New WSUS Server not working with clients


Recommended Posts

Had a WSUS running on Windows 2003. It stopped working and wouldn't start.

Figured I would just put a new one up running on 2012 since we moved our two DCs to 2012 over winter break.

Everything appears fine. I check IIS and when I check for http://wsus/xxxx/wuident.cab, the file is there.

On test machines, it shows the updates being available, but it won't download them. I get a generic 08244091 (I believe, I'm not at machine now). The general consensus is that it's a network error of some kind, but I cannot figure out what is going on.

I disabled the firewall to test, and same issue. GP is set correctly with port 8530 in the URL. Machines are checking in with the WSUS server. It's showing 100 of them so far. Nothing stands out in the log file to me, but this is first time I've set one up.

Mostly Win7 64-bit clients with a few XP which will be moving to Win7, so Win7 is my focus.

I can post more info as requested, I just wasn't sure where to start. I can post log files if necessary.

If the group policy is set properly, what have you done with the updates. What have you approved? What do you have set to auto approve? Nothing? well then nothing will be done or pushed. Other than that you need eventlog data to be able to troubleshoot further. How often are you checking for updates? Manually, once a day, etc...

No internal firewall except Windows. All outbound traffic is allowed for servers. Servers automatically download nightly. I also manually downloaded updates. They show on severs.

Firewall on server is off for troubleshooting. Critical and security updates are all approved. The clients see that updates are available. They just won't download. I will post logs tonight

Keep in mind it can take a couple of days for the wsus server itself to download the actual updates. The listing of updates will be there but the updates themselves wont be. Try in 24 hours. depending on your internet connection it can take a while for the wsus server to download the updates.

I set this up about 4 days ago, so I'm assuming everything should have downloaded OK by now? We have 100Mb connection, also.

Files:

https://www.dropbox.com/sh/oroa8pe7b5ws2ns/eWV8mecYuB

I've Googled the errors, I'm just not grasping how they're all related, I guess.

Actually, looking through the log, I still see some entries for the old server. It shows the new one, also.

Any ideas on that?

wsus.wprii.local:8530 is new old

wpstaff is the old one

I saw the new server in there so didn't worry about it. Anyone know a way to remove instances of the old server from the registry? Or possibly another way to fix this?

We plan on doing school wide imaging over the summer if there isn't a fix for this, but would like to get going for any clients that we haven't transferred by then.

OK. Set a registry key using this KB: http://support.microsoft.com/kb/328010

Changed WPSTAFF to wsus.wprii.local:8530. Now it's downloading updates and installing. Wonder why that doesn't get changed by GPO when it DOES change somewhere?

I can push out new registry key with ZENworks, but wonder if I should do anything else? I can stop and restart the service and delete the SoftwareDistribution folder, but is that necessary?

Anything else I should consider?

I uploaded my new Windows Update log from the client. I'm still getting an error with 8 updates, but had 13 others that it didn't see before, and they installed and updated fine.

Hmm it all sounds rather wrong, and to be honest it sounds like a GP issue more than anything else tbh.

Check out the windows update log on two random PC's it should list any errors on there.

IT might be worth deleting the SoftwareDistrubtion on a test PC aswell then work from there

Also, it may even be worth updating the WindowsUpdateAgent as you've gone to 2012.

