Migrating WSUS


I have a WSUS server which needs replacing. I created a new server, installed WSUS on it and then set it as a replica downstream of the original WSUS box. All the groups and updates copied fine. Once done, I stopped it being a replica and pointed all the clients to it via a gpo. All the clients can see the WSUS but apart from one or two, none are updating their status to the new WSUS. It is showing 0%?

How can clients see the new WSUS but not update their status to it?
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.


How long did you wait after the GPO change...
What happens, if you search manually for new updates on the clients...
It may take some time (at least a day) until they may be visible,,,
Nick_DAuthor Commented:
It has been a week since the gpo change
Nick_DAuthor Commented:
And as stated in my question, I can see them it is just the status which is not updating
Be aware that there are two GPO / policy settings...
"Set the intranet update service for detecting updates"
"Set the intranet statistics server"

Have a look into the registry of a client...
You may search for your old and possibly for your new server name to find all settings on the client...
--> WUServer
--> WUStatusServer

Make sure that the clients can communicate with the server. Id you use HTTPS, also keep certificate trust in mind, especially if self signed certificates are used...

If HTTPS is used, You can put the URL (from the WUStatusServer key) of the new WSUS into the browser (usually https:\\yourWSUS:8531).

Also have a look into the winsdowsupdate.log file if you find something there...

Just for testing you may also try to run the windows update troubleshouter to see, if it finds any issues...
as well as to reset the WU client.... (completely resets the client site Windows Update)...

Resetting the WUClient...
Allways with administrative command promt...
(you can put it into a *.bat file for later usage)
net stop wuauserv
net stop appidsvc
net stop CryptSvc
net stop bits
net stop msiserver

Del "%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Downloader\qmgr*.dat"

rename %systemroot%\SoftwareDistribution SoftwareDistributionXXX
rename %systemroot%\system32\catroot2 catroot2xxx

reg.exe delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v PingID /f
reg.exe delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v AccountDomainSid /f
reg.exe delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v SusClientId /f
reg.exe delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v SusClientIDValidation /f

net start CryptSvc
net start bits
net start appidsvc
net start wuauserv
net start msiserver  

wuauclt.exe /resetauthorization /detectnow
wuauclt.exe /reportnow

net stop for all services, in case they are running,
net start is only needed....

appidsvc (Application Identity service - only needed if set to automatic)
CryptSvc (Cryptographic Services - always)
bits  (Background Intelligent Transfer Service - only needed if set to automatic)
wuauserv (Windows Update - always)
msiserver (Windows Installer - only needed if set to automatic)

runs an all OS (WIn 7 and up), if services are not available or installed it shows an error but runs through.
It worked when you see the two copied folders, i.e.
%systemroot%\SoftwareDistribution SoftwareDistributionXXX
If you do not see the folders, just run it again...
The folders can be deleted later..., and should not exist before...
The folders are recreated by windows Update service.

or just a reboot...
Always note, that even wuauclt.exe /reportnow is triggered, it may take some hours until you see a result...
The different OS also behave a bit different.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.