WSUS and PowerShell

Hello Everyone,
       I have a Windows 2008 R2 WSUS server with WSUS 3.0 sp2 installed. Recently Microsoft released an update for the IE vulnerability (KB2964358) which affects all versions of Internet Explorer. I have released the update
to all our windows machines and would like to report on which machines still need the update. The problem is the built in reporting does not have the ability to produce such a report. Does anyone have any ideas on how to accomplish this task with PowerShell?
Any assistance would be greatly appreciated.

Hi Flite23,
I’m writing to just check in to see if the suggestions were helpful. If you need further help,
please feel free to reply this post directly so we will be notified to follow it up.
If you have any feedback on our support, please click here.
Best Regards,
Anna
TechNet Community Support

Similar Messages

  • WSUS and Windows Update

    In a workgroup environment, no domain, no group policy, cannot configure registry key on the client.
    From my management machine I want to run a powershell script to download patches from a specific patch group in wsus onto this new machine and install the patches.
    How can I achieve this with Powershell?
    How do I approve patches using powershell.

    Hi VicVmware,
    In my expression, you want to download patches from WSUS server to a workgroup hasn't configured WSUS client.
    We can approve patches on WSUS server with Powershell script in this thread:
    Approve patches in WSUS by powershell
    $updatescope = New-Object Microsoft.UpdateServices.Administration.UpdateScope
    $updatescope.FromCreationDate = [datetime]"3/13/2012 5:00:00 PM"
    $Group = $wsus.GetComputerTargetGroups() | where {$_.Name -eq 'TestGroup'}
    $wsus.GetUpdates($UpdateScope) | ForEach {
    Write-Host ("Approving {0} for {1}" -f $_.Title,$Group.Name) -Fore Green -Back Black
    $_.Approve('Install',$Group)
    However, if you haven't configured the WSUS client, it's also difficult to download patches from WSUS server via script.
    In addition, for a workgroup you can try to manually download patches from here:
    http://catalog.update.microsoft.com/v7/site/Home.aspx
    If there is anything else regarding this issue, please feel free to post back.
    Best Regards,
    Anna Wang
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • WSUS and SQL login failures

    We're having problems with the WSUS configuration.
    In the wcm.log:
    System.Data.SqlClient.SqlException (0x80131904): Login failed for user 'domain\localmachine$'.~~   at Microsoft.UpdateServices.Internal.BaseApi.SoapExceptionProcessor.DeserializeAndThrow(SoapException soapException)~~   at Microsoft.UpdateServices.Internal.DatabaseAccess.AdminDataAccessProxy.ExecuteSPGetConfiguration()~~  
    at Microsoft.UpdateServices.Internal.BaseApi.UpdateServerConfiguration.Load()~~   at Microsoft.UpdateServices.Internal.ClassFactory.CreateWellKnownType(Type type, Object[] args)~~   at Microsoft.UpdateServices.Internal.ClassFactory.CreateInstance(Type
    type, Object[] args)~~   at Microsoft.UpdateServices.Internal.BaseApi.UpdateServer.GetConfiguration()~~   at Microsoft.SystemsManagementServer.WSUS.WSUSServer.SetUpstreamServerSettings(Boolean SyncFromMicrosoftUpdate, Boolean ReplicaServer,
    String UpstreamWSUSServerName, Int32 UpstreamWSUSServerPortNumber, Boolean UseSSL, Boolean HostBinariesOnMU, Int32 ReportingLevel, Int32 MaximumAllowedComputers)~~ClientConnectionId:00000000-0000-0000-0000-000000000000
    Remote configuration failed on WSUS Server.
    In the softwaredistribution.log file:
    2014-02-06 20:49:29.092 UTC    Error    WsusService.8    SusEventDispatcher.DispatchManagerDatabasePollingThreadProc    SusEventDispatcher got exception while polling database. Polling will continue:
    Excpetion details: System.Data.SqlClient.SqlException (0x80131904): Login failed for user 'domain\localmachine$'.
    Of course, these errors are causing the sync to fail as well.
    SQL is installed on the site server.  We have a separate database for WSUS.  This is on SCCM 2012 R2, SQL 2012.  The localmachine$ is the site server.
    In the SQL management studio, the site server is in the Security\logins.  So my question is, what rights (and where) should the site server have?  Under the Databases\SUSDB\Security\Users should the site server be added?  If so, what default
    schema should it have?
    Or under the "dbo" user, should I change the login name to the site server?  The login name for dbo is listed as another account and I think this is where the issue is, but I'm definitely not a SQL person and I don't have anyone here to ask....
    thanks

