Hot answers tagged

21

Two of my three 2012R2 machines exhibited this behavior last April. They would hang at Checking for updates... forever. I never learned exactly what caused the problem, but I did get it resolved by doing the following: Stop the Windows Update service. net stop wuauserv Delete the Windows Update cache directory C:\Windows\SoftwareDistribution. Remove-...


20

To re-install WSUS with a clean database i.e. no previous configuration: Run Windows Powershell as Administrator and use the following commands: Uninstall-WindowsFeature -Name UpdateServices,Windows-Internal-Database -Restart Post restart, delete EVERYTHING in the C:\Windows\WID\ (for Win 2012 r2) folder. Then run the following command to re-install WSUS: ...


12

A "preview of monthly rollup" patch is just what it says. A preview. Of a monthly rollup. Definition: A tested, cumulative set of new updates that are packaged together and distributed over Windows Update, WSUS, System Center Configuration Manager and Microsoft Update Catalog ahead of the release of the next Monthly Rollup for customers to proactively ...


10

Answer now found, just posting this for the benefit of anyone else who might come across this problem. It seems that uninstalling WSUS and WID Database option does not actually remove the WID database. The WID database can be removed by uninstalling the Windows Internal Database feature. You will also need to manually delete the file C:\windows\WID\Data\...


10

There are settings in the Server 2008/2012 policies that aren't accessible on your 2003 server I believe, such as "Do not connect to any Windows Update Internet locations" under the Computer settings you show above. I believe the settings you are looking for in a 2003 environment are: Disable access to Windows Update The correct policy for v6 ...


10

You can do it with PowerShell, but you need to have the WSUS administration console installed on the machine too. You can then do the following. [void][reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration") $wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer(“wsus_server”,$False) $wsus You can then ...


9

You can go to Options > Server Cleanup Wizard, in the WSUS window, and clean up unused updates and update revisions, computers not contacting the server, uneeded update files, expired updates, and superseded updates. I do this approx. once a week, sometimes a little less frequently.


9

After researching this on and off for ages, i finally came across a proper fix for this issue! The problem is applicable to clients that are pointed at a WSUS server and that is where they try to pull content for Optional Features. There is a GPO setting that instructs the machine to pull Optional Feature content from Windows Update directly, rather than ...


8

The updates are stored in a cache in C:\Windows\SoftwareDistribution. By deleting the contents of the cache I was able to remove that update. First Windows Update service needed to be stopped. I wrote a batch file to stop the service delete the cache on all servers. The process works as follows. Create .txt file with all the server name individually on ...


8

Use official instructions There is now an official blog post out: TechNet Blogs: 2016-10-18, Meghan Stewart, Recreating the SUSDB and WSUS Content folder for a Windows Server 2012 based WSUS computer (Archived here.) This is my unofficial summary of the official blog post: stop-service WSUSService, W3SVC connect with SQL Server Management Studio (SSMS). ...


8

This powershell script does exactly what your initial request was. Examine one computerGroup and find updates not approved for one or multiple other computer groups. Note You will need to run this either on a WSUS server or a machine that has the WSUS Admin tools installed. Configuration Set $targetComputerGroup to the Computer Group you want to use as a ...


8

i found this great answer here and it worked beautifully for me. Just want to share in case someone is searching: Try this at an elevated command-prompt: netsh winhttp import proxy source=ie and reboot another solution which worked for me as well was to set update mode to "Never check for updates"


8

I made the following changes in the IIS Application Pool for the WSUS Page: Queue Length: 25000 from 10000 Limit Interval (minutes): 15 from 5 "Service Unavailable" Response: TcpLevel from HttpLevel Private Memory Limit (KB): 0 from 18342456 This allowed for a longer amount of time needed for Windows 10 to connect and check for updates, Reset the ...


8

Ok, after spending 3 weeks with Microsoft's technical support department we have solved the problem. The problem is with Dual Scan trying to connect to Windows Update (online) and failing. When it fails the system just stops trying and refuses to connect to WSUS. The added problem is the server install media has a bug in it which prevents the Dual Scan ...


7

There is a third party tool called WSUS Smart Approve which is doing exactly that. However, if you just need to auto-approve everything that is needed, consider not using WSUS at all but just let the clients download everything off the web. Bandwidth is cheap anyway and you may alleviate any contention problems by using a simple HTTP caching proxy which ...


