WSUS Issues in SCCM 2012 environment

Hi Folks
I have a WSUS server running in a secure environment. Because i have no access to the internet from this server i use an upstream server for my update source. We have used another WSUS server as our upstream box for a while without issue but our company
has now gone to SCCM 2012 and i so i am now using this as my update source. This works well with synchronisations working without issue.
My problem is that within the wsus console the computers are showing with updates available but when i go to the computer and run windows update it states no updates are available. also looking in the windowsUpdate logs it states 0 updates found!!
I thought this was because i was using a w2008R2 wsus server so i have built another wsus server based on w2012r2 and this has exactly the same results. if i point the server back to use my other wsus server as an upstream server it all works and updates
are available on the computers.
Has anybody else had this issue and more importantly is there a fix? i dont want to use sccm for updates direct so i need to get this working.
my computers looking for updates are all w2008r2. my wsus server is w2008r2 and i also have a w2012r2 wsus server for testing. the sccm 2012 server is based on w2012r2 box all are x64
thanks

Hi,
>>My problem is that within the wsus console the computers are showing with updates available but when i go to the computer and run windows update it states no updates are available.
Please make sure that the Update is approved for the specific group and the client are in the correct group.
Beside, please check if the update file has been downloaded on the WSUS server. The update will be available until it has been downloaded.
Best Regards.
Steven Lee Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Similar Messages

WSUS installation on SCCM 2012 R2

For the life of us we cannot install WSUS on our SCCM 2012 R2 server.
We tried the \wsusutil.exe postinstall SQL_INSTANCE_NAME="ABC\SUSDB" CONTENT_DIR=X:\WSUS
We keep getting this error message below, and the highlighted part is the problem.
The account we are using has access to 'local admin' rights of the SCCM box. Also access to SQL
We have the proper permissions on the folder, adding also Network Service, etc.
We cannot get WSUS up and running and keep hitting a wall.   It will not create WSUS website
Any suggestions would help.
014-01-31 22:49:42 Setting content location...
2014-01-31 22:49:42 Fetching ContentDir from registry store
2014-01-31 22:49:42 Value is W:\WSUS
2014-01-31 22:49:42 Swtching DB to multi-user mode......
2014-01-31 22:49:42 Finished setting multi-user mode
2014-01-31 22:49:42 Writing DB settings to registry...
2014-01-31 22:49:42 Marking PostInstall done for UpdateServices-WidDatabase in the registry...
2014-01-31 22:49:42 Starting service W3SVC
2014-01-31 22:49:43 Configuring IIS...
2014-01-31 22:49:43 Start: ConfigureWebsite
2014-01-31 22:49:43 Configuring website on port 8530
2014-01-31 22:49:43 System.ComponentModel.Win32Exception (0x80004005): The system cannot find the file specified
   at System.Diagnostics.Process.StartWithShellExecuteEx(ProcessStartInfo startInfo)
   at System.Diagnostics.Process.Start(ProcessStartInfo startInfo)
   at Microsoft.UpdateServices.Administration.UseCustomWebSite.ExecuteIisCustomAction(String arguments)
   at Microsoft.UpdateServices.Administration.UseCustomWebSite.Install(Int32 portNumber)
   at Microsoft.UpdateServices.Administration.UseCustomWebSite.InstallAndConfigure(IisConfiguration& iisConfiguration, Int32 newPortNumber)
   at Microsoft.UpdateServices.Administration.PostInstall.ConfigureWebsite(Int32 portNumber)
   at Microsoft.UpdateServices.Administration.PostInstall.Run()
   at Microsoft.UpdateServices.Administration.PostInstall.Execute(String[] arguments)

Have you seen
http://social.technet.microsoft.com/Forums/windowsserver/en-US/e1003863-e331-46da-8803-e8625bb6324b/server-2012-wsus-postdeployment-configuration-fails-comprehending-the-log-file?forum=winserverwsus ?
Jason | http://blog.configmgrftw.com

