Windows 7 clients reporting in WSUS but not installing updates

Pergunta Windows 7 clients reporting in WSUS but not installing updates

  • segunda-feira, 14 de maio de 2012 15:42
     
     

    I am having issues with my new Windows 7 Clients not installing updates. They are being reported in WSUS that they need installed.

    Logs:

    2012-05-14    11:14:19:007     944    b7c    Misc      = Module: c:\windows\system32\wuaueng.dll
    2012-05-14    11:14:18:995     944    b7c    Service    *************
    2012-05-14    11:14:19:008     944    b7c    Service    ** START **  Service: Service startup
    2012-05-14    11:14:19:008     944    b7c    Service    *********
    2012-05-14    11:14:19:094     944    b7c    Agent      * WU client version 7.5.7601.17514
    2012-05-14    11:14:19:095     944    b7c    Agent      * Base directory: C:\Windows\SoftwareDistribution
    2012-05-14    11:14:19:095     944    b7c    Agent      * Access type: No proxy
    2012-05-14    11:14:19:096     944    b7c    Agent      * Network state: Connected
    2012-05-14    11:15:04:418     944    b7c    Report    CWERReporter::Init succeeded
    2012-05-14    11:15:04:419     944    b7c    Agent    ***********  Agent: Initializing Windows Update Agent  ***********
    2012-05-14    11:15:04:419     944    b7c    Agent    ***********  Agent: Initializing global settings cache  ***********
    2012-05-14    11:15:04:419     944    b7c    Agent      * WSUS server: http://(server)
    2012-05-14    11:15:04:419     944    b7c    Agent      * WSUS status server: http://(server)
    2012-05-14    11:15:04:419     944    b7c    Agent      * Target group: (Unassigned Computers)
    2012-05-14    11:15:04:419     944    b7c    Agent      * Windows Update access disabled: No
    2012-05-14    11:15:04:437     944    b7c    DnldMgr    Download manager restoring 0 downloads
    2012-05-14    11:15:04:438     944    b7c    AU    ###########  AU: Initializing Automatic Updates  ###########
    2012-05-14    11:15:04:438     944    b7c    AU      # WSUS server: http://(server)
    2012-05-14    11:15:04:438     944    b7c    AU      # Detection frequency: 22
    2012-05-14    11:15:04:438     944    b7c    AU      # Approval type: Scheduled (Policy)
    2012-05-14    11:15:04:438     944    b7c    AU      # Scheduled install day/time: Every day at 3:00
    2012-05-14    11:15:04:438     944    b7c    AU      # Auto-install minor updates: No (Policy)
    2012-05-14    11:15:04:438     944    b7c    AU      # Will interact with non-admins (Non-admins are elevated (User preference))
    2012-05-14    11:15:04:455     944    b7c    AU    Setting AU scheduled install time to 2012-05-15 07:00:00
    2012-05-14    11:15:04:980     944    b7c    Report    ***********  Report: Initializing static reporting data  ***********
    2012-05-14    11:15:04:980     944    b7c    Report      * OS Version = 6.1.7601.1.0.65792
    2012-05-14    11:15:04:980     944    b7c    Report      * OS Product Type = 0x00000030
    2012-05-14    11:15:04:986     944    b7c    Report      * Computer Brand = Dell Inc.
    2012-05-14    11:15:04:986     944    b7c    Report      * Computer Model = OptiPlex 990
    2012-05-14    11:15:04:988     944    b7c    Report      * Bios Revision = A10
    2012-05-14    11:15:04:988     944    b7c    Report      * Bios Name = Default System BIOS
    2012-05-14    11:15:04:988     944    b7c    Report      * Bios Release Date = 2011-11-24T00:00:00
    2012-05-14    11:15:04:988     944    b7c    Report      * Locale ID = 1033
    2012-05-14    11:15:05:013     944    b7c    AU    Successfully wrote event for AU health state:0
    2012-05-14    11:15:05:013     944    b7c    AU    Initializing featured updates
    2012-05-14    11:15:05:013     944    b7c    AU    Found 0 cached featured updates
    2012-05-14    11:15:05:013     944    b7c    AU    Successfully wrote event for AU health state:0
    2012-05-14    11:15:05:014     944    b7c    AU    Successfully wrote event for AU health state:0
    2012-05-14    11:15:05:014     944    b7c    AU    AU finished delayed initialization
    2012-05-14    11:15:05:193     944    c48    Report    Uploading 8 events using cached cookie, reporting URL = http://(server)/ReportingWebService/ReportingWebService.asmx
    2012-05-14    11:15:07:787     944    c48    Report    Reporter successfully uploaded 8 events.
    2012-05-14    11:15:10:031     944    c48    Report    CWERReporter finishing event handling. (00000000)

