WSUS help

[mercxi]

I put wsus 2.0 on sbs sp 1 and I configured the gp editor and even did the gpupdate /force command and the wauac.exe (i am writing this down from memory so if I misspelled my commands thats why) /detectnow in the command prompt. Roughly 16 hours later wsus still cannot see the client computers, any tips or tricks or if anyone knows what I am doing wrong, please tell me

[EvilRick]

Check your C:\WINDOWS\WindowsUpdate.log and see if you're getting an errors. Start at the bottom and work your way up. Newer entries are at the bottom.

When I do an inital setup of WSUS on a client PC, I do the following from a 'Command Prompt'.

NET STOP "WUAUSERV"
NET START "WUAUSERV"
WUAUCLT /DETECTNOW

I also have this saved as a .bat file on the local drive for quick resets if needed.

My guess is, your clients aren't seeing the WSUS.

[SickPup404]

I've gotten a lot of help on my WSUS setup woes with the WSUSWiki.

Try out some of their suggestions for resolving client config issues.

[mercxi]

I saw this line a number of times in the log, what does it mean?
WARNING: GetAuthorizationCookie failure, error = 0x80072EFD, soap client error = 5, soap error code = 0, HTTP status code = 200

[SickPup404]

Try changing the server (in GPEdit or your REG import) from the server name to IP addy. I don't know why, but the clients on our network liked the IP better. Your WSUS server has to be static for this to work - if it's not, just change it in the DHCP server.

Could you post your logfile?

Besides the WSUS Wiki, you can also use www.wsus.info as a resource. It used to be www.susserver.com.

[mercxi]

my logfile is attached

[SickPup404]

I think the IP addy change and this should help.

[mercxi]

ok I just want to make sure I got this right
I take out my server name where it says in gpedit
http://(servername):8530
and replace it with
https://(ipaddress):8530 right?

[mercxi]

do I aslo remove the server name and replcace it with the ip address for the intranet updating service?

[EvilRick]

You're getting the 0x80072EFD error because it's not connecting to your WSUS.

Your entry in GPEDIT is incorrect. It should just be either

servername

in both fields or . . .

http://IPAddress

in both fields.

[mercxi]

so now it should look exactly like this:

[mercxi]

whoops i posed the wrong one this is what i meant to post

[EvilRick]

No, just ther servername, no ports or slashes.

The address you have there is what you need to see the console to make changes in a web browser.

EDIT - Or the IP address like in your second image.

[mercxi]

ok cool so no port numbers, anything else I should know about?

[EvilRick]

You should be golden.

After you do the gpedit.msc part, use the script I posted to reset the client and it should hit your WSUS. Check your log at the bottom and your error should be gone.

You'll also need to add your WSUS IP address to the Trusted Zone in IE and then also it's pop-up blocker so you can see the EULAs on some items.

[mercxi]

thanks, the computers have not shown up yet, but now i get this error in computer options when specifying how to assign computers to groups

Cannot save configuraction becuase the server is still proccessing previous changes

System.InvalidOperationException: Cannot save Configuration because the server is still processing a previous configuration changes. ---> System.Data.SqlClient.SqlException: spSetConfiguration was called while a Reset Process was Needed/InProgress cannot change Configuration at this time
at Microsoft.UpdateServices.DatabaseAccess.DBConnecti on.DrainObsoleteConnections(SqlException e)
at Microsoft.UpdateServices.DatabaseAccess.DBConnecti on.ExecuteCommandNoResult()
at Microsoft.UpdateServices.Internal.NoResultSPHandle r.ExecuteStoredProcedure(DBConnection connection)
at Microsoft.UpdateServices.Internal.GenericDataAcces s.ExecuteSP(String spName, DBParameterCollection args, IExecuteSPHandler handler)
at Microsoft.UpdateServices.Internal.DataAccess.Execu teSPNoResult(String spName, DBParameterCollection args)
at Microsoft.UpdateServices.Internal.DataAccess.Execu teSPSetConfiguration(ConfigurationTableRow row, IDictionary changedLanguages)
--- End of inner exception stack trace ---
at Microsoft.UpdateServices.Internal.DataAccess.Execu teSPSetConfiguration(ConfigurationTableRow row, IDictionary changedLanguages)
at Microsoft.UpdateServices.Internal.BaseApi.UpdateSe rverConfiguration.Save()
at Administration.Manage.ManageProxy.SaveGeneralOptio nsValues(String xpostXml)
at Administration.Manage.ManageProxy.ValidateGeneralO ptionsForm(String xPostXml)
at Administration.Manage.ManageXPost.Page_Load(Object sender, EventArgs e)
at Microsoft.UpdateServices.Internal.DataAccess.Execu teSPSetConfiguration(ConfigurationTableRow row, IDictionary changedLanguages)
at Microsoft.UpdateServices.Internal.BaseApi.UpdateSe rverConfiguration.Save()
at Administration.Manage.ManageProxy.SaveGeneralOptio nsValues(String xpostXml)
at Administration.Manage.ManageProxy.ValidateGeneralO ptionsForm(String xPostXml)
at Administration.Manage.ManageXPost.Page_Load(Object sender, EventArgs e)

[EvilRick]

Ewww. That is ugly looking.

I'd drop back and punt . . . reboot the WSUS.

[mercxi]

first chance I get I am rebooting it and hope that the error goes to a land far far away

[mercxi]

still wsus is not detecting any client computers

[mercxi]

does anyone know how long wsus will take for the client computers to show up?