none
Help with WSUS - Server cannot get automatic updates

    Frage

  • I have SBS2008 std and have a problem with WSUS (and possibly the intranet functionality). On the Windows Update page, the Update button does not allow updates and returns error code 80244022 - Windows update encountered an unknown error. To get updates I use "Check online for updates from Microsoft Update" on the Windows Update page. In the Windows SBS Console - Security Tab - Updates, "An error occured while retrieving updates information" for all four of the listed items, viz.
    "Updates with Microsoft Software Licence Terms that are Pending approval"
    "Updates with errors"
    "Optional Updates"
    "Updates in Progress"
    I have tried reinstalling WSUS using the following method with disk 2 of SBS2008 installation disk:

     <DVD Drive>:\CMPNENTS\wsus\wsussetup.exe /q DEFAULT_WEBSITE=0 CREATE_DATABASE=1 CONTENT_LOCAL=1 CONTENT_DIR=C:\WSUS WYUKON_DATA_DIR=C:\WSUS
    LINK (http://technet.microsoft.com/en-us/library/dd443475%28WS.10%29.aspx)

    The WSUS folder is created on the C: drive of the server and the following sub folders created :
    "UpdateservicesDbfiles"
    "UpdateServicesPackages"
    "WsusContent"

    As per STEP 4 of the LINK I navigate to START - Administrative Tools - Windows Server Update Service (and not listed as  "Microsoft Windows Server Update Services <version x>" as per the LINK - I have updated this to SP2). I cannot expand the Update services as per LINK 4C because nothing is listed.

    With the Update Services highlighted I select Action then Connect to Server... .I have tried the ServerName and IP on all four ports. The error receive for port
    80 / 8530 - "Cannot connect to ServerName. The server may be using another port or different Secure Socket Layer setting".
    8531 / 443 - Cannot connect to ServerName.The Secure Socket Layer (SSL) certificate for this server could not be validated.

    I assume that WSUS is not connecting to some database. My journey trying to fix WSUS has come to an abrupt end and I seek your kind assistance. Thanking you in advance.

    Dienstag, 21. Februar 2012 11:58

Antworten

  • Hi,

    Thank you for your post.

    1. Follow Troubleshooting the WSUS synchronization process article to check the synchronization issue
    2. As the WSUS has updated to SP2, you need to follow the article below to reinstall your WSUS 3.0.

    How To Manually Uninstall & Reinstall WSUS 3.0 on SBS 2008

    First Attempt to Uninstall WSUS 3.0 through Programs and Features

    1.Attempt to uninstall "Windows Server Update Service 3.0 Sp2" from Programs and Features in control panel.
    If you don't see WSUS sp1 or sp2 in Programs and Features run WSUSSetup.exe from the SBS 2008 Recovery CD #2
    Cdrom<drive>: \CMPNENTS\WSUS\WSUSSetup.exe and select the three check boxes to remove WSUS.

    2.If you get errors look at the WSUSSetup.log file.
    C:\User\Username\AppData\Local\Temp\WSUSSetup.log WSUSCa_100719_1452.log

    3.After removing the Wsus within Program and Features you may want to still verify that the below directories and registry keys

    are removed successfully.
     

    If you're unable to uninstall with the setup then manually remove  the installation with the following Steps:

    Backup registry in Windows first
    http://support.microsoft.com/kb/322756

    Delete the following Directories and Registry keys:

    4.HKLM\Software\Microsoft\Microsoft SQL Server\WSUS
    5.HKLM\Software\Microsoft\UpdateServices 
    6.HKLM\software\Microsoft\windows\currentversion\installer\userdata\s-1-5-18\products Look under Each GUID > InstallProperties 
    On the right side look for a <DisplayName> with Microsoft Windows Server Update Services 3.0 SP Delete the GUID
    7.HKLM\Software\Classes\installer\Products\25B648799C414CF4EB36EF60FA054124
    (Look through each GUID.  The default GUID for WSUS is 25B648799C414CF4EB36EF60FA054124)
    On the right side look for a <ProductName> with Microsoft Windows Server Update Services 3.0 SP
    8.HKLM\System\CCS\Services\WSUS:  and others
    9.HKLM\System \CCS\Services\WSusCertServer
    10.HKLM\System \CCS\Services\WsusService
    11.HKCRoot\wsuscertserver.certmanager
    12.HKCRoot\wsuscertserver.certmanager.1
    13.HKCRoot\wsuscertserver.Utilites
    14.HKCRoot\wsuscertserver.Utilites.1
    15.HKCR\wsuscertserver.certmanager

