locked
SCCM 2007 R2 & WSUS - SMS WSUS Configuration Manager failed to monitor WSUS Server RRS feed

  • Question

  • SCCM 2007 R2 on Server 2008 R2

    WSUS 3.1.6001.65 on Server 2003 R2 Standard edition

    ·     port 80

    ·     SSL Port 443

    ·     Enable SSL for the WSUS server

    Trying to clean up site Component Status errors:

    SMS_WSUS_CONTROL_MANAGER errors

    ·     SMS WSUS Configuration Manager failed to monitor WSUS Server      Message ID:7003

    ·     SMS WSUS Configuration Manager failed to configure proxy settings     Message ID:7000

    Error message Looping  

     

     
    Friday, May 21, 2010 2:55 PM

Answers

All replies

  • Make sure that WSUS/SUP use the same port. Also Is the sccm computer account an admin local on WSUS Server ?

    Also note that it's recommanded to install WSUS with the custom Web site (8530 for HTTP and port 8531 for HTTPS)


    Bechir Gharbi. MCSA, MCSE M+S, MCITP Server/Enterprise Administrator, MCT, MCTS Configuration Manager/Forefront (Time Zone : GMT+1)

    Friday, May 21, 2010 3:21 PM
  • - Site is not using proxy server

    - checking WSUS server website

    Friday, May 21, 2010 3:50 PM
  • SCCM R2 2007 server 

    • SCCM Version 4.00.6487.2000
    • Software Update point Component Properties
    • Active Software update pint on Remote server
    • Port 80
    • SSL  not Enabled

    WSUS console client is also set up locally on the SCCM server

    • Synchronization Status Succeeded
    • Type: non-SSL
    • Port 80
    • User role Administrator
    • version 3.2.7600.226

    Remote WSUS server is also set to port 80 with not SSL

    • Synchronization Status Succeeded
    • type:  Local/ SSL
    • Port 80
    • User role Administrator
    • version 3.1.6001.65
    • SCCM computer account is in the Admin group

     

    Friday, May 21, 2010 6:22 PM
  • First if you need using a remote WSUS server as a SUP, on your sccm server you should only install WSUS console.

    Second on the remote server, you should only install wsus without any configuration because sccm needs wsus to only download microsoft catalog.

    type:  Local/ SSL ... Is the SSL enabled into IIS on the remote WSUS Server ??

    And why don't use the wsus costum port ?


    Bechir Gharbi. MCSA, MCSE M+S, MCITP Server/Enterprise Administrator, MCT, MCTS Configuration Manager/Forefront (Time Zone : GMT+1)
    Friday, May 21, 2010 6:40 PM
  • The SCCM server in our case will just be collecting the client health and patch level.

    The remote/parent WSUS server was in place before SCCM was setup. Also the parent server is syncing with 2 child WSUS servers.

    WSUS Role in our case publishes and pushes out approved updates from a Security Admin team.

     

    Friday, May 21, 2010 7:10 PM
  • Either SCCM or WSUS to deploy patchs and not both, so if you need to deploy patchs, you should break the WSUS GPO because the configMgr client will set a local GPO on systems to point the windows update agent to the SUP. A WSUS domain based group policy will override this local GPO.

    Also SUP can only synchronize with an another active SUP or directly from MS Update, not with a parent WSUS.

     

     

     


     

    Bechir Gharbi. MCSA, MCSE M+S, MCITP Server/Enterprise Administrator, MCT, MCTS Configuration Manager/Forefront (Time Zone : GMT+1)

    Friday, May 21, 2010 7:36 PM
  • So, I would like to use WSUS to push OS based patches. Which is working great for our enterprise, and I would likr to use SCCM to deploy applications,  Operating Systems.

     Thanks for your help

    Friday, May 21, 2010 8:07 PM
  • So if you need deploying patchs with only WSUS without SCCM, you should not install SUP role.

    But I recommand SUP for many reasons http://myitforum.com/cs2/blogs/rtrent/archive/2007/10/15/wsus-3-0-versus-configmgr-sccm-2007.aspx

    Also for more info about configmgr software update http://technet.microsoft.com/en-us/library/bb633264.aspx


    Bechir Gharbi. MCSA, MCSE M+S, MCITP Server/Enterprise Administrator, MCT, MCTS Configuration Manager/Forefront (Time Zone : GMT+1)
    Friday, May 21, 2010 8:14 PM