WSUS server - question about updates on clients

[hellboy101]

Hello all-

I followed a complete installation of WSUS and looks very interesting. I was able to download updates to the WSUS server and also thru group policy, apply clients that need updates from WSUS. WSUS does see the client systems I've assigned to it without troubles however these clients never seem to actually receive any updates from what I can tell.

Is there a setting or tweak involved in order to actually force the clients to accept updates from WSUS?? WSUS identifies with the clients acknowledging the fact they need certain updates but nothing ever happens.

Does or has anyone handled this issue??

Thanks so much for any support.
hb101

 

[irweazel]

wuauclt /detectnow to detect updates
wuauclt /downloadnow to force downloading

check the log file in the windows directory - called windows update log which will give you the error messages which can usually be googled.

Also check the list on the wsusadmin site and check to see if they showing up as needed updates

 

[hellboy101]

Thx irweazel,

That was a fast reply! These commands? on server or clients in need of updates?

thx again
hb101

 

[acl03]

What options did you set in group policy? Did you download the latest Windows Update ADM file (wuau.adm) from microsoft?

To do this, in your group policy, you need to Right-Click the "Administrative Templates" folder in the computer section of the GPO, click Add/Remove Templates, and add the wuau.adm file to make sure you have the latest version.

Here's where to find the updated ADM file:

http://msmvps.com/athif/archive/2005/09/21/67269.aspx

Thanks,
Andrew

 

[hellboy101]

hi acl03,

I'll use your link as I didn't do this update. thanks !
hb101

 

[hellboy101]

Hello,

Actually yes, the updated file was there..

thanks

hb101

 

[SnoopFrogg]

hb101,

Have you approved the updates for installation? By default, the downloaded updates are set to "detect only". You need to change their status to "install".

[purple]
SnoopFrogg
MCSA+Security - Windows Server 2003
[/purple]

 

[hellboy101]

Yes, I have SnoopFrogg, all is well!

Thx alot
hb101

 

[mercyreaper]

Will WSUS still install updates even if the server is not connected to the internet? Such as if you put the updates on the computer manually?

 

[acl03]

mercyreaper: i think you need your WSUS server to be on the internet to download the updates from microsoft, or from another WSUS server



Thanks,
Andrew

 

[SnoopFrogg]

mercyreaper,

This is supported. Visit the following Microsoft URL for the WSUS deployment guide:

http://www.microsoft.com/downloads/...3-63E0-41CE-A646-EB36F1D3E987&displaylang=en.

It walks you through how you can deploy updates to an isolated network segment.

[purple]
SnoopFrogg
MCSA+Security - Windows Server 2003
[/purple]

 

[irweazel]

you do those commands on whatever needs updating. BTW you won't get any confirmation at CL if this has worked so check the text file and see if the download and install icons appear on the task bar

 

[hellboy101]

Hi irweazel,

I appreciate your's and everyone else's support in my getting this WSUS operation in motion.. In a nutshell, it works great!!

I wanted to scale this up a bit. I noticed there really isn't a SUS command that will reboot the clients and/or server's that are receiving updates (critical/hotfixes) after they've received them. What if a second pass were necessary in order to finish all necessary updates.

Since I have these pc's in a group policy in an OU called WSUS.. is there a way to run shutdown.exe /r in this OU's group policy for a reboot? I am running both wuauclt commands on the WSUS server in a bat file and on a Windows schedule, so that's pretty effective but would like to treat this in a seamless process to the user.. where they receive all updates and the pc reboots roughly 30 minutes after updates have been passed on to the pc, then if more updates come down, another shutdown.exe /r could be implemented.. just don't know how to apply in a GPO..

Again, thx for all the great help!
hb101