Answered by:
Wsus client not able to download update from wsus server

Question
-
None of the servers are able to get the update from the wsus. Previously the servers are able to download and install the updates. I've checked on the ports and gpo everything is fine.
The link below is the windowupdate log from one of wsus client
- Edited by sweehan Monday, March 13, 2017 3:46 PM
Monday, March 13, 2017 3:41 PM
Answers
-
Hi sweehan,
According to your windows update log, seems you use port 9530 for WSUS server, is it? Please check the WSUS URL in WSUS clients registry HKLM\SOFTWARE\Policies\Microsoft\Windows\WidnowsUpdate.
By default, WSUS 2008R2 use http port 80 and https 443, we do not need to append the port to WSUS URL by default. Do you change the port manually?
If the issue is not related with WSUS port, please check if the WSUS 2008R2 is version 3.2.7600.274, if not, please install KB2938066 to upgrade the WSUS server.
Also run Server Cleanup Wizard on the WSUS server, check if it could help.
Welcome to feedback.
Best Regards,
Anne
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.- Marked as answer by sweehan Tuesday, April 11, 2017 5:31 AM
Tuesday, March 14, 2017 7:46 AM
All replies
-
Am 13.03.2017 schrieb sweehan:
None of the servers are able to get the update from the wsus. Previously the servers are able to download and install the updates. I've checked on the ports and gpo everything is fine.
Windows Server 2016? If yes, you need a third entry for your WSUS:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
UpdateServiceUrlAlternate
http://YourWSUS:8530 Find in your GPO.Restart WUAUSERV at the Servers, is download now working?
Search for UpdateServiceUrlAlternate:
Winfried
WSUS Package Publisher: http://wsuspackagepublisher.codeplex.com/
http://technet.microsoft.com/en-us/windowsserver/bb332157.aspx
http://www.wsuswiki.com/HomeMonday, March 13, 2017 5:52 PM -
Am 13.03.2017 schrieb sweehan:
None of the servers are able to get the update from the wsus. Previously the servers are able to download and install the updates. I've checked on the ports and gpo everything is fine.
Windows Server 2016? If yes, you need a third entry for your WSUS:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
UpdateServiceUrlAlternate
http://YourWSUS:8530 Find in your GPO.Restart WUAUSERV at the Servers, is download now working?
Search for UpdateServiceUrlAlternate:
Winfried
WSUS Package Publisher: http://wsuspackagepublisher.codeplex.com/
http://technet.microsoft.com/en-us/windowsserver/bb332157.aspx
http://www.wsuswiki.com/HomeMonday, March 13, 2017 11:50 PM -
Hi sweehan,
According to your windows update log, seems you use port 9530 for WSUS server, is it? Please check the WSUS URL in WSUS clients registry HKLM\SOFTWARE\Policies\Microsoft\Windows\WidnowsUpdate.
By default, WSUS 2008R2 use http port 80 and https 443, we do not need to append the port to WSUS URL by default. Do you change the port manually?
If the issue is not related with WSUS port, please check if the WSUS 2008R2 is version 3.2.7600.274, if not, please install KB2938066 to upgrade the WSUS server.
Also run Server Cleanup Wizard on the WSUS server, check if it could help.
Welcome to feedback.
Best Regards,
Anne
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.- Marked as answer by sweehan Tuesday, April 11, 2017 5:31 AM
Tuesday, March 14, 2017 7:46 AM -
The wsus version is 3.2.7600.226. The wsus server have been patched with hotfix KB2720211. The wsus update agent version 7.6.7600.256. Yes the wsus server is 9530.
I run the Server Cleanup Wizard. Then tried to check update. The wsus client status will stuck in checking for update.
I re-register the wuaueng.dll, but seems the issue still remains. Also tried to rename the software distribution folder.
remove a server from the computer group in wsus then execute wuauclt.exe /reauthorization /detectnow command.
I run the wsusutil healthcheck. After all this troubleshooting, the issue still remains. Not sure what went wrong.
Below are latest windowupdatelog from the wsus client and the application log from wsus server.
Wednesday, March 15, 2017 3:37 PM -
Hi sweehan,
>Yes the wsus server is 9530.
Just to confirm if you customize the http port on 9530 and it worked before?
>The wsus version is 3.2.7600.226. The wsus server have been patched with hotfix KB2720211.
WSUS 3.0 (SP2): Build 3.2.7600.226
WSUS 3.0 (SP2) + KB2720211: Build 3.2.7600.251
WSUS 3.0 (SP2) + KB2734608: Build 3.2.7600.256
WSUS 3.0 (SP2) + KB2828185: Build 3.2.7600.262
WSUS 3.0 (SP2) + KB2938066: Build 3.2.7600.274Please install KB2938066 to upgrade the WSUS server to .274.
Best Regards,
Anne
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.- Edited by Anne HeMicrosoft contingent staff Thursday, March 16, 2017 9:22 AM
- Proposed as answer by Anne HeMicrosoft contingent staff Wednesday, March 22, 2017 2:32 AM
Thursday, March 16, 2017 9:22 AM -
Hi,
Just to check if you got any progress with the issue? Could the above reply be of help? Welcome to feedback.
Best Regards,
Anne
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.Wednesday, March 22, 2017 2:33 AM -
Hi,
Just to check if you got any progress with the issue? Could the above reply be of help? Welcome to feedback.
Best Regards,
Anne
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.Sorry for the late reply. Was busy with the storage migration. I figure out the previous wsus issue is with the source url set in the group policy. But the wsus was unable to install the any new wsus patches. It has error.
So I deploy a new wsus and it was working fine. All client able to download and install the updates from wsus.
- Edited by sweehan Monday, April 10, 2017 8:37 AM
- Proposed as answer by Anne HeMicrosoft contingent staff Monday, April 10, 2017 8:37 AM
Monday, April 10, 2017 8:34 AM