question

WolfgangBarthel-0178 avatar image
0 Votes"
WolfgangBarthel-0178 asked WolfgangBarthel-0178 answered

WSUS update server not updating clients (Server 2019)?

Hi ,
we have WSUS and different servers in our network.
Windows 2019 does not automatically connect to the WSUS server.
WSUS Server (Windows Server 2022),
This was reinstalled to rule out errors here (previously Windows Server 2016)!
Windows update log from windows server 2019
Date of last check 07.02.2022 > there was a manual search

Regards
Wolfgang

windows-serverwindows-server-update-services
server2019.jpg (51.1 KiB)
updatelog.txt (1.2 MiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AJTek-Adam-J-Marshall avatar image
0 Votes"
AJTek-Adam-J-Marshall answered

Run the client side script after deleting it from the WSUS MMC Console and see if that fixes it
https://www.ajtek.ca/wsus/client-machines-not-reporting-to-wsus-properly/
If it doesn't, continue down the page for troubleshooting.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

RitaHu-MSFT avatar image
0 Votes"
RitaHu-MSFT answered

Hello Wolfgang,

Thanks for your posting on Q&A.

This was reinstalled to rule out errors here (previously Windows Server 2016)!

Would you mind talking more about this? I want to get more information before moving on.

Please try to share the below registry values on the Windows Server 2019.

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate

Best regards,
Rita

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JuanSobrado-3258 avatar image
0 Votes"
JuanSobrado-3258 answered

Hello @WolfgangBarthel-0178

Can you confirm that WSUS URL is: https://WSUS.local.de

Have you always used port 8531?

What is the startup type of wuauserv ?

Can you share all WU configuration from: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate

Thanks,

=======================
Juan Sobrado

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

WolfgangBarthel-0178 avatar image
0 Votes"
WolfgangBarthel-0178 answered WolfgangBarthel-0178 edited

Hi ,
Thank you for your answer!
I exchanged WSUS in the log for the correct name and the domain name (anonymous).
The same settings work on the other servers (e.g. Windows 2016).

@ ajtek-adam-j-marshall
i will run the scripts and delete from WSUS

Windows PowerShell
Copyright (C) Microsoft Corporation. Alle Rechte vorbehalten.

PS C:\Windows\system32> Stop-Service -Name BITS, wuauserv -Force
PS C:\Windows\system32> Remove-ItemProperty -Name AccountDomainSid, PingID, SusClientId, SusClientIDValidation -Path HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\ -ErrorAction SilentlyContinue
PS C:\Windows\system32> Remove-Item "$env:SystemRoot\SoftwareDistribution\" -Recurse -Force -ErrorAction SilentlyContinue
PS C:\Windows\system32> Start-Service -Name BITS, wuauserv
PS C:\Windows\system32> wuauclt /resetauthorization /detectnow
PS C:\Windows\system32> (New-Object -ComObject Microsoft.Update.AutoUpdate).DetectNow()
PS C:\Windows\system32>

Regards
wolfgang

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"ElevateNonAdmins"=dword:00000000
"WUServer"="https://WSUS.local.de:8531"
"WUStatusServer"="https://WSUS.local.de:8531"
"UpdateServiceUrlAlternate"="https://WSUS.local.de:8531"
"SetProxyBehaviorForUpdateDetection"=dword:00000000
"SetActiveHours"=dword:00000001
"ActiveHoursStart"=dword:00000006
"ActiveHoursEnd"=dword:00000015
"DisableDualScan"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000004
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:00000003
"ScheduledInstallEveryWeek"=dword:00000001
"AllowMUUpdateService"=dword:00000001
"UseWUServer"=dword:00000001
"AutomaticMaintenanceEnabled"=dword:00000001
"DetectionFrequencyEnabled"=dword:00000001
"DetectionFrequency"=dword:00000014

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

RitaHu-MSFT avatar image
0 Votes"
RitaHu-MSFT answered RitaHu-MSFT edited

Hello wolfgang,

Please follow this link to check the connection between WSUS Server and the Server 2019 client.
Open the IE Browser on the Sever 2019 and connect to the site. You could download the file without errors if the connection is OK.

Best regards,
Rita


If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

WolfgangBarthel-0178 avatar image
0 Votes"
WolfgangBarthel-0178 answered RitaHu-MSFT commented

Hi Rita,

https://<WSUSSERVER:8531>/iuident.cab is not working. But with the following URL
https://<WSUSSERVER:8531>/selfupdate/wuident.cab the connection works. The file can be downloaded.

Best regards,
Wolfgang

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello Wolfgang,

Thanks for your feedback.

It is the only one server encountered this issue. Am I right?

It seems that the WSUS Server worked normally. Have you ever tried to reset the Affected Server client? If not, it is recommended to reset Windows Update components.

Best regards,
Rita


0 Votes 0 ·
WolfgangBarthel-0178 avatar image
1 Vote"
WolfgangBarthel-0178 answered

Hi Rita,
no, it affects 3 Windows 2019 servers with remote service.
1 of them has updated today.
All other servers Windows 2016 have no problem.

Reset Windows Update

Some DLL's could not be found e.g. muweb.dll.
netsh winsock reset needs a reboot, this is only possible tonight.

Regards
wolfgang
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AJTek-Adam-J-Marshall avatar image
0 Votes"
AJTek-Adam-J-Marshall answered
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

WolfgangBarthel-0178 avatar image
0 Votes"
WolfgangBarthel-0178 answered WolfgangBarthel-0178 edited

Hi,

the reg entries

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"ElevateNonAdmins"=dword:00000000
"WUServer"="https://WSUS.local.de:8531"
"WUStatusServer"="https://WSUS.local.de:8531"
"UpdateServiceUrlAlternate"="https://WSUS.local.de:8531"
"SetProxyBehaviorForUpdateDetection"=dword:00000000
"SetActiveHours"=dword:00000001
"ActiveHoursStart"=dword:00000006
"ActiveHoursEnd"=dword:00000015
"DisableDualScan"=dword:00000001


@ Rita
Even after the reboot, the server is not visible on WSUS

Regards
Wolfgang


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AJTek-Adam-J-Marshall avatar image
0 Votes"
AJTek-Adam-J-Marshall answered

Get rid of "AllowMUUpdateService"=dword:00000001

https://docs.microsoft.com/en-us/windows/deployment/update/waas-configure-wufb

That's a WUfB policy.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.