Windows Server 2019 stndrd WSUS Administration

Question

question

AvishekKumar-0869 asked Mar 28, '22 AJTek-Adam-J-Marshall answered Apr 1, '22

Windows Server 2019 stndrd WSUS Administration

Windows Server 2019 Standard
Version: Product Version = 10.0.17763.1971
WSUS, IIS with WID implemented, SQL Db is not configured as role dependency

Working on WSUS administration with GP linked & enforced
-ran gpresult able to confirm GPO WSUS is listed> client targeting enabled> but computers not listed
-ran multiple commands to enforce GO computers to be listed> still does not registering
-reviewed services.msc

Reviewed WindowsUpdateLog to verify client--server communications
WSUS server:
5460 Agent WSUS server: (null)
5460 Agent WSUS status server: (null)
5460 Agent Alternate Download Server: (null)

Ran WSUS server logs:
Program Files\Update Services\WebServices
--this log section on wsus server includes:
ApiRemoting30
ClientWebService
DssAuthWebService
ReportingWebService
Root
ServerSyncWebService
SimpleAuthWebService

on the processes aforementioned getting the following:
Warning w3wp.25 SoapUtilities.CreateException ThrowException: actor = http://srvr.primary.local:8530/SimpleAuthWebService/SimpleAuth.asmx, ID=8293cca5-87db-417f-af97-bc7431190a2d, ErrorCode=InternalServerError, Message=, Client=?

Followed the C drive sections: ----C:\Windows\System32\LogFiles\HTTPERR
8530 HTTP/1.1 POST /SimpleAuthWebService/SimpleAuth.asmx - - 401885685 Connection_Dropped WsusPool
8530 HTTP/1.1 POST /ClientWebService/client.asmx - - 401885685 Connection_Dropped WsusPool
8530 HTTP/1.1 POST /SimpleAuthWebService/SimpleAuth.asmx - - 401885685 Connection_Abandoned_By_ReqQueue WsusPool
8530 HTTP/1.1 POST /ClientWebService/Client.asmx - - 401885685 Connection_Abandoned_By_ReqQueue WsusPool

8530 HTTP/1.1 GET /selfupdate/iuident.cab - 503 401885685 Disabled WsusPool
8530 HTTP/1.1 POST /reportingwebservice/reportingwebservice.asmx - 503 401885685 Disabled WsusPool
8530 HTTP/1.1 POST /ApiRemoting30/WebService.asmx - 503 401885685 Disabled WsusPool
8530 HTTP/1.1 POST /ServerSyncWebService/serversyncwebservice.asmx - 503 401885685 Disabled WsusPool
8530 HTTP/1.1 POST /ClientWebService/Client.asmx - 503 401885685 Disabled WsusPool
8530 HTTP/1.1 POST /SimpleAuthWebService/SimpleAuth.asmx - 503 401885685 Disabled WsusPool
8530 HTTP/1.1 POST /DssAuthWebService/DssAuthWebService.asmx - 503 401885685 Disabled WsusPool
8530 HTTP/1.1 GET /Content/anonymousCheckFile.txt - 503 401885685 Disabled WsusPool
---these logs were gathered directly from WSUS server

WSUS server is on its 3rd installation
WSUS sync has been completed, ran a checkpoint to prevent server corruption once configuration files have been changed
currently, all services for wsus within services.msc are running

Note: the WSUS server continuously crashes with both Error:Connection Error & Error:Database Error

event viewer logs experienced:
event ID: 1309
event ID: 12072
event id: 12052
event id: 12042
event id: 12022
event id: 12032
event id: 12012
event id: 12002
event id: 13042
event id: 7042
event id: 7053
event id: 7032

These errors have been persistent since the 1st deployment. Second, third deployment WSUS server is still crashing.
reason to believe server side issue with IIS & ASP.Net might be experiencing issues

Seeking insight on the follow:
1. Followed many technical documentation regarding event id: 7053,7042,7032, server crashes persistently
2. Followed many technical documentation regarding IIS web services: C:\Program Files\Update Services\WebServices
--throwing error: ThrowException: actor = http://srvr.primary.local:8530/SimpleAuthWebService/SimpleAuth.asmx, ID=8293cca5-87db-417f-af97-bc7431190a2d, ErrorCode=InternalServerError, Message=, Client=?
----all processes within \\Update Services\WebServices is throwing the aforementioned error