    Delete the following from IIS:

    16.WSUS Administration Virtual Directory
    17.Application Pool > WsusPool
    18.Reboot the server
     
    Rename the following folders:

    19.Stop the "Update Services"  service
    20.C:\Program files\Update services
    (Delete everything in the Update Services folder but leave the "Common" Folder)
    21.C:\WSUS  (Be sure to rename on all drives)
     
    Reinstall WSUS from CD or Download WSUS 3.0 Sp2

    22.
    Option 1
    Download of Windows Server Update Services 3.0 SP2 site:
    http://www.microsoft.com/downloads/details.aspx?FamilyId=a206ae20-2695-436c-9578-3403a7d46e40&displaylang=en

    Option 2
    Get the SBS2008 CD2 navigate and run Cdrom<drive>:\Cmpnents\Wsus\WSUSSetup.exe

    23.Select radio button for "Full Server Installation Including Administration Console"
    24.Choose the drive that you would like for the installation to be Installed.  <drive>:\WSUS
    25.Choose the drive for the Database option of <drive>:\WSUS
    26.Select Next until you get to the Database usage.  Choose the "Create new database"
    27.Select Next all the way to the End of the installation.
     
    Custom Configuration Wizard

    28.Walk thru Windows Server Update Services Configuration Wizard
    29.On the Language Page leave the Default check for English.
    30.Select "All Products" check box.
    31.On the Classifications page select the following check boxes
    .Critical Updates
    .Definition Updates
    .Security Updates
    .Service Packs
    .Update Rollups

    32.Set the Synchronization to Automatic
    33.Uncheck the "Begin initial Synchronization" checkbox.
    34.Select Finish. 

    Open WSUS Native Console

    35.Expand your Servername > Computers > All Computers
    36.Right click on "All Computers" and select "Add Computer Groups
    Here you'll create three groups with the following name:
    .Update Service Excluded Computers
    .Update Services Client Computers
    .Update Services Server Computers
     
    Open SBS Console

    37.Look at the Updates and you should have a green Check.

    If there are more inquiries on this issue, please feel free to let us know.

    Regards


    Rick Tan

    TechNet Community Support




    Donnerstag, 23. Februar 2012 03:22
    Moderator

Alle Antworten

  • Just an update. I started the IIS manager, expanded my server, clicked Application Pool. WsusPool's properties were set to 64 bit and was restarted. This allowed the server to be connected in the Windows Server Update Service (WSUS). Now I can follow the rest of the instructions in the LINK. 
    Dienstag, 21. Februar 2012 18:00
  • Update. I have run BPA and there are two cautions related to WSUS.

    1. Windows SBS Update Services not set to default settings.

    2. WSUS is not synchronized with Microsoft Updates.

    The links point to http://technet.microsoft.com/en-us/library/cc527559.aspx . This is not very helpful. Any suggestions.?

    Dienstag, 21. Februar 2012 19:57
  • Hi,

    Thank you for your post.

    1. Follow Troubleshooting the WSUS synchronization process article to check the synchronization issue
    2. As the WSUS has updated to SP2, you need to follow the article below to reinstall your WSUS 3.0.

    How To Manually Uninstall & Reinstall WSUS 3.0 on SBS 2008

    First Attempt to Uninstall WSUS 3.0 through Programs and Features

    1.Attempt to uninstall "Windows Server Update Service 3.0 Sp2" from Programs and Features in control panel.
    If you don't see WSUS sp1 or sp2 in Programs and Features run WSUSSetup.exe from the SBS 2008 Recovery CD #2
    Cdrom<drive>: \CMPNENTS\WSUS\WSUSSetup.exe and select the three check boxes to remove WSUS.