    So, you used a separate instance of SQL Server for the WSUS DB?
    If so, is that instance remote from the WSUS instance
    It's interesting that you say that as for some reason, WSUS was installed on 2 of the SCCM servers - once on the site server and then again on another server.  I'm not sure why as I didn't install SCCM and/or WSUS here but I'm trying to understand why
    this was done.  SQL is on the site server, so we have the site db, the SUSDB, Reportserver and ReportServerTempDB. 
    On the site server there's a folder for WSUS which has the UpdateServicesPackages and the WsusContent folders.  The SUP resides on the primary site server.
    So, I removed the WSUS from the non-site server (and now I think this may be what broke things).
    I guess I have 3 choices -
    Try to keep WSUS on the site server and get it working
    Try and put WSUS back on the other server and see if it fixes things
    Uninstall WSUS and the SUP and start over

  • Can we re-activate Adobe patches once expired in SCUP and syncronized to WSUS and SCCM 2012 as expired?

    Hi,
    I expired a couple of Adobe patches in SCUP and published them in WSUS. They got synchronized in WSUS and SCCM as expired. After about two weeks those expired patches got cleaned from SCCM ( at least from UI).
    I want to activate them again in SCUP and re-publish as active patches in SCCM. But its not working - I've tried WSUS cleanup and  SCUP cleanup already!
    Is there any way to re-active expired patches published by SCUP in WSUS and SCCM ? & How?
    Excerpt from SCUP.Log:
    PublishItem: Item 'Reader Multi Lingual User Interface 10.1.4 Update (UpdateId:'5c22235f-a3d9-48db-95eb-a60ec1886e8e' Vendor:'Adobe Systems, Inc.' Product:'Adobe Reader')' is on the update server and is expired, no publish actions are possible.

    The key here is knowing WHY those updates were "expired" in the first place.
    Most likely they were expired because they superseded another update. If so, merely duplicating and publishing won't achieve anything, because the duplicated/re-published update will also be superseded and get promptly expired again.
    Ergo, if expired because superseded, the superseding package will need to be customized to remove the supersession references and it also will need to be republished, which also means that certain other considerations may need to be taken as well ... such
    as the fact that you now have multiple packages that will conflict with one another that no longer have the requisite supersession metadata.
    Regarding this scenario. Configuration Manager 2012 introduced the option to NOT EXPIRE superseded updates, or to defer the expiration for a specified number of days. This is not a SCUP thing; it's a ConfigMgr thing.
    Configure the ConfigMgr product to behave the way you desire. Problem solved. :)
    If YOU actually expired them in SCUP... then just UNEXPIRE them and republish. Shouldn't be any need to duplicate and republish. This is what Microsoft does all the time. Expire Update 'A' Rev 100 on Monday; publish Update 'A' Rev 101 on Patch Tuesday.
    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

  • WSUS and WU at the same time

    Hi
    Is there a solution to have WSUS and Windows Update active at the same time?
    I'm using the build 10041 and I tried some reg settings 
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\UX]
    "IsConvergedUpdateStackEnabled"=dword:00000000
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings]
    "UxOption"=dword:00000000
    but they do not work anymore. We need to have WSUS for some patches but still wanna update the Technical build from MS, but I can't fins a way of having both active?
    Regards
    Lasse

    Hi lasse_Nilsson,
    Based on what I know, Windows 10 is not supposed to be supported by WSUS by now.
    If it will work, you may try to change the following registry key:
    HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU
    UseWUServer
    Range = 0|1
    1 = The computer gets its updates from a WSUS server.
    0 = The computer gets its updates from Microsoft Update.
    The WUServer value is not respected unless this key is set.
    This value would be modified by group policy, you may consider to write a logon script.
    Reference:
    Configure Automatic Updates using Registry Editor
    Best regards
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Commands not working on CMD and PowerShell

    Hi IT Folks,
    I'm running windows 8.1 x64 machine. All apps are working fine. But I'm having trouble on using command prompt and powershell.
    I can't use any command on command prompt, unless I'll run in it as administrator. It's kind a weird because my account is a member of domain admin group.
    Also my powershell, native command of windows won't run on powershell.
    Please hepl. thanks.
    akosijesyang - the conqueror

    Hi,
    How about your problem now? Is Brain's suggestion helpful?
    If you had any other question, please feel free let us know.
    Roger Lu
    TechNet Community Support

  • Real-world experience with Exchange 2010 SP3 RU5+ and Powershell 4?