Adobe Creative Cloud Enterprise Deployment Issues using SCCM 2012 R2

Hi,
I have been trying to deploy Adobe Creative Cloud Enterprise to Windows 8.1 machines that are identical, using SCCM 2012 R2.
The Adobe package seems fine, because it seems to deploy successfully to some machines. And SCCM 2012 R2 has been configured correctly, as I can deploy other software using it, and again, it deploys Adobe CC successfully to some of the machines.
I have tried comparing the package that is downloaded on the test machine/client machine, with the original package on the distribution point, using Beyond Compare, and there are no differences.
I have contacted Adobe Enterprise Support, and they asked me to send to them log files from Event Viewer, the msi installer, and other Adobe logs, from the machine that failed the deployment. However, after Adobe studying them, they told me that they could not identify any problems... Strange, because I could have sworn that I saw error 1603 pop up over 20 times on different machines indicating that the 'Set-up.dat' file had a problem with it.
After all the testing on over 20 identical machines (same hardware/same software), using different configurations on SCCM 2012 R2 and the client machines, I still can't seem to have a reliable solution to deploying Adobe CC.
The fact that it deploys successfully on one machine and fails on another, or sometimes deploy to two machines and fail on another (simultaneously), is something that I don't understand.
Another thing is that, if I retry the deployment 10-15 times after it failed the first time, it might go through...
Adobe Enterprise Support asked me if they could remote into a machine that failed the deployment to have a look at it and I agreed to that option, but it seems like my issue has been ignored because they never got back to me.
Has anyone had this kind of problem or anything similar before?
I need to be able to deploy this remotely to 100+ machines. So installing manually is not an option.
Any help is appreciated.
This was posted in the wrong section a few days ago. I'm hoping I can get some help here.
Case Number: 1862659812
UPDATE: I spoke to Adobe Customer Support and after 1.5 hours on the phone with a remote session going on, problem was still not solved or identified. Additional log files have been sent and now I'm waiting for a call back.

Hi Robert,
We seem to be having a very similar issue. Our installs would randomly fail with error code 1603 and an error message about a fault in Set-up.dat. Failure rate was near 95% on our 900 machines. Adobe Support and Karl having been looking into our issues but so far no solution has been found.
Having done a lot of investigating we've managed to deploy our package using a schedule task running as a domain admin. This is a nasty solution and we don't intend on using this permanently, but we needed to get the package out.
Are you seeing any of the following:
Entries in PDApp.log:
[FATAL] | | ASU | DeploymentManager | DeploymentManager | | | 2900 | The Bootstrapper Process is (5).Stopping the installation process.
[FATAL] | | ASU | DeploymentManager | DeploymentManager | | | 2900 | The return code from the Adobe Installer Process is (33).Stopping the uninstallation process.
[WARN] | | ASU | DeploymentManager | DeploymentManager | | | 2900 | Failed to find the pdb database.
[WARN] | | ASU | DeploymentManager | DeploymentManager | | | 2900 | Failed to get the local payload database handle.
Event Log:
Faulting application name: Set-up.dat, version: 2.9.1.474, time stamp: 0x54e11f94
Faulting module name: Set-up.dat, version: 2.9.1.474, time stamp: 0x54e11f94
Exception code: 0xc0000005
Fault offset: 0x000d7c52
Faulting process id: 0xb40
Faulting application start time: 0x01d072a073861622
Faulting application path: \\server.name.path\Adobe CC\FullPackage\Build\ASU\Set-up.dat
Faulting module path: \\server.name.path\Adobe CC\FullPackage\Build\ASU\Set-up.dat
Report Id: c86d9216-de93-11e4-8284-782bcb99e284
Faulting package full name:
Faulting package-relative application ID:
Installer Log
Indicates it can't find the Media_db. We noticed that the folder C:\Program Files (x86)\Common Files\Adobe\caps doesn't get created on the machines were the install fails, so error message is correct in that there isn't a Media_db.db. Sysinterals Process Monitor seems to show that the setup tried to create the folder/files but they don't actually get created. Copying a Media_db into the folder from another machine seems to allow the installation to almost finish, but unsurprisingly you end up with problems later on.

