WSUS not pulling from local server

NotSoSimple

[H]F Junkie
Joined
May 17, 2003
Messages
14,618
Doing some testing on WSUS and I cannot get my client to pull from it. I am using the registry entries to specify my WSUS server, and have verified (From here: http://www.wsuswiki.com/WSUSClientFAQ) that I can access those files etc, but the WindowsUpdate.LOG still shows it is pulling from MSFT.

Any ideas?
 
I wanted to use the GPO also but was told for testing I have to use the registry method. Yay for upper management.
 
I wanted to use the GPO also but was told for testing I have to use the registry method. Yay for upper management.

Maybe I am inexperienced, but that sounds retarded! If you are going to be deploying WSUS through GPO, shouldnt you be testing the GPO itself? Please correct me if I am wrong!!
 
Maybe I am inexperienced, but that sounds retarded! If you are going to be deploying WSUS through GPO, shouldnt you be testing the GPO itself? Please correct me if I am wrong!!

True and you can test with the local policy instead of editing the registry.......
 
Maybe I am inexperienced, but that sounds retarded! If you are going to be deploying WSUS through GPO, shouldnt you be testing the GPO itself? Please correct me if I am wrong!!

Yeah it is lame, but this is the work of my douche boss. Same guy who tells me yesterday I have to work a weekend in 2 weeks..One that he knows I have had planned to be out of town for about 2 months.

Edit: Damnit..Just went to check the logs for you guys and it seems to have taken my settings. Wonder why it took so long for it to read the reg settings? Thanks guys.
 
He is not using GP :rolleyes: We use WSUS at work perfectly with GP. Trust me when you do go live, do it through GP.
 
gpupdate refreshes both AD and local policies. btw +1 on running it through AD (btw this is why you should also create a test AD domain as well.)
 
I have it working decently with the registry, it just is a bit slow to update it seems. Boss decided he wanted something different though, so I am waiting on a new VM server to be created. Going to a centralized deployment with 1 upstream and 4 downstream servers.
 
first run this reg entry

wsus.reg

Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"WUServer"="http://WSUS"
"WUStatusServer"="http://WSUS"
"TargetGroupEnabled"=dword:00000001
"TargetGroup"="WORKGROUP"
"ElevateNonAdmins"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000004
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:0000000a
"NoAutoRebootWithLoggedOnUsers"=dword:00000000
"AutoInstallMinorUpdates"=dword:00000001
"RebootRelaunchTimeoutEnabled"=dword:00000001
"RebootRelaunchTimeout"=dword:0000003c
"RescheduleWaitTimeEnabled"=dword:00000001
"RescheduleWaitTime"=dword:0000000f
"DetectionFrequencyEnabled"=dword:00000001
"RebootWarningTimeoutEnabled"=dword:00000001
"RebootWarningTimeout"=dword:0000001e
"UseWUServer"=dword:00000001
"NoAUShutdownOption"=dword:00000000
"NoAUAsDefaultShutdownOption"=dword:00000000

then to pull updates from server..use this.

wsus.bat

Code:
@echo off
::
Echo Save the batch file as "WSUS.bat". This batch file will do the following:
Echo 1.    Stops the Automatic Update Service (wuauserv) service.
Echo 2.    Imports WUA settings for workstations in workgroup to detect/download/install updates from WSUS.
Echo 3.    Starts the Automatic Update Service (wuauserv) service.
Echo 4.    Force update detection.
Echo 5.    More information on http://msmvps.com/Athif
REM INSTRUCTIONS:
REM Place both the files (WSUS.reg and WSUS.bat) in same location (single folder)
REM Double-click WSUS.bat to import WSUS.reg which contains Windows Update Agent (WUA) settings. 
REM for WUA in a workgroup environment. In this sample, WSUS.reg and WSUS.bat 
REM are placed in 'c:\'.

REM Author:- Mohammed Athif Khaleel :- Date April 30, 2006
Pause
Net Stop "wuauserv"
Echo Importing WSUS.reg
%windir%\Regedit.exe /s \\WSUS\DATA\WSUS\WSUS.reg
Echo WSUS.reg import attempted
Net Start "wuauserv" 
Echo Forcing update detection
wuauclt /detectnow
Pause
 
first run this reg entry

wsus.reg

Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"WUServer"="http://WSUS"
"WUStatusServer"="http://WSUS"
"TargetGroupEnabled"=dword:00000001
"TargetGroup"="WORKGROUP"
"ElevateNonAdmins"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000004
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:0000000a
"NoAutoRebootWithLoggedOnUsers"=dword:00000000
"AutoInstallMinorUpdates"=dword:00000001
"RebootRelaunchTimeoutEnabled"=dword:00000001
"RebootRelaunchTimeout"=dword:0000003c
"RescheduleWaitTimeEnabled"=dword:00000001
"RescheduleWaitTime"=dword:0000000f
"DetectionFrequencyEnabled"=dword:00000001
"RebootWarningTimeoutEnabled"=dword:00000001
"RebootWarningTimeout"=dword:0000001e
"UseWUServer"=dword:00000001
"NoAUShutdownOption"=dword:00000000
"NoAUAsDefaultShutdownOption"=dword:00000000

then to pull updates from server..use this.

wsus.bat

Code:
@echo off
::
Echo Save the batch file as "WSUS.bat". This batch file will do the following:
Echo 1.    Stops the Automatic Update Service (wuauserv) service.
Echo 2.    Imports WUA settings for workstations in workgroup to detect/download/install updates from WSUS.
Echo 3.    Starts the Automatic Update Service (wuauserv) service.
Echo 4.    Force update detection.
Echo 5.    More information on http://msmvps.com/Athif
REM INSTRUCTIONS:
REM Place both the files (WSUS.reg and WSUS.bat) in same location (single folder)
REM Double-click WSUS.bat to import WSUS.reg which contains Windows Update Agent (WUA) settings. 
REM for WUA in a workgroup environment. In this sample, WSUS.reg and WSUS.bat 
REM are placed in 'c:\'.

REM Author:- Mohammed Athif Khaleel :- Date April 30, 2006
Pause
Net Stop "wuauserv"
Echo Importing WSUS.reg
%windir%\Regedit.exe /s \\WSUS\DATA\WSUS\WSUS.reg
Echo WSUS.reg import attempted
Net Start "wuauserv" 
Echo Forcing update detection
wuauclt /detectnow
Pause

I don't know what is worse.....someone wrote this and has an AD environment or the fact its written in btach scripting.

for the love of god tatooing the registry on a large number of systems.... bad idea.
 
why you say tatoo.?

all you do to delete wsus is go to local machine/software/policies/policies/ and delete wsus..

maybe this is the best way for him to do this..but i use this when doing updates clients computers i have format
 
Back
Top