    The support-ability matrix for Exchange (http://technet.microsoft.com/en-us/library/ff728623(v=exchg.150).aspx) says Exchange
    2010 SP3 RU5+ and Powershell 4 are compatible.  But, there is very little actual discussion about how well that works. 
    I use Powershell extensively for mission critical and somewhat complex processes, with Exchange 2010 on 2008 R2 and AD access/reads/updates. 
    Can I get a summary of the caveats and benefits from someone who has actually done this in a
    real-world/production scenario (more than one server, managing from a separate non-Exchange server), and who has scripting experience with this configuration?  
    Also, how has this affected EMC operations?  
    As always thank you in advance!  

    I believe the matrix states that its supported to install Exchange into an environment where __ version of WMF is present.  Exchange 2010, launched from a Win 2012 server, reports version 2.0 when you call $host.  For example, calling the ActiveDirectory
    module from EMS on an Win 2012 server (ps 3.0) fails.
    I'll double check the extent of this scenario and get back to you.
    Mike Crowley | MVP
    My Blog --
    Planet Technologies

  • Download the Update from WSUS and install it while rebooting the Windows 7

    HI All,
          Do we have any command to install the
    already Downloaded  Update from WSUS while rebooting the Windows 7 client machine
    As per the group policy it will download and notify the user to install, but we need the command or script to install it while rebooting 
    Any comments or Idea...?
    Thanks
    Balaji

    Hi,
    Please take a check into the following thread and see if the marked answer(the powershell commands) would help:
    How to install approved WSUS updates via
    PowerShell or other method.
    Best regards
    Michael Shao
    TechNet Community Support

  • Sharepoint 2010 search service from C# web service and Powershell - passing credentials to search

    Good morning everyone,
    I really need your expert help about the following issue. I ve developed a web service in C#. Its core code has a Powershell script inside which makes a call to SharePoint 2010 search service to make some search queries, and returns some URL of some files. 
    In Powershell code I make connection to SharePoint search service using the Farm Admin account. This system works, but given results are not filetered by the user using the web service (I remember you I m using the Farm admin account in PS code)
    How can I use user account to make some queries ? How can I filter search results by user ? In Powershell code I put username and password of Farm Admin account and I know them because I m the farm administrator, but
    what about if I want to pass Powershell code some other user credentials ? Of course I cannot know his credential ..  Can I do it , in which way ?
    Any help is really appreciated !
    Gae 

    Hi Gae, if you are using web services, you shouldn't need to add a SharePoint DLL to your project. I would advise against using C# -> PS -> Web Service Call -> PS -> C# if you could go straight C# -> Web Service -> C#.
    Anyways, back to the matter at hand. Do you know what type of authentication your SharePoint server is running? Is it direct NTLM, NTLM over Kerberos, Claims, or something different?
    The following article provides the various types of impersonation available in SharePoint:
    http://extreme-sharepoint.com/2012/05/30/impersonation-elevation-of-privileges/
    Dimitri Ayrapetov (MCSE: SharePoint)

  • WSUS and Office 2013 Home and Business

    Hello all,
    I've actually set up Microsoft MDT 2013 to deploy OSes and Application for my company. This includes Office 2013 Home and Business (Click-2-Run version).
    I've downloaded O2013 media with Office Deployment Toolkit, customized it to be deployed automatically through a network share, and then made it available through MDT 2013.
    Everything runs fine, except one thing : Our WSUS server offers Office 2013 updates to our windows clients. It becomes very painfull, as  it takes a loooong time to apply theses updates. Moreover, there are useless.
    3 points : 
    On my Office 2013 H&B customization file, I've decided to disable any Office 2013 update through the XML File. Without success.
    <Updates Enabled="FALSE" />
    According to Microsoft, Click-2-Run software does not use WSUS channel.
    I don't know it it's usefull, but my WSUS server is hosted on a Windows 2008 R2 Server.
    Thanks for your help.

    Our WSUS server offers Office 2013 updates to our windows clients. It becomes very painfull, as  it takes a loooong time to apply theses updates.
    What are those updates? Have them got installed successfully?
    As you already know, Office 365 is not patched via WSUS, it pulls updates from Microsoft CDN server which is a web-based service. Therefore, even WSUS downloaded those updates, they should be marked as "Not Applicable".
    Do you have any other MSI-based Office instances on the machine?
    Regards,
    Ethan Hua
    TechNet Community Support
    It's recommended to download and install
    Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
    programs.

