Troubleshooting WSUS server


Are you straggling to troubleshoot WSUS server. Those who followed the steps, I mentioned in my previous posting Install and Configure WSUS—Step by Step but couldn’t get it going and still got issue with deployment. you might have few issues with WSUS. Here are solutions for you.

Client not showing in WSUS Server:

There are several reasons client don’t pop up in WSUS server. a) GPO and WSUS miss-configured. b) Proper prerequisite has not been meet both for server and client as I mentioned in my post.

Log on to WSUS sever as Domain Admin. Open WSUS Console>Option>Computers>Select use group policy or registry settings on computers>Apply>ok.

WSUS Console>Server Name>computers>All Computers>Add Proper Computer Groups, I mean client target group you have mentioned in GPO.

Are all the computers and Server pointing proper client target group as you mentioned in GPO? Did you configure parent GPO and computers pointing child GPO???  Check group policy object using GPO management console to find out any miss-configuration!!! Make sure the computer you are looking WSUS console is placed in right GPO. Run gpresult.exe from command prompt to find out computer and user config. Wait until GPO refresh time and you will see client in WSUS console.

Another way to see client quickly in WSUS console is to log on to Windows XP SP2 (Must have SP2) client. Run WUAUCLT /DETECTNOW and GPUPDATE /FORCE  from command prompt. Reboot client. Log back again.

Start menu>run>Type regedit.exe>ok. Now go to HKEY_Local_Machine\Software\Policies\Microsoft\Windows\Windows Update

You are suppose to see

client target group REG_SZ Group Name in GPO say Desktop, WindowsXP, Windows7, Server, etc
ClientGroupEnabled REG_DWORD 0×00000001(1)
WUServer REG_SZ Http://ServerName:8530
WUStatusSever REG_SZ Http://ServerName:8530

This mean this client is reporting to WSUS server.

Another critical point to note here, don’t use default configuration port that is 80. Use port 8530 because in ISA server or corporate firewall might be pointing this port to corporate web site unless web publisher added in ISA.

WSUS database full of BugCheck Dump causing WSUS to stop functioning:

***This file is generated by Microsoft SQL Server version 9.00.4035.00 upon detection of fatal unexpected error. Please return this file,  the query or program that produced the bugcheck, the database and the error log, and any other pertinent information with a Service Request***

***Stack Dump being sent to c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\LOG\SQLDump0154.txt***

I am one of the victim of this SQL error. This will occupy entire disk space in system partition causing WSUS to stop working. This error got nothing to do with WSUS. This is purely SQL problem. It happens when WSUS is running long and you don’t run clean up wizard to clean database and WSUS. I have to be honest here. I am not an SQL Expert. I found some clues by searching books and google, this SQL error occur when SQL index is corrupt. I logged to SQL server using management studio express and follow this Microsoft link and run DBCC CHECKDB.  But this will not solve this issue. Basically, SQL database is screwed. You have to backup database, reinstall WSUS and restore will solve this issue. But my best suggestion would be fresh installation of everything….. start from scratch.

You may also try this link if you require re-indexing database.

Connection Error

“An error occurred trying to connect the WSUS server. This error can happen for a number of reasons. Check connectivity with the server. Please contact your network administrator if the problem persists.
Click Reset Server Node to connect the server again.”

Reason: WSUS-related Web services (IIS) may stop working when you upgrade a Windows Server 2003-based computer to Windows Server 2008

Solutions:

Verify that the Update Services service, IIS and SQL are running on the server. If the problem persists, try restarting IIS, SQL, and the Update Services Service.

