Adding the servers to WSUS by running the script.

Hello all,
I would like to add some servers to WSUS. I run the BAT script but it failed. Then, I run these files
1.      Forceupdate.cmd
2.      WSUSFIX-ME.bat (to add servers to WSUS)
3.      ReRun  ClientDiag.exe

It still failed. I have no idea now. Could you provide me some ideas, please?
Thanks
dongocdungAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

DonNetwork AdministratorCommented:
"I run the BAT script but it failed."

What Bat script ???

"Forceupdate.cmd"

what does this contain?

"WSUSFIX-ME.bat"

again, what does this contain?


What errors are in clientdiag?

What errors are in windowsupdate.log?
0
dongocdungAuthor Commented:
The BAT script is the second file I listed here "WSUSFIX-ME.bat". I attach these three files in here. Please take a look at them. I run the "WSUSFIX-ME.bat" first to add server into WSUS but it failed. Then, I run those three file again but it still failed. I run CientDiag.exe and I got this


WSUS Client Diagnostics Tool

Checking Machine State
        Checking for admin rights to run tool . . . . . . . . . PASS
        Automatic Updates Service is running. . . . . . . . . . PASS
        Background Intelligent Transfer Service is not running. PASS
        Wuaueng.dll version 7.2.6001.788. . . . . . . . . . . . PASS
                This version is WSUS 2.0

Checking AU Settings
        AU Option is 3 : Notify Prior to Install. . . . . . . . PASS
                Option is from Policy settings

Checking Proxy Configuration
        Checking for winhttp local machine Proxy settings . . . PASS
                Winhttp local machine access type
                        <Direct Connection>
                Winhttp local machine Proxy. . . . . . . . . .  NONE
                Winhttp local machine ProxyBypass. . . . . . .  NONE
GetCurrentUserIEProxy. . . . . . . . . . . . . . . . . . FAIL

VerifyProxy() failed with hr=0x80070002

The system cannot find the file specified.


Press Enter to Complete



Thanks
ClientDiag.exe
Forceupdate.cmd
WSUSFIX-ME.bat.txt
0
Protecting & Securing Your Critical Data

Considering 93 percent of companies file for bankruptcy within 12 months of a disaster that blocked access to their data for 10 days or more, planning for the worst is just smart business. Learn how Acronis Backup integrates security at every stage

DonNetwork AdministratorCommented:
0
DonNetwork AdministratorCommented:
Also post your windowsupdate.log
0
dongocdungAuthor Commented:
I am confused now. I try to add server into WSUS and not to download or install the update to server yet.
0
DonNetwork AdministratorCommented:
Then you need to change


REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v AUOptions /t REG_DWORD /d 4 /f

to


REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v AUOptions /t REG_DWORD /d 3 /f
0
DonNetwork AdministratorCommented:
0
dongocdungAuthor Commented:
I fixed to the option 3. it works on one server and i try it for another server. It fails again. Do you know why?
Thanks
0
DonNetwork AdministratorCommented:
Are you using a proxy?

Did you run the "Fix it" ?

Are your servers imaged ? <<< if so you need to clear the SUSClientID
0
dongocdungAuthor Commented:
We are not using a proxy and my servers are not imaged. I run the Fix It but it asked me to restart the server. I cannot restart the server during the business.
Thanks
0
DonNetwork AdministratorCommented:
post your windowsupdate.log from this server
0
dongocdungAuthor Commented:
here it is

WindowsUpdate.log
0
dongocdungAuthor Commented:
This log is on servers which passed
WindowsUpdate.log
0
DonNetwork AdministratorCommented:
Try running this from "Run"

Cmd /c ren %WinDir%\System32\Spupdsvc.exe Spupdsvc.old


You may also need to verify your WSUS settings. Both of your logs have the same errors in them.