Remote WSUS integration with SCCM 2012

Hi,
We are currently having WSUS already in place for Patching , but not used at all its just installed.
can remote WSUS be integrated with SCCM 2012 server which is on different server ? what is the best practice ? is it to have WSUS on same server as Primary server?
or I decommission it and install a new WSUS on same server as SCCM server.
what steps have to be taken care if remote WSUS is integrated ? any documents or steps to be taken care .
Thanks in Advance

When you install SUPs, they automatically configure the underlying WSUS instance to sync from an upstream server based upon your ConfigMgr hierarchy.
A couple of notes here though:
- You generally shouldn't use an existing instance of WSUS for ConfigMgr. Once integrated into ConfigMgr, WSUS should no longer manage approvals, update binary downloads, or update binary distribution as these are all handled by ConfigMgr separate from WSUS.
Using an existing WSUS instance where this was the case can be problematic at best and will cause unexpected behavior and results.
- Clients do not choose SUPs based upon boundaries or location so using a remote SUP is typically not beneficial and in many cases will cause additional network load. The exception to this is if the SUP is within a secondary site.
Jason | http://blog.configmgrftw.com | @jasonsandys

Past Due - Will be installed issue in SCCM 2012

Deployment of an application task sequence after the initial OS deployment task sequence is working fine, but several application deployments that is deployed to a role collection does not
install even if they are deployed required and deadline is passed. As you can see from print screen all the jobs is received by the agent, so the question is, why do they not start
installing automatically?
Checked the Computer Agent settings and all the settings were also intact including “Additional Software manages the deployment of application” setting was set to No so there
is something else due to which this is not installing.
Checked in the below post for the same issue
http://blogs.msdn.com/b/rslaten/archive/2013/11/26/past-due-applications-not-installing-in-sccm-2012.aspx#comments
as per it issue may be with Incorrect revision number within any of the task sequences
targeted to a machine. Now how do I find the application with the incorrect revision number in any of the task sequences targeted to the machine?
Also not sure how to go about verifying the correct revision numbers in the task sequences if this is the issue in my case
Please suggest.

Have you checked is there a maintenance window set? - No
Also can they find the content on a DP? Yes
Are the files present on the client in ccmcache? Yes

App v package distribution issue to sccm 2012 DP

Hi,
We are migrating app-v 4.6 packages to sccm 2012 , after importing the packages when we update DP its not copying the dependent scripts inside the appv package to Dp and hence when application launches it fails to launch the vb script.
the script is made to run when shortcut is launched, but no vb script is copied to DP , but I have all files intact in source folder iyt just copies .sprj,xml,osd.
Please suggest how to make all the files in package abcd.001 to get copied in DP.
Does App-v package distribution is different from normal package.
Thanks
Shuaib

Open up the app in the sequencer, add the file to your scripts folder. If the script requires to be run elevated, you'll want to use the Deployment config file and use Global publishing....
If you don't need elevation you can use the User Config and won't need to publish globally.
Fore more info and some examples, check this out:
http://blogs.technet.com/b/appv/archive/2012/12/10/scripting-and-embedded-scripting-for-appv-5-0-dynamic-deployment-and-user-configuration-scripting.aspx
PLEASE MARK ANY ANSWERS TO HELP OTHERS Blog:
rorymon.com Twitter: @Rorymon

OSDCOMputer name issue - MDT2013+SCCM 2012

Hi ,
I have setup Sequence table along with prefix, and a stored procedure to update the computeridentity table, all works fine it updates the sequence number and computer name BUT
i am unable to get the OSDCOMPUTERNAME set to same name as computeridentity table has when its imaged with windows 7 it always sets to default MINIT-xxx name.
i am using stand alone media created form SCCM 2012.
Please suggest how to get the same machine name as updated in Computeridentity table. any settings to be done on CS.ini ?
Thanks
Shuaib

You also need the sections to pull the information from the database.
see this link which explains what happens
http://www.windowsnetworking.com/articles-tutorials/windows-7/Deploying-Windows-7-Part16.html
You will see multiple sections such as CSettings, RSettings etc which will need adding. I would sugest you configure your MDT instance as shown n the above post then copy the relevant sections rom your MDT CustomSettings.ini in to your SCCM CustomSettings.ini
you have shown above.
You obviously need to make sure you amend the priority list to include these new sections.
I hope that makes sense?
Thanks,
Adam

Proper WSUS+SCUP on SCCM 2012 SP1 with SQL 2012

Been pulling my hair out a new build.
System:
Windows 2012
SQL 2012 SP1
WSUS 4.0
SCUP 2011
WSUS itself will synch if I set source= Microsoft Update.
SCCM SUP will synch with if I set source= Microsoft update.
SCUP will not connect to "update server" in this config.
SCUP will not connect if I check connect to local update server. Nor will it when i try to connect to itself as a remote (ie local host or fqdn in Update server screen)
Now whats weird is if I throw a proxy on my spare machine and aim WSUS and SCUP to use it try SUP to FQDNof SCCM host:8530....I can connect
The problem is with the proxy in play I cannot download Dell catalogs as it used FTP not HTTP (Adobe will download though)
Every so often just for fun it will throw "request for principal permission failed.
Anyone that has this working can you please tell me what you have on each of the SUp. WSUS and SCUP screens

