question

KaleemUllah-7565 avatar image
0 Votes"
KaleemUllah-7565 asked KaleemUllah-7565 answered

Wsus Not Showing Computer

Hi ,

I Have 3 Machines,AD1,WSUS,Clinet Win8.1.
I installed WSUS on a separate machine and created its GPO on Group Policy Objects and linked it to the domains.
Win8.1 had joined the domain already.
But i am not sure somethings.
On which machine i have to run the gpupde /force command,wuault /detectnow/reportnow.
I ran all these command on all 3 machines.But still client machine is not showing in All COmputer list is WSUS.
i think gpupdate command only run in AD ? OR on a Client too?
But still there is nothing shown in All Computer.Screenshot attached sequence wise.

131857-image.png
131890-image.png
131934-image.png [2]: /answers/storage/attachments/131890-image.png


windows-server-update-services
image.png (59.8 KiB)
image.png (187.7 KiB)
image.png (80.7 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

RitaHu-MSFT avatar image
0 Votes"
RitaHu-MSFT answered

@KaleemUllah-7565
132516-1.png

Edit the GPO:

132529-2.png

Regards,
Rita


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


1.png (50.5 KiB)
2.png (44.7 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AJTek-Adam-J-Marshall avatar image
0 Votes"
AJTek-Adam-J-Marshall answered

First and foremost: You'll want to review:
https://www.ajtek.ca/wsus/does-wuauclt-exe-detectnow-reportnow-work/

Second you'll want to review my guide - How to Setup, Manage, and Maintain WSUS. I'm starting you out at part 4 as that deals with the GPO policies, but I'd recommend reading the whole thing and the other guides on my site.

https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-4-creating-your-gpos-for-an-inheritance-setup/

For troubleshooting why a client won't connect or report

https://www.ajtek.ca/wsus/client-machines-not-reporting-to-wsus-properly/

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

RitaHu-MSFT avatar image
1 Vote"
RitaHu-MSFT answered KaleemUllah-7565 commented

@KaleemUllah-7565
Thanks for your posting on Q&A.

Please provide the below registry key value for reference first:

 HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
 HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU

Note that protect your personal information while provide the screenshots.

In addition, have you enabled the SSL in your environment? I found the below error message for you:

 0x80072F8F -2147012721 ERROR_INTERNET_SECURE_FAILURE ErrorClockWrong One or more errors were found in the Secure Sockets Layer (SSL) certificate sent by the server.

Please feel free to keep us in touch if there are any updates of the case.

Regards,
Rita


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,
Below are the attache screenshot which you asked kindly lookinto it.
Moreover this is a testing environment i did not installed ssl.but i was facing wsus installtion issue i installed 2 updates which are; KB4022720,KB4022721

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU

132334-image.png


132316-image.png



0 Votes 0 ·
image.png (87.4 KiB)
image.png (93.3 KiB)
LimitlessTechnology-2700 avatar image
0 Votes"
LimitlessTechnology-2700 answered LimitlessTechnology-2700 commented

Hello @KaleemUllah-7565,

gpupdate /force is a command that must be run in the computer where we want the changes to be effective.

Most of the times, the issue with clients not appearing in Wsus is due to a wrongly applied policy. I would recommend to run GPRESULT /H output.html and check the applied policies.

Hope this helps narrowing down the issue,,
Best regards,

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I had checked that policies on client machine 8.1 its applicable.
tthroug rpos.msc

0 Votes 0 ·

Hello back @KaleemUllah-7565

Could it be that the computers have been "cloned" meaning that the IDs of each computer will be the same and this may cause a "duplicated ID issue"?
How to check duplicate IDs: wmic csproduct get UUID (run it on each machine and see if they are the same)

Could you also enable verbose logging for WindowsUpdate.log by changing the next registry values (*please take a backup of the registry before manipulating values):
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Trace
Add a new DWORD key named Flags with a value of 7
Add a new DWORD key named Level with a value of 4
Then perform a NET STOP and NET START wuauserv

Then try to reset the registration of the client with the command: wuauclt.exe /resetauthorization /detectnow

After that you can obtain convert the ETW traces to WindowsUpdate.log with the powershell command: Get-WindowsUpdateLog .Looking at the bottom part of the report (latest records) should point to some 0x errors, also by seaching for your WSUS hostname in the file you may find some lines referring to the connection to the WSUS server.

Hope this helps,
Best regards,

0 Votes 0 ·
AJTek-Adam-J-Marshall avatar image
1 Vote"
AJTek-Adam-J-Marshall answered

Check your URL
https but on 8530
should be http on 8530 as you said you didn't install SSL (but you are pointing to https with a wrong port).

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

KaleemUllah-7565 avatar image
0 Votes"
KaleemUllah-7565 answered

hi

Thank you all of your brothers.Fixed.
That was ssl issue removed https and after that error changed to 0x80244010 and fixed error from this articles

https://docs.microsoft.com/en-us/archive/blogs/sus/wsus-clients-fail-with-warning-syncserverupdatesinternal-failed-0x80244010
Automatic Update detection frequency

This policy specifies the number of hours that Windows will wait before checking for available updates. The exact wait time is determined by using the number of hours specified minus a random value between 0 and 20 percent of that number. For example, if this policy is used to specify a 20-hour detection frequency, then all computers to which this policy is applied will check for updates anywhere between 16 and 20 hours.

If the status is set to Enabled, Automatic Updates will check for available updates at the specified interval.

If the status is set to Disabled or Not Configured, Automatic Updates will check for available updates at the default interval of 22 hours.

To set Automatic Update detection frequency

  1. In the Group Policy Object Editor, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then click Windows Update.

  2. In the details pane, click Automatic Update detection frequency, click Enabled, and type the number of hours for the detection interval.

  3. Click OK.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.