Jump to content



Photo

  • Please log in to reply
37 replies to this topic

#1 riahc3

riahc3

    Neowin's most indecisive member

  • Tech Issues Solved: 11
  • Joined: 09-April 03
  • Location: Spain
  • OS: Windows 7
  • Phone: HTC Desire Z

Posted 09 January 2014 - 05:40

Hello,

I can't seem to be able to run Windows Update on a Windows 7 client that is joined to a Windows Server 2003 domain controller. Ive checked what I think limits Windows Update from being ran on clients but I think all settings are OK.

What should I check to make sure updates arent being blocked? BTW, this is AFAIK for all the Windows 7 clients Ive tested joined to this domain.


#2 +BudMan

BudMan

    Neowinian Senior

  • Tech Issues Solved: 96
  • Joined: 04-July 02
  • Location: Schaumburg, IL
  • OS: Win7, Vista, 2k3, 2k8, XP, Linux, FreeBSD, OSX, etc. etc.

Posted 09 January 2014 - 19:07

I would look to what your group policy settings are - this article should be a good start

http://technet.micro...2(v=ws.10).aspx
Windows Update, Automatic Updates, and Internet Communication

Normally in a corp setup machines are prevented from directly accessing windows update and the company uses SUS to maintain the updates they want to to deploy to machines. This for one reduces wan bandwidth usage because you don't have 100 machines all downloading directly from internet all their updates. You only have the 1 SUS server grabbing the updates and all the corp machines then just update over the local lan.

This also allows for control of what updates have been deployed in the environment, not all updates are needed in corp setup. Control of what updates are presented, and when allow for testing by the company before deployment, etc. Just in case some update might cause issues with applications used in the network.. Big example of this might be update to IE, where some application used by the company only works with version X, and not newer version Y of IE, etc.

Do you manage the Group Policy? I would prob just run gpresult to validate what group policy is being applied to the machine http://technet.micro...y/cc733160.aspx

#3 sc302

sc302

    Neowinian Senior

  • Tech Issues Solved: 28
  • Joined: 12-July 05
  • Location: NJ, USA

Posted 09 January 2014 - 19:07

Services? Error messages? Group policy? Sorry for being short but details.

#4 OP riahc3

riahc3

    Neowin's most indecisive member

  • Tech Issues Solved: 11
  • Joined: 09-April 03
  • Location: Spain
  • OS: Windows 7
  • Phone: HTC Desire Z

Posted 10 January 2014 - 06:29

Hello,

I would look to what your group policy settings are - this article should be a good start

http://technet.micro...2(v=ws.10).aspx
Windows Update, Automatic Updates, and Internet Communication

Im going to take a look at that and see if there something I missed maybe.


Normally in a corp setup machines are prevented from directly accessing windows update and the company uses SUS to maintain the updates they want to to deploy to machines. This for one reduces wan bandwidth usage because you don't have 100 machines all downloading directly from internet all their updates. You only have the 1 SUS server grabbing the updates and all the corp machines then just update over the local lan.

For starters I thought SUS (or WSUS) was built into to WS....I see you can download WSUS as a standalone which I will...

Also I thought that WS 2003 SBS might not have SUS but I read it has "patching system" similar to SUS. I do read that WSUS is compatible and will problably install it today.


This also allows for control of what updates have been deployed in the environment, not all updates are needed in corp setup. Control of what updates are presented, and when allow for testing by the company before deployment, etc. Just in case some update might cause issues with applications used in the network.. Big example of this might be update to IE, where some application used by the company only works with version X, and not newer version Y of IE, etc.

Understood. We dont use any webapps AFAIK but I will keep that in mind.


Do you manage the Group Policy? I would prob just run gpresult to validate what group policy is being applied to the machine http://technet.micro...y/cc733160.aspx

I dont have a full 100% grasp on managing it and I didnt initially manage it (but from what I see there are almost no rules in place on clients) 

 

Services? Error messages? Group policy? Sorry for being short but details.

Sorry about that. That was my fault. Ill give you a screenshot of what error code appears when I try to update a Windows 7 client.


Thank you to both.

