請教WSUS問題

ASKYOU

unread,

Oct 30, 2007, 5:57:00 AM10/30/07

to

各位先進您好...

敝公司最近架設了一台WSUS Server做為內部更新patch用途，但有幾種狀況...

1.公司有100台電腦，但實際跟WSUS註冊報到的電腦不到50台
2.在管理中新的電腦選項中，已經註冊過且被分派到電腦群組的電腦，卻重覆又出現在尚位指派的電腦群組中
3.到一些未向WSUS登錄報到的CLIENT電腦去看，卻又發現已經更新過PATCH(非透過外部WindowsUpdate)
4.WSUS 報告中，發現已更新的和需更新的數量和實際上該電腦已更新的不同

還望各先進不吝教導

Jimmy

unread,

Oct 30, 2007, 8:45:17 PM10/30/07

to

WSUS Client have the same SUSClientID issue

Description
=========
Some WSUS clients are shown in WSUS server admin console.

Analysis
=======
Since the clients OS were installed via Ghost Image. They have the same
SUSClientID, and this causes the information about these machines messed up
in WSUS DB.

Solution
======
We have verified that the following steps can get the specific machines
resolved:
NOTE: The following steps should be performed against the problematic
machine.
1. Delete the registry values under
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate,
which includes:
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\PingID"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\SusClientId"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\AccountDomainSid"

2. Restart the Automatic Update service in one of the following ways:
- In Services.msc snap-in, locate this service and restart it

- At Command Prompt, enter the command line "NET STOP WUAUSERV & NET START
WUAUSERV"
3. Force the Automatic Update client to contact the WSUS server by running

"wuauclt.exe /resetauthorization /detectnow"
4. Refresh the WSUS console, if you notice the machine is coming out but
displayed as "not yet reported", you can restart the Automatic Updates
service, and run "wuauclt.exe /detectnow" on the client.

NOTE: This time, there is no /resetauthorization in the command line.

Jimmy

"ASKYOU" <ASK...@discussions.microsoft.com> 在郵件
news:D66D54BB-F8E4-44D9...@microsoft.com 中撰寫...

ASKYOU

unread,

Nov 6, 2007, 12:28:00 AM11/6/07

to

您好...

我試著到您所説登錄檔 "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\
的路徑下要去刪除
PingID、SusClientId、AccountDomainSid三筆資料，但我發現只有SusClientId這筆，不曉得是有什麼問題?

PS.我有到一些client端的電腦確認過
"\HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" 下的WUServer和
WUStatusServer都有指到我的WSUS伺服器

"Jimmy" 來函：

HC

unread,

Nov 6, 2007, 2:10:47 AM11/6/07

to

先確認你那些電腦是否都用 Ghost 還原後, 沒有去 renew 用戶端電腦的 SID

"ASKYOU" <ASK...@discussions.microsoft.com> 撰寫於郵件新聞:D66D54BB-F8E4-44D9...@microsoft.com...

Jimmy

unread,

Nov 6, 2007, 7:57:37 PM11/6/07

to

刪除 SusClientId

重新啟動Service 即可

Jimmy

"ASKYOU" <ASK...@discussions.microsoft.com> 在郵件
news:87FCE52B-28EE-43DA...@microsoft.com 中撰寫...

ASKYOU

unread,

Dec 27, 2007, 8:45:02 PM12/27/07

to

請問如何去renew用戶端電腦的 SID，用戶端電腦的 SID

"HC" 來函：

Jimmy

unread,

Mar 24, 2008, 8:14:13 PM3/24/08

to

Jimmy

"ASKYOU" <ASK...@discussions.microsoft.com> 在郵件
news:AB9B055E-B5D1-4DCD...@microsoft.com 中撰寫...