Start Free Trial

asked on

Configuring WSUS via GPO, RSOP is empty!

Ok so I created two new GPO's for WSUS, one linked to each of the two Site OU's. Each GPO specifying the WSUS server i the respective site.

So:

machines->MI->workstations
\->MS->workstations

Currently each GPO is linked to the respective OU, and has Authenticated Users in the security filtering.

I forced a Gpupdate on a workstation in the MI ou and I see the 'MI workstation Windows Updates" GPO has been successfully applied. I run an rsop.msc and there is no 'Windows Update" section listed under Computer Configuration.

My GPO is not empty by any means, and since it was successfully applied why can I not see it under RSOP?

Also if it help, on the WSUS server under unassigned computers there is nothing, empty. My original problem is that computer group being empty is what led me to testing the GPO.

Are your workstations located within either one of these OU's ???

A screenshot would be helpful is possible.

ASKER

Yes, both workstations I am testing with at my site are in the appropriate (MI) site and OU. The other two users that I'm testing with are both in IT and both at the other site/OU.
New-Bitmap-Image.bmp
New-Bitmap-Image--2-.bmp

Are you running rsop as a limited user or an administrator ??

post a windowsupdate.log from this pc

ASKER

Here you go.
WindowsUpdate.log

SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

ASKER

Nope, neither box is checked, policy is fully enabled.

It appears that it's getting blocked or conflicting with another GPO....have you tried selecting "Enforced" ??

ASKER

yup.. both GPO's are set to Enabled and Enforced.

Ok, from your first screenshot "Computer configuration properties" what info does the "error information" tab give you ??

ASKER

The Error Information tab shows the registry part failed:

"Registry failed due to the error below:
Unspecified Error"

check event log on pc

Do you have "Local GPO's" configured on the pc ??

http://www.winvistatips.com/old-wsus-server-parameters-reappearing-workstation-rsop-error-t747122.html

ASKER

Odd.. checking the local GPO's their all 'not configured', I did right-click, properties, and disabled both the computer and user configurations. Reforced a gpupdate, re-ran rsop and still no WindowsUpdate. I also did not have a WindowsUpdate key in the registry as per that article.

I am rebooting and trying the gpupdate/rsop options again.

Check comment #30 here to see if you are in same boat

http://www.techexams.net/forums/off-topic/50663-clients-not-pulling-wsus-via-gp-2.html

ASKER

Hmm, not too similar. However I did go through my Default Domain Policy and while I found nothing restricting security I did remove a couple items such as an invalid software restriction policy. I am going to reforce and re-rsop on the test machine right now.

ASKER

Ok two rebooted later, no change. I went back into the Local Group Policy and set configure windows updates to disabled. rebooted and no change. Wish i knew what was blocking this crap.

Go over

http://www.windowsnetworking.com/articles_tutorials/Group-Policy-Security-Filtering.html

maybe something you missed

more here

http://social.technet.microsoft.com/wiki/contents/articles/basic-group-policy-troubleshooting-overview.aspx

What errors are there in your eventvwr ???

ASKER

The first link you posted was helpful but did not change my current problem. The second link I am going on right now. Currently there only errors in the Application Log and the group Policy Operational log refer to other GPO's not the windows update nor the default Domain ones.

Have you tried to create a new gpo and try that one ?

ASKER

Ok so far a fresh, newly created GPO does the same thing.

ASKER

What weird is that generating an RSOP (planning) from the MI workstation OU shows the GPO being applied correctly. I even chose a random normal user.

how about when you click start>>>run>>>rsop.msc>>enter

ASKER

Yes, rsop ran locally does the same as earlier. directly above was the first time I had ran rsop from the OU. New GPO, client machine dis and re-joined to the domain.. now under local rsop Administrative Settings doesnt appear., even though the gpo says 'Applied'

ASKER

WTH am I doing wrong here?

ASKER CERTIFIED SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

ASKER

Disabled the new GPO and added the changes into the Default Domain GPO.. to no avail.

ASKER

Any new thoughts?

ASKER

This issue was never resolved, but I do want to thank the folks who tried.