Migrating WSUS Windows Server 2008R2

Posted on 2011-10-09
Last Modified: 2012-05-12
We have a backup DC currently running Windows Server 2003R2 and WSUS 3.0 SP2.
The OS is installed in a 40Gb partition, and the WSUS folder is on a totally separate partition.
We want to upgrade to Windows Server 2008R2, by overwriting the Windows Server 2003R2 in the 40Gb partition.
After the upgrade we want to restore the WSUS installation.

What we plan to do is to  demote the server to a member server.
Install Windows Server 2008R2 in the 40 Gb partition.
Promote the server to a DC.
Install the WSUS role, and choose to use the original Update Source (WSUS folder)
and select "existing database server on this computer".

Will this work or are there other steps we should take?
Question by:Cantatech
    LVL 39

    Expert Comment


    Author Comment

    Unfortunately your response did not help, and we have been left with a WSUS installation which although functional, has a number of aspects which may need further attention.
    Prior to doing any change to the server, we exported the metadata using wsusutil, and also created a backup of the database using SQL Management Studio.

    After installing Server 2k8R2, joining the domain and then promoting the server, we installed WSUS. We had hoped that the option to "use an existing database server" would appear even though during the installation we pointed the install to the same volume/WSUS folder that had been used under 2k3. (the content and WSUSDB were in no way disturbed duing the upgrade to 2k8R2). This option was not enabled.

    After the install finished. we found that the clients could not connect with the database server, none of the computers or updates appeared - it was a totally fresh install.
    We found the following,v=WS.10).aspx and followed the steps to restore the WSUSDB on page 6.
    We also followed the steps to Change the WSUS server Identity, as the article stated that this must be changed.
    The computers and updates then all appeared, and computers started to update their last logon date.
    However, the next synchronisation downloaded some 4000 updates (!).

    We are not confident that the WSUS installation is working correctly.
    In particular, on one client computer, there are numerous 80244022 errors.
    Having backed up the metadata at the outset (see above) we then ran wsusutil import - this ran successfully and reported "all updates successfully imported"

    We would now like to know what steps we should take to validate/verify that the WSUS install has and is working correctly.

    LVL 39

    Expert Comment

    You can use client and server diagnostic tools:

    Author Comment

    Further to my previous post, I found that restoring the backup of the content folder, and restoring the susdb database, resulted in the previously approved (etc) updates appearing correctly.  In particular there was no attempt to synchronise some 4000 or so updates !

    The only issue left is that Windows Defender updates are identified, but fail to download.  We have tried to use the "download now" option, but in each case the download fails.

    We checked the c:\program files\update services\logfiles folder and in particular the SoftwareDistribution.log file - this shows content files failed to download with a message as "content does not fall within expected range".
    Your suggestion to use  the server diagnostic tools is was followed up, but these tools do not work on Windows Server 2008R2.

    How do we diagnose/download Windows Defender downloads?

    LVL 39

    Expert Comment

    You are correct about Server diagnostics tool - it was not renewed since WSUS 2.0 (And I've used it long time ago)
    Can you show full error?
    Are other updates downloaded successfully?

    Accepted Solution

    Thanks for your suggestions - unfortunately none were of any real help.  Given the time already spent trying to get WSUS working successfully, in the end, we uninstalled WSUS and reinstalled it and made no attempt to connect to the existing susdb or content folder.  ie a clean install.  The work needed to then clean up the mass of updates was tedious but at least all of the updates are downloading correctly and once approved are deploying to the clients.
    I think this question should now be considered closed.

    Author Closing Comment

    None of the suggestions assisted us to successfully migrate the WSUS role from W2k3 to W2k8R2.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    The canonical version of this article is on my web site here: A companion presentation is available here:
    Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
    This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
    The view will learn how to download and install SIMTOOLS and FORMLIST into Excel, how to use SIMTOOLS to generate a Monte Carlo simulation of 30 sales calls, and how to calculate the conditional probability based on the results of the Monte Carlo …

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now