Compare them to these

http://technet.microsoft.com/en-us/library/cc708545(WS.10).aspx

http://technet.microsoft.com/en-us/library/cc708487(WS.10).aspx
0
dongocdungAuthor Commented:
it even failed but I now can see these servers on Unassigned Computer. I have no idea about it.
0
DonNetwork AdministratorCommented:
They will be in " Unassigned Computer" because your script has the targeting section REM'd out.

rem ***REG ADD HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v TargetGroup /t REG_SZ /d "" /f
rem ***REG ADD HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v TargetGroupEnabled /t REG_DWORD /d 1 /f


To add to a specific group you need change to...


REG ADD HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v TargetGroup /t REG_SZ /d "Servers" /f   <<<servers is an example
REG ADD HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v TargetGroupEnabled /t REG_DWORD /d 1 /f
0
dongocdungAuthor Commented:
I have the one more question. is everything OK when I get that Fail.
0
DonNetwork AdministratorCommented:
Is it clientdiag that is failing ?


How does the windowsupdate.log now look ?
0
dongocdungAuthor Commented:
I have no idea. everytime, I run the clientdiag, it failed. However, I can see it in WSUS later.
0
DonNetwork AdministratorCommented:
Did you verify your WSUS settings using the docs I posted ?
0
dongocdungAuthor Commented:
everything seems OK
0
DonNetwork AdministratorCommented:
Clients can appear in the console and still fail to update.

You need to clear up the clientdaig failures and I'm sure that there are still errors in windowsupdate.log.


Is your WSUS using port 80 or port 8530 ?

You can find/view that in your WSUS console.
0
dongocdungAuthor Commented:
Where can I find the port on onsole?
Thanks
0
DonNetwork AdministratorCommented:
as in pic
WSUSPort.gif
0
dongocdungAuthor Commented:
I have two wsus servers and they both use port 80
0
DonNetwork AdministratorCommented:
Are you running the latest version of WSUS ?

http://www.microsoft.com/downloads/en/details.aspx?FamilyID=a206ae20-2695-436c-9578-3403a7d46e40

Take note of :

•WSUS 3.0 SP2 Server Software Prerequisites:
•Notice that additional prerequisites apply for Windows Small Business Server. See the “Windows Small Business Server Prerequisites” section for more information.
•Internet Information Services (IIS) 6.0 or later versions
•The Microsoft .NET Framework 2.0 or later versions
•Server component cannot be installed on Windows client OS
•You must have one of the following supported databases installed:
¿Microsoft SQL Server 2008 Express, Standard, or Enterprise EditionSQL Server 2005 SP2
¿Windows Internal Database
¿If one of the supported versions of SQL Server is not installed, the WSUS 3.0 SP2 Setup Wizard will install Windows Internal Database.
•Microsoft Management Console 3.0
Microsoft Report Viewer Redistributable 2008
•Windows Server 2008 R2 requires WSUS 3.0 SP2. If you use Windows Server 2008 R2, then you should install WSUS 3.0 SP2. Do not install WSUS 3.0 SP1 on Windows Server 2008 R2.
•WSUS 3.0 SP2 is not supported for use with Terminal Services on the front-end server in a remote SQL configuration.
0
DonNetwork AdministratorCommented:
Ok came across this too

from your logs

"target version = 7.4.7600.226, required version = 7.1.6001.65"

led to

http://social.technet.microsoft.com/Forums/en/winserverwsus/thread/8fd863a4-de31-4808-89e9-0b4bcba0222a

Read Lawrence Garvin's comment there
0
dongocdungAuthor Commented:
I think we have all the requirements but let me install the WSUS SP2 and this KB. Let 's see.
Thanks
0
dongocdungAuthor Commented:
I attach the WindowsUpdate.log in here. I think it gets some updates. Please confirm that
Thanks
WindowsUpdate.log
0
DonNetwork AdministratorCommented:
All looks good

"Windows Update Client successfully detected 4 updates."
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
dongocdungAuthor Commented:
Thank you for your time for last couple days.
0
DonNetwork AdministratorCommented:
You're welcome :)
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
OS Security

From novice to tech pro — start learning today.