DannyLeeSquibb
asked on
uninstalling WSUS
I tried installing WSUS a few weeks ago on our domain and it never worked right. The workstations would never update. Now the Automatic Updates setup window is "grey-out" on both the server and the all the workstations. It seems I am still able to update the XP machines manually from the Windows Update website, but on the Vista machines I can't even do that. I get an "Errors found - code 80244019" message, which I have attached, when trying to update the Vista machines manually. I want to just uninstall the WSUS and go back to individual updates, but I get an error on the server when I try to uninstall from the "Add and Remove Programs" indicating it did not uninstall. Can anybody lend me some advice on this?
Windows-Update.JPG
Windows-Update.JPG
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
The updates are set via Group Policy with WSUS. You would have to change the group policy to enable the users to do Automatic Updates.
IE, take out the part of the group policy that points the clients updating to WSUS server and allow them to be freely managed. You won't have to uninstall it, but rather just ignore it.
ASKER
It appears I have got WSUS uninstalled as per the directions from dstewart, but the automatic update windows are still greyed out on both server and workstations. Tntmax - can you be more specific where to go to remove the group policy setting?
http://technet.microsoft.com/en-us/library/cc720539.aspx
You'll find it easier to use the Group Policy Management Console, so download and install that if you haven't. Then go in, and on each policy, click on the tab that shows you all the settings for that policy. Find the one that defines these values, then change them. You'll want to do a gpupdate /force after this to ensure that the computers get the policy applied. Then reboot and hopefully they will be manageable again.
You'll find it easier to use the Group Policy Management Console, so download and install that if you haven't. Then go in, and on each policy, click on the tab that shows you all the settings for that policy. Find the one that defines these values, then change them. You'll want to do a gpupdate /force after this to ensure that the computers get the policy applied. Then reboot and hopefully they will be manageable again.
computer config>>>admin templates>>>windows components>>>windows updates>>>Specify intranet update location>>>not configured
updates.bmp
updates.bmp
ASKER
Thanks, this seemed to have worked on our domain, but we support another one that has an R2 installation of Server 2003 that it did not work on. The automatic updates is still grey out on all server and workstations. Any other suggestions?
did you run gpupdate /force after changing the group policy?
ASKER
whats strange is I don't even see any on the update policies configured.
It could be in any of the update policies. You'd have to check them all.
ASKER
looked through all the policies in Administrative Templates/Windows Components/Windows Udate for both both computer configuration and user configuration and none of them are configured.
It might be configured via another program, such as Altiris, or something else. Can you confirm that you ran gpupdate /force, and that it was applied to the computer? There is also a registry key that can be deleted if this doesn't work...
ASKER
Just ran gpupdate /force again and it said it was applied. There are no other third party programs like you mentioned installed. What is the registry key you mentioned?
What do you get when you run
reg query "HKLM\SOFTWARE\Policies\Mi crosoft\Wi ndows\Wind owsUpdate" /s
reg query "HKLM\SOFTWARE\Policies\Mi
ASKER
nothing happened, just a brief screen flash
