• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 719
  • Last Modified:

Neither SBS 2008 nor clients are notified of approved Windows Updates

Hello,

Having done a dozen SBS 2003 installs, I know my way around it expertly, but I'm still feeling my way around SBS 2008. I've done only one install - the one in question here - and it was a migration to new hardware using an answer file which actually went very smoothly.

The only problem is that even though I've approved dozens of updates, none of the client machines (Vista, WS 2008) are getting notified of the approved updates' availability. Moreover, not even the SBS machine is getting prompted to install updates.

I've confirmed that SBS and the client machines are looking to WSUS (3.0 SP1) for updates by inspecting the registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\WUServer and WUStatusServer. Both key's value is http://SBS2008:8530

So, umm....what's going on?
0
nathanwc
Asked:
nathanwc
  • 9
  • 6
1 Solution
 
DonNetwork AdministratorCommented:
0
 
nathanwcAuthor Commented:
I didn't know about that tool, thanks for the suggestion dstewartjr. I wasn't aware of that tool. Here are its results:
__________________________________________________
WSUS Client Diagnostics Tool

Checking Machine State
        Checking for admin rights to run tool . . . . . . . . . PASS
        Automatic Updates Service is running. . . . . . . . . . PASS
        Background Intelligent Transfer Service is running. . . PASS
        Wuaueng.dll version 7.2.6001.788. . . . . . . . . . . . PASS
                This version is WSUS 2.0

Checking AU Settings
        AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
                Option is from Policy settings

Checking Proxy Configuration
        Checking for winhttp local machine Proxy settings . . . PASS
                Winhttp local machine access type
                        <Direct Connection>
                Winhttp local machine Proxy. . . . . . . . . .  NONE
                Winhttp local machine ProxyBypass. . . . . . .  NONE
        Checking User IE Proxy settings . . . . . . . . . . . . PASS
                User IE Proxy. . . . . . . . . . . . . . . . .  NONE
                User IE ProxyByPass. . . . . . . . . . . . . .  NONE
                User IE AutoConfig URL Proxy . . . . . . . . .  NONE
                User IE AutoDetect
                AutoDetect in use

Checking Connection to WSUS/SUS Server
                WUServer = http://SBS2008:8530
                WUStatusServer = http://SBS2008:8530
        UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
        Connection to server. . . . . . . . . . . . . . . . . . PASS
        SelfUpdate folder is present. . . . . . . . . . . . . . PASS
__________________________________________________

And, I've attached the WindowsUpdate.log from our WS2008 machine.

Nathan
WindowsUpdate.log
0
 
DonNetwork AdministratorCommented:
Ok, these are both clean. lets see your auoptions
 
reg query "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /s
 
0
Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

 
DonNetwork AdministratorCommented:
Also take a look here:
 
Synchronization issues
0
 
nathanwcAuthor Commented:
That's a relief. Here's are the values you asked for:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
    WUServer    REG_SZ    http://SBS2008:8530
    WUStatusServer    REG_SZ    http://SBS2008:8530
    ElevateNonAdmins    REG_DWORD    0x1

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
    NoAutoUpdate    REG_DWORD    0x0
    AUOptions    REG_DWORD    0x4
    RescheduleWaitTimeEnabled    REG_DWORD    0x1
    RescheduleWaitTime    REG_DWORD    0x1
    RebootWarningTimeoutEnabled    REG_DWORD    0x1
    RebootWarningTimeout    REG_DWORD    0x5
    RebootRelaunchTimeoutEnabled    REG_DWORD    0x1
    RebootRelaunchTimeout    REG_DWORD    0xa
    DetectionFrequencyEnabled    REG_DWORD    0x1
    DetectionFrequency    REG_DWORD    0x1
    AutoInstallMinorUpdates    REG_DWORD    0x1
    UseWUServer    REG_DWORD    0x1
    NoAutoRebootWithLoggedOnUsers    REG_DWORD    0x0
    ScheduledInstallDay    REG_DWORD    0x0
    ScheduledInstallTime    REG_DWORD    0x2
0
 
DonNetwork AdministratorCommented:
What is the status of these computers in the console ?
 
Are they at 100%
 
Did you go over the synchronization issues link?
0
 
nathanwcAuthor Commented:
Hi dstewartjr,

The clients are not at 100%, though you'll see in one screenshot that they're all reporting. The reason they're as high as 99% is because I've resorted to getting updates manually.

I've had a brief look at the synchronization issues link, but it's for WSUS 2.0. Is it still relevent? Regardless, I'm not experiencing any of the problems in that document, and I pass all of the other suggestions like pinging the WSUS server name.
vistaclientstatus.JPG
WS2008terminalserverstatus.JPG
allreporting.JPG
0
 
DonNetwork AdministratorCommented:

It may be that the updates havent downloaded yet, are you using BITS throttling?


http://frozenice.de/blog/index.php/sen/2009/04/06/increase-download-speed-in-wsus-3 
0
 
DonNetwork AdministratorCommented:
You can check whether there are pending downloads
wsus-download-status.bmp
0
 
nathanwcAuthor Commented:
Ah, synchronizations are suceeding, but files aren't being downloaded. Where do we go from here? In this test environment, I'd prefer to not store the updates on the server, so I just now disabled that feature. I'll monitor, but I'm pretty sure you've put me on the right path.
0
 
DonNetwork AdministratorCommented:
Did you set BitsDownloadPriorityForeground=1 ?
as mentioned in this link
http://frozenice.de/blog/index.php/sen/2009/04/06/increase-download-speed-in-wsus-3 
0
 
nathanwcAuthor Commented:
Sorry, I completely forgot about that suggestion. No, I haven't yet, though it probably won't help anything now that I'm no longer storing updates. Great tip, though!
0
 
nathanwcAuthor Commented:
I still don't know why updates that were approved months ago had downloaded 0MB of 2,7xxMB. Surely even if BITS was transferring super slowly, it would transfered at least 1MB in a couple months. Since I've told WSUS to not store the updates, clients are seeing available updates.
0
 
DonNetwork AdministratorCommented:
It may have been the permissions on the wsuscontent folder
 
http://technet.microsoft.com/en-us/library/cc708545.aspx 
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: CompTIA Cloud+

The CompTIA Cloud+ Basic training course will teach you about cloud concepts and models, data storage, networking, and network infrastructure.

  • 9
  • 6
Tackle projects and never again get stuck behind a technical roadblock.
Join Now