    **************************************************************************************

    GPO Settings:

    Custom Policy Settings/Restrict Drives
    Policy Setting Comment
    Disable USB Enabled
    Disable USB Ports Enabled
    Windows Components/Windows Updatehide
    Policy Setting Comment
    Allow Automatic Updates immediate installation Disabled
    Configure Automatic Updates Enabled
    Configure automatic updating: 4 - Auto download and schedule the install
    The following settings are only required
    and applicable if 4 is selected.
    Scheduled install day: 0 - Every day
    Scheduled install time: 03:00
    Policy Setting Comment
    No auto-restart with logged on users for scheduled automatic updates installations Disabled
    Reschedule Automatic Updates scheduled installations Enabled
    Wait after system
    startup (minutes): 60
    Policy Setting Comment
    Specify intranet Microsoft update service location Enabled
    Set the intranet update service for detecting updates: http://(server)
    Set the intranet statistics server: http://(server)
    (example: http://IntranetUpd01

    Would there be anything with the Power Settings or UAC settings in GPO that would affect these updates not being installed?  Windows XP clients are working fine.

    Please let me know if you need anything else.

Todas as Respostas

  • terça-feira, 15 de maio de 2012 02:52
    Moderador
     
     

    Show us an actual DETECTION performed by this client and we might be able to speculate on what is happening -- or not happening.

    The only thing we can tell from this information is that your Win7SP1 client might be configured to talk to a WSUS server.


    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    Microsoft MVP - Software Distribution (2005-2012)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin

  • quinta-feira, 17 de maio de 2012 20:49
     
     