Has anyone experienced this issue with WSUS server 2019 standard in which WSUS server keeps crashing, WSUS GPO computers do not populate
GP firewall settings are disabled so port filtering should not be an issue.
\\Update Services\Logfiles\SoftwareDistribution.log
--/ApiRemoting30/WebService.asmx - - 401885685 Connection_Abandoned_By_ReqQueue WsusPool
--/ClientWebService/client.asmx - - 401885685 Connection_Abandoned_By_ReqQueue WsusPool
/ClientWebService/client.asmx - - 401885685 Connection_Dropped WsusPool
/reportingwebservice/reportingwebservice.asmx - - 401885685 Connection_Abandoned_By_ReqQueue WsusPool

Any update would be appreciated

windows-server-2019 windows-server-update-services

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2022-03-28T23:39:14.77Z

AvishekKumar-0869 answered Mar 28, '22

The following technical documentation have been followed:
1. https://docs.microsoft.com/en-us/troubleshoot/mem/configmgr/troubleshoot-issues-with-wsus-client-agents
2. https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/manage/managing-wsus-client-computers-and-wsus-computer-groups
3. https://www.serverbrain.org/update-services/clientside-targeting-issues.html
4. https://www.serverbrain.org/update-services/using-clientside-targeting.html
5. https://docs.microsoft.com/en-us/troubleshoot/mem/configmgr/troubleshoot-wsus-connection-failures
6. https://www.ajtek.ca/wsus/client-machines-not-reporting-to-wsus-properly/
7. https://social.technet.microsoft.com/Forums/en-US/468ef4ee-1698-4107-b464-a4eca2287ff8/clients-not-registering-in-wsus-console?forum=winserverwsus
8. https://social.technet.microsoft.com/wiki/contents/articles/14780.windows-troubleshooting-unable-to-connect-to-the-automatic-updates.aspx
9. https://social.technet.microsoft.com/wiki/contents/articles/14780.windows-troubleshooting-unable-to-connect-to-the-automatic-updates.aspx

Following these documentations have lead me to believe the configuration file of the following are corrupted:
C:\Program Files\Update Services\WebServices
C:\Windows\System32\LogFiles\HTTPERR
C:\Program Files\Update Services\LogFiles\softwaredistrution

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 2 · 2022-03-28T23:41:34.213Z

AJTek-Adam-J-Marshall answered Mar 28, '22 AvishekKumar-0869 commented Mar 31, '22

What products were selected? Have you performed any of the required maintenance including but not limited to running the Server Cleanup Wizard (SCW), declining superseded updates, running the SQL Indexing script, etc.?

https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-8-wsus-server-maintenance/

· 26

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AvishekKumar-0869 · Mar 29 at 12:02 AM

Hello AJ-Tek,

Your feedback is appreciated.

I have attempted to run many commands via CLI, powershell to keep the server from crashing and generating Error:Connection Error as well as Error:Database Error
When I attempt to run the process you have mentioned, the server crashes and generates the following event IDs within Event viewer
event ID: 1309
event ID: 12072
event id: 12052
event id: 12042
event id: 12022
event id: 12032
event id: 12012
event id: 12002
event id: 13042
event id: 7042
event id: 7053
event id: 7032

Im not running SQL database, just WID. If im running WID do I still need to run SQL indexing script ?
--i understand when installing role service dependency WID, SQL internal Db is also installed
When I attempt to run SCW, the server crashes. and generates the event viewer IDs; aforementioned

Im having difficulty getting WSUS server to populate computers via client side targeting.

When I review all event viewer logs and cross reference system processes linked to the event IDs, thats when I observe internal server error and plethora of logs.

0 ·

AJTek-Adam-J-Marshall AvishekKumar-0869 · Mar 29 at 01:45 PM

What is the WID? The Windows Internal Database IS SQL - but with certain restrictions like only being able to connect to it on the localhost and through named pipes, rather than TCP/IP.

Yes, you MUST run the SQL Re-indexing script, along with many other SQL scripts to optimize and maintain the database.

