Solved

WSUS - PC not reporting

Posted on 2011-09-05
5
740 Views
Last Modified: 2012-05-12
Hi,

I'm seeing a large number of PCs that are not reporting back to the WSUS server.

I've tried this suggestion here - Which made no difference.

I've tried running the diagnostic tool suggested on this thread to which the results are attached as an image

All seems in order to me.

Does anyone have any ideas please?

Thanks
Capture.JPG
0
Comment
Question by:paul-ashton
  • 3
5 Comments
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36486159
0
 
LVL 16

Accepted Solution

by:
ThinkPaper earned 250 total points
ID: 36490159
Try running the batch below on the client machine. Besides forcing detection it also deletes the SID on the client machine and forces it to create a new one when it checks in. We've had similar problems when the image used for the machines were not created properly; the machines ended up having duplicate SIDs - reporting only that 1 machine versus the 200-some machines we actually had on the network.
REM Resolve duplicate WSUS SID due to problematic imaging. Client machines do not appear in WSUS.
REM This deletes the WSUS SID on a client machine and stops/starts the services to enable the client machine to retrieve another NEW WSUS SID.


net stop wuauserv
rd /s/q "C:\WINDOWS\SoftwareDistribution"
reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v AccountDomainSid /f
reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v PingID /f
reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v SusClientID /f
reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v LastWaitTimeout /f
reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v DetectionStartTime /f
reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v NextDetectionTime /f
reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v AUState /f
net time /set /yes
gpupdate
sc sdset bits "D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)" >%temp%\SetServiceObjectSecurity.log
sc sdset wuauserv "D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)" >>%temp%\SetServiceObjectSecurity.log
net start bits
net start wuauserv
wuauclt /resetauthorization /detectnow

Open in new window

0
 
LVL 47

Assisted Solution

by:Donald Stewart
Donald Stewart earned 250 total points
ID: 36490666

I think the main problem may be that your are running an older version of the windows update agent.

7.3.7600.16385


Within the WSUS console, do you have all "WSUS updates" approved for install<<<Specifically KB898461 ???
0
 

Author Comment

by:paul-ashton
ID: 36494034
Thanks for the replies.

Update KB898461 was not approved.  

I ran the script suggested on my machine (mine was not reporting back to the server) and approved this update last night within the WSUS console, and this morning clients have started to report back.

I'm not sure which fixed it, or a combination of the two, but it is fixed.

So thank you.

0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36496124
I'll guarantee it was approving KB898461


If you highlight this update it will read:


"This is a wsus update and should be approved for installation to ensure computers can be updated correctly"
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
DR TECHNOLOGY APART FROM SRM 5 95
Remote access server vs NAP 4 74
DHCP restore question Server 2003 to 2012 3 46
server DNS address could not be found 22 124
Every system administrator encounters once in while in a problem where the solution seems to be a needle in haystack.  My needle was an anti-virus version causing problems with my Exchange server. I have an HP DL350 with Windows Server 2008 Stand…
My previous article  (http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/A_4466-A-beginners-guide-to-installing-SCCM2007-on-Windows-2008-R2-Server.html)detailed one possible method to get SCCM 2007 installed an…
Need to grow your business through quality cloud solutions? With everything required to build a cloud platform and solution, you may feel like the distance between you and the cloud is quite long. Help is here. Spend some time learning about the Con…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

919 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now