#5 OP riahc3

riahc3

    Neowin's most indecisive member

  • Tech Issues Solved: 11
  • Joined: 09-April 03
  • Location: Spain
  • OS: Windows 7
  • Phone: HTC Desire Z

Posted 10 January 2014 - 08:28

Hello,

The error I get is 8024400e . I think it might be related to the domain controller....

The problem I believe is that I cannot start the WSUS database in SQL Server. I cant seem to find a logical error in the log files (just says it cant start)

I think a TV is in order (if someone doesnt mind) but havent tried ever installing TV in a Server OS.

Could someone help me?

#6 sc302

sc302

    Neowinian Senior

  • Tech Issues Solved: 28
  • Joined: 12-July 05
  • Location: NJ, USA

Posted 10 January 2014 - 11:23

You can either disable the group policy or there should be a link to look online for updates after it fails.

#7 OP riahc3

riahc3

    Neowin's most indecisive member

  • Tech Issues Solved: 11
  • Joined: 09-April 03
  • Location: Spain
  • OS: Windows 7
  • Phone: HTC Desire Z

Posted 10 January 2014 - 11:55

Hello,

 

From what Ive seen, all group policies are set to "Not configured" I enabled some of them related to Windows Update but still cannot get any updates. gpupdate on both client and server so it should work....

 

I think this is beyond my scope of knowledge sadly to get this to work.



#8 sc302

sc302

    Neowinian Senior

  • Tech Issues Solved: 28
  • Joined: 12-July 05
  • Location: NJ, USA

Posted 10 January 2014 - 11:56

Rsop.msc

Find out what policy is pushing that out and disable it.

#9 OP riahc3

riahc3

    Neowin's most indecisive member

  • Tech Issues Solved: 11
  • Joined: 09-April 03
  • Location: Spain
  • OS: Windows 7
  • Phone: HTC Desire Z

Posted 10 January 2014 - 12:00

Hello,

Rsop.msc

Find out what policy is pushing that out and disable it.

So this (rsop.msc) shows what policies have been configured/changed from default and are being pushed out?

#10 sc302

sc302

    Neowinian Senior

  • Tech Issues Solved: 28
  • Joined: 12-July 05
  • Location: NJ, USA

Posted 10 January 2014 - 12:15

Yes sir

#11 OP riahc3

riahc3

    Neowin's most indecisive member

  • Tech Issues Solved: 11
  • Joined: 09-April 03
  • Location: Spain
  • OS: Windows 7
  • Phone: HTC Desire Z

Posted 10 January 2014 - 12:20

Hello,

One of the things I see affecting Windows Update is inside a group policy having to do with Small Business Server.

Cant find it though; That command only allows me to view it, not edit it.

#12 OP riahc3

riahc3

    Neowin's most indecisive member

  • Tech Issues Solved: 11
  • Joined: 09-April 03
  • Location: Spain
  • OS: Windows 7
  • Phone: HTC Desire Z

Posted 10 January 2014 - 12:33

Hello,

I see that a "Common configuration for Small Business Server Update Services" is wrong....Problem is I cant find where that is at.

Found it and now testing....lets see if that was it.

#13 OP riahc3

riahc3

    Neowin's most indecisive member

  • Tech Issues Solved: 11
  • Joined: 09-April 03
  • Location: Spain
  • OS: Windows 7
  • Phone: HTC Desire Z

Posted 10 January 2014 - 12:41

Hello,

Yup :) That was it. It was configured there instead of in general for some reason. I set it to notify to download and install....just in case.

Hope I dont forget about this.

#14 OP riahc3

riahc3

    Neowin's most indecisive member

  • Tech Issues Solved: 11
  • Joined: 09-April 03
  • Location: Spain
  • OS: Windows 7
  • Phone: HTC Desire Z

Posted 10 January 2014 - 12:51

Hello,

I really cant mark a best answer from what was posted but thank you.

#15 sc302

sc302

    Neowinian Senior

  • Tech Issues Solved: 28
  • Joined: 12-July 05
  • Location: NJ, USA

Posted 10 January 2014 - 13:00

Now that you know what policy is effecting you, go to the server and fix it.

On the server, administrative tools, group policy management console. Set the Windows update options to not configured. If it is broken for you it is broken for the whole site.