Forgot to add the URL to learn how to connect to the WID:
https://www.ajtek.ca/wsus/how-do-i-connect-to-the-windows-internal-database-wid/

0 ·

AvishekKumar-0869 AJTek-Adam-J-Marshall · Mar 29 at 05:03 PM

Thank you for the response.

I am in the process of reviewing SQL re-indexing to maintain availability of the database.

I am also curious, i am implementing pilot group(GPO target group) for WSUS updates. Do i need to have SQL re-indexing completed in order to get WSUS updates applied to pilot GPO group.

Do I need to re-index the SQL Db in order to get GPO target group to populate on WSUS server?

0 ·

Show more comments

Answer 3 · 2022-03-29T00:07:33.007Z

AvishekKumar-0869 answered Mar 29, '22 AvishekKumar-0869 published Mar 29, '22

%ProgramFiles%\Update Services\Logfiles\SoftwareDistribution.log

2022-03-28 16:34:06 fe80::dd71:12d4:1ff2:2492%9 53438 fe80::dd71:12d4:1ff2:2492%9 8530 HTTP/1.1 POST /ApiRemoting30/WebService.asmx - - 401885685 Connection_Abandoned_By_ReqQueue WsusPool
2022-03-28 16:34:06 10.6.5.102 52049 10.0.0.227 8530 HTTP/1.1 POST /ClientWebService/client.asmx - - 401885685 Connection_Abandoned_By_ReqQueue WsusPool
2022-03-28 16:34:06 fe80::dd71:12d4:1ff2:2492%9 53439 fe80::dd71:12d4:1ff2:2492%9 8530 HTTP/1.1 POST /ApiRemoting30/WebService.asmx - - 401885685 Connection_Abandoned_By_ReqQueue WsusPool
2022-03-28 16:34:06 10.6.6.231 51934 10.0.0.227 8530 HTTP/1.1 POST /ClientWebService/client.asmx - - 401885685 Connection_Abandoned_By_ReqQueue WsusPool
2022-03-28 16:34:06 fe80::dd71:12d4:1ff2:2492%9 53440 fe80::dd71:12d4:1ff2:2492%9 8530 HTTP/1.1 POST /ApiRemoting30/WebService.asmx - - 401885685 Connection_Abandoned_By_ReqQueue WsusPool
2022-03-28 16:37:45 10.6.5.102 52125 10.0.0.227 8530 HTTP/1.1 POST /ClientWebService/client.asmx - - 401885685 Connection_Dropped WsusPool
2022-03-28 16:38:41 fe80::dd71:12d4:1ff2:2492%9 53441 fe80::dd71:12d4:1ff2:2492%9 8530 - - - - - - Timer_ConnectionIdle -
2022-03-28 16:40:15 10.6.5.102 52214 10.0.0.227 8530 HTTP/1.1 POST /ClientWebService/client.asmx - - 401885685 Connection_Dropped WsusPool
2022-03-28 16:40:15 10.6.6.130 51062 10.0.0.227 8530 HTTP/1.1 POST /ClientWebService/client.asmx - - 401885685 Connection_Dropped WsusPool
===============================================================================
C:\windows\system32\logfiles\httperr logs for errors.

