Configuring WSUS via GPO, RSOP is empty!

Ben Hart
Ben Hart used Ask the Experts™
on
Ok so I created two new GPO's for WSUS, one linked to each of the two Site OU's. Each GPO specifying the WSUS server i the respective site.

So:

machines->MI->workstations
                \->MS->workstations

Currently each GPO is linked to the respective OU, and has Authenticated Users in the security filtering.

I forced a Gpupdate on a workstation in the MI ou and I see the 'MI workstation Windows Updates" GPO has been successfully applied.  I run an rsop.msc and there is no 'Windows Update" section listed under Computer Configuration.

My GPO is not empty by any means, and since it was successfully applied why can I not see it under RSOP?

Also if it help, on the WSUS server under unassigned computers there is nothing, empty.  My original problem is that computer group being empty is what led me to testing the GPO.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
DonNetwork Administrator

Commented:
Are your workstations located within either one of these OU's ???
yo_beeDirector of Information Technology

Commented:
A screenshot would be helpful is possible.

Author

Commented:
Yes, both workstations I am testing with at my site are in the appropriate (MI) site and OU.  The other two users that I'm testing with are both in IT and both at the other site/OU.
New-Bitmap-Image.bmp
New-Bitmap-Image--2-.bmp
DonNetwork Administrator

Commented:
Are you running rsop as a limited user or an administrator ??

post a windowsupdate.log from this pc

Author

Commented:
Here you go.
WindowsUpdate.log
DonNetwork Administrator
Commented:
edit your 'MI workstation Windows Updates" GPO and then right click on it >>select properties....

Do you then have "Disable Computer Configuration settings" checked ??

Author

Commented:
Nope, neither box is checked, policy is fully enabled.
DonNetwork Administrator

Commented:
It appears that it's getting blocked or conflicting with another GPO....have you tried selecting "Enforced" ??

Author

Commented:
yup.. both GPO's are set to Enabled and Enforced.
DonNetwork Administrator

Commented:
Ok, from your first screenshot "Computer configuration properties" what info does the "error information" tab give you ??

Author

Commented:
The Error Information tab shows the registry part failed:

"Registry failed due to the error below:
Unspecified Error"
DonNetwork Administrator

Commented:
check event log on pc

Author

Commented:
Odd.. checking the local GPO's their all 'not configured', I did right-click, properties, and disabled both the computer and user configurations.  Reforced a gpupdate, re-ran rsop and still no WindowsUpdate.  I also did not have a WindowsUpdate key in the registry as per that article.

I am rebooting and trying the gpupdate/rsop options again.
DonNetwork Administrator

Commented:

Author

Commented:
Hmm, not too similar.  However I did go through my Default Domain Policy and while I found nothing restricting security I did remove a couple items such as an invalid software restriction policy.  I am going to reforce and re-rsop on the test machine right now.

Author

Commented:
Ok two rebooted later, no change.  I went back into the Local Group Policy and set configure windows updates to disabled.  rebooted and no change.  Wish i knew what was blocking this crap.
DonNetwork Administrator

Commented:
What errors are there in your eventvwr ???

Author

Commented:
The first link you posted was helpful but did not change my current problem.  The second link I am going on right now.  Currently there only errors in the Application Log and the group Policy Operational log refer to other GPO's not the windows update nor the default Domain ones.
DonNetwork Administrator

Commented:
Have you tried to create a new gpo and try that one ?

Author

Commented:
Ok so far a fresh, newly created GPO does the same thing.

Author

Commented:
What weird is that generating an RSOP (planning) from the MI workstation OU shows the GPO being applied correctly.  I even chose a random normal user.
DonNetwork Administrator

Commented:
how about when you click start>>>run>>>rsop.msc>>enter

Author

Commented:
Yes, rsop ran locally does the same as earlier.  directly above was the first time I had ran rsop from the OU.  New GPO, client machine dis and re-joined to the domain.. now under local rsop Administrative Settings doesnt appear., even though the gpo says 'Applied'

Author

Commented:
WTH am I doing wrong here?
Network Administrator
Commented:
On this GPO, what groups/users are listed under the delegation tab ??

Could you post a screenshot of the GPO "Settings" Tab ?

As a test, modify the default domain policy and then see if it then gets applied.

Author

Commented:
Disabled the new GPO and added the changes into the Default Domain GPO.. to no avail.

Author

Commented:
Any new thoughts?

Author

Commented:
This issue was never resolved, but I do want to thank the folks who tried.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial