none
How to verify my Windows Update are coming from internal WSUS server

    Question

  • How do I verify the Windows Updates are coming from my internal WSUS server instead of from MS Online Updates? Thanks for your help.

    Kevin

    Friday, November 15, 2013 9:42 PM

Answers

  • How do I verify the Windows Updates are coming from my internal WSUS server instead of from MS Online Updates?

    Review the WindowsUpdate.log on the client system.

    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2013)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence R Garvin
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Friday, November 15, 2013 11:30 PM
    Moderator
  • Hi,

    Take a look directly at the registry key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate

    You should see the keys WUServer and WUStatusServer which should have the the locations of the specific servers.

    More details:

    http://technet.microsoft.com/en-us/library/dd939844%28WS.10%29.aspx

    In addition, we could check below group policy settings on local computer:

    Computer Configuration à Administrative Templates à Windows Components à Windows Update à Click on Specify intranet Microsoft Update Service Location

    And in Windowsupdate.log we also could tell whethe this computer use WSUS for updates.

    Regards,

    Yan Li


    Regards, Yan Li


    Monday, November 18, 2013 5:11 AM
    Moderator
  • Few steps that you can check to make sure WSUS is installed and working fine, I assume that you have configured the Group policy and defined WSUS settings correctly.

    1)  If you are using WSUS, verify that the client can connect to the WSUS server. Open a Web browser on the client and go to http://<WSUSServerName>/iuident.cab. If you are prompted to download the file, this means that the client can reach the WSUS server and it is not a connectivity issue.

    2) If you can reach the WSUS server, verify that the client is configured correctly. If you are using Group Policy settings to configure Windows Update, use the Resultant Set of Policy (RSOP) tool (Rsop.msc) to check the computer’s effective configuration. Within RSOP, browse to the Computer Configuration\Administrative Templates\Windows Components\Windows Update node and verify the configuration settings. 

    http://prajwaldesai.com/configuring-wsus-3-0-sp2-on-windows-server/

    3) On any of the client computer, open the command prompt and run the command wuauclt.exe/detectnow.

    4) Examine messages returned by the Windows Update client by viewing the client’s %SystemRoot%\WindowsUpdate.log file. This text file contains detailed output from the Windows Update client, including notifications for each attempt to find, download, and install updates. You can also use the WindowsUpdate.log file to verify that the client is attempting to access the correct update server.

    Few help links :-

    http://support.microsoft.com/kb/902093/en-us

    http://prajwaldesai.com/tag/wsus-3-0-sp2/


    Prajwal Desai, http://prajwaldesai.com http://prajwaldesai.com/support http://prajwaldesai.com/forum

    Monday, November 18, 2013 5:37 AM
  • How do I verify the Windows Updates are coming from my internal WSUS server instead of from MS Online Updates? Thanks for your help.

    Kevin

    As Lawrence said, if you take a look at your WindowsUpdate.log file after doing a wuauclt /detectnow command line, you should find this line in it :

    2013-11-04    16:46:37:923    1068    58c    Service    *************
    2013-11-04    16:46:38:160    1068    58c    Service    ** START **  Service: Service startup
    2013-11-04    16:46:38:239    1068    58c    Service    *********
    2013-11-04    16:46:39:728    1068    58c    Agent      * WU client version 7.6.7600.256
    2013-11-04    16:46:39:775    1068    58c    Agent      * Base directory: C:\Windows\SoftwareDistribution
    2013-11-04    16:46:39:791    1068    58c    Agent      * Access type: Named proxy
    2013-11-04    16:46:39:807    1068    58c    Agent      * Default proxy: xxx
    2013-11-04    16:46:39:807    1068    58c    Agent      * Default proxy bypass: xxx
    2013-11-04    16:46:39:823    1068    58c    Agent      * Network state: Connected
    2013-11-04    16:50:36:192    1068    58c    Report    CWERReporter::Init succeeded
    2013-11-04    16:50:36:192    1068    58c    Agent    ***********  Agent: Initializing Windows Update Agent  ***********
    2013-11-04    16:50:36:215    1068    58c    Agent    ***********  Agent: Initializing global settings cache  ***********
    2013-11-04    16:50:36:216    1068    58c    Agent      * WSUS server: http://SERVERNAME
    2013-11-04    16:50:36:216    1068    58c    Agent      * WSUS status server: http://SERVERNAME
    2013-11-04    16:50:36:216    1068    58c    Agent      * Target group: xxx
    2013-11-04    16:50:36:216    1068    58c    Agent      * Windows Update access disabled: No

    Thanks.