    2012-05-17    02:24:19:977    3516    1164    Misc    ===========  Logging initialized (build: 7.5.7601.17514, tz: -0400)  ===========
    2012-05-17    02:24:19:977    3516    1164    Misc      = Process: c:\program files\windows defender\MpCmdRun.exe
    2012-05-17    02:24:19:977    3516    1164    Misc      = Module: C:\Windows\system32\wuapi.dll
    2012-05-17    02:24:19:976    3516    1164    COMAPI    -------------
    2012-05-17    02:24:19:977    3516    1164    COMAPI    -- START --  COMAPI: Search [ClientId = Windows Defender]
    2012-05-17    02:24:19:977    3516    1164    COMAPI    ---------
    2012-05-17    02:24:19:981    3516    1164    COMAPI    <<-- SUBMITTED -- COMAPI: Search [ClientId = Windows Defender]
    2012-05-17    02:24:19:981     968    f4c    Agent    *************
    2012-05-17    02:24:19:981     968    f4c    Agent    ** START **  Agent: Finding updates [CallerId = Windows Defender]
    2012-05-17    02:24:19:981     968    f4c    Agent    *********
    2012-05-17    02:24:19:981     968    f4c    Agent      * Online = Yes; Ignore download priority = No
    2012-05-17    02:24:19:981     968    f4c    Agent      * Criteria = "(IsInstalled = 0 and IsHidden = 0 and CategoryIDs contains '8c3fcc84-7410-4a95-8b89-a166a0190486' and CategoryIDs contains 'e0789628-ce08-4437-be74-2495b842f43b')"
    2012-05-17    02:24:19:981     968    f4c    Agent      * ServiceID = {00000000-0000-0000-0000-000000000000} Third party service
    2012-05-17    02:24:19:981     968    f4c    Agent      * Search Scope = {Machine}
    2012-05-17    02:24:20:095     968    f4c    PT    WARNING: Cached cookie has expired or new PID is available
    2012-05-17    02:24:20:095     968    f4c    PT    Initializing simple targeting cookie, clientId = 97690651-dceb-4698-b664-926431d0d9ea, target group = , DNS name = (pc name)
    2012-05-17    02:24:20:095     968    f4c    PT      Server URL = http://term/SimpleAuthWebService/SimpleAuth.asmx
    2012-05-17    02:24:22:710     968    f4c    PT    +++++++++++  PT: Starting category scan  +++++++++++
    2012-05-17    02:24:22:710     968    f4c    PT      + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://term/ClientWebService/client.asmx
    2012-05-17    02:24:22:754     968    f4c    PT    +++++++++++  PT: Synchronizing server updates  +++++++++++
    2012-05-17    02:24:22:754     968    f4c    PT      + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://term/ClientWebService/client.asmx
    2012-05-17    02:24:22:795     968    f4c    Agent      * Found 0 updates and 3 categories in search; evaluated appl. rules of 3 out of 3 deployed entities
    2012-05-17    02:24:22:799     968    f4c    Agent    *********
    2012-05-17    02:24:22:799     968    f4c    Agent    **  END  **  Agent: Finding updates [CallerId = Windows Defender]
    2012-05-17    02:24:22:799     968    f4c    Agent    *************
    2012-05-17    02:24:22:800    3516    11c8    COMAPI    >>--  RESUMED  -- COMAPI: Search [ClientId = Windows Defender]
    2012-05-17    02:24:22:800    3516    11c8    COMAPI      - Updates found = 0
    2012-05-17    02:24:22:800    3516    11c8    COMAPI    ---------
    2012-05-17    02:24:22:800    3516    11c8    COMAPI    --  END  --  COMAPI: Search [ClientId = Windows Defender]
    2012-05-17    02:24:22:800    3516    11c8    COMAPI    -------------
    2012-05-17    02:24:27:798     968    f4c    Report    REPORT EVENT: {AAA11DC8-A4D2-45A2-A709-302C5E444344}    2012-05-17 02:24:22:799-0400    1    147    101    {00000000-0000-0000-0000-000000000000}    0    0    Windows Defender    Success    Software Synchronization    Windows Update Client successfully detected 0 updates.
    2012-05-17    02:24:27:798     968    f4c    Report    CWERReporter finishing event handling. (00000000)
    2012-05-17    02:27:15:873     968    f4c    Report    Uploading 1 events using cached cookie, reporting URL = http://term/ReportingWebService/ReportingWebService.asmx
    2012-05-17    02:27:15:918     968    f4c    Report    Reporter successfully uploaded 1 events.
    2012-05-17    03:00:10:084     968    dc0    AU    Forced install timer expired for scheduled install
    2012-05-17    03:00:10:084     968    dc0    AU    UpdateDownloadProperties: 0 download(s) are still in progress.
    2012-05-17    03:00:10:085     968    dc0    AU    Setting AU scheduled install time to 2012-05-18 07:00:00
    2012-05-17    03:00:10:085     968    dc0    AU    Successfully wrote event for AU health state:0
    2012-05-17    03:00:15:086     968    170    Report    CWERReporter finishing event handling. (00000000)
    2012-05-17    08:51:56:967     968    dc0    AU    #############
    2012-05-17    08:51:56:967     968    dc0    AU    ## START ##  AU: Search for updates
    2012-05-17    08:51:56:967     968    dc0    AU    #########
    2012-05-17    08:51:56:968     968    dc0    AU    <<## SUBMITTED ## AU: Search for updates [CallId = {13D51239-3D95-400B-99CC-1DDE34119FB9}]
    2012-05-17    08:51:56:968     968    15e4    Agent    *************
    2012-05-17    08:51:56:968     968    15e4    Agent    ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2012-05-17    08:51:56:968     968    15e4    Agent    *********
    2012-05-17    08:51:56:968     968    15e4    Agent      * Online = Yes; Ignore download priority = No
    2012-05-17    08:51:56:968     968    15e4    Agent      * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
    2012-05-17    08:51:56:968     968    15e4    Agent      * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2012-05-17    08:51:56:968     968    15e4    Agent      * Search Scope = {Machine}
