?
Solved

Windows 7 clients (on 2008 SBS domain) cannot manage windows updates.

Posted on 2014-10-03
5
Medium Priority
?
18 Views
Last Modified: 2016-03-22
I have applied the SUR tool on Windows 7 clients, which are members of a 2008 SBS domain. I have also gone into the GPO on the server and configured "Configure Automatic Updates" to "5 - Allow local admin to choose setting". I have forced the GPO to update from the server.

Need help bad!!!

Thanks.
0
Comment
Question by:t0mmyb0y
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 22

Expert Comment

by:Larry Struckmeyer MVP
ID: 40360404
I guess you are referencing WSUS on SBS 2008?  It should have been installed on the first setup of the SBS so I am confused when you say you installed SUR(?) on the clients?

if the clients were joined to the domain with the IE "connect computer" wizard they should be in the correct OU, if not they might not be.

so what exactly is happening?  Can the clients select to update from WU or MU, or are the options greyed out and "controlled by the system admin" or some such?

How did you force the GPO to update "from the server".  It will auto update after "about" 30 minutes, or when the stations restart.  If they are not in the My Business - SBS OU, one for Computers and one for Users, that may be the root cause.
0
 

Author Comment

by:t0mmyb0y
ID: 40360556
The SUR tool stands for system readiness tool. It is what TechNet says to run before all else. It doesn't tell you anything after it runs. So I simply reboot the client and see if I can run updates. The error on the client is "Windows could not search for updates....". The error code is 800b0001. On the server side, I have made a change since posting his question. I changed  things to push the management of updates to the client. Woo hoo. But it is still not working after a re-installing of the SUR tool and rebooting the client. I also did a GPO forced update on the client.
0
 
LVL 22

Expert Comment

by:Larry Struckmeyer MVP
ID: 40360570
WSUS is really a simple beast.  We set the WSUS management (in SBS use the console) to require that the domain admin approve all updates, nothing is automatic, and on the server the admin must manually install but the clients install automatically at 3 AM after approval.  The only thing we do not allow to be fed through WSUS is drivers.

We also run the server clean up wizard weekly, using a script from Codeplex.

http://wsus.codeplex.com/releases/view/17612
0
 

Accepted Solution

by:
t0mmyb0y earned 0 total points
ID: 40621626
Sorry for the long-delayed response to all of this. I ended up calling Microsoft on this. Their WSUS technicians to almost 10 hours to resolve the issue. And not even THEY know what was really wrong nor what they did to fix it.
0
 

Author Closing Comment

by:t0mmyb0y
ID: 41517366
I know it's lame to have waited so long to close this question out. But there is NO real answer. As mentioned above, not even the Microsoft technicians know what they did to resolve it....after 10+ hours.
0

Featured Post

On Demand Webinar: Networking for the Cloud Era

Ready to improve network connectivity? Watch this webinar to learn how SD-WANs and a one-click instant connect tool can boost provisions, deployment, and management of your cloud connection.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introduction At 19:33 (UST) on Tuesday 21st September the long awaited email arrived with the subject title of “ANNOUNCING THE AVAILABILITY OF WINDOWS SBS 7 PREVIEW”.  It was time to drop whatever I was doing and dedicate as much bandwidth as possi…
The articles for turning off the Client firewall policy on the internet are for SBS 2008 and don't really help for SBS 2011. They actually moved the Client firewall policy. In 2011, the client firewall policy has moved to the SBS computers conta…
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question