locked
WSUS Admin Console No Longer Updating After Migration To SCCM 2012 RRS feed

  • Question

  • A little back history...

    Originally we had SCCM 2007 with a remote WSUS 3.0 SP2 Server. Knowing that I was going to migrate to SCCM 2012, I decided I was going to have Config Manager Server, EndPoiint Protection, and WSUS all located on the same server this time. I then built a new Windows 2008 R2 server and installed WSUS 3.0 SP2. Told all clients to start reporting to the new WSUS server through the GPO that we always had for WSUS. All computers were checking in and WSUS was working fine on the new server. 

    I then installed SCCM 2012 on the server now hosting WSUS. I upgraded all the ConfigMgr clients and migrated all my clients from SCCM 2007 to SCCM 2012. That is when about 80-90% of my workstations stop updating in the WSUS Admin Console. 

    Somethings of interest:

    - If I run RSOP.MSC on a workstation it shows that Windows Update Service is pointing to the WSUS Server / SCCM ConfigMgr server through a Local Policy ( I removed the GPO that originally had it when I found out that SCCM automatically tells it where to look ). 

    - If I go into Control Panel on an effected workstation and click on Windows Update, it shows in "You receive updates: Managed by your system administrator"

    - If I look at "View Update History" it shows Definition updates for EndPoint Protection as the same day or a day prior even though WSUS Admin Console shows "not yet reported". So the workstation is contacting the WSUS server and updating itself. 

    - On the SCCM 2012 / WSUS server... In the SCCM 2012 Config Manager Admin Console -> Administration -> Site Configuration -> Server and Site System Roles the Software Update Point role is installed on the server. 

    - WSUS is using a separate website in IIS ( not default website ) using port 8530. RSOP.MSC shows "http://<servername>:8530" on the workstations 


    Thanks... Frank

    Thursday, July 19, 2012 1:48 PM

Answers

All replies

  • Why do you want your clients to update WSUS? Everything you need is in ConfigMgr. In fact, you should never actually go into the WSUS Admin console.

    There is an option on the SUP configuration to send reporting info to WSUS; by default, this is set to send no reporting data to WSUS.


    Jason | http://blog.configmgrftw.com | Twitter @JasonSandys


    Thursday, July 19, 2012 2:36 PM
  • Jason...

    This is the way I've always done it up until SCCM 2007. If its different now in SCCM 2012, that's fine :) But where in the ConfigMgr Console can I see what updates have been done by which machine, if any updates have failed??, etc....

    Also, Will I still use the WSUS Console to approve updates that aren't automatically approved?


    Thanks... Frank

    Thursday, July 19, 2012 3:02 PM
  • Hi,

    You shouldn't use thw WSUS console, but deploy the Software updates using the configuration manager console. There are many reports builtin for software update compliance, so I would use them:

    Search all reports "software updates" and you will see many reports.

    Regards,
    Jörgen


    -- My System Center blog ccmexec.com -- Twitter @ccmexec

    Thursday, July 19, 2012 3:10 PM
  • Thanks for your reply also Jorgen... 

    So what do I do then about approving updates for certain groups and not others? In WSUS, you created Computer groups and you would approve updates and select what computer groups you wanted those updates to apply too... I dont see this option in SCCM 2012. What am I missing?


    Thanks... Frank

    Thursday, July 19, 2012 3:34 PM
  • The software update process in ConfigMgr is a completely different beast than WSUS. First, start by completely forgetting (almost) everything you know about the WSUS process.

    Aside for the TechNet documentation (at http://technet.microsoft.com/en-us/library/gg682168.aspx) here's a good blog post to get you started: http://blogs.technet.com/b/server-cloud/archive/2012/02/20/managing-software-updates-in-configuration-manager-2012.aspx .


    Jason | http://blog.configmgrftw.com | Twitter @JasonSandys

    • Proposed as answer by Garth JonesMVP Saturday, December 29, 2012 8:46 PM
    • Marked as answer by Garth JonesMVP Saturday, January 12, 2013 4:51 PM
    Thursday, July 19, 2012 3:51 PM