WSUS updates "Not Installed"
Mark Toby
is showing machines as still needing updates. A report shows the "Approval"
as "Install" and the "Status" as "Not Installed". This is happening on all
of my test machines. When I go to the Windows Update site it shows that it
needs the same updates.
Any idea as to why the WSUS server is not pushing down those updates? I've
looked at the WindowsUpdate.log file and don't see any messages that indicate
that it checked those updates and does/does not need them.
Lawrence Garvin (MVP)
news:3DC80364-26FE-4CFD...@microsoft.com...
> I am new to WSUS and have a 3.0 SP1 server that, after an automatic
> update,
> is showing machines as still needing updates. A report shows the
> "Approval"
> as "Install" and the "Status" as "Not Installed". This is happening on
> all
> of my test machines. When I go to the Windows Update site it shows that
> it
> needs the same updates.
>
> Any idea as to why the WSUS server is not pushing down those updates?
[1] The WSUS Server does not push down updates.
[2] The *clients* execute a detection for available updates every 22 hours,
and then download the updates, and then scheduled the update for
installation (by default at 3am the next morning). Thus, theoretically, it
could be up to 22 hours after you approve an update before any given client
system even knows it's available, plus another duration until 3am the next
morning before the update is actually installed and reported as such.
The most likely reason you're seeing what you're reporting is because the
client(s) have not yet detected/downloaded/installed the update.
Might I suggest the WSUS documentation for a good overview of the basics of
how WSUS operates.
> I've looked at the WindowsUpdate.log file and don't see any messages that
> indicate
> that it checked those updates and does/does not need them.
There it is. :-)
--
Lawrence Garvin, M.S., MCITP(x2), MCTS(x5), MCP(x7), MCBMSP
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)
MS WSUS Website: http://www.microsoft.com/wsus
My Websites: http://www.onsitechsolutions.com;
http://wsusinfo.onsitechsolutions.com
My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
DaveMills
<lawr...@news.postalias> wrote:
>"Mark Toby" <Mark...@discussions.microsoft.com> wrote in message
>news:3DC80364-26FE-4CFD...@microsoft.com...
>> I am new to WSUS and have a 3.0 SP1 server that, after an automatic
>> update,
>> is showing machines as still needing updates. A report shows the
>> "Approval"
>> as "Install" and the "Status" as "Not Installed". This is happening on
>> all
>> of my test machines. When I go to the Windows Update site it shows that
>> it
>> needs the same updates.
>>
>> Any idea as to why the WSUS server is not pushing down those updates?
>
>[1] The WSUS Server does not push down updates.
>
>[2] The *clients* execute a detection for available updates every 22 hours,
>and then download the updates, and then scheduled the update for
>installation (by default at 3am the next morning). Thus, theoretically, it
>could be up to 22 hours after you approve an update before any given client
>system even knows it's available, plus another duration until 3am the next
>morning before the update is actually installed and reported as such.
>
>The most likely reason you're seeing what you're reporting is because the
>client(s) have not yet detected/downloaded/installed the update.
Additionally they could be updates to the updates. e.g. XP SP3 get installed.
After that any updates to SP3 could be detected and queued for installation then
any updates to the updates are detected as needed and queue for installation.
Generally an XP system at say SP2 with no update yet installed. will require
updates to be installed as a prerequisite to installing SP3 which then needs
updates itself and I think there may also be to odd update to the updates. So up
to 3 or 4 round trips.
>
>Might I suggest the WSUS documentation for a good overview of the basics of
>how WSUS operates.
>
>> I've looked at the WindowsUpdate.log file and don't see any messages that
>> indicate
>> that it checked those updates and does/does not need them.
>
>There it is. :-)
--
Dave Mills
There are 10 types of people, those that understand binary and those that don't.
Toby@discussions.microsoft.com Mark Toby
update.
What I'm saying is that:
1. I approved all updates 5 days ago.
2. The clients have been looking to the WSUS server for 5 days and have not
pulled those updates.
3. The WSUS server lists the machine as needing the updates.
4. If I go to Windows Update and check for updates, the same updates are
listed.
5. The WindowsUpdate.log file appears to be saying that the PC is up to date.
6. Where is the disconnect? Why does WSUS and Windows Update feel that there
are updates that need to be applied, but Automatic Update does not.
DaveMills
To...@discussions.microsoft.com> wrote:
>Ok, so I shouldn't have said that the WSUS server wasn't "pushing" the
>update.
>
>What I'm saying is that:
>
>1. I approved all updates 5 days ago.
>2. The clients have been looking to the WSUS server for 5 days and have not
>pulled those updates.
Check to see if the updates have been downloaded to the WSUS server.
When an update is listed as needed the next step is it has to be approved for
install then WSUS downloads the content. Only after the content is downloaded to
the server can the client begin its download. Until then the client detects the
update as needed but not available to download.
Mark Toby
But I don't see why they haven't downloaded yet. I've selected "Store update
files locally on this server". I don't have any of the subordinate boxes
checked under that radio button. I have reduced the number of languages
selected, but English is one that is selected. The upstream sync runs every 6
hours and is set to sync with Microsoft. It looks like it has been running
successfully. I don't see any errors in the event viewer.
It looks like most of this weeks updates have not downloaded, but there are
several older (Nov 23 and earlier) that have not downloaded also.
Any other areas I could check?
DaveMills
<Mark...@discussions.microsoft.com> wrote:
>It looks like you have hit on the issue.
>
>But I don't see why they haven't downloaded yet. I've selected "Store update
>files locally on this server". I don't have any of the subordinate boxes
>checked under that radio button. I have reduced the number of languages
>selected, but English is one that is selected. The upstream sync runs every 6
>hours and is set to sync with Microsoft. It looks like it has been running
>successfully. I don't see any errors in the event viewer.
>
>It looks like most of this weeks updates have not downloaded, but there are
>several older (Nov 23 and earlier) that have not downloaded also.
>
>Any other areas I could check?
Try this for a start
http://blogs.technet.com/sus/archive/2008/07/09/troubleshooting-wsus-downloads.aspx
There are various file types that need to download, sometime exe file sometime
other type. Look for firewall issues which may be blocking certain file types.
Sonicwall is a known cause of issues so if you are using that firewall search
for WSUS and Sonicwall and you will get loads of relevant info.