    TiGrOu.


    Monday, November 18, 2013 10:26 AM

All replies

  • How do I verify the Windows Updates are coming from my internal WSUS server instead of from MS Online Updates?

    Review the WindowsUpdate.log on the client system.

    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2013)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence R Garvin
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Friday, November 15, 2013 11:30 PM
    Moderator
  • Hi,

    Take a look directly at the registry key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate

    You should see the keys WUServer and WUStatusServer which should have the the locations of the specific servers.

    More details:

    http://technet.microsoft.com/en-us/library/dd939844%28WS.10%29.aspx

    In addition, we could check below group policy settings on local computer:

    Computer Configuration à Administrative Templates à Windows Components à Windows Update à Click on Specify intranet Microsoft Update Service Location

    And in Windowsupdate.log we also could tell whethe this computer use WSUS for updates.

    Regards,

    Yan Li


    Regards, Yan Li


    Monday, November 18, 2013 5:11 AM
    Moderator
  • Few steps that you can check to make sure WSUS is installed and working fine, I assume that you have configured the Group policy and defined WSUS settings correctly.

    1)  If you are using WSUS, verify that the client can connect to the WSUS server. Open a Web browser on the client and go to http://<WSUSServerName>/iuident.cab. If you are prompted to download the file, this means that the client can reach the WSUS server and it is not a connectivity issue.

    2) If you can reach the WSUS server, verify that the client is configured correctly. If you are using Group Policy settings to configure Windows Update, use the Resultant Set of Policy (RSOP) tool (Rsop.msc) to check the computer’s effective configuration. Within RSOP, browse to the Computer Configuration\Administrative Templates\Windows Components\Windows Update node and verify the configuration settings. 

    http://prajwaldesai.com/configuring-wsus-3-0-sp2-on-windows-server/

    3) On any of the client computer, open the command prompt and run the command wuauclt.exe/detectnow.

    4) Examine messages returned by the Windows Update client by viewing the client’s %SystemRoot%\WindowsUpdate.log file. This text file contains detailed output from the Windows Update client, including notifications for each attempt to find, download, and install updates. You can also use the WindowsUpdate.log file to verify that the client is attempting to access the correct update server.

    Few help links :-

    http://support.microsoft.com/kb/902093/en-us

    http://prajwaldesai.com/tag/wsus-3-0-sp2/


    Prajwal Desai, http://prajwaldesai.com http://prajwaldesai.com/support http://prajwaldesai.com/forum

    Monday, November 18, 2013 5:37 AM
  • How do I verify the Windows Updates are coming from my internal WSUS server instead of from MS Online Updates? Thanks for your help.

    Kevin

    As Lawrence said, if you take a look at your WindowsUpdate.log file after doing a wuauclt /detectnow command line, you should find this line in it :

    2013-11-04    16:46:37:923    1068    58c    Service    *************
    2013-11-04    16:46:38:160    1068    58c    Service    ** START **  Service: Service startup
    2013-11-04    16:46:38:239    1068    58c    Service    *********
    2013-11-04    16:46:39:728    1068    58c    Agent      * WU client version 7.6.7600.256
    2013-11-04    16:46:39:775    1068    58c    Agent      * Base directory: C:\Windows\SoftwareDistribution
    2013-11-04    16:46:39:791    1068    58c    Agent      * Access type: Named proxy
    2013-11-04    16:46:39:807    1068    58c    Agent      * Default proxy: xxx
    2013-11-04    16:46:39:807    1068    58c    Agent      * Default proxy bypass: xxx
    2013-11-04    16:46:39:823    1068    58c    Agent      * Network state: Connected
    2013-11-04    16:50:36:192    1068    58c    Report    CWERReporter::Init succeeded
    2013-11-04    16:50:36:192    1068    58c    Agent    ***********  Agent: Initializing Windows Update Agent  ***********
    2013-11-04    16:50:36:215    1068    58c    Agent    ***********  Agent: Initializing global settings cache  ***********
    2013-11-04    16:50:36:216    1068    58c    Agent      * WSUS server: http://SERVERNAME
    2013-11-04    16:50:36:216    1068    58c    Agent      * WSUS status server: http://SERVERNAME
    2013-11-04    16:50:36:216    1068    58c    Agent      * Target group: xxx
    2013-11-04    16:50:36:216    1068    58c    Agent      * Windows Update access disabled: No

    Thanks.

    TiGrOu.


    Monday, November 18, 2013 10:26 AM