locked
Server 2012 R2 WSUS won't update computers RRS feed

  • Question

  • Hi,

    I keep having trouble with my WSUS Server. It won't update computers automatically.

    Okay first a little backstory. About a month ago me and a fellow employee set up the WSUS Server. I made a huge mistake by allowing all the updates for computers that haven't been in a group. So basically all updates for all computers. At about 11am. The GPO was set so the Updates would download but not install. Long story short, I gave a bunch of people a short work day as about 100 computers startet installing about 200 updates. I stopped the WSUS service and denied all updates.

    A week later I set up everything again. This time, I put it into waves. I got 6 waves for about 300 computers. The computers haven't been in the waves so I could set up everything properly. When everything was set properly, I put 4 PCs, which are currently not used, into the groups. All of them needed about 200 updates.

    Sidenote: I logged onto them with a test user, basically the same as a normal employee. Just so I can test if it works without being an admin. The GPO is set to update schedule set to 10 am. Install daily, internal update path and so on. The settings are exactly the same as last time except for the update schedule.

    So if I'm not mistaken, the WSUS Server should start searching for updates and installing them around 10am. Right ? No. Nothing happens. I tried several things, checked AD permissions, checked WSUS settings, checked GPO. Everything is set exactly like last time.

    Funny thing is, theres a laptop in the office. It was running and had an admin user logged in. It updated. So user permissions error I would guess. But why did it work the last time with no changes on that ?

    When I booted one of the computers this morning, as someone turned it off, and went into the Update panel, it said 119 available. Well, good, but why not installing them?

    gpresult says, that the GPO is active. Update log says, updates found. Obviously.

    Why, for heavens sake, is shit going down when set to "Download but don't install" but nothing happens when it's set to "Download and install at set time".

    I'm looking forward for any help with this.

    Best wishes,

    Chris

    Monday, November 2, 2015 2:38 PM

Answers

  • run rsop.msc on one of them machines and ensure the update configuration is set to option 4 - install and schedule restart

    ensure "restart with logged on user" or whatever that setting is called is setup so logged in users will not prevent reboots

    if the clients are windows 8/8.1/10, u should also implement the "always automatically restart at the scheduled time" option or else they will sit there for 2-3 days

    if none of these yield a solution u will have to post the tail snippet of the %windir%\windowsupdate.log file from one of the clients

    finally, these two updates are notorious for fixing most wsus issues on 2012 R2:

    https://support.microsoft.com/en-us/kb/2828185
    https://support.microsoft.com/en-us/kb/2938066

    https://support.microsoft.com/en-us/kb/3095113 <<< if u have win10 clients

    • Proposed as answer by Steven_Lee0510 Wednesday, December 9, 2015 2:46 PM
    • Marked as answer by Steven_Lee0510 Wednesday, December 9, 2015 3:37 PM
    Monday, November 2, 2015 5:34 PM

All replies

  • run rsop.msc on one of them machines and ensure the update configuration is set to option 4 - install and schedule restart

    ensure "restart with logged on user" or whatever that setting is called is setup so logged in users will not prevent reboots

    if the clients are windows 8/8.1/10, u should also implement the "always automatically restart at the scheduled time" option or else they will sit there for 2-3 days

    if none of these yield a solution u will have to post the tail snippet of the %windir%\windowsupdate.log file from one of the clients

    finally, these two updates are notorious for fixing most wsus issues on 2012 R2:

    https://support.microsoft.com/en-us/kb/2828185
    https://support.microsoft.com/en-us/kb/2938066

    https://support.microsoft.com/en-us/kb/3095113 <<< if u have win10 clients

    • Proposed as answer by Steven_Lee0510 Wednesday, December 9, 2015 2:46 PM
    • Marked as answer by Steven_Lee0510 Wednesday, December 9, 2015 3:37 PM
    Monday, November 2, 2015 5:34 PM
  • Thanks man, that seemed to be the problem.

    There was another GPO handling the WSUS properties. I'll check if it works in a few minutes, hope it does. Didn't know about that command, always checked with gpresult /R to see if the GPO's are working.

    Big thanks again!

    Chris

    Wednesday, November 4, 2015 1:22 PM