Solved

Safe to Execute WSUS SUSClientID script fix on PDC domain controller?

Posted on 2014-12-10
3
186 Views
Last Modified: 2016-02-21
I have a bunch of VMs on our network that I had found out were provisioned using the same templates or are clones of each other, in a sort of base configuration golden image sense.  This has presented a problem when it comes to how these servers appear (or at times fail to) in our WSUS server.  The symptoms are, some VMs show up, then disappear, come back, change groups and names...etc.

I have been making a list of suspect VMs and correcting this problem using the following script, executed on a machine by machine basis.

Link to issue and script that fixes it...
http://blogs.technet.com/b/sus/archive/2009/05/05/resolving-the-duplicate-susclientid-issue-or-why-don-t-all-my-clients-show-up-in-the-wsus-console.aspx

Now, my problem, its seems our PDC Domain Controller is a clone of something, a long while back.  I want to fix it, but am very trepidatious about executing any kind of script on a PDC unless I absolutely have to or understand fully the ramifications of every line of code or command.  And since you cant take snapshots of non 2012 DCs I can't back out of this.

Does anyone know specifically the ramifications of executing this script on a PDC? Based on my experience, it seems like it will fix the WSUS console issue, but will it mess up anything on the DC.  IE stopping BITs service, changing the SUSclientID (which should be ok as its not the GUID of the server) or other things effect a PCDs ability to do its job in any kind of way, cause AD replication issues or corruption of any kind?

Thanks A LOT for the help.
0
Comment
Question by:CnicNV
  • 2
3 Comments
 
LVL 47

Accepted Solution

by:
Donald Stewart earned 500 total points
ID: 40491748
Perfectly safe, no ramifications.
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 40491756
I use psexec \\* to distribute the script to the whole domain.
0
 

Author Closing Comment

by:CnicNV
ID: 40500480
Ok thanks for the heads up.  Just wanted to double check.
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question