Thats where I'd start initially before playing about in the registry

This topic is now closed to further replies.
  • Posts

    • But the reality is it will work for people's needs, and they don't care about the technology that makes it. Clearly not everyone's needs, but that low end space where personal laptops were only used to type emails, watch content and browse websites, but they didn't want to do that on a small screen device. Heck, writing that out I can now see the connection and reason it'll do so well. Apple is about experience. If the experience is bad, they don't release it. Low end Windows laptop manufacturers up until this point have not taken that into consideration ever before, so slow laggy usage with brittle slimey plastic shells were common. I hope that the low end space at least creates better physical products that last a bit longer, and if Microsoft get their act together, they could also have a solid OS on such low end hardware that would actually make the experience work for what the hardware was intended for. The fact that the CPU is a "cellphone", sorry mobile phone processor is irrelevant. It's about the experience, and so far, that sounds quite solid.
    • Hello, Bonjour is Apple's implementation of a multicast-DNS service, which allows devices running Apple's software and/or hardware to find each other on your local network.  I believe the Windows version was last updated around 2010. If you do not need it, you can stop and disable the Bonjour service in the Services Control Manager (filename: SERVICES.MSC).  Once you have done that, the operating system will no longer attempt to load the service. Regards, Aryeh Goretsky  
    • This AMD RX 9070 16GB GPU that performs close to Nvidia 5070 is under $600 by Sayan Sen With the memory shortage that's prevalent nowadays, discounts are super-hard to get. As such we post good deals whenever they pop up. Recently, we covered a few great discounts on SSDs wherein you can get a 4TB TeamGroup NVMe PCIe Gen4 drive for just $400 thanks to a special coupon. If you want a faster product but don't need all that capacity, you can also opt for Samsung's 990 PRO 2TB that is on sale for its lowest price in over three months. Let's say though that you are on the hunt for a 1440p gaming card. In that case AMD's RX 9070 non-XT can help, and with its 16GB VRAM, you can also run AI models locally without worrying about bottlenecking (check out our recent 9070 GRE reviews for gaming and productivity to get an idea). The PowerColor Reaper variant of the RX 9070 is currently on sale for just $580 which is a very good price in the current state of affairs (purchase link under the specs table down below). The Reaper cooler on this 9070 uses a triple‑fan design with ring‑blade fans, paired with premium dual ball bearings to extend lifespan and reduce friction. "Intelligent" fan control allows the fans to remain idle at lower temperatures, only spinning up when the GPU is under load. A nickel‑plated copper base makes direct contact with both the GPU and memory modules, helping to spread heat evenly. PowerColor also applies Honeywell PTM7950 phase‑change thermal interface material (TIM), which fills microscopic gaps between the die and heatsink for more efficient thermal transfer. The fan shroud is shorter in height as the firm has made it such that it can be used in certain SFF (small form factor) cases. The technical specifications of the Reaper RX 9070 are given in the table below: Specification Value Stream Processors 3584 Units Video Memory 16GB GDDR6 Memory Speed 20.0 Gbps Memory Interface 256-bit Engine Clock Game Clock: up to 2070 MHz Boost Clock: up to 2520 MHz Bus Standard PCI Express 5.0 x16 Display Connectors 1 x HDMI 2.1b, 3 x DisplayPort 2.1a Maximum Resolution DisplayPort: 7680 × 4320 HDMI: 7680 × 4320 Board Dimensions 289mm × 111mm × 41mm 304mm × 127mm × 42mm (with bracket) Slot 2 Minimum System Power Requirement 600W Power Connectors Two 8-pin PCI Express Get the PowerColor Reaper RX 9070 at the links below (you get only a 90-day warranty on Woot): PowerColor Reaper Radeon RX 9070 16GB Graphics Card (RX9070 16G-A): $579.99 (Sold and Shipped by Amazon US) (Was: $700) PowerColor Reaper Radeon RX 9070 16GB Graphics Card (RX9070 16G-A): $559.99 (Sold and Shipped by Woot US) Good to know This Amazon deal is U.S. specific, and not available in other regions unless specified. We only use first-party seller links (at the time of article publishing); ensure that you purchase from a first-party seller link only. Check out Today's Deals on Amazon | or our recent tech deals. Become a Prime member (for Students or SNAP) via Neowin Get Prime Access - Prime for half price (for qualifying Medicaid, EBT, SNAP) Subscribe to Prime Video, Audible Plus, Music Unlimited or Kindle Unlimited via Neowin As an Amazon Associate, we earn from qualifying purchases.
    • Are they marketed as an entry into astronomy or astrophotography? I do astrophotography. With big rigs, lots of computers, cables and headaches. I love it. And by learning this ridiculously complex hobby, I’ve learned about the objects I’m shooting. Astronomy followed from photography.
    • Microsoft confirms Recycle Bin bug across all versions of Windows by Usama Jawad A couple of days ago, we reported that the latest Patch Tuesday update has seemingly resulted in a lot of issues for many users, including OneDrive and Dropbox access problems, BitLocker recovery lockouts, and BSODs. Although Microsoft is yet to acknowledge these bugs, it has confirmed another, relatively smaller issue across all supported versions of Windows. In an update on its Windows Release Health Dashboard, Microsoft has confirmed that after installing June's Patch Tuesday update (KB5094126), you'll experience unexpected behavior when leveraging Recycle Bin. Basically, when you attempt to delete an item from the Recycle Bin, the confirm dialog will show you the internal file name of that content rather than the actual name. For example, the file may be named abc.png, but the confirm dialog will ask if you're sure that you want to permanently delete $Rxxxxx.png from the Recycle Bin. This is pretty much it for the scope of the bug itself; it just displays the wrong name in the confirm dialog. The correct name will be shown in the list view of the Recycle Bin and if you restore the file, it will return with the correct name as well. This issue affects pretty much all supported versions of Windows client and server, including: Client: Windows 11, version 26H1; Windows 11, version 25H2; Windows 11, version 24H2; Windows 11, version 23H2; Windows 10, version 22H2; Windows 10 Enterprise LTSC 2021; Windows 10 Enterprise LTSC 2019; Windows 10 Enterprise LTSB 2016 Server: Windows Server 2025; Windows Server 2022; Windows Server 2019; Windows Server 2016; Windows Server 2012 R2; Windows Server 2012 As things currently stand, Microsoft is working on a concrete solution that will be released in a "future" Windows update. It remains to be seen if the firm will wait till the next Patch Tuesday or roll out an out-of-band (OOB) fix. The good news is that commercial customers can deploy a workaround right now, but they will have to reach out to Microsoft Support for Business for additional details.
  • Recent Achievements

    • Week One Done
      Jordan Smith earned a badge
      Week One Done
    • Reacting Well
      BizSAR earned a badge
      Reacting Well
    • First Post
      AndreaB earned a badge
      First Post
    • Week One Done
      Huge Trailer earned a badge
      Week One Done
    • Week One Done
      Classifyskilleducation earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      578
    2. 2
      +Edouard
      184
    3. 3
      PsYcHoKiLLa
      75
    4. 4
      Michael Scrip
      72
    5. 5
      neufuse
      64
  • Tell a friend

    Love Neowin? Tell a friend!