Wsus Configure Windows Update Client.


All the post is redirect to client side actions only.

The client gathers all the information in this folder %Windir%\SoftwareDistribution, in my case folder content has 184 MB.

You can check all the history of Windows update in a particularity Client by reading the content of this file: “ReportingEvents.log”. In this particularly log file I have logs from May 2009. See next some examples about what you can read:

...AutomaticUpdates    Success    Software Synchronization    Windows Update Client successfully detected 23 updates...
...AutomaticUpdates    Success    Pre-Deployment Check    Reporting client status...
...MicrosoftUpdate     Success    Content Download    Download succeeded...
...Installation successful and restart required for the following update: Update for Windows Server 2003 (KB2345886)...
...AutomaticUpdates    Failure    Software Synchronization    Windows Update Client failed to detect with error 0x80072ee2...
...MicrosoftUpdate     Success    Content Install    Unhide update: user unhid one update...
...MicrosoftUpdate     Success    Content Install    Hide update: user hid one update...

Every time that Automatic Updates Service is started, this directory will be checked and if not present will be recreated, and all the folders and content, so there is no problem to delete it, (you will lose all information, even logs), but when it is occupying to much space in Disk is a solution to free some space.

You can delete the entire folder using this procedure.

From command prompt run 
net stop wuauserv
del c:\windows\SoftwareDistribution /q /s
net start wuauserv

After this process folder has not more them 10 MB, and you saved some space.Be aware that the information to hide certain update will be lost, and no detailed information will be available.

Configuring your client to connect and register in Wsus.

You can do this using Group Policy’s if you have an Active Directory Infra Structure or by changing registry keys, in stand alone clients.

Using Group Policy’s.

Read more about this option here http://support.microsoft.com/kb/328010/en-us

Under Computer configuration \ administrative templates \ windows components \ windows update

Under user configuration \ administrative templates \ windows components \ windows update

Using Registry.

First is need to stop service.

From command prompt run 
net stop wuauserv

Under this key create or change values if present that you need to.

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate

Read more about about all options here. http://technet.microsoft.com/en-us/library/cc708449%28v=ws.10%29.aspx

Start Service

From command prompt run 
net start wuauserv

Connect and register in WSUS

From command prompt run 
wuauclt.exe /detectnow

Wait a few minutes and the icon of available updates will appear.

Read more about wuauclt.exe options here http://technet.microsoft.com/en-us/library/cc708617%28v=ws.10%29.aspx.

Under the next key is the information related to Client ID and Validation ID

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate

This is the script that I normally use to manage Wsus Client configurations

net stop wuauserv
del c:\windows\SoftwareDistribution /q /s

To ensure that old configuration is clean, delete all information and ID’s.

REG DELETE HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v SusClientId /f
REG DELETE HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v SusClientIdValidation /f

Add parameters that in my case I’m interested.

REG ADD HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v WUServer /d http://wsusserver
REG ADD HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v WUStatusServer /d http://wsusserver
REG ADD HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /v ScheduleInstallDay /d 0
REG ADD HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /v ScheduleInstallTime /d 1
REG ADD HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /v TargetGroup /d mygroup
REG ADD HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /v TargetGroupEnabled /t REG_DWORD /d 00000001
REG ADD HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /v NoAutoUpdate /t REG_DWORD /d 00000000
REG ADD HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /v AUOptions /t REG_DWORD /d 00000002
REG ADD HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /v ScheduledInstallDay /t REG_DWORD /d 00000000
REG ADD HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /v ScheduledInstallTime /t REG_DWORD /d 00000003
REG ADD HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /v UseWUServer /t REG_DWORD /d 00000001
REG ADD HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /v DetectionFrequencyEnabled /t REG_DWORD /d 00000001
REG ADD HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /v DetectionFrequency /t REG_DWORD /d 00000008
REG ADD HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /v ElevateNonAdmins /t REG_DWORD /d 00000000

Start Service and register in Wsus.

net start wuauserv
wuauclt.exe /resetauthorization /detectnow

Read here about some known errors related with windows update. http://support.microsoft.com/kb/2509997/en-us

Read here about WSUS. http://technet.microsoft.com/en-us/library/cc708429%28v=ws.10%29.aspx

Read more editing registry here http://support.microsoft.com/kb/136393/en-us

Read more about REG ADD here http://technet.microsoft.com/en-us/library/cc742162%28v=ws.10%29.aspx

Hope that this information can be useful.

Read more about about all options here. http://technet.microsoft.com/en-us/library/cc708449%28v=ws.10%29.aspx

Advertisements

About rodvars
Been working in IT Services/Consulting for the past 15 years. My main areas of work are planning, development, managing and administration System infrastructures focusing on optimizing user processes, enforcing business security, performance enhancements, high availabilty and infrastucture scalability.

2 Responses to Wsus Configure Windows Update Client.

  1. Normally I don’t learn article on blogs, but I wish to say that this write-up very pressured me to check out and do so! Your writing taste has been amazed me. Thank you, quite nice post.

  2. Latesha Bond says:

    I am going to take note of your weblog and come back frequently.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: