A Personal Blog
Software Update Services Help
I have now posted this on nearly a dozen forums, the MS newsgroups, etc. It should be really simple.
I’ll replicate it here in the hopes that someone can help out:
Just beginning our internal testing of SUS, and we have one client hooked up to one server. Because we aren’t using AD I had to do the registry hack noted in the white paper.
Now, it only ever downloads the updates (automatically) for the same update every day (some MDAC one).
Any hints as to what’s wrong?
…
For some reason MovableType is no longer showing the URL for this entry. Commenting can be seen / viewed here.
About the author
| Print article | This entry was posted by Jeremy Wright on March 30, 2004 at 2:28 pm, and is filed under IT Thoughts. Follow any responses to this post through RSS 2.0. Responses are currently closed, but you can trackback from your own site. |
No trackbacks yet.
Comments are closed.
about 7 years ago
I like these articles…
part 1 (http://www.securityfocus.com/infocus/1760)
part 2 (http://www.securityfocus.com/infocus/1762)
Also…
(http://www.susserver.com/) has good info. Look for AUBehave.vbs
Probably too basic, but… Do you have other updates approved on the SUS Server? Not just downloaded?
On the client side, check these keys…
HKLM\SW\MS\Win\CurrentVersion\WindowsUpdate\Auto Update\AUState
HKLM\SW\MS\Win\CurrentVersion\WindowsUpdate\Auto Update\LastWaitTimeout
AUState indicates the state of the client. The values are…
0 – Initial 24 hour timeout (AU Wizard will wait)
1 – Waiting for user to run AU wizard from System Tray
2 – Detect pending
3 – Download pending (waiting for user to accept pre-download prompt)
4 – Download in progress
5 – Install pending
6 – Install complete
7 – Disabled
8 – Reboot pending (Reboot was declined)
LastWaitTimeout indicates the next time (?) the client will contact the server for updates.
about 7 years ago
I’ve received several comments about things like this – if you reboot enough times (30 should do it) then all of a sudden it will start working and not prompt anymore!
On a more useful point, check that the user has local admin rights (or log on as an administrator user to get this particular patch installed on the box), make sure there is enough free space on the c: drive and clear out internet explorer cache directories etc. There is also a “windows update log.txt” (or similar name) in the winnt directory that may also give you more of a clue.
Does it download *all* the updates or just the one?
about 7 years ago
Alex, great information. The AUBehave.vbs script was a great tool.
Here’s the values from it:
about 7 years ago
Your client is connecting to the server specified. The client will talk to the server every 17-22 hours and download updates as applicable (via BITS when the system is inactive [as defined by BITS]). The client will install downloaded updates at 10 am. The client is currently waiting to contact the server.
That’s pretty much what you want to see on the client. “Dude, I’m waiting to talk to the server. Leave me alone.”
Andy’s right, there is a log. (%system%\Windows Update.log). New entries are appended. In it, you can verify your client is talking to your server. You can also see if the client is having problems downloading the patch.
There’s also event logging. The 2nd SecurityFocus article has details.
Last, there’s C:\ProgFiles\Windows Update. Look for a cabs directory under here. If it exists, then the patch is either still downloading or waiting for the scheduled install time (10am).
Not certain this is a Windows Update client problem.
Could be a MDAC patch problem. The SMS list on MyITForum (now listleague.com) has talked about this recently. But I’m not remembering the details.
Verify your SUS server has more than the MDAC patch approved. (https://server/susadmin) Select “View Approval Log” from the left-hand pane.
Try installing that one patch manually? Make sure it’s installed. Then see what SUS does?
about 7 years ago
Hey Alex,
Thanks again for the great info. I figured that what I had set-up is what we wanted to see.
In the log, there isn’t anything terribly impressive. A general error (Error 0×80190194) which MS says “don’t worry about it”. And lots of succesful downloads of the manifest and iuhist.xml file.
Next, I have on “C:\ProgFiles\Windows Update” on my machine (yes, progfiles== Program Files, I know).
I had tried MYITForum… But was unable to post. Got errors on both IE and Firebird.
As far as approved patches, yeah, it’s got all 3000 updates or whatever approved ;)
Also, no other patches come down to my computer from the server. It’s not just that the MDAC is being updated daily. It’s that other ones aren’t being applied either.
All updates that are currently available on the server are approved (I know you’re asking because you have to).
I’ve also installed the patch manually, to the same effect.
Thanks again, sorry that I couldn’t be more helpful. This is ticking me off and I’ve been through the ringer on it several times trying to troubleshoot. I prefer to ask for help after I’ve had a serious go at a problem.
In this case I’m just out of ideas :|
about 7 years ago
Jeremy,
A bunch (all?) of the MyITForum lists recently moved to List League (http://www.listleague.com/). That’s probably why you couldn’t post earlier.
The SMS list is very active & filled with plenty ultra-knowledgable folks.
The SUS list is less active.