locked
WSUS settings and Duplicate client ID RRS feed

  • Question

  • I set up WSUS on a Windows Server 2008 R2, a few issues I need help to clarify them:

    1) I don't see http://servername:port in  registry under HKLM\software]Microsoft\Windows\Currentversion\WindowsUpdate

    I have set up http:server1:8530 in GPO, I am using download from MS directly

    2) clients --windows 7 have duplicated client ID from image, the susclientID looks like 3c8405edcet456....somethign like that

    I am working on a powershell to remove the duplicated ID for 200 PCs

    3) some server client didn't report to WSUS admin console for past 6 months, even I removed susClientID and ClientIDvalidation and rebooted but it didn't work

    any suggestions?

    Thanks!

    Sunday, November 2, 2014 1:58 AM

Answers

  • Am 02.11.2014 schrieb Tim8990:

    1) I don't see http://servername:port in  registry under HKLM\software]Microsoft\Windows\Currentversion\WindowsUpdate

    Here you find the Key:
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate

    2) clients --windows 7 have duplicated client ID from image, the susclientID looks like 3c8405edcet456....somethign like that
    I am working on a powershell to remove the duplicated ID for 200 PCs

    I create a Batch Script for the same issue:

    If exist \\Server\Share\%COMPUTERNAME%.TXT goto ENDE
    
    REG DELETE HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /va /f
    
    WUAUCLT /ResetAuthorization /DETECTNOW
    
    set datum=%date%
    echo %datum%
    set Zeit=%time%
    echo %time%
    echo %computername% %datum% %time% > \\Server\Share\%COMPUTERNAME%.TXT
    
    :ENDE
    EXIT

    You can use it as a Computerstartupscript with Group Policys. After
    a couple days many clients will come back to wsus and report.

    3) some server client didn't report to WSUS admin console for past 6 months, even I removed susClientID and ClientIDvalidation and rebooted but it didn't work

    Look in %windir%\WindowsUpdate.log for Errormessages.


    Servus
    Winfried

    Gruppenrichtlinien
    WSUS Package Publisher
    HowTos zum WSUS Package Publisher
    NNTP-Bridge für MS-Foren

    • Proposed as answer by Steven_Lee0510 Monday, November 10, 2014 12:06 PM
    • Marked as answer by Steven_Lee0510 Wednesday, November 12, 2014 1:10 PM
    Sunday, November 2, 2014 10:40 AM
  • Am 03.11.2014 schrieb Tim8990:

    too much information in the log . I noticed** the log saying :

    Errormessages are important.

    WU client version 7.6.7600.256 but the server WSUS is 7.6.7600 226

    Puh, where you read the Build? WSUS.MSC > ?. If yes, this is not the
    correct place.

    In this posting you find more details for the Build.
    http://social.Technet.microsoft.com/Forums/en-US/winserverwsus/thread/4d733edf-6bb0-48c1-9eef-2a30e2bf892b#0665ad7f-df02-4de8-965f-8b5bd22268cf
    If your Build lower then .262, update the WSUS and run my Script
    again. Did you try my script?


    Servus
    Winfried

    Gruppenrichtlinien
    WSUS Package Publisher
    HowTos zum WSUS Package Publisher
    NNTP-Bridge für MS-Foren

    • Proposed as answer by Steven_Lee0510 Monday, November 10, 2014 12:06 PM
    • Marked as answer by Steven_Lee0510 Wednesday, November 12, 2014 1:10 PM
    Monday, November 3, 2014 9:29 PM

All replies

  • Am 02.11.2014 schrieb Tim8990:

    1) I don't see http://servername:port in  registry under HKLM\software]Microsoft\Windows\Currentversion\WindowsUpdate

    Here you find the Key:
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate

    2) clients --windows 7 have duplicated client ID from image, the susclientID looks like 3c8405edcet456....somethign like that
    I am working on a powershell to remove the duplicated ID for 200 PCs

    I create a Batch Script for the same issue:

    If exist \\Server\Share\%COMPUTERNAME%.TXT goto ENDE
    
    REG DELETE HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /va /f
    
    WUAUCLT /ResetAuthorization /DETECTNOW
    
    set datum=%date%
    echo %datum%
    set Zeit=%time%
    echo %time%
    echo %computername% %datum% %time% > \\Server\Share\%COMPUTERNAME%.TXT
    
    :ENDE
    EXIT

    You can use it as a Computerstartupscript with Group Policys. After
    a couple days many clients will come back to wsus and report.