Try removing the persisted preferences for the console by deleting the wsus file under C:\Documents and Settings\%username%\Application data\Microsoft\MMC\

To work around this problem, uninstall the ASP.NET role service in IIS, and then use Service Manager to reinstall the service. To do this, follow these steps:

  1. Click Start, click Administrative Tools, and then click Server Manager.
  2. Expand Roles, and then click Web Server (IIS).
  3. In the Role Services section, click Remove Role Services.
  4. Disable the ASP.NET check box, and then click Next.
  5. Click Remove.
  6. Wait for the removal process to finish, and then click Close.
  7. In the same Role Services section, click Add Role Services.
  8. Enable the ASP.NET check box, and then click Next.
  9. Click Install.
  10. Wait for the installation process to finish, and then click Close
  11. Restart all WSUS related services such as IIS, SQL, Update services (Location Administrative Tools>Services)

WSUS debug tools Download WSUS debug tools from Microsoft WSUS sites. Extract Clientdiag.exe in client machine and WSUS server diagnostic tools in WSUS server. In both case extract in %windir%\system32 location. Open command prompt>change directory to %windir%\system32. Run clientdiag.exe (client machine) and wsusdebugtool.exe (WSUS server) from command prompt. You can run both in wsus server to test whether wsus server is contacting itself for update or not. If you see checking machine state PASS that means client is contacting wsus.

Share this on Add to FacebookAdd to DiggAdd to Del.icio.usAdd to StumbleuponAdd to RedditAdd to BlinklistAdd to TwitterAdd to TechnoratiAdd to Yahoo BuzzAdd to Newsvine

About these ads

About Raihan Al-Beruni

Raihan Al-Beruni has been working on Microsoft Technologies for more than 15 years. Microsoft Technologies are his passion and blogging on Microsoft product is his hobby. Raihan has published a book on Windows Server 2012 titled “Windows Server 2012 Step by Step” on December 2 2012. He has published hundreds of articles on wide variety of technology. Raihan Al-Beruni has a Master’s degree in Electronic Business from Edith Cowan University, Western Australia. He is Microsoft certified IT Professional in Lync Server 2010, Enterprise Messaging Administrator on Exchange Server 2010, Windows Server 2008. He is a Microsoft Certified Solutions Expert in Private Cloud and Server Infrastructure. He is a VMware Certified Professional on vSphere 5. He is ITILv3 Foundation certified. Other than working on various enterprise technologies and projects, he mostly spends times on playing with new technologies at home or spending time with family.
This entry was posted in Windows Server and tagged , , , . Bookmark the permalink.

14 Responses to Troubleshooting WSUS server

  1. oceaser69 says:

    Does the WSUS Server have to be a DC? Also, when configuring group policy, do you have to do it from a DC?

    Thank you.

  2. Oceaser69 says:

    Thanks for the info.

  3. Syko Serkus says:

    I have WSUS 3.0 SP2 installed and the clients are contacting it regularly, but failing to report a status. I do have SCCM installed on this server as well. What steps can I take to get the clients to send status reports?

    • You have to get report from SCCM. Do not manage WSUS from WSUS console instead use SCCM console to manage patch delivery and report. Once you install SCCM on top of WSUS server than patch management handed over to SCCM unless you have a separate WSUS server.

  4. Atul A says:

    does anyone know how to remove SCCM clinet installed on windows server 2003 64bit ?

    Regards
    Atul A

  5. Atul A says:

    Client Push method is used.

    manually I do run following command for uninstalling 32bit clinet

    C:\Windows\System32\ccmsetup>ccmsetup.exe /uninstall

    and for 64bit OS I could see

    C:\Windows\SysWoW64\CCM

    but can not uninstall.. hope the patch is ok

  6. You did not say what was your method of installation? this uninstallation will not work.

  7. Atul A says:

    Hi,

    Client Push method I am using.

    Regards
    Atul A

  8. chitti says:

    Hi,

    i installed WSUS in my win 2003 member server PC by following your document. but after synchronisation finished with server i went to set IIS security settings but there is no any WSUS Administration site folder in WEBSITE folder.. due to this even i am setting GPO policy in server with https://myservername address clients r unable to detect above site.. please suggest me whts wrong in my configuration of WSUS

  9. Suresh Kumar G says:

    I installed WSUS 3.0 on Windows Server 2008 R2 and after doing all the configurations in the WSUS console it is showing the client status as not yet reported. But some clients got reported. Please advise what would be the issue in some clients and also for some servers. Thanks..

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s