Try running SCUP as administrator. This is usually necessary when SCUP is installed on the ConfigMgr/WSUS server and UAC is enabled. heres a guide that may help: http://www.youtube.com/watch?v=fyEGWSFWyy0 using Group Policy is the easiest wat to deploy
the certificates as well.
Justin Chalfant | Blog: setupconfigmgr.com | SCUP Catalog: patchmypc.net/scup | Please mark as helpful/answer if this resolved your issue

Thin Client reporting issues since SCCM 2012 R2 CU3 upgrade.

Please forgive me, I'm a SCCM newbie. I'm having an issue with my Thin Clients reporting back to SCCM since I upgraded to 2012 R2 CU3.
The only pertinent thing I find in any log is "RegTask: Failed to get registration state. Error: 0x8009000b" "GetRegistrationState failed (0x8009000b)" in the ClientIDManagerStartup.log
If anybody has any tips, I would be more than appreciative.

I have not run into this before, but have you validated that your management point is healthy?
This thread has a couple things to try as well:
https://social.technet.microsoft.com/Forums/en-US/0d2e369d-cd93-4145-8db3-e9943c99a4ae/client-property-set-to-no-application-deployment-not-working-issue-with-registering-to-mp?forum=configmanagergeneral
Jeff

WSUS issue on server 2012 - Failing to update and have to set WinHTTP set

Very new to 2012 with little knowledge on the product
We have been seeing an issue for a while where we need to set the WinHTTP proxy in order for servers to correctly check in for WSUS and download patches. This has been set in the Windows 2008 R2 build so hasn't been an issue before. e.g.
However with Windows Server 2012 R2, setting the WinHTTP proxy causes some issues. With Exchange 2013 the PowerShell console does not connect with this set so we need a way around this.
It seems as if the we use the FQDN in the GPO it then tries to go out to the internet thinking that the FQDN is an internet address and then blocked by the proxy so hence we had to create the proxy set on the server. We don't want to have to set WinHTTP
on every 2012 servers as this would be very time consuming and will become un-manageable. Any help is greatly appreciated.

Hello,
What is the version of your WSUS? I suppose windows server 2012 is newly added in your network and the WSUS server is not patched.
An update for Windows Server Update Services 3.0 Service Pack 2 is available (KB2734608)
http://support.microsoft.com/kb/2734608
Hope this helps.

Trouble shooting BOOT issue in SCCM 2012 but I cant find SMSPXE.log in the logfolder

Hi,
Is there an change in PXE troubleshooting PXE PE boot issue, in 2012?
I cant find wat I am used to...
/SaiTech

Hi,
One of our PXE point get some issue, I could not set my finger on it.
I could not find any log file and I expect an smspxe.log in D:\Program Files\SMS_CCM\Logs (Primary site server) so I think something is wrong. The PXE worked after I put .Net 4 on the server.
Is it a secret what you're missing? How should we help you if you don't tell the exact problem?
No secret but I am not sure by my self what state the DP server have.
/SaiTech

Issue with SCCM 2012 SP1 U5 upgrade and client published version

Recently we upgraded our SCCM server to SP1 U5, and our published and available client version is still at 5.00.7804.1000 instead of 5.00.7804.1600. We ran the hotfix to upgrade it and it looked like everything had went through. Does this not also
upgrade the client? It doesn't seem like you can run the hotfix again after you've already installed it once to repair either. Is there another way to update the published version inside the console? We have it as a package right now to deploy to all the systems
but I was hoping we could upgrade the internal one and let it run more automatically. Any advice would be greatly appreciated.

