Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

SBS 2011

Posted on 2014-10-09
14
Medium Priority
?
213 Views
Last Modified: 2014-10-15
I have a new SBS 2011 install.  Normally I do not install WSUS, as we use another program to update the PC's automatically.  I always manually update the servers.  On this install of SBS 2011, I installed WSUS on this SBS 2011 server with the wizard, since this client wanted to use this feature.  After doing so, I wanted to manually update the SBS server itself by going to windows update, but it tells me that WSUS is in control.  I checked in the security/updates tab of the SBS console.  Server updates = none and this server in not in the included or excluded section either.

How do I get manual updates to be allowed on the SBS server itself?
0
Comment
Question by:JackAitken
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 4
  • 3
14 Comments
 
LVL 31

Assisted Solution

by:Gareth Gudger
Gareth Gudger earned 750 total points
ID: 40372158
DId you configure a GPO to manage the updates at the domain level? Sounds like your SBS box is inheriting this GPO.
0
 

Author Comment

by:JackAitken
ID: 40372160
Have not created any GPO's manually.  This has been migrated from an SBS 2003 server.  Wonder if it carried over.  Where do I look to find this setting?
0
 
LVL 31

Expert Comment

by:Gareth Gudger
ID: 40372166
Yes. If it is the same domain/forest a GPO would have carried over with an upgrade.

Open Group Policy Management Console and check all the GPOs attached at the domain level. These are likely the best places to start to look for Windows Update configuration.

Did this just occur with the install of WSUS? Or has it always been this way? Because if you didn't create the GPO.....then it is likely something else.
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 22

Expert Comment

by:David Atkin
ID: 40373154
Hello,

Have you gone into the SBS Console and done a Syncronization for WSUS?

If you haven't done an initial Sync then it may indeed show no updates.
0
 

Author Comment

by:JackAitken
ID: 40373167
Yes I did a sync and it shows nothing.  The SBS server is not there to include or exclude.
0
 
LVL 22

Expert Comment

by:David Atkin
ID: 40373203
The SBS Server won't be in the list because it is the server. Do you have any updates in progress on the SBS Console?  Or any that need to be accepted?
0
 

Author Comment

by:JackAitken
ID: 40373325
None.  I've never had an issue manually selecting windows updates on the servers.  Must be a hidden GPO that is preventing this.  I didn't set it, so it must be a carry over from the migration.  Also, I see that the option for windows update in IE is not in the list of choices under tools.
0
 
LVL 22

Assisted Solution

by:David Atkin
David Atkin earned 750 total points
ID: 40373355
It is a GPO yes, the GPO's that will be applying the settings will be:
"Update Services Server Computers Policy"
"Update Services Common Settings Policy"

The Commons settings Policy will be specifying the WSUS Server location.  I don't recommend that you edit or disable these though as it will affect all machines and not just the server.

Can you take a screen shot of the updates section of the SBS Console please an upload.  Can you also confirm if updates are working for the client machines?
0
 

Author Comment

by:JackAitken
ID: 40373368
It is an offline migration so there are no PC's connected yet.
0
 
LVL 22

Expert Comment

by:David Atkin
ID: 40373375
You say offline, do you mean you're doing a fresh installation of SBS2011 and then migrating data and joining PC's later?
0
 

Author Comment

by:JackAitken
ID: 40373416
No, i'm using the swing migration.  Have done it 10 times before, and it works great.  I've not run into this situation because this current migration was not a server I installed or maintained.
0
 

Accepted Solution

by:
JackAitken earned 0 total points
ID: 40374107
I found the problem.  It was  a GPO that was migrated from the SBS 2003 server that prevented using Windows update.  I uploaded a snip of the policy setting.

2014-10-10---Windows-Update-GPO-Restrict

Thanks
0
 
LVL 31

Expert Comment

by:Gareth Gudger
ID: 40374112
Awesome. Figured it had to be!
0
 

Author Closing Comment

by:JackAitken
ID: 40381709
Confirming the GPO would transfer with a migration was a help.  Unfortunately, the section of the GPO causing my issue was not under the computer configuration.

Thanks
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…
how to add IIS SMTP to handle application/Scanner relays into office 365.
Suggested Courses

715 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question