Criteria for deleting computers by Cleanup Wizard
-
Sunday, February 17, 2013 9:31 PM
Hi all,
Microsoft said that Server Cleanup "wizard will delete all client computers that have not contacted the server in thirty days or more."
But, what is a "contact" ? I've got a Windows Server 2008R2 that not show up in the Wsus Console. But the C:\Windows\WindowsUpdate.log say :
____________________________________________________________________________________________________________________
2013-02-17 19:53:18:969 820 b58 Agent * Found 65 updates and 97 categories in search; evaluated appl. rules of 685 out of 927 deployed entities
2013-02-17 19:53:19:000 820 b58 Agent *********
2013-02-17 19:53:19:000 820 b58 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
2013-02-17 19:53:19:000 820 b58 Agent *************
2013-02-17 19:53:19:000 820 b58 Report REPORT EVENT: {01BCC791-A0B4-4559-839F-6153BE0D8FA2} 2013-02-17 19:53:18:984+0100 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Software Synchronization Windows Update Client successfully detected 65 updates.
2013-02-17 19:53:19:000 820 b58 Report REPORT EVENT: {4009BAB0-C958-4FFE-B614-978A2C1D1344} 2013-02-17 19:53:18:984+0100 1 156 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Pre-Deployment Check Reporting client status.
2013-02-17 19:53:19:000 820 b58 Report CWERReporter finishing event handling. (00000000)
2013-02-17 19:53:19:000 820 b58 Report CWERReporter finishing event handling. (00000000)
2013-02-17 19:53:19:000 820 b58 Report CWERReporter finishing event handling. (00000000)
2013-02-17 19:53:19:000 820 b58 Report CWERReporter finishing event handling. (00000000)
2013-02-17 19:53:19:000 820 b58 Report CWERReporter finishing event handling. (00000000)
2013-02-17 19:53:19:000 820 b58 Report CWERReporter finishing event handling. (00000000)
2013-02-17 19:53:19:000 820 12b0 AU >>## RESUMED ## AU: Search for updates [CallId = {82FAAEAB-1143-4CBB-82D7-5E6B85084A4A}]
2013-02-17 19:53:19:000 820 12b0 AU # 65 updates detected
2013-02-17 19:53:19:000 820 12b0 AU #########
2013-02-17 19:53:19:000 820 12b0 AU ## END ## AU: Search for updates [CallId = {82FAAEAB-1143-4CBB-82D7-5E6B85084A4A}]
2013-02-17 19:53:19:000 820 12b0 AU #############
2013-02-17 19:53:19:000 820 12b0 AU Successfully wrote event for AU health state:0
2013-02-17 19:53:19:000 820 12b0 AU Featured notifications is disabled.
2013-02-17 19:53:19:000 820 12b0 AU AU setting next detection timeout to 2013-02-18 13:54:37
2013-02-17 19:53:19:000 820 12b0 AU Successfully wrote event for AU health state:0
2013-02-17 19:53:19:031 820 12b0 AU Successfully wrote event for AU health state:0
2013-02-17 19:53:19:031 820 b58 Report CWERReporter finishing event handling. (00000000)
2013-02-17 20:06:57:085 820 b58 Report Uploading 2 events using cached cookie, reporting URL = https://WsusSrv01/ReportingWebService/ReportingWebService.asmx
2013-02-17 20:06:57:085 820 b58 Report Reporter successfully uploaded 2 events.____________________________________________________________________________________________________________________
So the server report 2 events to the Wsus Server. Isn't this a contact ?
If I launch, manually, an updates search (by control panel), the server shows up few seconds after in the Wsus console.
Thanks for your suggestions.
David COURTEL
IT Technician
Wsus Third-Party Softwares Publishing : http://wsuspackagepublisher.codeplex.com- Edited by DCourtel Sunday, February 17, 2013 9:39 PM
All Replies
-
Monday, February 18, 2013 2:25 PMModerator
A contact is anytime the client talks to the WSUS server.Microsoft said that Server Cleanup "wizard will delete all client computers that have not contacted the server in thirty days or more."
But, what is a "contact" ?
I've got a Windows Server 2008R2 that not show up in the Wsus Console. But the C:\Windows\WindowsUpdate.log say :
Most commonly this behavior suggests that you have duplicated SusClientIDs between this server and one or more other servers. This is a common problem with imaged/cloned installations where the master image was not properly prepared. Please refer to KB903262 for guidance on resolving a duplicate SusClientID.2013-02-17 20:06:57:085 820 b58 Report Uploading 2 events using cached cookie, reporting URL = https://WsusSrv01/ReportingWebService/ReportingWebService.asmx
Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
SolarWinds Head Geek
Microsoft MVP - Software Distribution (2005-2013)
My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.- Marked As Answer by DCourtel Sunday, March 24, 2013 10:13 PM
-
Monday, February 18, 2013 2:51 PM
Hi Lawrence, thanks for your advice.
I have heard that SP2 has resolved this issue ?
David COURTEL
IT Technician
Wsus Third-Party Softwares Publishing : http://wsuspackagepublisher.codeplex.com
- Edited by DCourtel Monday, February 18, 2013 2:52 PM
-
Friday, March 01, 2013 7:59 PM
You are right. I have finally found several duplicate SusClientID on cloned servers (VM).
I have add a new feature to "Wsus Package Publisher" to find computers that are in AD but not in Wsus. On these "missing computers" WPP can show SusClientID, Remotely Reset SusClientID, Show Windows Update Service status and remotely start/stop/Restart it.
David COURTEL
IT Technician
Wsus Third-Party Softwares Publishing : http://wsuspackagepublisher.codeplex.com- Edited by DCourtel Friday, March 01, 2013 7:59 PM

