SBS 2011 WSUS Update

After migrating from SBS 2003 to SBS 2011, when I try to change the update settings, I get the attached error (no Access to update GPOs). All the same with three different servers...
SBS2011WsusError.png
themroccAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

SteveCommented:
any chance of a translation?

If your summary of 'no Access to update GPOs' is accurate, I would start by checking the sysvol permissons as this is the most common cause of GPO issues.
0
themroccAuthor Commented:
Translation:
The Settings for Software updates cannot be displayed. there is no access to group policies for update Services. contact the Microsoft product Support.

The security settings for c:\windows\sysvol are:
- Full permissions for system
- Read, Run, List for Server Operators and authenticated users
0
SteveCommented:
is that the top level or the subfolders too?
0
Newly released Acronis True Image 2019

In announcing the release of the 15th Anniversary Edition of Acronis True Image 2019, the company revealed that its artificial intelligence-based anti-ransomware technology – stopped more than 200,000 ransomware attacks on 150,000 customers last year.

themroccAuthor Commented:
Sorry for the delay. Yes, it's the same on the subfolders! And, if I didn't make it clear in the first post: I trigger the update settings from the SBS console, tab 'security'.
0
SteveCommented:
run gpupdate /force on a client and check the event view for errors. This may give you some clues what's wrong with group policy.

Alternatively, run gpresult /h results.html to get a full summary of what group policies are failing and the reasons why.
0
themroccAuthor Commented:
yes, with gpresult /h results.html I can see some GP failing (security), now I have to check the reason...
0
SteveCommented:
Try browsing to the group policy from one of the client PCs logged in as a user. if they cant access it (read only) then it confirms an issue.

they are usually in:

\\domain.local\SYSVOL\domain.local\Policies\
0
themroccAuthor Commented:
Sorry for the late answer. Now, back from Holidays, I'll try this client access tomorrow. But - it's an issue on the Server, logged in with Administrator privileges, so I can't quite understand why I should access from a client pc with user privileges. I think my next step will be as described in KB680316 ('Repair WSUS')
0
SteveCommented:
you didn't mention the issue occurred from the server.
try the test from there then. if you cannot access the folder it confirms that permissions are the issue.
if you can access it, permissions are unlikely to be at fault.
0
themroccAuthor Commented:
Problem solved! In one case the three Update Services ... GPOs were missing, in one case there was a false port (8350 instead of 8530), in the third case I deleted the existing German GPOs and recreated them in English. Now everything works fine again.

Thx anyway for your suggestions!
0
themroccAuthor Commented:
I've requested that this question be closed as follows:

Accepted answer: 0 points for themrocc's comment #a39665287

for the following reason:

Beware of country specific translations of the Update Services GPOs. If you face any problems related to WSUS, create English GPOs
0
SteveCommented:
Although you may not feel my suggestions solved the issue, my suggestion to use gpresult did appear to help you head in the right direction....
0
themroccAuthor Commented:
Sorry, but I don't feel that gpresult gave any hints at all (besides some security issues which lead my attention in a false direction). The only solution was the TechNet article "Repair Windows Server Update Services" published March 10, 2011.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
SteveCommented:
Okey dokey.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.