none
WSUS Clients on non-domain network not updating

    Question

  • I've installed WSUS on a Windows 2008R2 server.  There is no domain. I've tried some scripts I've found on the INTERNET to connect a client to the WSUS server.  The client is an XP 64BIT pc.  The WSUS server is a 2008R2 server.  When I check the WSUS server I can see the client has connected.  I see the client needs 5 updates.  When I connect the client to update.microsoft.com (I did not install the updates from the MS site) I see the same 5 updates specified by the WSUS server.  On the client I never receive a notification to install the updates.  When I check the updates on the WSUS server all five updates are in an Approval state of Install with a Status of Not Installed.  Does anyone have a script to configure clients to connect to a WSUS server w/o a domain?  Also I'd like the client machines to check for updates when they boot up and immediately notify the user that updates are available and allow the user to install the updates.   The clients are VMs used for testing so they will not be running 24x7.
    Saturday, March 02, 2013 5:34 AM

All replies

  • Hi,

    examine the windowsupdate.log file on the client.
    Is it correctly reflecting connection, and detection, and reporting (against your WSUS)?


    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

    Saturday, March 02, 2013 6:30 AM
  • The WSUS server indicates that the client is connecting to the WSUS, updates are needed, and the updates are approved.  What should I be looking for the log to indicate "reflecting connection, and detection, and reporting (against your WSUS)"?

    Also I really wonder if the script I found on the Internet is correct for configuring a client to use a WSUS server via registry edits - I have no domain.  Can you point me to a script which works?

    Thanks.

    Monday, March 04, 2013 4:46 AM
  • check the windowsupdate.log file on the client.
    this article will help you understand the logfile: http://support.microsoft.com/kb/902093/en-us

    some troubleshooting information is here: http://technet.microsoft.com/en-us/library/dd939804(v=ws.10).aspx

    you don't really need a script, there are only a couple of registry keys/values needed.

    on the client, you can execute:

    net stop wuauserv
    rename c:\windows\windowsupdate.log c:\windows\windowsupdate.bak
    net start wuauserv
    wait a few minutes
    examine the new windowsupdate.log file. check settings echoed into the logfile, and for warnings/errors.

    you can post the (new) logfile back here if you would like us to look at it for you.

    this tool may also be useful: http://thwack.solarwinds.com/community/solarwinds-community/product-blog/blog/2012/06/14/free-solarwinds-diagnostic-tool-for-the-wsus-agent-now-available-for-download


    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)


    • Edited by DonPick Monday, March 04, 2013 11:32 AM
    Monday, March 04, 2013 11:30 AM
  • I tried this and a new c:\windows\windowsupdate.log was created after running this:

    net stop wuauserv

    ren c:\windows\windowsupdate.log windowsupdate.bak
    net start wuauserv

    2013-03-05    23:57:51:828     776     c0    Misc    ===========  Logging initialized (build: 7.6.7600.256, tz: -0500)  ===========
    2013-03-05    23:57:51:828     776     c0    Misc      = Process: C:\WINDOWS\System32\svchost.exe
    2013-03-05    23:57:51:828     776     c0    Misc      = Module: C:\WINDOWS\system32\wuaueng.dll
    2013-03-05    23:57:51:828     776     c0    Service    *************
    2013-03-05    23:57:51:828     776     c0    Service    ** START **  Service: Service startup
    2013-03-05    23:57:51:828     776     c0    Service    *********
    2013-03-05    23:57:51:828     776     c0    Agent      * WU client version 7.6.7600.256
    2013-03-05    23:57:51:828     776     c0    Agent      * Base directory: C:\WINDOWS\SoftwareDistribution
    2013-03-05    23:57:51:828     776     c0    Agent      * Access type: No proxy
    2013-03-05    23:57:51:828     776     c0    Agent      * Network state: Connected
    2013-03-05    23:58:36:969     776     c0    Agent    ***********  Agent: Initializing Windows Update Agent  ***********
    2013-03-05    23:58:36:969     776     c0    Agent    ***********  Agent: Initializing global settings cache  ***********
    2013-03-05    23:58:36:969     776     c0    Agent      * WSUS server: http://10.10.10.10:80
    2013-03-05    23:58:36:969     776     c0    Agent      * WSUS status server: http://10.10.10.10:80
    2013-03-05    23:58:36:969     776     c0    Agent      * Target group: (Unassigned Computers)
    2013-03-05    23:58:36:969     776     c0    Agent      * Windows Update access disabled: No
    2013-03-05    23:58:36:969     776     c0    DnldMgr    Download manager restoring 0 downloads
    2013-03-05    23:58:36:969     776     c0    AU    ###########  AU: Initializing Automatic Updates  ###########
    2013-03-05    23:58:36:969     776     c0    AU    AU setting next sqm report timeout to 2013-03-06 04:58:36
    2013-03-05    23:58:36:969     776     c0    AU      # WSUS server: http://10.10.10.10:80
    2013-03-05    23:58:36:969     776     c0    AU      # Detection frequency: 22
    2013-03-05    23:58:36:969     776     c0    AU      # Approval type: Scheduled (Policy)
    2013-03-05    23:58:36:969     776     c0    AU      # Scheduled install day/time: Every day at 16:00
    2013-03-05    23:58:36:969     776     c0    AU      # Auto-install minor updates: Yes (Policy)
    2013-03-05    23:58:36:969     776     c0    AU    Initializing featured updates
    2013-03-05    23:58:36:969     776     c0    AU    Found 0 cached featured updates
    2013-03-05    23:58:37:031     776     c0    Report    ***********  Report: Initializing static reporting data  ***********
    2013-03-05    23:58:37:031     776     c0    Report      * OS Version = 5.2.3790.2.0.65792
    2013-03-05    23:58:37:047     776     c0    Report      * Computer Brand = innotek GmbH
    2013-03-05    23:58:37:047     776     c0    Report      * Computer Model = VirtualBox
    2013-03-05    23:58:37:047     776     c0    Report      * Bios Revision = VirtualBox
    2013-03-05    23:58:37:047     776     c0    Report      * Bios Name = Default System BIOS
    2013-03-05    23:58:37:047     776     c0    Report      * Bios Release Date = 2006-12-01T00:00:00
    2013-03-05    23:58:37:047     776     c0    Report      * Locale ID = 1033
    2013-03-05    23:58:37:047     776     c0    AU    AU finished delayed initialization
    2013-03-05    23:58:37:047     776     c0    AU    #############
    2013-03-05    23:58:37:047     776     c0    AU    ## START ##  AU: Search for updates
    2013-03-05    23:58:37:047     776     c0    AU    #########
    2013-03-05    23:58:37:047     776     c0    AU    <<## SUBMITTED ## AU: Search for updates [CallId = {AC7DC283-0683-4046-B227-9347FFBD92B1}]
    2013-03-05    23:58:37:109     776    7c4    Agent    *************
    2013-03-05    23:58:37:109     776    7c4    Agent    ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2013-03-05    23:58:37:109     776    7c4    Agent    *********
    2013-03-05    23:58:37:109     776    7c4    Agent      * Online = No; Ignore download priority = No
    2013-03-05    23:58:37:109     776    7c4    Agent      * Criteria = "IsHidden=0 and IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and IsAssigned=1 or IsHidden=0 and IsInstalled=1 and DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and IsAssigned=1 and RebootRequired=1"
    2013-03-05    23:58:37:109     776    7c4    Agent      * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2013-03-05    23:58:37:109     776    7c4    Agent      * Search Scope = {Machine}
    2013-03-05    23:58:37:890     776    7c4    EEHndlr    WARNING: Failed to populate ServiceStartup entries in Cache: error 0x80070002

