Solved

WSUS removal in SBS 2008 and now cant do windows update

Posted on 2012-12-20
6
994 Views
Last Modified: 2013-01-05
Hi, I just took over a SBS2008 server and the previous admin had removed WSUS from it (not appearing on the add remove programs list) as it was taking up to much space on the server.

However since then none of the client pcs nor the server can check for updates.  Also if we try to check manually for updates it wont let us install. says error 80072EFD  Windows encountered a unknown error

Also when doing a manual update, the systems still say that the windows updates are managed by system administrator.

Any help ?
0
Comment
Question by:c45
6 Comments
 
LVL 8

Expert Comment

by:teomcam
ID: 38711573
Hi,

Yes that is quite normal because after removal they must forget to default the Group Policies related to this.
Please open Group Policy Management console and navigate to Computer Configuration-Administartive Templates-Windows Components/Windows Updates-Policy and set the followigns to DEFAULT

1-Specify intranet Microsoft update service location
2-Set the intranet update service for detecting updates
3-Set the intranet statistics server
4-Check for updates at the following interval (hours):  20

Also there might be some special policies such as when updates will be checked, update installation automatic or manual etc.
0
 

Author Comment

by:c45
ID: 38714998
sorry for the delayed response.  When i open the GPM all i see is

Forest
and the domain

Sorry a bit lost here
gpm.png
0
 
LVL 22

Accepted Solution

by:
yo_bee earned 500 total points
ID: 38746746
I guess this was neglected by the helper.
 
From your image you will need to expand the Domain Node and locate the GPO that has the settings.  
It is a computer configuration GPO so you are looking for a GPO linked to the OU with the Computers and/or  Servers.

If you want to take a screenshot the Domain Node expanded maybe the naming convention the previous ADMIN can be isolated with this setting we are looking for.
 
GPO1GPO2GPO3
Change all settings to Not configured.

To try and test without making any changes I recommend creating a completely new OU with Blocked GP Inheritance.

Open ADUC (Active Directory Users & Computers MMC)
Right click on the Domain and select New
aduc1
Name it (example: Sterile)
Then move one of your workstations into this OU for testing
aduc2
aduc3
Then Open GPMC again and block inheritance.
Locate the OU just created > Right click on it and select Block Inheritance.

gpo4gpo5
Once you have done this run GPUPDATE /FORCE on the computer that you moved into the Sterile OU > Restart.

Next you want to confirm that there are no setting of the old Link GPO still set.

Open the Registry to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate

Make sure you do not see any values pointing to local server like https://SBS2008:8530 or Target Group.

You may need to run Windows System Readiness Tool as well at the end of this.
Make sure you run the proper flavor of the tool

http://www.microsoft.com/en-us/download/details.aspx?id=3132 (32Bit)
http://www.microsoft.com/en-us/download/details.aspx?id=20858(64Bit)
0
 
LVL 35

Expert Comment

by:Cris Hanna
ID: 38747183
While the question has an accepted answer I'm still going to chime in.  Why not simply repair WSUS and use it as designed on SBS?  http://technet.microsoft.com/en-us/library/dd443475(v=ws.10).aspx

Probably the easiest repair process in all of SBS.
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

The articles for turning off the Client firewall policy on the internet are for SBS 2008 and don't really help for SBS 2011. They actually moved the Client firewall policy. In 2011, the client firewall policy has moved to the SBS computers conta…
I’m often asked about newer and larger USB drives connected to SBS2008 and 2011 failing Windows Server Backup vs the older USB drives not failing. As disk space continues to grow and drive technology change SBS2008 and some SBS2011 end up with the f…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question