    3) some server client didn't report to WSUS admin console for past 6 months, even I removed susClientID and ClientIDvalidation and rebooted but it didn't work

    Look in %windir%\WindowsUpdate.log for Errormessages.


    Servus
    Winfried

    Gruppenrichtlinien
    WSUS Package Publisher
    HowTos zum WSUS Package Publisher
    NNTP-Bridge für MS-Foren

    • Proposed as answer by Steven_Lee0510 Monday, November 10, 2014 12:06 PM
    • Marked as answer by Steven_Lee0510 Wednesday, November 12, 2014 1:10 PM
    Sunday, November 2, 2014 10:40 AM
  • too much information in the log . I noticed the log saying :

    WU client version 7.6.7600.256 but the server WSUS is 7.6.7600 226

    Does that matter or not?

     
    Monday, November 3, 2014 4:59 PM
  • Am 03.11.2014 schrieb Tim8990:

    too much information in the log . I noticed** the log saying :

    Errormessages are important.

    WU client version 7.6.7600.256 but the server WSUS is 7.6.7600 226

    Puh, where you read the Build? WSUS.MSC > ?. If yes, this is not the
    correct place.

    In this posting you find more details for the Build.
    http://social.Technet.microsoft.com/Forums/en-US/winserverwsus/thread/4d733edf-6bb0-48c1-9eef-2a30e2bf892b#0665ad7f-df02-4de8-965f-8b5bd22268cf
    If your Build lower then .262, update the WSUS and run my Script
    again. Did you try my script?


    Servus
    Winfried

    Gruppenrichtlinien
    WSUS Package Publisher
    HowTos zum WSUS Package Publisher
    NNTP-Bridge für MS-Foren

    • Proposed as answer by Steven_Lee0510 Monday, November 10, 2014 12:06 PM
    • Marked as answer by Steven_Lee0510 Wednesday, November 12, 2014 1:10 PM
    Monday, November 3, 2014 9:29 PM
  • I like your script but I am not allowed to put into startup in GPO since these PCs are dummy terminals and cross a very slow link --wireless link.

    Can you suggest a way to run these script remotely on mutiple PCs?

    I did have a powershell script to delete susClientID  and susClientvalidationID but they didn't show up in WSUS console after removed theseIDs from registry and rebooted PCs.

    So I want to try your script via a remote way.

    Appreciate your help and reply.

    • Proposed as answer by awrightus Friday, April 28, 2017 6:12 PM
    Monday, November 3, 2014 10:33 PM
  • Am 03.11.2014 schrieb Tim8990:

    I like your script but I am not allowed to put into startup in GPO since these PCs are dummy terminals and cross a very slow link --wireless link.

    Can you suggest a way to run these script remotely on mutiple PCs?

    Copy the Script local on the client and run the script with PSEXEC:
    http://technet.microsoft.com/de-de/sysinternals/bb897553.aspx

    I did have a powershell script to delete susClientID  and susClientvalidationID but they didn't show up in WSUS console after removed theseIDs from registry and rebooted PCs.

    OK, and now it is the right moment for have a look in
    %windir%\WindowsUpdate.log for errormessages on this clients.


    Servus
    Winfried

    Gruppenrichtlinien
    WSUS Package Publisher
    HowTos zum WSUS Package Publisher
    NNTP-Bridge für MS-Foren

    Tuesday, November 4, 2014 5:56 AM
  • Hi Tim,

    I just want to confirm what is the current situation.

    Please feel free to let us know if you need further assistance.

    Best Regards.



    Steven Lee

    TechNet Community Support

    Monday, November 10, 2014 12:07 PM