    2012-05-17    08:51:56:999     968    15e4    Setup    Checking for agent SelfUpdate
    2012-05-17    08:51:57:000     968    15e4    Setup    Client version: Core: 7.5.7601.17514  Aux: 7.5.7601.17514
    2012-05-17    08:51:57:000     968    15e4    Misc    Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
    2012-05-17    08:51:57:003     968    15e4    Misc     Microsoft signed: Yes
    2012-05-17    08:51:59:589     968    15e4    Misc    Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
    2012-05-17    08:51:59:592     968    15e4    Misc     Microsoft signed: Yes
    2012-05-17    08:51:59:593     968    15e4    Misc    Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
    2012-05-17    08:51:59:597     968    15e4    Misc     Microsoft signed: Yes
    2012-05-17    08:51:59:602     968    15e4    Misc    Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
    2012-05-17    08:51:59:605     968    15e4    Misc     Microsoft signed: Yes
    2012-05-17    08:51:59:620     968    15e4    Setup    Determining whether a new setup handler needs to be downloaded
    2012-05-17    08:51:59:620     968    15e4    Setup    SelfUpdate handler is not found.  It will be downloaded
    2012-05-17    08:51:59:620     968    15e4    Setup    Evaluating applicability of setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.4.7600.226"
    2012-05-17    08:52:00:154     968    15e4    Setup    Setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.4.7600.226" is not applicable
    2012-05-17    08:52:00:154     968    15e4    Setup    Evaluating applicability of setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~x86~~7.4.7600.226"
    2012-05-17    08:52:00:165     968    15e4    Setup    Setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~x86~~7.4.7600.226" is not applicable
    2012-05-17    08:52:00:165     968    15e4    Setup    Evaluating applicability of setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~x86~~7.4.7600.226"
    2012-05-17    08:52:00:182     968    15e4    Setup    Setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~x86~~7.4.7600.226" is not applicable
    2012-05-17    08:52:00:182     968    15e4    Setup    SelfUpdate check completed.  SelfUpdate is NOT required.
    2012-05-17    08:52:01:094     968    15e4    PT    +++++++++++  PT: Synchronizing server updates  +++++++++++
    2012-05-17    08:52:01:094     968    15e4    PT      + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://term/ClientWebService/client.asmx
    2012-05-17    08:52:01:160     968    15e4    PT    WARNING: Cached cookie has expired or new PID is available
    2012-05-17    08:52:01:160     968    15e4    PT    Initializing simple targeting cookie, clientId = 97690651-dceb-4698-b664-926431d0d9ea, target group = , DNS name = (pc name)
    2012-05-17    08:52:01:160     968    15e4    PT      Server URL = http://term/SimpleAuthWebService/SimpleAuth.asmx
    2012-05-17    08:52:03:853     968    15e4    PT    +++++++++++  PT: Synchronizing extended update info  +++++++++++
    2012-05-17    08:52:03:853     968    15e4    PT      + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://term/ClientWebService/client.asmx
    2012-05-17    08:52:04:001     968    15e4    Agent      * Found 0 updates and 66 categories in search; evaluated appl. rules of 1014 out of 1518 deployed entities
    2012-05-17    08:52:04:002     968    15e4    Agent    *********
    2012-05-17    08:52:04:002     968    15e4    Agent    **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2012-05-17    08:52:04:002     968    15e4    Agent    *************
    2012-05-17    08:52:04:007     968    12c4    AU    >>##  RESUMED  ## AU: Search for updates [CallId = {13D51239-3D95-400B-99CC-1DDE34119FB9}]
    2012-05-17    08:52:04:007     968    12c4    AU      # 0 updates detected
    2012-05-17    08:52:04:007     968    12c4    AU    #########
    2012-05-17    08:52:04:007     968    12c4    AU    ##  END  ##  AU: Search for updates [CallId = {13D51239-3D95-400B-99CC-1DDE34119FB9}]
    2012-05-17    08:52:04:007     968    12c4    AU    #############
    2012-05-17    08:52:04:007     968    12c4    AU    Successfully wrote event for AU health state:0
    2012-05-17    08:52:04:007     968    12c4    AU    Featured notifications is disabled.
    2012-05-17    08:52:04:007     968    12c4    AU    AU setting next detection timeout to 2012-05-18 10:04:45
    2012-05-17    08:52:04:007     968    12c4    AU    Setting AU scheduled install time to 2012-05-18 07:00:00
    2012-05-17    08:52:04:007     968    12c4    AU    Successfully wrote event for AU health state:0
    2012-05-17    08:52:04:020     968    12c4    AU    Successfully wrote event for AU health state:0
    2012-05-17    08:52:09:000     968    15e4    Report    REPORT EVENT: {2D2F089B-BE8A-4220-B2B3-655654AB974E}    2012-05-17 08:52:04:001-0400    1    147    101    {00000000-0000-0000-0000-000000000000}    0    0    AutomaticUpdates    Success    Software Synchronization    Windows Update Client successfully detected 0 updates.
    2012-05-17    08:52:09:000     968    15e4    Report    REPORT EVENT: {535B21B0-0DFC-4ADD-B03A-38975E90256D}    2012-05-17 08:52:04:001-0400    1    156    101    {00000000-0000-0000-0000-000000000000}    0    0    AutomaticUpdates    Success    Pre-Deployment Check    Reporting client status.
    2012-05-17    08:52:09:000     968    15e4    Report    CWERReporter finishing event handling. (00000000)
    2012-05-17    08:54:57:102     968    15e4    Report    Uploading 2 events using cached cookie, reporting URL = http://term/ReportingWebService/ReportingWebService.asmx
    2012-05-17    08:54:57:151     968    15e4    Report    Reporter successfully uploaded 2 events.

