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
                Option is from Policy settings

Checking Proxy Configuration
        Checking for winhttp local machine Proxy settings . . . PASS
                Winhttp local machine access type
                        <Direct Connection>
                Winhttp local machine Proxy. . . . . . . . . .  NONE
                Winhttp local machine ProxyBypass. . . . . . .  NONE
        Checking User IE Proxy settings . . . . . . . . . . . . PASS
                User IE Proxy. . . . . . . . . . . . . . . . .  NONE
                User IE ProxyByPass. . . . . . . . . . . . . .  NONE
                User IE AutoConfig URL Proxy . . . . . . . . .  NONE
                User IE AutoDetect
                AutoDetect not in use

Checking Connection to WSUS/SUS Server
                WUServer = http://qarc-domain:8530/Web Sites/WSUSAdmin/Self Upda
te/AU
                WUStatusServer = http://qarc-domain:8530/Web Sites/WSUSAdmin/Sel
f Update/AU
        UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
                Client is pointed to SUS 1.0 Server

WinHttpDownloadFileToMemory(szURLDest, NULL, 0, NULL, NULL, NULL, &downloadBuffe
r) failed with hr=0x80190194

No Error description could be found

Press Enter to Complete

Thanks,
James
Avatar of and235100
and235100
Flag of United Kingdom of Great Britain and Northern Ireland image

I take it that you have tried running wuauclt.exe /resetauthorization /detectnow to attempt to pickup the stations?
Wow, I like that one and235100. I am going to have to remember that.

My first thought was a installed software or hardware firewall. But, I saw this:
http://qarc-domain:8530/Web

Shouldn't that be: http://qarc-domain:8530   

What is the /Web part for?
Avatar of kpurchase
kpurchase

ASKER

I tried running wuauclt.exe /resetauthorization /detectnow from the WSUS server but no luck. At first I could not get any systems to even show up in the WSUS console but after setting the intranet update service to http://qarc-domain:8530, they showed up. I tried changing the intranet service to  http://qarc-domain:8530/Web Sites/WSUSAdmin/Self Update/AU to see if that would do anything but it didn't. Also in the client Diag report it says that the version is WSUS 2.0,but our WSUS server is running 3.0. Could that be the problem?
Thanks,
James
Try the fix mentioned here:
http://www.wsuswiki.com/ClientFAQ
What is the \Web switch for?  

If http://qarc-domain:8530/ works, then why not use it?

If this means you are trying to go through a web proxy, then I know of a little known error with the proxy and WSUS that I can dig up.
I tried the fixes listed at http://www.wsuswiki.com/ClientFAQ and changed the intranet site back to http://qarc-domain:8530/ but still no luck. On September 19 of last year we had an update that caused serious problems so WSUS was turned off, but I dont know exactly what was shut off. Is there a list of services that need to be running that could have been stopped?  If I run gpresult I can see that the correct group policys are being applied. The user settings are disabled. The WSUS_Monday and WSUS_Wednesday objects contain the Update Settings that I want to be applied to this system. Here are the results.
Thanks

COMPUTER SETTINGS
------------------
    Last time Group Policy was applied: 3/11/2008 at 10:16:15 AM
    Group Policy was applied from:      QARC-DOMAIN.qarc.org
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        qarc
    Domain Type:                        Windows 2000

    Applied Group Policy Objects
    -----------------------------
        WSUS_Monday
        WSUS_Wednesday

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        WSUS_Thursday
            Filtering:  Not Applied (Unknown Reason)

        WSUS_Tuesday
            Filtering:  Not Applied (Unknown Reason)

        WSUS_Sunday
            Filtering:  Not Applied (Unknown Reason)

        Local Group Policy
            Filtering:  Not Applied (Empty)

    The computer is a part of the following security groups
    -------------------------------------------------------
        BUILTIN\Administrators
        Everyone
        BUILTIN\Users
        NT AUTHORITY\NETWORK
        NT AUTHORITY\Authenticated Users
        This Organization


    The user is a part of the following security groups
    ---------------------------------------------------
        Everyone
        Debugger Users
        BUILTIN\Administrators
        BUILTIN\Users
        NT AUTHORITY\INTERACTIVE
        NT AUTHORITY\Authenticated Users
        This Organization
        LOCAL
        Domain Admins
I think you might want to try to reset the group list as and235100 said. Let us know how that works.
I tried running wuauclt.exe /resetauthorization /detectnow from the WSUS server as well as one of clients, but nothing is happening. Is something supposed to happen or are the clients supposed just start reporting after running this?

Thanks Again,

James
You may be trying to apply a policy that is not applicable to the computer or user you intend it to go to. So, it is filtered out.

The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        WSUS_Thursday
            Filtering:  Not Applied (Unknown Reason)

        WSUS_Tuesday
            Filtering:  Not Applied (Unknown Reason)

        WSUS_Sunday
            Filtering:  Not Applied (Unknown Reason)

        Local Group Policy
            Filtering:  Not Applied (Empty)



An explaination of GPO filtering is on the following link:
 http://www.windowsnetworking.com/articles_tutorials/Group-Policy-Security-Filtering.html

You might want to run the GPMC (Group Policy Management Console) snapin, and make sure that the policies needed for WSUS work for that computer/user.

ASKER CERTIFIED SOLUTION
Avatar of ChiefIT
ChiefIT
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
We have a copy of Active Directory running on 3 different servers.  When I make changes in Active Directory on one server, the Active Directory on the other servers do reflect the changes. Something I noticed was that the Group Policy Management Console is only installed on one of the servers. When I run gpresult, each of the client's is applying the Group Policy from a different server. Should all of the policies be applied from the server with the Group Policy Management Console (also the WSUS server)? If so how do I edit the client's so that they recieve the policies from the correct server?

Thanks,
James
I have seen this before and have to reflect back. Let me see if I can find the information on why group policy only effects one part of the domain.