Solved

OS updates from my WSUS server have not downloaded on to my WSUS clients

Posted on 2013-06-13
19
320 Views
Last Modified: 2013-06-25
I am a member of the domain administrators group in a 2008 R2 domain. I've successfully configured a WSUS server and its clients are in a specific OU which is linked to the WSUS server. On the WSUS server I see all of its clients and the number of patches or updates that are need by each one. This server and clients were linked about two days ago but yet no updates have been downloaded onto the actual clients. What am I missing or which setting is configured incorrectly in the GPO?
0
Comment
Question by:cheyliger
19 Comments
 
LVL 21

Expert Comment

by:Haresh Nikumbh
Comment Utility
0
 
LVL 10

Expert Comment

by:Sam Simon Nasser
Comment Utility
to check on a client pc, go to start - run gpedit.msc

go to computer configuration - administrative templates - windows components - windows update

double click specify intranet Microsoft update service location and enter your update server address (i.e. http://WSUS) ... then check for updates
0
 
LVL 47

Expert Comment

by:dstewartjr
Comment Utility
Have you approved the updates ???

Have the updates finished downloading to your WSUS server ??
0
 

Author Comment

by:cheyliger
Comment Utility
Hi Takecoffee thanks for some very useful troubleshooting tips. However, my system passed all of them and the issue still has not been resolved.
0
 

Author Comment

by:cheyliger
Comment Utility
Dstewartjr, I think part of the issue is updates approval related. I had automatic approval enable but later realized that most of them have not been approved. I've since manually approved all of the them and some have been downloaded to the client and installed. To answer your other question, all of the updates have been downloaded to the WSUS server and in the GPO I've configured the frequency for clients to checking for updates at 2hrs. I'm still perplexed why all of the approved updates available for installation still have not been downloaded to the clients. Any ideas?
0
 
LVL 47

Expert Comment

by:dstewartjr
Comment Utility
If the clients havent been rebooted since their last updates were installed---that could be a reason.

Have you looked at any of their windowsupdate.log  starting from the bottom up ???
0
 

Author Comment

by:cheyliger
Comment Utility
Hey Dstewartjr, I've rebooted the clients when they requested to be reboot and even when they didn,t so that does seem to be the issue.
Now this morning all of the remaining updates were downloaded to the clients and have since been installed. However, my concern is still why does the server indicated that there are 16 updates available for a windows7 client but yet it takes 3days to get them to the client. On the first day 5 updates in one batch, then 3 updates the next day and the remaining 8 updates today.
I could not find anything meaningful in the windowsupdate.log. However, I've included a copy of it. Please let me know if you do?
WindowsUpdate.log
0
 
LVL 47

Expert Comment

by:dstewartjr
Comment Utility
For one this client is not picking up your WSUS GPO


2013-06-14      10:49:10:047       796      83c      Agent        * WSUS server: <NULL>
2013-06-14      10:49:10:047       796      83c      Agent        * WSUS status server: <NULL>
0
 

Author Comment

by:cheyliger
Comment Utility
Dstewartjr, this is not persistent issue though and was only momentary I suspect it was due to my not logging back into one of the rebooted clients that has McAfee encryption software installed on it. The client was unable to access the network until a user with an active domain account logs into it.
0
What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

 
LVL 47

Expert Comment

by:dstewartjr
Comment Utility
You might want to verify that, 'cause throughout your entire windowsupdate.log---not once does it connect to your WSUS server.
0
 

Author Comment

by:cheyliger
Comment Utility
Dstewrtjr my previous reply was incorrect. I've reviewed the log file again realized my mistake. I'm actually running my test WSUS server on the HP Elitebook 6930 because my manager wants it to be done that way before migrating to an actual server. Anyway the logs does spell out that but i totally missed it.

2013-06-14      10:49:11:593       796      83c      Report        * Computer Model = HP EliteBook 6930p
2013-06-14      10:49:11:609       796      83c      Report        * Bios Revision = 68PCD Ver. F.12
2013-06-14      10:49:11:609       796      83c      Report        * Bios Name = Default System BIOS
0
 

Author Comment

by:cheyliger
Comment Utility
Dstewartjr, one other possibility for the updates not appearing on the clients soon after they were approved or apeearing in batches would be if BITS was enabled to throttle down the downloads. I've confirmed that BITS is not configured in the GPO linked to WSUS server nor is it configured locally on machine.
0
 

Author Comment

by:cheyliger
Comment Utility
I've also confirmed that  BITS in IIS is not configured to throttle down downloads.
0
 

Author Comment

by:cheyliger
Comment Utility
The only other possibilty I can think of is that the server's hardware is under performing e.g. a network card performing sporadically.
0
 

Author Comment

by:cheyliger
Comment Utility
No one else has submitted any other posts pertaining to this question and my research has not revealed any other addition information pertaining why the updates are not being delivered in one batch. As a result I intend to closethis question without having it answered.
0
 
LVL 47

Accepted Solution

by:
dstewartjr earned 500 total points
Comment Utility
0
 

Author Comment

by:cheyliger
Comment Utility
dstewardjr, very good link. I'm currently running clean-up wizard then I will add a new machine to the OU and see if I do notice any improved performance.
0
 

Author Comment

by:cheyliger
Comment Utility
I will add the new machine on Monday. I should have updates on Monday.
0
 

Author Comment

by:cheyliger
Comment Utility
I do NOT want to close this question at this time. I've completed running the clean-up wizard on the WSUS server. Tomorrow I will add a new client to the OU. The performance of the WSUS server updating this new client will confirm if the troubleshooting tips provided above were actually effective.
0

Featured Post

Too many email signature updates to deal with?

Do you feel like you are taking up all of your time constantly visiting users’ desks to make changes to email signatures? Wish you could manage all signatures from one central location, easily design them and deploy them quickly to users? Well, there is an easy way!

Join & Write a Comment

This is my 3rd article on SCCM in recent weeks, the 1st (http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/A_4466-A-beginners-guide-to-installing-SCCM2007-on-Windows-2008-R2-Server.html) dealing with installat…
Ever notice how you can't use a new drive in Windows without having Windows assigning a Disk Signature?  Ever have a signature collision problem (especially with Virtual Machines?)  This article is intended to help you understand what's going on and…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now