    *******************************************************************************

    Hopefully this is what you need.

    I had four updates in WSUS as approved for install:

    Security Update for .NET Framework 4 KB2656368

    Update for Root Certificates - Feb - April 2012

    When searching online for updates, they detected they need to be installed and were installed fine.  What all do I need to look for as to what could be causing this?

    Thank you.


    • Editado mjmummert quinta-feira, 17 de maio de 2012 20:51
    •  
  • quinta-feira, 17 de maio de 2012 22:21
     
     
    I am in the same boat.  My clients are reporting to the WSUS server and I can see the time stamp on the computer secection of WSUS saying they are reporting.  WSUS says that the client needs updates but when I have the client check for updates it says there are none pending.  When I tell the client to check though Windows Update it finds the updates.  I have used the WSUS tool and everything passes.  So I am at a loss as to why the clients are not updateing.  btw, it looks like it is all my clients so it would leave me to belive there is something wrong on the server.
  • quinta-feira, 17 de maio de 2012 22:30
     
     
    I am in the same boat.  My clients are reporting to the WSUS server and I can see the time stamp on the computer secection of WSUS saying they are reporting.  WSUS says that the client needs updates but when I have the client check for updates it says there are none pending.  When I tell the client to check though Windows Update it finds the updates.  I have used the WSUS tool and everything passes.  So I am at a loss as to why the clients are not updateing.  btw, it looks like it is all my clients so it would leave me to belive there is something wrong on the server.

    StorminPE,

    I am curious, do you have any UAC or Power Settings set in the GPO?  I am speculating these may be the cause for some reason, but not exactly certain.  I just need this fixed ASAP.

