Windows Clients not appearing in WSUS

Problem

Before you start troubleshooting clients, how long have you waited? I usually setup and configure WSUS up at the start of a job, then leave it alone for a few DAYS, before I start worrying.
Here are the steps I usually follow to get the machines listed in the WSUSmanagement console.

Solution

1. Assuming you are deploying your WSUS settings by GPO, make sure the machine in question is actually trying to apply the policy, you can do this by running rsop.msc like so:
RSOP For WSUS
Or by running gpresult /R from command line
gpresult for WSUS policy
Note: If you cannot see Computer Policy / Computer Settings, i.e. you can only see user settings, then you are probably not running the command window as ‘Administrator’ (Locate cmd.exe > right click > Run as Administrator).
2. If you are enforcing by GPO, or directly via registry edit, your next step is to check that the registry entries exist. Start > In the Search/Run box type regedit {Enter}. Navigate to:
HKEY_LOCAL_MACHINE > SOFTWARE > Policies > Microsoft > Windows > WindowsUpdate
WSUS Registry Entries
3. Start > In the Search/Run box type services.msc {enter} Locate the Windows Update service and ensure it is running.
Windows Update Service
4. Then locate the Background Intelligent Transfer Service and make sure that’s also running.
Background Intelligent Transfer Service
5. To make sure the client can see the WSUS website, open a browser window, and navigate to http://{name-of-the-wsus-server}/iuident.cab and make sure you can open/download the file.
WSUS Test the Website
6. If all the above is OK, you can try forcing a registration with the following command;
wuauclt /detectnow
Force Client to Register with WSUS
7. All update events are being logged, you can find the log at c:windowsWindowsUpdate open the file with notepad.
WindowsUpdate Log Location
8. Scroll all the way to the end, then work upwards looking for errors.
Analyze the WindowsUpdate Log
9. Sometimes if you image a machine (Or clone a VM) it keeps it’s unique update ID, if this happens then the first machine with this ID to register gets listed, and all the rest do not. To find out if this is your problem, locate and stop the Windows update service on an affected client.
Stop Windows Update

10. Open the registry Editor and navigate to:
HKEY_LOCAL_MACHINE > SOFTWARE > Microsoft > Windows > CurrentVersion > WindowsUpdate
SusClientId Delete
Locate and delete the SusClientId entry.
11. Restart the Windows Update service and run the following two commands:
wuauclt /resetauthorization /detectnow<br /> wuauclt /reportnow
Force WSUS Client Registration

Courtesy : http://www.petenetlive.com/KB/Article/0000591 

Comments

Post a Comment

Popular posts from this blog

Linux VDI with Horizon 6 & Above

Image
One of the new features provided in Horizon View 6.1.1, which I’ve mentioned in the  What’s New  article, is the support of providing Linux based virtual desktops. There are some limitations, but it is definitely a feature which is good to have in our pocket as VDI engineers. Limitations Here is the list with limitation from the official VMware documentation: Single Sign-on (SSO) is not supported. After logging in to Horizon 6 and launching the remote desktop, the user must log in to the Linux guest operating system. Automated provisioning and other features that are provided only with automated desktop pools are not supported. For example, the refresh on logoff operation is not available. Local devices cannot be used on the remote desktop. For example, USB redirection, virtual printing, location-based printing, clipboard redirection, Real-Time Audio-Video, and smart cards are not supported. HTML Access is not supported. Supported Linux versions Ubuntu 12.04 – ...
Read more

Kill Hung Task from Esxi

Image
At first you have to investigate where a hang process exists (Clicking summary tab on VM). Then: Log in to ESXi host via SSH (using e.g. putty). If the SSH service is not running on ESXi host, please enable it. To enable SSH from the vSphere Client: Select the host and click the Configuration tab. Click Security Profile in the Software panel. In the Services section, click Properties. Select SSH and click Options. Change the SSH options. Click OK. Run  ps  command. If you face problems to find the running processes related to the VM please use  grep  e.g.  ps | grep  VM_name. In the below example, I looked for VM named: SPDB1CEN-T: Kill the parent process by running the command  kill id_parent . In my case:  kill 84695 . The hang task should be canceled now.
Read more

Windows Server Update Services (WSUS) – Install and Configure (2008 R2)

Image
Problem Windows Server Update Service or  WSUS , (previously called SUS Software Update Services) was an additional download that you could use to let one or more servers in your organisation handle the updates for your Windows clients and Microsoft applications. With Server 2008  R2 , it is now included as a server ‘role’ rather than a download. It’s a great tool for centrally managing and reporting on your network’s update status, and if you do not allow your clients web access, lets you update them without punching holes in your firewall. Also it saves all your clients pulling their updates from Microsoft, and hammering your internet connection. WSUS Prerequisites Before you start, make sure the server you are going to use is fully updated, and has the  Microsoft Report Viewer Redistributable 2008  installed on it. (Report Viewer 2010 is available but  WSUS  3 needs the 2008 version at time of writing). You will also need 6 GB  (Approx) ...
Read more