SBS 2011

I have a new SBS 2011 install.  Normally I do not install WSUS, as we use another program to update the PC's automatically.  I always manually update the servers.  On this install of SBS 2011, I installed WSUS on this SBS 2011 server with the wizard, since this client wanted to use this feature.  After doing so, I wanted to manually update the SBS server itself by going to windows update, but it tells me that WSUS is in control.  I checked in the security/updates tab of the SBS console.  Server updates = none and this server in not in the included or excluded section either.

How do I get manual updates to be allowed on the SBS server itself?
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Gareth GudgerSolution ArchitectCommented:
DId you configure a GPO to manage the updates at the domain level? Sounds like your SBS box is inheriting this GPO.
JackAitkenAuthor Commented:
Have not created any GPO's manually.  This has been migrated from an SBS 2003 server.  Wonder if it carried over.  Where do I look to find this setting?
Gareth GudgerSolution ArchitectCommented:
Yes. If it is the same domain/forest a GPO would have carried over with an upgrade.

Open Group Policy Management Console and check all the GPOs attached at the domain level. These are likely the best places to start to look for Windows Update configuration.

Did this just occur with the install of WSUS? Or has it always been this way? Because if you didn't create the GPO.....then it is likely something else.
Protecting & Securing Your Critical Data

Considering 93 percent of companies file for bankruptcy within 12 months of a disaster that blocked access to their data for 10 days or more, planning for the worst is just smart business. Learn how Acronis Backup integrates security at every stage

David AtkinTechnical DirectorCommented:

Have you gone into the SBS Console and done a Syncronization for WSUS?

If you haven't done an initial Sync then it may indeed show no updates.
JackAitkenAuthor Commented:
Yes I did a sync and it shows nothing.  The SBS server is not there to include or exclude.
David AtkinTechnical DirectorCommented:
The SBS Server won't be in the list because it is the server. Do you have any updates in progress on the SBS Console?  Or any that need to be accepted?
JackAitkenAuthor Commented:
None.  I've never had an issue manually selecting windows updates on the servers.  Must be a hidden GPO that is preventing this.  I didn't set it, so it must be a carry over from the migration.  Also, I see that the option for windows update in IE is not in the list of choices under tools.
David AtkinTechnical DirectorCommented:
It is a GPO yes, the GPO's that will be applying the settings will be:
"Update Services Server Computers Policy"
"Update Services Common Settings Policy"

The Commons settings Policy will be specifying the WSUS Server location.  I don't recommend that you edit or disable these though as it will affect all machines and not just the server.

Can you take a screen shot of the updates section of the SBS Console please an upload.  Can you also confirm if updates are working for the client machines?
JackAitkenAuthor Commented:
It is an offline migration so there are no PC's connected yet.
David AtkinTechnical DirectorCommented:
You say offline, do you mean you're doing a fresh installation of SBS2011 and then migrating data and joining PC's later?
JackAitkenAuthor Commented:
No, i'm using the swing migration.  Have done it 10 times before, and it works great.  I've not run into this situation because this current migration was not a server I installed or maintained.
JackAitkenAuthor Commented:
I found the problem.  It was  a GPO that was migrated from the SBS 2003 server that prevented using Windows update.  I uploaded a snip of the policy setting.



Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Gareth GudgerSolution ArchitectCommented:
Awesome. Figured it had to be!
JackAitkenAuthor Commented:
Confirming the GPO would transfer with a migration was a help.  Unfortunately, the section of the GPO causing my issue was not under the computer configuration.

It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.