Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have windows server 2008 working as domain controller, and I have a PFSense firewall and more than 20 workstations.

I installed WSUS on my domain controller correctly and I changed the group policy.

The WSUS started getting updates from Microsoft, but there are no computers in the "unassigned computers" group.

Does anyone know why this would be?

share|improve this question

Make sure that Computer Configuration -> Policies -> Administrative Templates -> Windows Components -> Windows Update -> Specify intranet Microsoft update service location is set to point to your WSUS server.

Computers will only appear in the "unassigned computers" folder after they have checked in, which can be an entire day. You can force an individual workstation to check in by executing wuauclt /detectnow at the command prompt or run dialog box.

share|improve this answer

Couple/few things to consider: first, did you enable access to WSUS by modifying the Windows 2008 firewall policy? Makes sure BITS is set to automatic on the WSUS clients. Might consider restarting automatic updates client(s) to apply the policy change(s). Lastly, sometimes it takes a couple wuauclt.exe /detectnow to get clients to show up on server.

share|improve this answer

Take a look at the windowsupdate.log file in the root of the Windows folder to see if its giving any hints as to what is happening on the client end of things.

share|improve this answer
thanks it working now – hossam alkhalili Nov 4 '10 at 14:05

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.