    2013-03-05    23:58:38:140     776    7c4    EEHndlr    WARNING: Failed to populate ServiceStartup entries in Cache: error 0x80070002

    2013-03-05    23:58:38:265     776    7c4    Agent      * Found 0 updates and 62 categories in search; evaluated appl. rules of 195 out of 1428 deployed entities
    2013-03-05    23:58:38:265     776    7c4    Agent    *********
    2013-03-05    23:58:38:265     776    7c4    Agent    **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2013-03-05    23:58:38:265     776    7c4    Agent    *************
    2013-03-05    23:58:38:265     776    3e8    AU    >>##  RESUMED  ## AU: Search for updates [CallId = {AC7DC283-0683-4046-B227-9347FFBD92B1}]
    2013-03-05    23:58:38:265     776    3e8    AU      # 0 updates detected
    2013-03-05    23:58:38:265     776    3e8    AU    #########
    2013-03-05    23:58:38:265     776    3e8    AU    ##  END  ##  AU: Search for updates [CallId = {AC7DC283-0683-4046-B227-9347FFBD92B1}]
    2013-03-05    23:58:38:265     776    3e8    AU    #############
    2013-03-05    23:58:38:265     776    3e8    AU    Featured notifications is disabled.
    2013-03-05    23:58:42:047     776    7c4    Report    REPORT EVENT: {EEF79FAD-F3B3-4AF8-95CA-9BD14213A49B}    2013-03-05 23:58:36:969-0500    1    202    102    {00000000-0000-0000-0000-000000000000}    0    0    AutomaticUpdates    Success    Content Install    Reboot completed.
    2013-03-06    00:01:37:078     776    7c4    Report    Uploading 1 events using cached cookie, reporting URL = http://10.10.10.10:80/ReportingWebService/ReportingWebService.asmx
    2013-03-06    00:01:39:344     776    7c4    Report    Reporter successfully uploaded 1 events.

    Wednesday, March 06, 2013 5:13 AM
  • 2013-03-05    23:58:36:969     776     c0    Agent    ***********  Agent: Initializing global settings cache  ***********
    2013-03-05    23:58:36:969     776     c0    Agent      * WSUS server: http://10.10.10.10:80
    2013-03-05    23:58:36:969     776     c0    Agent      * WSUS status server: http://10.10.10.10:80

    It really is preferable to use hostnames for the WSUS URL. Also, you should remove the :80 port suffix, as it's not needed. It is the default.

    2013-03-05    23:58:37:890     776    7c4    EEHndlr    WARNING: Failed to populate ServiceStartup entries in Cache: error 0x80070002

    Basically it looks like this client has a corrupted WUAgent datastore -- possibly a result of the "scripts you found on the Internet" to configure your clients.

    1. Stop the Windows Update service.
    2. Rename %windir%\SoftwareDistribution to SoftwareDistribution.OLD.
    3. Restart the Windows Update service.
    4. Run wuauclt /resetauthorization /detectnow.
    5. Wait 30 minutes.
    6. Review the WSUS console and WindowsUpdate.log again.

    Might I also suggest using Local Policy to configure the WUAgent, as discussed in the WSUS Deployment Guide: Configure Automatic Updates Using Group Policy.


    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2013)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Saturday, May 25, 2013 4:16 PM