Criteria for deleting computers by Cleanup Wizard

已答复 Criteria for deleting computers by Cleanup Wizard

  • Sunday, February 17, 2013 9:31 PM
     
     

    Hi all,

    Microsoft said that Server Cleanup "wizard will delete all client computers that have not contacted the server in thirty days or more."

    But, what is a "contact" ? I've got a Windows Server 2008R2 that not show up in the Wsus Console. But the C:\Windows\WindowsUpdate.log say :

    ____________________________________________________________________________________________________________________

    2013-02-17 19:53:18:969  820 b58 Agent   * Found 65 updates and 97 categories in search; evaluated appl. rules of 685 out of 927 deployed entities
    2013-02-17 19:53:19:000  820 b58 Agent *********
    2013-02-17 19:53:19:000  820 b58 Agent **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2013-02-17 19:53:19:000  820 b58 Agent *************
    2013-02-17 19:53:19:000  820 b58 Report REPORT EVENT: {01BCC791-A0B4-4559-839F-6153BE0D8FA2} 2013-02-17 19:53:18:984+0100 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Software Synchronization Windows Update Client successfully detected 65 updates.
    2013-02-17 19:53:19:000  820 b58 Report REPORT EVENT: {4009BAB0-C958-4FFE-B614-978A2C1D1344} 2013-02-17 19:53:18:984+0100 1 156 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Pre-Deployment Check Reporting client status.
    2013-02-17 19:53:19:000  820 b58 Report CWERReporter finishing event handling. (00000000)
    2013-02-17 19:53:19:000  820 b58 Report CWERReporter finishing event handling. (00000000)
    2013-02-17 19:53:19:000  820 b58 Report CWERReporter finishing event handling. (00000000)
    2013-02-17 19:53:19:000  820 b58 Report CWERReporter finishing event handling. (00000000)
    2013-02-17 19:53:19:000  820 b58 Report CWERReporter finishing event handling. (00000000)
    2013-02-17 19:53:19:000  820 b58 Report CWERReporter finishing event handling. (00000000)
    2013-02-17 19:53:19:000  820 12b0 AU >>##  RESUMED  ## AU: Search for updates [CallId = {82FAAEAB-1143-4CBB-82D7-5E6B85084A4A}]
    2013-02-17 19:53:19:000  820 12b0 AU   # 65 updates detected
    2013-02-17 19:53:19:000  820 12b0 AU #########
    2013-02-17 19:53:19:000  820 12b0 AU ##  END  ##  AU: Search for updates [CallId = {82FAAEAB-1143-4CBB-82D7-5E6B85084A4A}]
    2013-02-17 19:53:19:000  820 12b0 AU #############
    2013-02-17 19:53:19:000  820 12b0 AU Successfully wrote event for AU health state:0
    2013-02-17 19:53:19:000  820 12b0 AU Featured notifications is disabled.
    2013-02-17 19:53:19:000  820 12b0 AU AU setting next detection timeout to 2013-02-18 13:54:37
    2013-02-17 19:53:19:000  820 12b0 AU Successfully wrote event for AU health state:0
    2013-02-17 19:53:19:031  820 12b0 AU Successfully wrote event for AU health state:0
    2013-02-17 19:53:19:031  820 b58 Report CWERReporter finishing event handling. (00000000)
    2013-02-17 20:06:57:085  820 b58 Report Uploading 2 events using cached cookie, reporting URL = https://WsusSrv01/ReportingWebService/ReportingWebService.asmx
    2013-02-17 20:06:57:085  820 b58 Report Reporter successfully uploaded 2 events.

    ____________________________________________________________________________________________________________________

    So the server report 2 events to the Wsus Server. Isn't this a contact ?

    If I launch, manually, an updates search (by control panel), the server shows up few seconds after in the Wsus console.

    Thanks for your suggestions.


    David COURTEL
    IT Technician
    Wsus Third-Party Softwares Publishing : http://wsuspackagepublisher.codeplex.com


    • Edited by DCourtel Sunday, February 17, 2013 9:39 PM
    •  

All Replies

  • Monday, February 18, 2013 2:25 PM
    Moderator
     
     Answered

    Microsoft said that Server Cleanup "wizard will delete all client computers that have not contacted the server in thirty days or more."

    But, what is a "contact" ?

    A contact is anytime the client talks to the WSUS server.
    I've got a Windows Server 2008R2 that not show up in the Wsus Console. But the C:\Windows\WindowsUpdate.log say :

    2013-02-17 20:06:57:085  820 b58 Report Uploading 2 events using cached cookie, reporting URL = https://WsusSrv01/ReportingWebService/ReportingWebService.asmx

    Most commonly this behavior suggests that you have duplicated SusClientIDs between this server and one or more other servers. This is a common problem with imaged/cloned installations where the master image was not properly prepared. Please refer to KB903262 for guidance on resolving a duplicate SusClientID.

    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    SolarWinds Head Geek
    Microsoft MVP - Software Distribution (2005-2013)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    • Marked As Answer by DCourtel Sunday, March 24, 2013 10:13 PM
    •  
  • Monday, February 18, 2013 2:51 PM
     
     

    Hi Lawrence, thanks for your advice.
    I have heard that SP2 has resolved this issue ?


    David COURTEL
    IT Technician
    Wsus Third-Party Softwares Publishing : http://wsuspackagepublisher.codeplex.com


    • Edited by DCourtel Monday, February 18, 2013 2:52 PM
    •  
  • Friday, March 01, 2013 7:59 PM
     
     

    You are right. I have finally found several duplicate SusClientID on cloned servers (VM).

    I have add a new feature to "Wsus Package Publisher" to find computers that are in AD but not in Wsus. On these "missing computers" WPP can show SusClientID, Remotely Reset SusClientID, Show Windows Update Service status and remotely start/stop/Restart it.


    David COURTEL
    IT Technician
    Wsus Third-Party Softwares Publishing : http://wsuspackagepublisher.codeplex.com

    • Edited by DCourtel Friday, March 01, 2013 7:59 PM
    •