    Thank you.

  • quinta-feira, 17 de maio de 2012 23:21
     
     
    I am using UAC, and power to have the screens turn off.  I stood that server up about a year ago and before that had anouther server for several years that never had an issue.  I don't recall the last time that I messed with the UAC settings but I seem to recall it was last fall.  So as long as my memory is correct I don't think UAC changes correlate to WSUS problems.
  • quinta-feira, 17 de maio de 2012 23:26
     
     

    Do you know if there a log on the WSUS server that could give some insite to problems like these? 

  • quinta-feira, 17 de maio de 2012 23:37
     
     

    Do you know if there a log on the WSUS server that could give some insite to problems like these? 

    I'm honestly not sure.

    If anyone can help us, your help is very appreciated.

    Thank you.

  • sábado, 19 de maio de 2012 21:17
    Moderador
     
     
    2012-05-17    08:52:01:160     968    15e4    PT      Server URL = http://term/SimpleAuthWebService/SimpleAuth.asmx
    2012-05-17    08:52:01:160     968    15e4    PT    Initializing simple targeting cookie, clientId = 97690651-dceb-4698-b664-926431d0d9ea, target group = , DNS name = (pc name)
    2012-05-17    08:52:04:001     968    15e4    Agent      * Found 0 updates and 66 categories in search; evaluated appl. rules of 1014 out of 1518 deployed entities

    The client does not see your approvals, or the updates are not applicable to this system. Since they do show up using Windows Update, that leaves the case of not seeing the approvals. Typically this happens because the client is not in the correct target group, or the updates are not approved for the correct target group(s).


    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    Microsoft MVP - Software Distribution (2005-2012)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin

  • segunda-feira, 21 de maio de 2012 14:00
     
     

    2012-05-17    08:52:01:160     968    15e4    PT      Server URL = http://term/SimpleAuthWebService/SimpleAuth.asmx
    2012-05-17    08:52:01:160     968    15e4    PT    Initializing simple targeting cookie, clientId = 97690651-dceb-4698-b664-926431d0d9ea, target group = , DNS name = (pc name)
    2012-05-17    08:52:04:001     968    15e4    Agent      * Found 0 updates and 66 categories in search; evaluated appl. rules of 1014 out of 1518 deployed entities

    The client does not see your approvals, or the updates are not applicable to this system. Since they do show up using Windows Update, that leaves the case of not seeing the approvals. Typically this happens because the client is not in the correct target group, or the updates are not approved for the correct target group(s).


    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    Microsoft MVP - Software Distribution (2005-2012)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin

    Lawrence,

    Thank you for the response.  I verified they are in the correct target group, and also the updates are approved for that particular target group.  A few other Windows 7 machines in that group are receiving updates as normal.  Is there any other places I can look?  Would there be anything in the GPO other than the WSUS settings that could be affecting this?

    Thank you very much for the assistance.

  • quarta-feira, 23 de maio de 2012 17:32
    Moderador
     
     
    I verified they are in the correct target group, and also the updates are approved for that particular target group.

    Then maybe they really are not needed!?

    What update(s) are involved, and why do you think they should be needed?


    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    Microsoft MVP - Software Distribution (2005-2012)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin

  • quinta-feira, 24 de maio de 2012 12:27
     
     

    Security Update for CAPICOM (KB931906)

    Security Update for Microsoft .NET Framework 4 on XP, Server 2003, Vista, Windows 7, Server 2008 x86 (KB2656368)

    Update for Root Certificates for Windows 7 [April 2012] (KB931125)

    When I check for updates online, they all appear and download fine.  They just don't appear or download in WSUS.

    Thank you.