  • WSUS and click-to-run

    Is there a reason Microsoft chose to subvert WSUS by building a separate update system in Office 2013 click-to-run versions?
    Ken Kemp Eddy County, NM IT

    What I understand is that it automatically applies updates with no input from the user or IT.  That sounds like a potential problem to me for the same reason we use WSUS rather than setting all our computers to automatically install every
    update Microsoft puts out.
    Yep... which is why the CTR versions of Office are generally only SKU-ed for consumers and small businesses.
    Enterprise SKUs provide MSI installers and support patching via WSUS.
    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

  • WSUS and Windows 8.1 pro

    Hi, I have WSUS on Windows Server 2008 r2 with sp1. My laptop runs Windows 8.1 Pro x64. I have noticed that for a long time I have not seen
    Install Updates and Shut Down option when I want to shut down my laptop. In control panel there is information that updates are downloaded with an option to install these updates by clicking on
    Install. I have checked this on test Windows 8.1 Pro x64 virtual machine and the situation is the same -
    Install Updates and Shut Down option is not there but in control panel there are many downloaded updates waiting to be installed by clicking on
    Install. What is wrong here? 

    Hi,
    Choose your desktop, press Alt+F4, is there an option “Update and shutdown/restart”?
    Notification message should be displayed on logon screen. If there is nothing displayed, I would suspect either no updates available or connectivity issue
    between clients and WSUS.
    Please review windowsupdate.log and share with us.

  • Datawarehouse job run forever and powershell doesn't allow to enable

    It seems that my datawarehouse jobs was running forever without any report producing. I check the jobs enabled and it tell "no" every job except MPSyncJob. Every job status is running as "running" or "not started". I tried to enable the datawarehouse jobs
    by powershell cmdlets. When I ran Get-SCDWJob or Enable-SCDWJob the error always appear as following.
    Get-SCDWJob : Parse error before eof
    At line:1 char:12
    + get-scdwjob <<<<
        + CategoryInfo          : OperationStopped: (SCSMMAIN:DataWarehouseManagem
       entGroup) [Get-SCDWJob], QueryGrammarException
        + FullyQualifiedErrorId : Unable to retrieve job list,Microsoft.Enterprise
       Management.Warehouse.Cmdlets.GetSCDWJob
    In the event viewer showed this detail
    Log Name:      Operations Manager
    Source:        OpsMgr SDK Service
    Date:          6/27/2012 11:15:01 AM
    Event ID:      26319
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      SCSMMAIN.scsm.vm
    Description:
    An exception was thrown while processing GetDataWarehouseOrchestrationJobs for session ID uuid:6513011d-4b46-42f1-a2cc-c28836851029;id=17.
     Exception message: Parse error before eof
     Full Exception: Microsoft.EnterpriseManagement.Common.QueryGrammarException: Parse error before eof
       at Microsoft.EnterpriseManagement.Mom.QueryGrammar.QueryGrammarYaccClass.error(Int32 q_state, SSLexLexeme q_look)
       at Microsoft.EnterpriseManagement.Mom.QueryGrammar.SSVParseLib.SSYacc.doError()
       at Microsoft.EnterpriseManagement.Mom.QueryGrammar.SSVParseLib.SSYacc.parse()
       at Microsoft.EnterpriseManagement.Mom.QueryGrammar.QueryGrammarParser.GetCriteriaXml(String query)
       at Microsoft.EnterpriseManagement.ServiceDataLayer.DataWarehouseJobService.GetDataWarehouseOrchestrationJobs(String criteria, Int32 numberOfBatches)
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="OpsMgr SDK Service" />
        <EventID Qualifiers="49152">26319</EventID>
        <Level>2</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2012-06-27T04:15:01.000000000Z" />
        <EventRecordID>2139</EventRecordID>
        <Channel>Operations Manager</Channel>
        <Computer>SCSMMAIN.scsm.vm</Computer>
        <Security />
      </System>
      <EventData>
        <Data>GetDataWarehouseOrchestrationJobs</Data>
        <Data>uuid:6513011d-4b46-42f1-a2cc-c28836851029;id=17</Data>
        <Data>Parse error before eof</Data>
        <Data>Microsoft.EnterpriseManagement.Common.QueryGrammarException: Parse error before eof
       at Microsoft.EnterpriseManagement.Mom.QueryGrammar.QueryGrammarYaccClass.error(Int32 q_state, SSLexLexeme q_look)
       at Microsoft.EnterpriseManagement.Mom.QueryGrammar.SSVParseLib.SSYacc.doError()
       at Microsoft.EnterpriseManagement.Mom.QueryGrammar.SSVParseLib.SSYacc.parse()
       at Microsoft.EnterpriseManagement.Mom.QueryGrammar.QueryGrammarParser.GetCriteriaXml(String query)
       at Microsoft.EnterpriseManagement.ServiceDataLayer.DataWarehouseJobService.GetDataWarehouseOrchestrationJobs(String criteria, Int32 numberOfBatches)</Data>
      </EventData>
    </Event>
    Any suggestion? I stuck at here for one week now.

