Link to home
Start Free TrialLog in
Avatar of dongocdung
dongocdung

asked on

Adding the servers to WSUS by running the script.

Hello all,
I would like to add some servers to WSUS. I run the BAT script but it failed. Then, I run these files
1.      Forceupdate.cmd
2.      WSUSFIX-ME.bat (to add servers to WSUS)
3.      ReRun  ClientDiag.exe

It still failed. I have no idea now. Could you provide me some ideas, please?
Thanks
Avatar of Randy Downs
Randy Downs
Flag of United States of America image

"I run the BAT script but it failed."

What Bat script ???

"Forceupdate.cmd"

what does this contain?

"WSUSFIX-ME.bat"

again, what does this contain?


What errors are in clientdiag?

What errors are in windowsupdate.log?
Avatar of dongocdung
dongocdung

ASKER

The BAT script is the second file I listed here "WSUSFIX-ME.bat". I attach these three files in here. Please take a look at them. I run the "WSUSFIX-ME.bat" first to add server into WSUS but it failed. Then, I run those three file again but it still failed. I run CientDiag.exe and I got this


WSUS Client Diagnostics Tool

Checking Machine State
        Checking for admin rights to run tool . . . . . . . . . PASS
        Automatic Updates Service is running. . . . . . . . . . PASS
        Background Intelligent Transfer Service is not running. PASS
        Wuaueng.dll version 7.2.6001.788. . . . . . . . . . . . PASS
                This version is WSUS 2.0

Checking AU Settings
        AU Option is 3 : Notify Prior to Install. . . . . . . . PASS
                Option is from Policy settings

Checking Proxy Configuration
        Checking for winhttp local machine Proxy settings . . . PASS
                Winhttp local machine access type
                        <Direct Connection>
                Winhttp local machine Proxy. . . . . . . . . .  NONE
                Winhttp local machine ProxyBypass. . . . . . .  NONE
GetCurrentUserIEProxy. . . . . . . . . . . . . . . . . . FAIL

VerifyProxy() failed with hr=0x80070002

The system cannot find the file specified.


Press Enter to Complete



Thanks
ClientDiag.exe
Forceupdate.cmd
WSUSFIX-ME.bat.txt
Also post your windowsupdate.log
I am confused now. I try to add server into WSUS and not to download or install the update to server yet.
Then you need to change


REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v AUOptions /t REG_DWORD /d 4 /f

to


REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v AUOptions /t REG_DWORD /d 3 /f
I fixed to the option 3. it works on one server and i try it for another server. It fails again. Do you know why?
Thanks
Are you using a proxy?

Did you run the "Fix it" ?

Are your servers imaged ? <<< if so you need to clear the SUSClientID
We are not using a proxy and my servers are not imaged. I run the Fix It but it asked me to restart the server. I cannot restart the server during the business.
Thanks
post your windowsupdate.log from this server
here it is

WindowsUpdate.log
This log is on servers which passed
WindowsUpdate.log
Try running this from "Run"

Cmd /c ren %WinDir%\System32\Spupdsvc.exe Spupdsvc.old


You may also need to verify your WSUS settings. Both of your logs have the same errors in them.


Compare them to these

http://technet.microsoft.com/en-us/library/cc708545(WS.10).aspx

http://technet.microsoft.com/en-us/library/cc708487(WS.10).aspx
it even failed but I now can see these servers on Unassigned Computer. I have no idea about it.
They will be in " Unassigned Computer" because your script has the targeting section REM'd out.

rem ***REG ADD HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v TargetGroup /t REG_SZ /d "" /f
rem ***REG ADD HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v TargetGroupEnabled /t REG_DWORD /d 1 /f


To add to a specific group you need change to...


REG ADD HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v TargetGroup /t REG_SZ /d "Servers" /f   <<<servers is an example
REG ADD HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v TargetGroupEnabled /t REG_DWORD /d 1 /f
I have the one more question. is everything OK when I get that Fail.
Is it clientdiag that is failing ?


How does the windowsupdate.log now look ?
I have no idea. everytime, I run the clientdiag, it failed. However, I can see it in WSUS later.
Did you verify your WSUS settings using the docs I posted ?
everything seems OK
Clients can appear in the console and still fail to update.

You need to clear up the clientdaig failures and I'm sure that there are still errors in windowsupdate.log.


Is your WSUS using port 80 or port 8530 ?

You can find/view that in your WSUS console.
Where can I find the port on onsole?
Thanks
as in pic
WSUSPort.gif
I have two wsus servers and they both use port 80
Are you running the latest version of WSUS ?

http://www.microsoft.com/downloads/en/details.aspx?FamilyID=a206ae20-2695-436c-9578-3403a7d46e40

Take note of :

•WSUS 3.0 SP2 Server Software Prerequisites:
•Notice that additional prerequisites apply for Windows Small Business Server. See the “Windows Small Business Server Prerequisites” section for more information.
•Internet Information Services (IIS) 6.0 or later versions
•The Microsoft .NET Framework 2.0 or later versions
•Server component cannot be installed on Windows client OS
•You must have one of the following supported databases installed:
¿Microsoft SQL Server 2008 Express, Standard, or Enterprise EditionSQL Server 2005 SP2
¿Windows Internal Database
¿If one of the supported versions of SQL Server is not installed, the WSUS 3.0 SP2 Setup Wizard will install Windows Internal Database.
•Microsoft Management Console 3.0
Microsoft Report Viewer Redistributable 2008
•Windows Server 2008 R2 requires WSUS 3.0 SP2. If you use Windows Server 2008 R2, then you should install WSUS 3.0 SP2. Do not install WSUS 3.0 SP1 on Windows Server 2008 R2.
•WSUS 3.0 SP2 is not supported for use with Terminal Services on the front-end server in a remote SQL configuration.
Ok came across this too

from your logs

"target version = 7.4.7600.226, required version = 7.1.6001.65"

led to

http://social.technet.microsoft.com/Forums/en/winserverwsus/thread/8fd863a4-de31-4808-89e9-0b4bcba0222a

Read Lawrence Garvin's comment there
I think we have all the requirements but let me install the WSUS SP2 and this KB. Let 's see.
Thanks
I attach the WindowsUpdate.log in here. I think it gets some updates. Please confirm that
Thanks
WindowsUpdate.log
ASKER CERTIFIED SOLUTION
Avatar of Don
Don
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thank you for your time for last couple days.
You're welcome :)