2022-03-26 15:40:47 10.0.0.102 62573 10.0.0.227 8530 HTTP/1.1 POST /ClientWebService/client.asmx - - 401885685 Connection_Dropped WsusPool
2022-03-26 15:43:17 10.0.0.102 62730 10.0.0.227 8530 HTTP/1.1 POST /ClientWebService/client.asmx - - 401885685 Connection_Dropped WsusPool
2022-03-26 15:43:48 10.6.6.139 49751 10.0.0.227 8530 HTTP/1.1 POST /ClientWebService/client.asmx - - 401885685 Connection_Dropped WsusPool
2022-03-26 15:44:16 10.6.6.139 49759 10.0.0.227 8530 HTTP/1.1 POST /ClientWebService/client.asmx - - 401885685 Connection_Abandoned_By_ReqQueue WsusPool
2022-03-26 15:44:16 fe80::dd71:12d4:1ff2:2492%9 50981 fe80::dd71:12d4:1ff2:2492%9 8530 HTTP/1.1 POST /reportingwebservice/reportingwebservice.asmx - - 401885685 Connection_Abandoned_By_ReqQueue WsusPool
2022-03-26 15:47:52 10.6.6.139 49760 10.0.0.227 8530 HTTP/1.1 POST /ClientWebService/client.asmx - - 401885685 Connection_Dropped WsusPool
2022-03-26 16:09:17 10.0.0.202 52347 10.0.0.227 8530 HTTP/1.1 POST /SimpleAuthWebService/SimpleAuth.asmx - - 401885685 Connection_Dropped WsusPool
2022-03-26 16:10:51 fe80::dd71:12d4:1ff2:2492%9 50993 fe80::dd71:12d4:1ff2:2492%9 8530 HTTP/1.1 POST /reportingwebservice/reportingwebservice.asmx - - 401885685 Connection_Abandoned_By_ReqQueue WsusPool
===============================================================================
%programfiles%\Update Services\WebServices\
2022-03-28 19:48:03.534 UTC Warning w3wp.25 SoapUtilities.CreateException ThrowException: actor = http://srvr.primary.local:8530/SimpleAuthWebService/SimpleAuth.asmx, ID=8293cca5-87db-417f-af97-bc7431190a2d, ErrorCode=InternalServerError, Message=, Client=?
===============================================================================

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 4 · 2022-04-01T12:21:17.257Z

AJTek-Adam-J-Marshall answered Apr 1, '22

Backend storage - DAS - Samsung 850 SSD
VM - 4vCPU, 4GB Static RAM
Install from media
Windows Update to latest CU
Restart
Create C:\WSUS Folder
Install WSUS via Server Manager - Check WSUS > Defaults > using WID
Set location to C:\WSUS
Install
Launch Post install tasks and wait until they finish.
Open WSUS MMC Console
Next/Next/Next/Next/Start Connecting/Next/Next/Kept Windows product group selected (even though I normally would remove products not in the network) - Next > Checked All Classifications and removed drivers and driver sets (because I'm not installing WAM) > Sync Automatically, 4 times a day > Begin Initial synchronization checked, > Next > Finish
Up to this point - it took ~33 minutes
Started : 4:39PM
73% at 7:54PM
76% at 8:51PM
78% at 10:24PM
79% at 11:36PM
Finished Syncing while I was asleep and synced again at 1:22AM
Screenshot: WSUS1
Create Computer group called "See-It-Works"
Change WSUS Options > Computers > Use Group policy or registry settings on computers
Add Registry edit to my system to force use WSUS
Check for updates
Screenshot: WSUS2
After a few minutes of it checking for updates and coming back with nothing, initiate a reportnow
wuauclt /reportnow
Screenshot: WSUS3

wsus1.jpg (126.1 KiB)

wsus2.jpg (137.6 KiB)

wsus3.jpg (137.9 KiB)

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 5 · 2022-04-01T12:23:49.74Z

AJTek-Adam-J-Marshall answered Apr 1, '22

Oh, and the registry used:
Windows Registry Editor Version 5.00

 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
 "WUServer"="http://172.19.0.111:8530"
 "WUStatusServer"="http://172.19.0.111:8530"
 "UpdateServiceUrlAlternate"="http://172.19.0.111:8530"
 "TargetGroupEnabled"=dword:00000001
 "TargetGroup"="See-It-Works"
 "SetActiveHours"=dword:00000001
 "ActiveHoursStart"=dword:00000008
 "ActiveHoursEnd"=dword:00000012
 "SetAutoRestartNotificationConfig"=dword:00000001
 "AutoRestartNotificationSchedule"=dword:0000003c
 "SetAutoRestartDeadline"=dword:00000001
 "AutoRestartDeadlinePeriodInDays"=dword:00000003
    
 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
 "UseWUServer"=dword:00000001
 "DetectionFrequencyEnabled"=dword:00000001
 "DetectionFrequency"=dword:00000001
 "NoAutoUpdate"=dword:00000000
 "AUOptions"=dword:00000004
 "ScheduledInstallDay"=dword:00000000
 "ScheduledInstallTime"=dword:00000010
 "ScheduledInstallEveryWeek"=dword:00000001

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

question