none
WSUS is not patching servers

    Question

  • Hello forum, I am posting this after going through few links on WSUS troubleshooting and not being able to fix the problem. What's happening is that my WSUS server is getting updates from Microsoft and the connectivity from client servers to WSUS is tested OK but I can't see that clients servers seeing those updates. I force client servers by running following script but still the client servers will not see updates on WSUS.

    net stop wuauserv

    REG DELETE "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v LastWaitTimeout /f

    REG DELETE "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v DetectionStartTime /f

    Reg Delete "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v NextDetectionTime /f

    net start wuauserv

    wuauclt /detectnow

    The updates have not been applied for past few months and so servers reporting up to date status is bogus. What can I do to detect and fix WSUS? To me it appears to be issue with WSUS but how can I be sure that it is not client side problem? I have already followed http://blogs.technet.com/b/sus/archive/2009/11/17/tips-for-troubleshooting-wsus-agents-that-are-not-reporting-to-the-wsus-server.aspx. Please help.

    Monday, April 21, 2014 8:40 PM

Answers

  • I will not be installing kb2720211 because of all the issues it comes with.

    You **MUST** install either KB2720211 or KB2734608. After you've installed one of those updates successfully we can continue diagnostics.

    You pointed your systems to Windows Update. They now have new Windows Update Agents. They *CANNOT* communicate with your WSUS server until you update it.

    UNTIL you patch your WSUS server with this two year old patch there's absolutely no point at all with performing any diagnostics.


    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.


    Thursday, May 01, 2014 2:36 PM
    Moderator

All replies

  • Hello,

    Have you tried that suggestion?

    If it doesn't help, please share windowsupdate.log. This will help us address the issue.

    Thank you.

    Tuesday, April 22, 2014 5:52 AM
    Moderator
  • Hi All, I will give it a try today and post the results with update logs, bear with me please.
    Tuesday, April 22, 2014 7:15 PM
  • This is log from a Windows 2008 box which was last updated on 07/2013, I can see it in WSUS console and I don't think that MSFT didn't release an update since 07/2013. I also tried http://support.microsoft.com/kb/956708 without any luck. The server looks at WSUS but is not downloading any update from it, says "windows is up to date". Here is the update log.

    http://1drv.ms/QXW7vn


    Wednesday, April 30, 2014 3:50 AM
  • Hi,

    According to the log, we can see  “EEHndlr WARNING: Failed to populate ServiceStartup entries in Cache: error 0x80070002” .

    Delete either the ServiceStartup key or just the WOW64 key should resolve the issue.

    For more information please refer to the blog:

    EEHndlr WARNING: Failed to populate ServiceStartup entries in Cache: error 0x80070002

    http://blogs.technet.com/b/emeasetup/archive/2009/03/17/eehndlr-warning-failed-to-populate-servicestartup-entries-in-cache-error-0x80070002.aspx

    Hope this helps.

    Wednesday, April 30, 2014 6:44 AM
    Moderator
  • You have several solutions about this. First check your client (one of server example) registry;

    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate

    WUserver and WUStatusServer must be: http://WSUS -example (name of your wsus server)

    If this reg key is ok your group policy work good.

    Second reason is wsus version. If you have wsus version 3.2.7600.226 you must upgrade wsus to last version 3.2.7600.262.

    Check issues if you have installed wsus self update kb2720211.

    And do you have configured automatic approvals for critycal and security updates for your group of servers if everything above is Ok?

    Wednesday, April 30, 2014 9:30 AM
  • Thanks Daniel, according to the article I checked HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Setup\ServiceStartup and found that the key is not present which means there's nothing to do, pic attached.
    • Edited by strike3test Wednesday, April 30, 2014 10:37 PM
    Wednesday, April 30, 2014 9:21 PM
  • Thanks Amko77, I have checked and found the key to be present in HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate, it is pointing to the correct WSUS server. I will not be installing kb2720211 because of all the issues it comes with, I don't want to rip apart my entire WSUS and start from scratch. Yes I have checked that critical and security updates are being automatically approved. 

    Any more ideas!!!! Thanks in advance.

    • Edited by strike3test Wednesday, April 30, 2014 10:38 PM
    Wednesday, April 30, 2014 9:24 PM
  • I will not be installing kb2720211 because of all the issues it comes with.

    You **MUST** install either KB2720211 or KB2734608. After you've installed one of those updates successfully we can continue diagnostics.

    You pointed your systems to Windows Update. They now have new Windows Update Agents. They *CANNOT* communicate with your WSUS server until you update it.

    UNTIL you patch your WSUS server with this two year old patch there's absolutely no point at all with performing any diagnostics.


    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.


    Thursday, May 01, 2014 2:36 PM
    Moderator
  • Thanks Lawrence, I will give it a shot but not before doing some research. Sorry, if I am asking a stupid question but what does the percentage means in the screenshot below and how it is calculated? 
    Friday, May 02, 2014 3:48 AM
  • what does the percentage means in the screenshot below

     

    It means that the identified percentage of all of the computers registered with that WSUS Server, have identified that update to be either already installed or not applicable to that percentage of clients.

    It's calculated by:

    (Number of computers reporting this update as Installed

    +

    Number of computers reporting this update as Not Applicable)

    /

    Number of computers registered with the WSUS server.


    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Friday, May 02, 2014 7:33 PM
    Moderator
  • Thanks for explaining that Lawrence, as far as installing KB2720211 or KB2734608 matters, well I can't do that right now as I will have to get clearance but I will reopen or repost once that is done, I am marking Lawrence' reply as answer to this post, no point keeping it open

    Lawrence: Do you have a blog or webiste where you regularly post around WSUS and WSUS management? 

    Monday, May 05, 2014 7:57 PM
  • Lawrence: Do you have a blog or webiste where you regularly post around WSUS and WSUS management? 

    This forum is probably the richest and most current source, but I also post content from time to time at PatchZone.org.

    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Tuesday, May 06, 2014 12:10 PM
    Moderator