    I have the same problem with the parser error before eof and unable to retrieve job list but when i try:
    get-scdwjob -jobname dwmaintenance -computername MySmServer -dwserver MyDwServer
    I get:
    A parameter cannot be found that matches parameter name 'dwserver'
    I have a feeling that something needs an update and/or is mismatched but I don't know what or where to start.

  • MALWARE AND POWERSHELL

    Has anyone ever seen or know of any malware, virus, or downloadable executable that was written with Powershell? I recently experienced a few contiguous events that all point to either malware or virus attempt when I clicked on an image of a pot belly
    pig (I know right).
    This is what happened:
    1.) Click on little piggy picture and Netflix freezes up then doesn't respond.
    2.) Keyboard becomes unresponsive; I pulled the cable from the NIC card.
    3.) Then a dialog box popped up stating that Powershell had become unresponsive (something like that) and provided a list of errors; this occurred almost immediately after I disconnected from the internet.
    4.) So I decided to deal with this unexplainable chain of events at a later date. Now I need to get some Visual Studio 2013 files off of the computer that this occurred on, so I start it back up and open up VS it goes through the start up process
    then tells me that my license has gone "stale", that's right the word stale. Has Microsoft ever used the word stale to describe the state of a license for any product?
    5.) After the VS license warning again the dialog box for Powershell pops up telling me that Powershell has stopped unexpectedly (I can make it do it again) and it gives me a list of errors.
    So, for me anyway, all of these events are adding up to something wrong and since this all occurred after a click on a pig picture I can't get it out of my head that I have experienced some type of intrusion.
    almost forgot... My VS is via an MSDN subscription so I know the license is valid.
    Anyway... Thoughts and notions are appreciated.
    James Remick

    Has anyone ever seen or know of any malware, virus, or downloadable executable that was written with Powershell? I recently experienced a few contiguous events that all point to either malware or virus attempt when I clicked on an image of a pot belly
    pig (I know right).
    This is what happened:
    5.) After the VS license warning again the dialog box for Powershell pops up telling me that Powershell has stopped unexpectedly (I can make it do it again) and it gives me a list of errors.
    So, for me anyway, all of these events are adding up to something wrong and since this all occurred after a click on a pig picture I can't get it out of my head that I have experienced some type of intrusion.
    Anyway... Thoughts and notions are appreciated.
    James Remick
    James - you actually stated the cause right here. An intrusion.  This is typical malware behavior.  You have been invaded.  Do you have kids that visit gaming sites? Were you on a public server like a small company support server or some private
    site that may not be well managed?
    These are likely places to trip over this kind of invasion.  Clearing the browser cache and running up-to-date AV software will usually fix these older kinds of exploits.
    I have a test machine that I use to test AV releases. I have a list of known sites in China and Eastern Europe that are good injectors of a dozen know browser exploits.  I test to be sure that the malware is detected and that the session does not freeze. 
    I have seen many messages like yours andhave had the browser lock up.
    I have used PowerShell and VS for many years and never had an issue.  I also do not use a browser in an elevated or admin session.  I run as a standard user and avoid most public sites that I am not familiar with.
    I don't think you need to worry about PowerShell.  Reset your browser and run an AV scan.  He problem will likely be cleared.  Be sure to disable SSL 3.0 but leave TLS selected.
    ¯\_(ツ)_/¯

  • Exchange 2010 Public Folders Cannot Change Permissions Errors from Management Console and Powershell