More info:
How to update ConfigMgr clients automatically… in SP1
http://configmgrblog.com/2012/12/03/how-to-update-configmgr-clients-automatically-in-sp1/
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Mac Enrollment Issue on SCCM 2012 SP1

Hi Guys,
I am working on Mac enrollment(10.7) and facing issue during enrollment. Below is the error message when we try to run the enrollment command on Mac :
“Server connection failed. HTTP Response code is 500 and reason is Internal Server Error"
Below are Log info:
Enrollsrv.log : No error message is highlighted.
Enrollweb.log:
No error message is highlighted.
Enrollservice.log:
[7, PID:7304][10/28/2013 16:40:03] :ConfigManager: ChainStatus error: RevocationStatusUnknown,The revocation function was unable to check revocation for the certificate.
;OfflineRevocation,The revocation function was unable to check revocation because the revocation server was offline.
   at Microsoft.ConfigurationManagement.Enrollment.ConfigManager.SplitCACertChain(String base64cert)
   at Microsoft.ConfigurationManagement.Enrollment.ConfigManager.setCAChain(EnrollmentServiceProfile profile, WindowsIdentity requester)
   at Microsoft.ConfigurationManagement.Enrollment.ConfigManager.RefreshCache(Int32 enrollmentProfileId, EnrollmentRecordType type, String template, WindowsIdentity requester)
   at Microsoft.ConfigurationManagement.Enrollment.RequestHandler.ProcessRequestSecurityToken(RequestSecurityTokenType request, WindowsIdentity caller, ActionEnum action)
   at Microsoft.ConfigurationManagement.Enrollment.RequestHandler.EnrollDevice(Message messageRequest)
   at Microsoft.ConfigurationManagement.Enrollment.DeviceEnrollmentService.RequestSecurityToken(Message messageRequest)
[7, PID:7304][10/28/2013 16:40:03] :FaultCode is: EnrollmentServer and reason is: EnrollmentServerException InitializeFailed
[13, PID:7304][10/28/2013 17:11:01] :EnrollmentService application stop ...
[3, PID:956][10/28/2013 17:45:37] :EnrollmentService application start ...
[3, PID:956][10/28/2013 18:06:38] :EnrollmentService application stop ...
[3, PID:4700][10/28/2013 18:45:39] :EnrollmentService application start ...
[7, PID:4700][10/28/2013 19:06:40] :EnrollmentService application stop ...
[3, PID:5872][10/28/2013 19:45:42] :EnrollmentService application start ...
[13, PID:5872][10/28/2013 20:06:42] :EnrollmentService application stop ...
Can someone shed info on resolution of the above issue?
Also, is there any means by which we can troubleshoot the Mac enrollment issue step by step? Also what entries needs to be checked in all logs for successful enrollment?

the following links may give you some hints:
http://social.technet.microsoft.com/Forums/en-US/48bc7fcc-3d84-4042-abac-67f30d701121/mac-enrollment-issue?forum=configmanagerdeployment
http://www.windows-noob.com/forums/index.php?/topic/7391-mac-enrollment-issue/

Enforcement State Unknown issue in SCCM 2012 Patch management report.

Software updates are installed on machine. All updates shown in updates history, but machine not reporting back as Complaint. It showing in Enforcement State Unknown. Please help to resolve the issue.

Hi,
Have you tried to "Run Summarization" while right click the software update group?
If it still shows unknown, please check StateMessage.log on a client that updates show unknown to see whether the state messages have been forwarded successfully.
Best Regards,
Joyce Li
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

System Discovery Issues in SCCM 2012

SCCM is not discovering all resources from AD OU. What could be the reason for this. This is not happening for all OU's but randomly for some of them.
Is there a method to force the system discovery to run instantly ?

Thanks Jason,
I think my query was mixed up.
2) Will the status be NO client ?, If yes, does that mean the complete
cycle will start again? Meaning as the client is already inactive, it will not send any more hearbeat and configmgr will again wait for the specified days before deleting it again ?
I know the difference between AD and Heartbeat discovery. I am trying to get a clear difference between
delete Inactive discovery data and delete
aged discovery data.
I checked a blog, I think this is from you http://www.myitforum.com/forums/Delete-aged-discovery-data-and-delete-inactive-client-discovery-data-m204924.aspx
, where it says "For the Delete Inactive Client Discovery
Data task, if you haven't cleaned up AD, the object will get recreated (without the client installed flag). If you auto client push enabled, ConfigMgr will try to push to the system again"
What I get from here is, client status will be NO when it is rediscovered from AD.
Now if the machine was already deleted with Delete Inactive discovery data maintenance task, and its rediscovered, the client will again become Inactive as the machine is
not in use. Will the Inactive discovery maintenance task wait again for defined days before it deletes this machine from the database.

WSUS Issues in SCCM 2012 environment

Similar Messages

Maybe you are looking for