Solved

WSUS and list of needed updates

Posted on 2013-01-25
10
899 Views
Last Modified: 2013-02-20
Hello, we have a WSUS server controlling circa a dozen clients. All machines are Windows 2003. For some servers, WSUS won't show any needed/pending updates but if i manually run Win Updates i see that there is a bunch of them needed. For other servers WSUS reports numerous missing updates but if i run Win Updates manually i see that everything is installed. It seems as if WSUS doesn't report the updates properly. Why is this? How can i fix it? thx! :-)
0
Comment
Question by:criskrit
  • 4
  • 3
10 Comments
 
LVL 13

Expert Comment

by:Gabriel Clifton
ID: 38818575
It is usually not the WSUS but rather the computer getting the updates. Try this batch script.

@ECHO OFF
net stop wuauserv 

echo -----------------------------------------------------------------------
echo This batch file will register all of the files associated
echo with a visit to the Microsoft Update / Windows Update
echo resources.
echo.
echo -----------------------------------------------------------------------

cls

echo ---Registering Widows Update Agent DLLs---
regsvr32 /s %systemroot%\system32\wuapi.dll
regsvr32 /s %systemroot%\system32\wuaueng.dll
regsvr32 /s %systemroot%\system32\wuaueng1.dll
regsvr32 /s %systemroot%\system32\wucltui.dll
regsvr32 /s %systemroot%\system32\wups.dll
regsvr32 /s %systemroot%\system32\wups2.dll
regsvr32 /s %systemroot%\system32\wuweb.dll

echo.
echo --Done registering Windows Update Agent DLLs
echo.

echo ---Registering Microsoft XML DLLs---
regsvr32 /s %systemroot%\system32\msxml3.dll
echo.
echo.

echo --Done registering Microsoft XML DLLs
echo.

echo PROCESS COMPLETE!
echo.

 Del "C:\Windows\SoftwareDistribution\DataStore\*.*" /f /q
net start wuauserv 
wuauclt.exe /resetauthorization /detectnow

Open in new window

0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 38819049
Are you approving all updates that are needed within the WSUS console ???

Have these servers been rebooted ??? If there is a pending reboot, future updates that are needed wont be detected until the reboot has taken place.

Are there any errors in their windowsupdate.log ???
0
 

Author Comment

by:criskrit
ID: 38827210
Hello and thank you for the replies. Lets deal with clients for which WSUS doesn't report needed updates. I am testing using two such clients, WSUS says that they are both up-to-date but Microsoft Update says they both need at least 60 updates! (the latter seems correct as these computers haven't been updated in almost a year).

I stopped the Automatic Update service, deleted the contents of DataStore folder, then started the Automatic Update service and ran "wuauclt.exe /resetauthorization /detectnow" and "wuauclt.exe /reportnow". I can see the "last status report" time for these clients being updated in WSUS but they still show up as needing no updates. I also checked the windowsupdate.log and it doesn't report any error messages and says that "0 updates were found". However Microsoft Update still reports 60+ updates missing. These servers don't need a reboot (if they did MS Update wouldn't report updates either).

any more ideas?
0
NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

 
LVL 13

Expert Comment

by:Gabriel Clifton
ID: 38827373
Updates in Microsoft update that are not showing up in the wsus updates have probably been rejected in wsus at some point
0
 

Author Comment

by:criskrit
ID: 38827470
as far as i know, nobody touched WSUS or MS Update for about a year. However if the updates have indeed been rejected, how can i "un-reject" them?
0
 
LVL 13

Expert Comment

by:Gabriel Clifton
ID: 38827866
Do a search in the wsus for the update and approve it. It can be rejected years ago and any future updates to it will also be rejected
0
 

Accepted Solution

by:
criskrit earned 0 total points
ID: 38844633
I discovered the problem, our WSUS wasn't synchronizing automatically any more so it had vastly outdated update definitions. I sync'ed and now it reports the correct update status of the clients.
0
 
LVL 13

Expert Comment

by:Gabriel Clifton
ID: 38844687
Good to hear you got it fixed
0

Featured Post

Active Directory Webinar

We all know we need to protect and secure our privileges, but where to start? Join Experts Exchange and ManageEngine on Tuesday, April 11, 2017 10:00 AM PDT to learn how to track and secure privileged users in Active Directory.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Scheduled Tasks Tweak 5 42
encrypted folder 7 65
Problem to file 5 29
Windows mapped drive communications - Secure? 5 47
Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question