Client Registry Settings

[Dale Summers]

I'm Running SUS in a non AD environment.

Here are my client settings per the SUS doc's

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Wi
ndowsUpdate]
"WUServer"="http://anfsus"
"WUStatusServer"="http://anfsus"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Wi
ndowsUpdate\AU]
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000004
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:00000009
"UseWUServer"=dword:00000001
"RescheduleWaitTime"=dword:00000001
"NoAutoRebootWithLoggedOnUsers"=dword:00000001

My clients are not getting the updates. When I check in
the Group Policy Editor (gpedit.msc) it says the setting
under Windows Update are not configured. When in doubt
they are in the registry correctly.

Now if I manually set in the gp editor settings to
enabled and then check the registry everything is the
same to where i had origianlly imported but it now says
everything is enabled.. It doesn't make any sense.

Does anyone have any Ideas? let me know. Thanks for
help!!

Dale

[Jose Morris]

Can you look at the Windows Update.log created in the windows directory and
post the errors you find it in? That would be a good place to start
debugging the issues.

thanks,
Jose

"Dale Summers" <summer...@hotmail.com> wrote in message
news:029501c3666e$c0bca4d0$a101...@phx.gbl...

[Dale Summers]

I don't see anything that stick out at me. It all looks
like normal activity from when I manually went in and set
the options through gpedit

If gpedit looks at those registry settings on the system
why doesn't it enable the client? Bit like i started
before if I setup manaully the registy settings will be
the exact same and the imported settings? IS it possible
another switch needs to be setup in the registy as well?
I'm the network admin here so i have the proper rights to
make the changes. Any other ideas?

>.
>

[Jose Morris]

Did you look up the Windows Update.log? Also post the Reg keys that were
created in any of the failing clients. That would help.

Thanks,
Jose

"Dale Summers" <summer...@hotmail.com> wrote in message

news:026e01c36678$0114e0c0$a301...@phx.gbl...

[Dale Summers]

Here is the Windpws Update.log. now it's showing an
error.

2003-08-19 14:38:08 18:38:08 Success IUCTL
Starting
2003-08-19 14:38:16 18:38:16 Success IUCTL
Downloaded iuident.cab from http://anfsus to C:\Program
Files\WindowsUpdate\V4
2003-08-19 14:38:16 18:38:16 Success IUENGINE
Starting
2003-08-19 14:39:04 18:39:04 Error IUENGINE
Library download error. Will retry. (Error 0x80072EFD)
2003-08-19 14:39:50 18:39:50 Error IUENGINE
Library download error. Will retry. (Error 0x80072EFD)
2003-08-19 14:40:36 18:40:36 Error IUENGINE
Library download error and timed out (140078 ms). Will
not retry. (Error 0x80072EFD)
2003-08-19 14:40:36 18:40:36 Success IUENGINE
Determining machine configuration
2003-08-19 14:40:42 18:40:42 Success IUENGINE
Querying software update catalog from
http://anfsus/autoupdate/getmanifest.asp
2003-08-19 14:40:42 18:40:42 Success IUENGINE
Determining machine configuration
2003-08-19 14:40:43 18:40:43 Success IUENGINE
Querying software update catalog from
http://anfsus/autoupdate/getmanifest.asp
2003-08-19 14:40:43 18:40:43 Success IUENGINE
Determining machine configuration
2003-08-19 14:40:43 18:40:43 Success IUENGINE
Querying software update catalog from
http://anfsus/autoupdate/getmanifest.asp
2003-08-19 14:43:01 18:43:01 Success IUENGINE
Shutting down
2003-08-19 14:43:01 18:43:01 Success IUCTL
Shutting down

- Reg keys I've imported manually

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Wi
ndowsUpdate]
"WUServer"="http://anfsus"
"WUStatusServer"="http://anfsus"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Wi
ndowsUpdate\AU]
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000004
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:00000009
"UseWUServer"=dword:00000001
"RescheduleWaitTime"=dword:00000001
"NoAutoRebootWithLoggedOnUsers"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVers
ion\WindowsUpdate\Critical Update]
"SelfUpdServer"="http://ANFSUS/SelfUpdate/CUN5_4"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVers
ion\WindowsUpdate\Critical Update SelfUpdate]
"SelfUpdServer"="http://ANFSUS/SelfUpdate/CUN5_4"

-Reg Key's Exported after setup manually

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Wi
ndowsUpdate]
"WUServer"="http://anfsus"
"WUStatusServer"="http://anfsus"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Wi
ndowsUpdate\AU]

"RescheduleWaitTime"=dword:00000004
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"UseWUServer"=dword:00000001

"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000004
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:00000009

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVers
ion\WindowsUpdate\Critical Update]
"SelfUpdServer"="http://ANFSUS/SelfUpdate/CUN5_4"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVers
ion\WindowsUpdate\Critical Update SelfUpdate]
"SelfUpdServer"="http://ANFSUS/SelfUpdate/CUN5_4"

>.
>

[Jose Morris]

The error 0x80072EFD is a WinInet error saying
ERROR_INTERNET_CANNOT_CONNECT. Please check to see if you are able to
download this file directly from your clients. The IIS Lockdown may have
locked down downloading of cabs and exes from the server.
Beyond this first error there are only three calls to GetManifest and that
means there are no patches that are approved are applicable for this
machine. The case may be either the machines are all patched or you may not
have done a sync and got the latest patches. To make sure all the patches
are installed, run MBSA (Microsoft Baseline Security Analyser) on the
clients and see what patches are missing.

Let me know if this helps.

thanks,
Jose

"Dale Summers" <summer...@hotmail.com> wrote in message

news:040501c36686$9f57ad40$a301...@phx.gbl...