7

One can "simply" connect to the WSUS database and run queries against it: Start SQL Management Studio with elevated privileges. Connect to \\.\pipe\MSSQL$MICROSOFT##SSEE\sql\query using Windows Authentication. These tables seem to be of interest regarding your question: tbUpdate Holds information about single updates tbTargetGroup Holds information about ...


7

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\WUServer


7

Something I learned recently, courtesy of Michael Hampton, is that an update to the Windows Malicious Software Removal Tool not only applies the update but also runs the tool, which accounts for the lengthy install time for that update. The following MS article has more details: http://support.microsoft.com/en-us/kb/890830


7

Update By using the answer below I created a small tool that automagically adds the descriptions to my WSUS server. I decided to publish my tool on Github, so feel free to try and test it out. https://github.com/Physikbuddha/wsus-online-descriptions/releases/latest Original Answer I tried to solve the problem with Get-Member, as suggested by mortenya in ...


7

It's expected behavior that computers will automatically contact the public Windows Server Update Service, even when there's a specified intranet update location, unless the computer policy "Do not connect to any Windows Update Internet Locations" located at Computer Configuration\Administrative Templates\Windows Components\Windows Update is set to enabled. ...


7

Have you tried it this way? class excellent { $cool = 'Saturday' class { 'wsus_client': server_url => 'http://acme.com', auto_update_option => 'Scheduled' scheduled_install_day => $cool, scheduled_install_hour => 1, } } Or, this way class excellent ( $cool = 'Saturday' ){ class { 'wsus_client': server_url => ...


6

That update was superseded by KB2656351. Superseded updates are marked as "Not Applicable" if they were not installed before the superseding update was introduced into the environment, since that update contains this fix in addition to new ones.. When looking at the update itself, the WSUS console should tell you that it is superseded and what the ...


6

Yes, it's entirely possible, you just need to modify the registry entries outlined in this technet article


6

The Configure a Disconnected Network to Receive Updates chapter in the WSUS documentation describes the officialy supported way to use WSUS in a disconnected environment. You need to have a second WSUS installation which can download updates from Microsoft servers. First you need to synchronize the metadata on the connected WSUS server; then you must make ...


6

Windows Internal Database "Windows Internal Database (codenamed WYukon, sometimes referred to as SQL Server Embedded Edition) is a variant of SQL Server Express 2005-2012 or that is included with Windows Server 2008 (SQL 2005), Windows Server 2008 R2 (SQL 2005) and Windows Server 2012 (SQL 2012)." That Wikipedia article also says: "SQL Server Management ...


6

No offense meant, I know you were simply trying to answer your own question and post for the SF community, but I would say you are doing it wrong. You should setup your Receive connector as a proper relay, with the permissions tab set to Exchange Server not Anonymous and your Authentication Tab set to Externally Secured. Then lock the Receiver down to only ...


6

Per Wikipedia "WSUS does not require the use of Active Directory; client configuration can also be applied by local group policy or by modifying the Windows registry." This should be possible by setting up a GPO for domain B, pointing to update server on domain A. Here is a dated, but still relevant article. My understanding, and it's been awhile since I ...


6

The trick would be to run the Apache and IIS on different ports (only one service can bind to one port at a time), though there's far from any guarantee that WSUS or ePO would work properly on non-standard ports. McAfee's support was correct in recommending not running the two things on the same server, though both pieces of software do have options for ...


6

Turns out the Automatic Maintenance tasks are managed by C:\Windows\System32\MSchedExe.exe and the Scheduled Tasks under the \Microsoft\Windows\TaskScheduler folder. It then will run other tasks that are defined but don't have a specified trigger, one being the MRT_HB task under \Microsoft\Windows\RemovalTools\. Here you can see it calling MRT.exe to run ...


6

As far as I understand your question you need Get-WsusUpdate cmdlet. Full information on the cmdlet: https://technet.microsoft.com/en-us/library/hh826154(v=wps.630).aspx List of WSUS PowerShell cmdlets: https://technet.microsoft.com/en-us/library/hh826154(v=wps.630).aspx A nice blog about how to use the UpdateServices PowerShell Module to Manage WSUS: ...


Only top voted, non community-wiki answers of a minimum length are eligible