    This problem does not affect new public folders, only old ones that have probably been on Exchange 2000/2003 servers in the past. Migrations I believe did go smoothly but now have errors.
    Error Reported is:
    Microsoft Exchange Error
    The following error(s) occurred while saving changes:
    Add-PublicFolderClientPermission
    Failed
    Error:
    Failed to modify the MAPI.NET table property of the object "000000001A447390AA6611CD9BC800AA002FC45A030064004E9CC2F8DD46B5E1E4578DE6D8030000000278E90000" on server "FQDN.Server.Name". See inner exception for more information.
    MapiExceptionNonCanonicalACL: Unable to modify table. (hr=0x80004005, ec=2409)
    Diagnostic context:
        Lid: 40487   EMSMDBMT.EcDoRpcExt2 called [length=218]
        Lid: 56871   EMSMDBMT.EcDoRpcExt2 returned [ec=0x0][length=356][latency=0]
        Lid: 23226   --- ROP Parse Start ---
        Lid: 27962   ROP: ropModifyACL [64]
        Lid: 17082   ROP Error: 0x969    
        Lid: 27745 
        Lid: 21921   StoreEc: 0x969    
        Lid: 27962   ROP: ropExtendedError [250]
        Lid: 1494    ---- Remote Context Beg ----
        Lid: 26426   ROP: ropModifyACL [64]
        Lid: 22086 
        Lid: 27128 
        Lid: 27232   StoreEc: 0x8004010F
        Lid: 27128 
        Lid: 27232   StoreEc: 0x8004010F
        Lid: 22086 
        Lid: 21970   StoreEc: 0x8004010F PropTag: 0x3D210102
        Lid: 19149   Error: 0x0
        Lid: 24509   Error: 0x0
        Lid: 31229   Error: 0x0
        Lid: 21970   StoreEc: 0x8004010F PropTag: 0x668F0040
        Lid: 6671    StoreEc: 0x8004010F
        Lid: 24976 
        Lid: 24952 
        Lid: 25472 
        Lid: 7972    StoreEc: 0x969    
        Lid: 26532 
        Lid: 4920    StoreEc: 0x969    
        Lid: 5119    StoreEc: 0x969    
        Lid: 5247    StoreEc: 0x969    
        Lid: 17916   StoreEc: 0x969    
        Lid: 4814    StoreEc: 0x969    
        Lid: 1750    ---- Remote Context End ----
        Lid: 26849 
        Lid: 21817   ROP Failure: 0x969    
        Lid: 29150 
        Lid: 20446   StoreEc: 0x969    
    OK
    From ExFolders we get error "Exception: Object Reference not set to an instance of an object"
    Any thought on how to fix permissions, people who already had permission in the past can see and access them OK and all objects, but we cannot change/update or remove permissons
    We alos receive similar error from the powershell.

    Hi,
    Could
    you please  add a new public folder hierarchies with ADSIEdit as following setups.
    For how to use ADSIEdit ,you can access:
    http://technet.microsoft.com/en-us/library/cc773354(WS.10).aspx
    1.Run ADSIEdit, right click Exchange Administrative Group under “Configuration \ services \ Microsoft
    Exchange \ Organization name \ Administrative groups”.
    2.Select New Object.
    3.Select msExchPublicFolderTreeContainer for the class and click Next.
    4.Enter the following for the value:
    Folder Hierarchies, click Next.
    5.Click Finish.
    6.Create
    Public Folder Tree Object.
    7.Right click CN=Folder Hierarchies -> New Object.
    8.Selected msExchPFTree for the class.
    9.For the value we entered, "Public Folders" and clicked next.
    10.Clicked on the "More Attributes" button, selected msExchPFTreeType .
    11.Set the value
    to 1.
     Note: This is very important that this value is set
    to a value of 1 as This tells Exchange that this is a MAPI Tree.
    12.Click Ok and then finish.
    13.We then went
    to the properties of the newly created "Public Folders" Tree object in
    ADSIEdit.
    14.Copy the distinguished name value
    to the clipboard and then click cancel.
    15.Navigate
    to the Storage group that contains the Public
    Folder Store for this server and get properties of the server.
    16.Locate the msExchOwningPFTree attribute and paste in the value that was copied
    from the Public folders Distinguish name attribute.
    17.Restart the Information Store Service.
    18.Mounted and dismount the PF store.
    19.Open Outlook with administrator,give full permission to default owner.
    Hope it can help you!

Maybe you are looking for