  • quinta-feira, 24 de maio de 2012 23:54
    Moderador
     
     
    Security Update for CAPICOM (KB931906)
    This is an ancient update. Does this Windows 7 system have SP1 installed? (I'm not even certain that this update is even applicable to Win7 systems!?)
    Security Update for Microsoft .NET Framework 4 on XP, Server 2003, Vista, Windows 7, Server 2008 x86 (KB2656368)
    Does this Win7 system have the .NET Framework v4.0 installed? Is it the client edition or the full edition?
    Update for Root Certificates for Windows 7 [April 2012] (KB931125)
    This one is unexpected. This should be applicable to ALL Windows 7 systems
    They just don't appear or download in WSUS.
    Please clarify what you mean by this statement. Do you mean that the updates are not yet downloaded to the *WSUS* server (in which case this is not a client-side issue), or that the update are downloaded to WSUS but the client system reports the update as NotApplicable?

    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    Microsoft MVP - Software Distribution (2005-2012)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin

  • terça-feira, 29 de maio de 2012 23:27
     
     

    Does this Windows 7 system have SP1 installed? (I'm not even certain that this update is even applicable to Win7 systems!?) - Yes they all do.

    Does this Win7 system have the .NET Framework v4.0 installed? Is it the client edition or the full edition? - Yes, the Client Edition

    his one is unexpected. This should be applicable to ALL Windows 7 systems -  Yes I know, that is why I'm concerned.

    Below is what is shown in WSUS. They all say install for Windows 7, however they never do.  The clients are successfully communicating with the WSUS server every 24 hours.  All of the approve statuses are set correctly, and all PCs are in the correct GPO.  The WSUS has the updates already downloaded.  I do not have any issues with our Windows XP clients at all.

    Would it have anything to do with the regular Users not having full access to the System32 folder (domain admins do), or with any other GPO settings aside from the WSUS settings?  Renaming the Administrator and Guest account shouldn't have any effects, correct?  I am kind of grasping at straws here, and really need this fixed asap.

    Your help is very appreciated.



    • Editado mjmummert quarta-feira, 30 de maio de 2012 12:01
    •  
  • sábado, 2 de junho de 2012 15:54
    Moderador
     
     

    Looks to me like the client has reported that the updates are installable, you have approved the updates for some group(s) somewhere, but the client does not see the approvals as avialable.

    What is the setting of Options | Computers on your WSUS server?

    What is the setting of Enable client-side targeting in the GPO assigned to this system?

    What group(s) are these updates approved for?

    What group(s) is this machine listed as a member of in the WSUS console?


    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    Microsoft MVP - Software Distribution (2005-2012)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin

  • segunda-feira, 4 de junho de 2012 18:36
     
     

    I'm having the exact same problem.  Has anyone had any luck with the fix?  I've checked logs, they all look fine.  Clients report, etc. but do not detect or download any updates.  On the server I can see updates downloaded and pending install for the clients, however, the clients themselves do not see them or download them.

    Thanks!

  • segunda-feira, 4 de junho de 2012 22:18
    Moderador
     
     

    I'm having the exact same problem.

    Then exactly the same unanswered questions apply to you.

    Provide us explicit details answering the questions in my previous post and we can work from there.

    I will say this -- in all the dozens and dozens of posts in this forum describing these very common symptoms .... every one of them has been traced back to a misconfiguration in the environment and/or a misunderstanding of how WSUS and the Windows Update Agent works.


    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    Microsoft MVP - Software Distribution (2005-2012)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin

  • segunda-feira, 16 de julho de 2012 12:13
     
     

    Hi.

    I'm having the exact same problem. Has anyone find a solution yet?

    All my XP clients are working fine. Its just the Windows 7 clients who have this issue of not seeing/downloading the updates aproved for them by the WSUS. There are no comunications issues with the servers. The logs are OK. The clients are in the correct WSUS group. The updates are approved correctly. The clients report to the WSUS, etc, etc, ...

    Any help will be apreciated.

    Thanks.

  • terça-feira, 24 de julho de 2012 10:40
     
     

    Hi.

    My issue with windows 7 clients, aparently is related to virtual machines, since the client that couldnt see the aproved updates was a virtual machine (for testing purposes).

    I tried in a real windwos 7 client and it worked just fine.

    Everything is ok now.