Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Neither SBS 2008 nor clients are notified of approved Windows Updates

Posted on 2009-04-25
15
Medium Priority
?
717 Views
Last Modified: 2012-05-06
Hello,

Having done a dozen SBS 2003 installs, I know my way around it expertly, but I'm still feeling my way around SBS 2008. I've done only one install - the one in question here - and it was a migration to new hardware using an answer file which actually went very smoothly.

The only problem is that even though I've approved dozens of updates, none of the client machines (Vista, WS 2008) are getting notified of the approved updates' availability. Moreover, not even the SBS machine is getting prompted to install updates.

I've confirmed that SBS and the client machines are looking to WSUS (3.0 SP1) for updates by inspecting the registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\WUServer and WUStatusServer. Both key's value is http://SBS2008:8530

So, umm....what's going on?
0
Comment
Question by:nathanwc
  • 9
  • 6
15 Comments
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 24233674
0
 
LVL 1

Author Comment

by:nathanwc
ID: 24241046
I didn't know about that tool, thanks for the suggestion dstewartjr. I wasn't aware of that tool. Here are its results:
__________________________________________________
WSUS Client Diagnostics Tool

Checking Machine State
        Checking for admin rights to run tool . . . . . . . . . PASS
        Automatic Updates Service is running. . . . . . . . . . PASS
        Background Intelligent Transfer Service is running. . . PASS
        Wuaueng.dll version 7.2.6001.788. . . . . . . . . . . . PASS
                This version is WSUS 2.0

Checking AU Settings
        AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
                Option is from Policy settings

Checking Proxy Configuration
        Checking for winhttp local machine Proxy settings . . . PASS
                Winhttp local machine access type
                        <Direct Connection>
                Winhttp local machine Proxy. . . . . . . . . .  NONE
                Winhttp local machine ProxyBypass. . . . . . .  NONE
        Checking User IE Proxy settings . . . . . . . . . . . . PASS
                User IE Proxy. . . . . . . . . . . . . . . . .  NONE
                User IE ProxyByPass. . . . . . . . . . . . . .  NONE
                User IE AutoConfig URL Proxy . . . . . . . . .  NONE
                User IE AutoDetect
                AutoDetect in use

Checking Connection to WSUS/SUS Server
                WUServer = http://SBS2008:8530
                WUStatusServer = http://SBS2008:8530
        UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
        Connection to server. . . . . . . . . . . . . . . . . . PASS
        SelfUpdate folder is present. . . . . . . . . . . . . . PASS
__________________________________________________

And, I've attached the WindowsUpdate.log from our WS2008 machine.

Nathan
WindowsUpdate.log
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 24242144
Ok, these are both clean. lets see your auoptions
 
reg query "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /s
 
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 47

Expert Comment

by:Donald Stewart
ID: 24242320
Also take a look here:
 
Synchronization issues
0
 
LVL 1

Author Comment

by:nathanwc
ID: 24242941
That's a relief. Here's are the values you asked for:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
    WUServer    REG_SZ    http://SBS2008:8530
    WUStatusServer    REG_SZ    http://SBS2008:8530
    ElevateNonAdmins    REG_DWORD    0x1

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
    NoAutoUpdate    REG_DWORD    0x0
    AUOptions    REG_DWORD    0x4
    RescheduleWaitTimeEnabled    REG_DWORD    0x1
    RescheduleWaitTime    REG_DWORD    0x1
    RebootWarningTimeoutEnabled    REG_DWORD    0x1
    RebootWarningTimeout    REG_DWORD    0x5
    RebootRelaunchTimeoutEnabled    REG_DWORD    0x1
    RebootRelaunchTimeout    REG_DWORD    0xa
    DetectionFrequencyEnabled    REG_DWORD    0x1
    DetectionFrequency    REG_DWORD    0x1
    AutoInstallMinorUpdates    REG_DWORD    0x1
    UseWUServer    REG_DWORD    0x1
    NoAutoRebootWithLoggedOnUsers    REG_DWORD    0x0
    ScheduledInstallDay    REG_DWORD    0x0
    ScheduledInstallTime    REG_DWORD    0x2
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 24242991
What is the status of these computers in the console ?
 
Are they at 100%
 
Did you go over the synchronization issues link?
0
 
LVL 1

Author Comment

by:nathanwc
ID: 24252572
Hi dstewartjr,

The clients are not at 100%, though you'll see in one screenshot that they're all reporting. The reason they're as high as 99% is because I've resorted to getting updates manually.

I've had a brief look at the synchronization issues link, but it's for WSUS 2.0. Is it still relevent? Regardless, I'm not experiencing any of the problems in that document, and I pass all of the other suggestions like pinging the WSUS server name.
vistaclientstatus.JPG
WS2008terminalserverstatus.JPG
allreporting.JPG
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 24252746

It may be that the updates havent downloaded yet, are you using BITS throttling?


http://frozenice.de/blog/index.php/sen/2009/04/06/increase-download-speed-in-wsus-3 
0
 
LVL 47

Accepted Solution

by:
Donald Stewart earned 2000 total points
ID: 24252811
You can check whether there are pending downloads
wsus-download-status.bmp
0
 
LVL 1

Author Comment

by:nathanwc
ID: 24253732
Ah, synchronizations are suceeding, but files aren't being downloaded. Where do we go from here? In this test environment, I'd prefer to not store the updates on the server, so I just now disabled that feature. I'll monitor, but I'm pretty sure you've put me on the right path.
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 24254055
Did you set BitsDownloadPriorityForeground=1 ?
as mentioned in this link
http://frozenice.de/blog/index.php/sen/2009/04/06/increase-download-speed-in-wsus-3 
0
 
LVL 1

Author Comment

by:nathanwc
ID: 24254186
Sorry, I completely forgot about that suggestion. No, I haven't yet, though it probably won't help anything now that I'm no longer storing updates. Great tip, though!
0
 
LVL 1

Author Closing Comment

by:nathanwc
ID: 31574564
I still don't know why updates that were approved months ago had downloaded 0MB of 2,7xxMB. Surely even if BITS was transferring super slowly, it would transfered at least 1MB in a couple months. Since I've told WSUS to not store the updates, clients are seeing available updates.
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 24254261
It may have been the permissions on the wsuscontent folder
 
http://technet.microsoft.com/en-us/library/cc708545.aspx 
0

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The SBS 2011 release date (RTM) is supposed to be around Christmas, 2011.  This article is a compilation of my notes -- things I have learned first hand.  The items are in a rather random order, but I think this list covers most of what is new and d…
You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
Despite its rising prevalence in the business world, "the cloud" is still misunderstood. Some companies still believe common misconceptions about lack of security in cloud solutions and many misuses of cloud storage options still occur every day. …
With just a little bit of  SQL and VBA, many doors open to cool things like synchronize a list box to display data relevant to other information on a form.  If you have never written code or looked at an SQL statement before, no problem! ...  give i…
Suggested Courses

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question