    2.If you get errors look at the WSUSSetup.log file.
    C:\User\Username\AppData\Local\Temp\WSUSSetup.log WSUSCa_100719_1452.log

    3.After removing the Wsus within Program and Features you may want to still verify that the below directories and registry keys

    are removed successfully.
     

    If you're unable to uninstall with the setup then manually remove  the installation with the following Steps:

    Backup registry in Windows first
    http://support.microsoft.com/kb/322756

    Delete the following Directories and Registry keys:

    4.HKLM\Software\Microsoft\Microsoft SQL Server\WSUS
    5.HKLM\Software\Microsoft\UpdateServices 
    6.HKLM\software\Microsoft\windows\currentversion\installer\userdata\s-1-5-18\products Look under Each GUID > InstallProperties 
    On the right side look for a <DisplayName> with Microsoft Windows Server Update Services 3.0 SP Delete the GUID
    7.HKLM\Software\Classes\installer\Products\25B648799C414CF4EB36EF60FA054124
    (Look through each GUID.  The default GUID for WSUS is 25B648799C414CF4EB36EF60FA054124)
    On the right side look for a <ProductName> with Microsoft Windows Server Update Services 3.0 SP
    8.HKLM\System\CCS\Services\WSUS:  and others
    9.HKLM\System \CCS\Services\WSusCertServer
    10.HKLM\System \CCS\Services\WsusService
    11.HKCRoot\wsuscertserver.certmanager
    12.HKCRoot\wsuscertserver.certmanager.1
    13.HKCRoot\wsuscertserver.Utilites
    14.HKCRoot\wsuscertserver.Utilites.1
    15.HKCR\wsuscertserver.certmanager

    Delete the following from IIS:

    16.WSUS Administration Virtual Directory
    17.Application Pool > WsusPool
    18.Reboot the server
     
    Rename the following folders:

    19.Stop the "Update Services"  service
    20.C:\Program files\Update services
    (Delete everything in the Update Services folder but leave the "Common" Folder)
    21.C:\WSUS  (Be sure to rename on all drives)
     
    Reinstall WSUS from CD or Download WSUS 3.0 Sp2

    22.
    Option 1
    Download of Windows Server Update Services 3.0 SP2 site:
    http://www.microsoft.com/downloads/details.aspx?FamilyId=a206ae20-2695-436c-9578-3403a7d46e40&displaylang=en

    Option 2
    Get the SBS2008 CD2 navigate and run Cdrom<drive>:\Cmpnents\Wsus\WSUSSetup.exe

    23.Select radio button for "Full Server Installation Including Administration Console"
    24.Choose the drive that you would like for the installation to be Installed.  <drive>:\WSUS
    25.Choose the drive for the Database option of <drive>:\WSUS
    26.Select Next until you get to the Database usage.  Choose the "Create new database"
    27.Select Next all the way to the End of the installation.
     
    Custom Configuration Wizard

    28.Walk thru Windows Server Update Services Configuration Wizard
    29.On the Language Page leave the Default check for English.
    30.Select "All Products" check box.
    31.On the Classifications page select the following check boxes
    .Critical Updates
    .Definition Updates
    .Security Updates
    .Service Packs
    .Update Rollups

    32.Set the Synchronization to Automatic
    33.Uncheck the "Begin initial Synchronization" checkbox.
    34.Select Finish. 

    Open WSUS Native Console

    35.Expand your Servername > Computers > All Computers
    36.Right click on "All Computers" and select "Add Computer Groups
    Here you'll create three groups with the following name:
    .Update Service Excluded Computers
    .Update Services Client Computers
    .Update Services Server Computers
     
    Open SBS Console

    37.Look at the Updates and you should have a green Check.

    If there are more inquiries on this issue, please feel free to let us know.

    Regards


    Rick Tan

    TechNet Community Support




    Donnerstag, 23. Februar 2012 03:22
    Moderator
  • You don't know how much this has helped me out - really, thank you very much. 

    Much appreciated

    Ed 

    Sonntag, 10. Juni 2012 11:41
  • This has resolved all sorts of other problems for me as the HDD was thrashing doing something for WSUS and user were complaining left and right.

    Removed it and re-installed using the instructions above (excellent guide), all OK now.

    Many thanks

    Larry

    Mittwoch, 21. Mai 2014 13:02