sorry, you should open a command prompt and then run this command :-)
ASKER
C:\Documents and Settings\Administrator>reg query "HKLM\SOFTWARE\Policies
oft\Windows\WindowsUpdate" /s
HKEY_LOCAL_MACHINE\SOFTWAR E\Policies \Microsoft \Windows\W indowsUpda te
WUServer REG_SZ http://CNBSERV:8530
WUStatusServer REG_SZ http://CNBSERV:8530
ElevateNonAdmins REG_DWORD 0x1
HKEY_LOCAL_MACHINE\SOFTWAR E\Policies \Microsoft \Windows\W indowsUpda te\AU
NoAutoUpdate REG_DWORD 0x0
AUOptions REG_DWORD 0x3
RescheduleWaitTimeEnabled REG_DWORD 0x1
RescheduleWaitTime REG_DWORD 0x1
RebootWarningTimeoutEnable d REG_DWORD 0x1
RebootWarningTimeout REG_DWORD 0x5
RebootRelaunchTimeoutEnabl ed REG_DWORD 0x1
RebootRelaunchTimeout REG_DWORD 0xa
DetectionFrequencyEnabled REG_DWORD 0x1
DetectionFrequency REG_DWORD 0x1
AutoInstallMinorUpdates REG_DWORD 0x1
UseWUServer REG_DWORD 0x1
NoAutoRebootWithLoggedOnUs ers REG_DWORD 0x0
oft\Windows\WindowsUpdate"
HKEY_LOCAL_MACHINE\SOFTWAR
WUServer REG_SZ http://CNBSERV:8530
WUStatusServer REG_SZ http://CNBSERV:8530
ElevateNonAdmins REG_DWORD 0x1
HKEY_LOCAL_MACHINE\SOFTWAR
NoAutoUpdate REG_DWORD 0x0
AUOptions REG_DWORD 0x3
RescheduleWaitTimeEnabled REG_DWORD 0x1
RescheduleWaitTime REG_DWORD 0x1
RebootWarningTimeoutEnable
RebootWarningTimeout REG_DWORD 0x5
RebootRelaunchTimeoutEnabl
RebootRelaunchTimeout REG_DWORD 0xa
DetectionFrequencyEnabled REG_DWORD 0x1
DetectionFrequency REG_DWORD 0x1
AutoInstallMinorUpdates REG_DWORD 0x1
UseWUServer REG_DWORD 0x1
NoAutoRebootWithLoggedOnUs
That shows that you are still getting the group policy to use your WSUS server
Run rsop.msc and then drill down to computer config>>admin templates>>windows components>>windows updates and then you'll find which gpo
ASKER
I am a little confused as to why the default domain policy states these policies aren't configured
Well, once it is defined, it will stay that way until you define a policy that overrides it. Alternatively, you can clear out the keys after making a backup first, of course!
Is RSOP saying that your default domain policy has it applied?
ASKER
HKEY_LOCAL_MACHINE\SOFTWAR E\Policies \Microsoft \Windows\W indowsUpda te
ElevateNonAdmins REG_DWORD 0x1
HKEY_LOCAL_MACHINE\SOFTWAR E\Policies \Microsoft \Windows\W indowsUpda te\AU
NoAutoUpdate REG_DWORD 0x0
AUOptions REG_DWORD 0x4
RescheduleWaitTimeEnabled REG_DWORD 0x1
RescheduleWaitTime REG_DWORD 0x1
RebootWarningTimeoutEnable d REG_DWORD 0x1
RebootWarningTimeout REG_DWORD 0x5
RebootRelaunchTimeoutEnabl ed REG_DWORD 0x1
RebootRelaunchTimeout REG_DWORD 0xa
DetectionFrequencyEnabled REG_DWORD 0x1
DetectionFrequency REG_DWORD 0x1
AutoInstallMinorUpdates REG_DWORD 0x1
UseWUServer REG_DWORD 0x0
NoAutoRebootWithLoggedOnUs ers REG_DWORD 0x0
ScheduledInstallDay REG_DWORD 0x0
ScheduledInstallTime REG_DWORD 0x3
ElevateNonAdmins REG_DWORD 0x1
HKEY_LOCAL_MACHINE\SOFTWAR
NoAutoUpdate REG_DWORD 0x0
AUOptions REG_DWORD 0x4
RescheduleWaitTimeEnabled REG_DWORD 0x1
RescheduleWaitTime REG_DWORD 0x1
RebootWarningTimeoutEnable
RebootWarningTimeout REG_DWORD 0x5
RebootRelaunchTimeoutEnabl
RebootRelaunchTimeout REG_DWORD 0xa
DetectionFrequencyEnabled REG_DWORD 0x1
DetectionFrequency REG_DWORD 0x1
AutoInstallMinorUpdates REG_DWORD 0x1
UseWUServer REG_DWORD 0x0
NoAutoRebootWithLoggedOnUs
ScheduledInstallDay REG_DWORD 0x0
ScheduledInstallTime REG_DWORD 0x3
Yes, it now looks like the clients are no longer pointed to the wsus server.
ASKER
okay, so now it appears the policy is set to update from the Microsoft site, which is better, but I would really like to just turn off the policy so Windows updates aren't controlled by AD. They automatic update window is still greyed out. When I set the policy to disable it reverts back to the old setting that points to the server for updates