Installation of WSUS fails on Windows server 2016

I've tried to install WSUS on the VM server at least 7 times.   Each time it fails, stating the server needs a reboot.   As a test I installed SNMP and it installed just fine.  

Any ideas what is causing this?
J.R. SitmanIT DirectorAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Shaun VermaakTechnical SpecialistCommented:
Run an RSOP and check if any GPO changes the Log on as a service user right. NT SERVICE\ALL SERVICES is needed
https://www.experts-exchange.com/articles/29415/How-to-find-Active-Directory-Group-Policy-GPO-that-applies-a-particular-setting.html
0
J.R. SitmanIT DirectorAuthor Commented:
See attached.  There are a lot of these.  Does not look correct to me.   Network Service is there, however, there are no edit options for this.

RSOP
additional
0
Shaun VermaakTechnical SpecialistCommented:
No, NT SERVICE\ALL SERVICES
0
IT Pros Agree: AI and Machine Learning Key

We’d all like to think our company’s data is well protected, but when you ask IT professionals they admit the data probably is not as safe as it could be.

J.R. SitmanIT DirectorAuthor Commented:
Sorry, please explain.  I do not see that service listed.
0
R@f@r P@NC3RVirtualization SpecialistCommented:
Hello,

Please validate the operating system events, to see what errors you find.

It also executes a report with the performance monitor to see the diagnosis thrown by the tool.

Additionally try to install another role, apart from SNMP, to see if the installation is effective or it asks you to restart when it fails.

Annex a reference link on how to do the installation of WSUS, in case you are missing a step.

https://www.petri.com/installing-wsus-2016

I remain attentive to your comments.

regards..
0
Shaun VermaakTechnical SpecialistCommented:
You need to give NT SERVICE\ALL SERVICES Log on as a service user rights as a test. Use article linked to identify the GPO to modify and add it to the GPO
0
J.R. SitmanIT DirectorAuthor Commented:
I'll post later out running errands
0
J.R. SitmanIT DirectorAuthor Commented:
I think there may be other issues going on with this server.  I have rebooted it 7-8 times.  At least 5 of those state "getting windows ready" and then it gives the percentage of the of "working on updates"
0
R@f@r P@NC3RVirtualization SpecialistCommented:
Hello,

You can create a test vm with the operating system and test the WSUS installation to see if you get the same error.

Did you validate the event viewer?
I remain attentive to your comments.

regards..
0
J.R. SitmanIT DirectorAuthor Commented:
I was able to add the role, print and document.    I did check the event log and found this below.   When I ran Secpol.msc and it suggests in the error, I cannot edit the "log on as service"   everything is greyed out.  

The MSSQL$MICROSOFT##WID service was unable to log on as NT SERVICE\MSSQL$MICROSOFT##WID with the currently configured password due to the following error:
Logon failure: the user has not been granted the requested logon type at this computer.
 
Service: MSSQL$MICROSOFT##WID
Domain and account: NT SERVICE\MSSQL$MICROSOFT##WID
 
This service account does not have the required user right "Log on as a service."
 
User Action
 
Assign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster.
 
If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right.
0
J.R. SitmanIT DirectorAuthor Commented:
I figured out how to edit the service via the GPO.  When I try to add the service that did not have logon permissions, I get this.

adding log failure
0
J.R. SitmanIT DirectorAuthor Commented:
I took the advice of installing WSUS on another server.   It went perfectly smooth.

Any advice on if there might be something wrong with the DC?
0
R@f@r P@NC3RVirtualization SpecialistCommented:
Hello,

The server where the installation error is attached to the domain?

The test server that you took where the installation was successful is outside the domain?
regards..
0
J.R. SitmanIT DirectorAuthor Commented:
both are attached to the domain.  Both are 2016.  1 is a DC, 1 is a member.
0
R@f@r P@NC3RVirtualization SpecialistCommented:
Hello,

Do you have support for that vm where you have the domain controller installed?
In that DC, is where you intestas install the WSUS?

Another option you have is to install WSUS on another server, join it to the domain, and configure it respectively.

You should have your DC and WSUS better on separate servers.

I remain attentive to your comments.

regards...
0
J.R. SitmanIT DirectorAuthor Commented:
It turned out that the server OS was corrupt.  I had to shut it down and build a new one.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
J.R. SitmanIT DirectorAuthor Commented:
The problem was not related to any of the posts.   The OS was corrupt.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Virtualization

From novice to tech pro — start learning today.