We help IT Professionals succeed at work.

XP client not updating from WSUS 3 server.

SmallPrint
SmallPrint asked
on
Medium Priority
542 Views
Last Modified: 2012-05-11
We have a WSUS server sitting on a 2003 R2 server.  

I am only modifying the local group policy on client machines.  All windows 7 machines are CLEARLY updating from my WSUS server. I know this because of the speed of which is download updates, and in Win7 it clearly says it is using admin settings to get updates (as well as a link to go to MS site for updates).

My problem is any XP client.  I make the same changes in the local group policy ("configure automatic updates, Specify Intranet Microsoft update service location, and AU detection freq".  When i run windows update from the XP machine, the downloads take FOREVER...no way can it be grabbing updates from m WSUS server.  Also, as a test i put in a bad WSUS server name in the GP, and downloads still took the same about of time.

The XP client is visible in the WSUS admin console, but took hour before it appeared.  Win7 appeared instant.

Any ideas?
Comment
Watch Question

Top Expert 2011

Commented:
Are the XP computers on the domain?

If yes, why are you deploying the GP locally? Is it possible the domain GP is overriding the local GP?

Maybe run a gpresult or rsop.msc to see?

We have our WSUS server defined through AD on all computer OU's. No problems with XP machines.

Author

Commented:
I dont want to apply a global GP since I am just testing this service. I am modifying the GP locally, so that I can confirm WSUS is working, without affecting everyone on the domain.

The XP client is my domain.
Top Expert 2011

Commented:
Did you try running rsop.msc on one of the machines to see if the domain GP is overriding the local GP?

You could also try taking the few XP machines you are rolling out and put them in a sub-OU, add a new GPO to them and try applying it through the domain.
DonNetwork Administrator
CERTIFIED EXPERT

Commented:
"...the downloads take FOREVER...no way can it be grabbing updates from m WSUS server."


Does your windowsupdate.log verify this?

Please post this log


If your XP clients need more updates than your windows 7 clients, then of course it would take longer

Author

Commented:
just did a few tests on the XP machine.

windowsupdate.log says "downloading from htt[://download.windowsupdate.com....."
DonNetwork Administrator
CERTIFIED EXPERT

Commented:
Ok, what is the result from command prompt


Reg query HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /s


do you see your WSUS server in results ?

Author

Commented:
looks good to me, that is my server name
Capture.JPG
Network Administrator
CERTIFIED EXPERT
Commented:
Unlock this solution and get a sample of our free trial.
(No credit card required)
UNLOCK SOLUTION

Author

Commented:
still downlaoding from net.

Let me try this on another XP machine
DonNetwork Administrator
CERTIFIED EXPERT

Commented:
Are you looking at the bottom of your windowsupdate.log ?
DonNetwork Administrator
CERTIFIED EXPERT

Commented:
This will give you a fresh windowsupdate.log, you will need to give it a few minutes to repopulate
%Windir%\system32\net.exe stop bits 
%Windir%\system32\net.exe stop wuauserv 
%Windir%\system32\net.exe stop cryptsvc

 

reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v AccountDomainSid /f
reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v PingID /f
reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v SusClientId /f
reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v LastWaitTimeout /f
reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v DetectionStartTime /f
reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v NextDetectionTime /f

rd /s /q %windir%\softwareDistribution
del %WINDIR%\WindowsUpdate.log /S /Q 
%Windir%\system32\net.exe start cryptsvc
%Windir%\system32\net.exe start bits 
%Windir%\system32\net.exe start wuauserv 


sc sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)
sc sdset bits D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)

wuauclt /resetauthorization /detectnow
wuauclt /reportnow

exit /B 0

Open in new window

Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a sample view!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.