locked
Can't complete install WSUS Win 2012 R2 pre-req patches can't be installed RRS feed

  • Question

  • Hello,

    I've been running Win 2008 R2 for many years with WSUS 3.0 SP2 and it's served me well. I'm now being forced to upgrade some of my PCs to Windows 10, and therefore at least Win Server 2012 R2. (Win Server 2016 is not compatible with my production server and test server hardware).

    I've done several clean installs trying to resolve this issue. I Install Win 2012 R2 standard with GUI. I install IIS, Desktop Experience (and any other pre-req features) and then do update. Got around 240 patches. These include pre-reqs like KB2919355 etc.

    To support Windows 10 what I've read is that I need to install two other patches.

    KB3095113 and KB3159706. The first I have downloaded. The second appears to only be available via windows update.

    Attempting to install KB3095113 tells me the patch is not applicable to my system. All pre-reqs are installed. I'm using the x64 version, it is definitely not installed already and I'm definitely using Win 2012 R2.

    Since this patch is required before I do my first sync I can't use WSUS at all until this is resolved.

    When I Check for updates online even though the WSUS role is installed, and the post install stuff is done, Windows update says my OS is up to date and there are no patches. So I can't get hold of KB3159706.

    So... Dead in the water.

    Can someone please kindly point me in the right direction.

    I've done a couple more fresh installs and the same things happens every time. I cannot install 3095113 or get hold of 3159706.

    thank you.


    • Edited by TanyaC0205 Wednesday, August 9, 2017 7:01 AM
    Tuesday, August 8, 2017 12:35 AM

All replies

  • Please re-send updates required for my computer.  I was deleting cookies and freeing up disk space.  I did not realize I had new updates.  They are usually automatic.  I'm sorry I missed them.  Thank You.  Colleen Shirts.

    Tuesday, August 8, 2017 12:42 AM
  • Hi Sir,

    >>Attempting to install KB3095113 tells me the patch is not applicable to my system. All pre-reqs are installed. I'm using the x64 version, it is definitely not installed already and I'm definitely using Win 2012 R2.

    If you installed july or august cumulative update , you don't need to install the old one .

     

    Best Regards,

    Elton


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, August 10, 2017 9:47 AM
  • If you installed july or august cumulative update , you don't need to install the old one .


    OK, so it's safe to turn on the Upgrades Classification if those two superseding patches are installed?

    thanks

    Tanya

    Friday, August 11, 2017 3:00 AM
  • Hi ,

    Yes .

    Best Regards,

    Elton


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, September 15, 2017 8:31 AM
  • Also, if you're wondering after doing so if your database is dirty or clean (relating to the decryption keys within the WSUS database to decrypt the upgrade files), you can always use my script to check. If it's clean, it will report it as such, but if it's dirty, it will automatically fix it for you.

    Have a peek at my Adamj Clean-WSUS script. It is the last WSUS Script you will ever need!

    http://community.spiceworks.com/scripts/show/2998-adamj-clean-wsus

    What it does:

    1. Add WSUS Index Optimization to the database to increase the speed of many database operations in WSUS by approximately 1000-1500 times faster.
    2. Remove all Drivers from the WSUS Database (Default; Optional).
    3. Shrink your WSUSContent folder's size by declining multiple types of updates including by default any superseded updates, preview updates, expired updates, Itanium updates, and beta updates. Optional extras: Language Packs, IE7, IE8, IE9, IE10, Embedded, NonEnglishUpdates, ComputerUpdates32bit, WinXP.
    4. Remove declined updates from the WSUS Database.
    5. Clean out all the synchronization logs that have built up over time (configurable, with the default keeping the last 14 days of logs).
    6. Compress Update Revisions.
    7. Remove Obsolete Updates.
    8. Computer Object Cleanup (configurable, with the default of deleting computer objects that have not synced within 30 days).
    9. Application Pool Memory Configuration to display the current private memory limit and easily set it to any configurable amount including 0 for unlimited. This is a manual execution only.
    10. Checks to see if you have a dirty database, and if you do, fixes it. This is primarily for Server 2012 WSUS, and is a manual execution only.
    11. Run the Recommended SQL database Maintenance script on the actual SQL database.
    12. Run the Server Cleanup Wizard.

    It will email the report out to you or save it to a file, or both.

    Although the script is lengthy, it has been made to be super easy to setup and use so don't over think it. There are some prerequisites and instructions at the top of the script. After installing the prerequisites and configuring the variables for your environment (email settings only if you are accepting all the defaults), simply run:

    .\Clean-WSUS.ps1 -FirstRun

    If you wish to view or increase the Application Pool Memory Configuration, or run the Dirty Database Check, you must run it with the required switch. See Get-Help .\Clean-WSUS.ps1 -Examples

    If you're having trouble, there's also a -HelpMe option that will create a log so you can send it to me for support.


    Adam Marshall, MCSE: Security
    http://www.adamj.org

    Monday, September 18, 2017 2:43 AM