Link to home
Start Free TrialLog in
Avatar of DannyLeeSquibb
DannyLeeSquibb

asked on

uninstalling WSUS

I tried installing WSUS a few weeks ago on our domain and it never worked right. The workstations would never update. Now the Automatic Updates setup window is "grey-out" on both the server and the all the workstations. It seems I am still able to update the XP machines manually from the Windows Update website, but on the Vista machines I can't even do that. I get an "Errors found - code 80244019" message, which I have attached, when trying to update the Vista machines manually. I want to just uninstall the WSUS and go back to individual updates, but I get an error on the server when I try to uninstall from the "Add and Remove Programs" indicating it did not uninstall. Can anybody lend me some advice on this?
Windows-Update.JPG
ASKER CERTIFIED SOLUTION
Avatar of Don
Don
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
The updates are set via Group Policy with WSUS. You would have to change the group policy to enable the users to do Automatic Updates.
IE, take out the part of the group policy that points the clients updating to WSUS server and allow them to be freely managed. You won't have to uninstall it, but rather just ignore it.
Avatar of DannyLeeSquibb
DannyLeeSquibb

ASKER

It appears I have got WSUS uninstalled as per the directions from dstewart, but the automatic update windows are still greyed out on both server and workstations. Tntmax - can you be more specific where to go to remove the group policy setting?
http://technet.microsoft.com/en-us/library/cc720539.aspx

You'll find it easier to use the Group Policy Management Console, so download and install that if you haven't. Then go in, and on each policy, click on the tab that shows you all the settings for that policy. Find the one that defines these values, then change them. You'll want to do a gpupdate /force after this to ensure that the computers get the policy applied. Then reboot and hopefully they will be manageable again.
computer config>>>admin templates>>>windows components>>>windows updates>>>Specify intranet update location>>>not configured
updates.bmp
Thanks, this seemed to have worked on our domain, but we support another one that has an R2 installation of Server 2003 that it did not work on. The automatic updates is still grey out on all server and workstations. Any other suggestions?
did you run gpupdate /force after changing the group policy?
whats strange is I don't even see any on the update policies configured.
It could be in any of the update policies. You'd have to check them all.
looked through all the policies in Administrative Templates/Windows Components/Windows Udate for both both computer configuration and user configuration and none of them are configured.
It might be configured via another program, such as Altiris, or something else. Can you confirm that you ran gpupdate /force, and that it was applied to the computer? There is also a registry key that can be deleted if this doesn't work...
Just ran gpupdate /force again and it said it was applied. There are no other third party programs like you mentioned installed. What is the registry key you mentioned?
What do you get when you run
 
reg query "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /s  
nothing happened, just a brief screen flash
sorry, you should open a command prompt and then run this command :-)
C:\Documents and Settings\Administrator>reg query "HKLM\SOFTWARE\Policies
oft\Windows\WindowsUpdate" /s

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
    WUServer    REG_SZ    http://CNBSERV:8530
    WUStatusServer    REG_SZ    http://CNBSERV:8530
    ElevateNonAdmins    REG_DWORD    0x1

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
    NoAutoUpdate    REG_DWORD    0x0
    AUOptions    REG_DWORD    0x3
    RescheduleWaitTimeEnabled    REG_DWORD    0x1
    RescheduleWaitTime    REG_DWORD    0x1
    RebootWarningTimeoutEnabled    REG_DWORD    0x1
    RebootWarningTimeout    REG_DWORD    0x5
    RebootRelaunchTimeoutEnabled    REG_DWORD    0x1
    RebootRelaunchTimeout    REG_DWORD    0xa
    DetectionFrequencyEnabled    REG_DWORD    0x1
    DetectionFrequency    REG_DWORD    0x1
    AutoInstallMinorUpdates    REG_DWORD    0x1
    UseWUServer    REG_DWORD    0x1
    NoAutoRebootWithLoggedOnUsers    REG_DWORD    0x0
That shows that you are still getting the group policy to use your WSUS server
Run rsop.msc and then drill down to computer config>>admin templates>>windows components>>windows updates and then you'll find which gpo
I am a little confused as to why the default domain policy states these policies aren't configured
Well, once it is defined, it will stay that way until you define a policy that overrides it. Alternatively, you can clear out the keys after making a backup first, of course!
Is RSOP saying that your default domain policy has it applied?
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
    ElevateNonAdmins    REG_DWORD    0x1

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
    NoAutoUpdate    REG_DWORD    0x0
    AUOptions    REG_DWORD    0x4
    RescheduleWaitTimeEnabled    REG_DWORD    0x1
    RescheduleWaitTime    REG_DWORD    0x1
    RebootWarningTimeoutEnabled    REG_DWORD    0x1
    RebootWarningTimeout    REG_DWORD    0x5
    RebootRelaunchTimeoutEnabled    REG_DWORD    0x1
    RebootRelaunchTimeout    REG_DWORD    0xa
    DetectionFrequencyEnabled    REG_DWORD    0x1
    DetectionFrequency    REG_DWORD    0x1
    AutoInstallMinorUpdates    REG_DWORD    0x1
    UseWUServer    REG_DWORD    0x0
    NoAutoRebootWithLoggedOnUsers    REG_DWORD    0x0
    ScheduledInstallDay    REG_DWORD    0x0
    ScheduledInstallTime    REG_DWORD    0x3                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  
Yes, it now looks like the clients are no longer pointed to the wsus server.
okay, so now it appears the policy is set to update from the Microsoft site, which is better, but I would really like to just turn off the policy so Windows updates aren't controlled by AD. They automatic update window is still greyed out. When I set the policy to disable it reverts back to the old setting that points to the server for updates