Windows Computers in SBS2011 Domain are not updating

We have a mix of Windows XP and Windows 7 computers in a SBS2011 domain.
WSUS is not used or configured. Each computer was setup to auto download and install updates. About 2 months ago, this process stopped.

On the Windows 7 Systems, the control Windows/Windows Update section reports that updates are "Managed by your system Administrator"

I tried to run the update manually on one of the Windows 7 PC's  and got Error code 80072ee2.

On one of the Windows XP systems, I checked in the System Properties/Automatic Updates tab and I that the following selection is made and greyed out so it cannot be changed: Notify me but don't automatically download and install them.

Do I have need to change something in a Group Policy?
itplatoonAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Netman66Commented:
Run gpresult /v > C:\gpresult.txt

on each OS and look through that file for the WSUS setting to find out what policy you need to fix.
Cris HannaSr IT Support EngineerCommented:
You'll have to Edit Group Policy on the SBS Server
Specifically the Update Services Client Computer Policy and the Update Services Common Settings Policy

Why aren't you using WSUS?
okeno12Commented:
go to the sbs server and edit the group policy
Become a Certified Penetration Testing Engineer

This CPTE Certified Penetration Testing Engineer course covers everything you need to know about becoming a Certified Penetration Testing Engineer. Career Path: Professional roles include Ethical Hackers, Security Consultants, System Administrators, and Chief Security Officers.

itplatoonAuthor Commented:
Another system admin might have made use of WSUS, not sure at this point.

I do see an error on the SBS console>Home> Updates  tab that shows " Update services cannot be contacted"

I checked and do see the Update Services service is online and running
Cris HannaSr IT Support EngineerCommented:
So is your goal to get WSUS working properly. Or do you want to disable the group policy objects that force workstations to only update through WSUS?
itplatoonAuthor Commented:
If there is no downside to using WSUS, it might make sense to fix and use it. At this point, nothing is getting updated. So what are next steps to fix WSUS?
Cris HannaSr IT Support EngineerCommented:
Here is the official Repair Guide for WSUS on SBS from Microsoft
Repair Windows Server Update Services   http://technet.microsoft.com/en-us/library/gg680316.aspx

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Sushil SonawaneCommented:
You have to remove configure setting related wsus in group policy. Disable the WSUS configure group policy and run the command gpupdate /force or restart the computer and check if you can do windows update manually.

To disable setting is below :

In Group Policy Object Editor, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then click Windows Update.
In the details pane, click Specify Intranet Microsoft update service location.
Click Enabled and type the HTTP(S) URL of the same WSUS server in the Set the intranet update service for detecting updates box and in the Set the intranet statistics server box. For example, type http(s)://servername in both boxes.
Click OK.


For more info refer below link :

http://social.technet.microsoft.com/Forums/en-US/eff10fab-7ca3-471e-a164-bf7b73a28128/how-to-remove-wsus-client-settings?forum=winserverwsus

http://technet.microsoft.com/en-us/library/cc720539(ws.10).aspx
itplatoonAuthor Commented:
I use the repair process steps noted at this link:
http://technet.microsoft.com/en-us/library/gg680316.aspx 

I found the following services not running:
WWW Published
Windows Process Activation and showing "Error: 13 The data is invalid

This led me to:

http://www.gringod.com/2008/08/15/when-iis-wont-start-error-13/

The culprit was: c:\windows\system32\inetsrv\config\applicationHost.config
I used the backup of the applicationHost.config file in c:\inetpub\history.
copied the file over and now all of the service work as expected.
WSUS seems to be working now as well too.
Cris HannaSr IT Support EngineerCommented:
Glad you were able to track this down.  is there anyone besides you that would make changes to IIS that could cause that file to change?
itplatoonAuthor Commented:
Thanks for the expert advice!
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
SBS

From novice to tech pro — start learning today.