Hi,

I just noticed that about an hour ago my WSUS server (during its regular synchronization with Microsoft servers) expired 187 updates.

On rare occasions it has expired a lot of updates, (including one time in January 453) but this me a little concerned about the health of my WSUS.

Recently, the Updated Services (WSUSService) has been stopped unexpectedly and so I have been monitoring it more. I will be replacing this server with SCCM "soon," so I haven't worried much about the stopping of this service and just started it manually.

Is the number of expired updates something to be concerned about?

Thanks for any insight,

SA.

Hya,

We have a WSUS server setup up in our main domain. which recives updates from MS.

We have created another WSUS server in another domain with no internet access. This server is connected to the other WSUS as a downstream server. But not as a replica just syncronises updates.

There is no trust between the two domains and when I setup the downstream server I obviously opted  not to select SSL.

The downstream server shows the amount of updates etc. but any clients connecting get the following error:

continued:

A can telnet to the server from the clients on port:8530 and the server is therefore listening on that port.

Could someone explain what the error could be ?

cheers Mike

Hi all,

I have a WSUS server installed and it is joined to a domain. Another user from domain needs to connect to this WSUS server using a WSUS Management console. What rights does this user needs to be given on WSUS server so that he would be able to connect to server and be able to release patches?

Regards, Darshan G. Parab

Hi,

I'm running WSUS on Windows Server 2012 R2 and it basically works the way I want, with one exception: For the Windows 8.1 clients (and only them) the needed count is always much higher than for the other clients. I have verified that the updates actually are installed on the client, and they are. But most of them are still listed as needed in WSUS.

This has been going on ever since we started to get Windows 8.1 clients in our network, at which time WSUS was running on Windows Server 2012 and showed the Windows 8.1 clients with their real version number (6.3). The WSUS server was then upgraded in place to Windows Server 2012 R2. Could this be the problem?

Regards,
Jan Boström

Is it safe to do regular maintenance, such as re-indexing the WSUS database, when WSUS is used in conjunction with Configuration Manager 2012?

WSUS Version: 6.2.9200.16384running onWindows Server 2012. WSUS Database is on a separate server running SQL Server 2012.This is all setup in conjunction with Configuration Manager 2012 SP1 CU2.<o:p></o:p>

jack

Our WSUSContent folder is approximately 34GB in size. Since we've recently replaced our last Windows XP workstation I wanted to remove all of the Windows XP updates from WSUS and release the disk space used by these.

I followed the WSUS reset steps here, which included deleted the contents of the WSUSContent folder (http://blogs.technet.com/b/gborger/archive/2009/02/27/what-to-do-when-your-wsuscontent-folder-grows-too-large.aspx).

I also removed all of the Windows XP selections from the classifications list.

However now that the reset process has completed I've noticed that the WSUSContent folder is still 34GB. I was expecting it to be a bit less than this given there should be no Windows XP updates present now.

I ran all of the steps in the server clean-up wizard as well but this didn't make any difference.

Has anyone else come across this?

I don't work for Microsoft - I just use their products.

After installing Server 2012 Standard on ESX 5.1 I completed all available Windows Updates and proceeded to add the WSUS role.  I chose the default WID database and the role addition was seemingly successful.  Unfortunately, the Post-deployment Configuration failed.  A log file had been created in the AppData\Local\Temp folder but at initial glance it seemed to imply that my error was likely due to skipping a step during installation via PowerShell.  However, I didn't install using PowerShell and I set off to surf the Internets for clues on resolving this issue.  I searched about a dozen forums that with similar, but different issues until a comment by Lawrence Garvin (http://social.technet.microsoft.com/profile/lawrence%20garvin/?ws=usercard-inline) convinced me to go back and look at my log. 

2013-07-23 11:03:18  Postinstall started
2013-07-23 11:03:18  Detected role services: Api, UI, WidDatabase, Services
2013-07-23 11:03:18  Start: LoadSettingsFromXml
2013-07-23 11:03:18  Start: GetConfigValue with filename=UpdateServices-Services.xml item=ContentLocal
2013-07-23 11:03:18  Value is true
2013-07-23 11:03:18  End: GetConfigValue
2013-07-23 11:03:18  Start: GetConfigValue with filename=UpdateServices-Services.xml item=ContentDirectory
2013-07-23 11:03:18  Config file did not contain a value "ContentDirectory"
2013-07-23 11:03:18  Microsoft.UpdateServices.Administration.CommandException: A required configuration value was not found in the system. This is usually caused by installing WSUS through PowerShell and not specifying a configuration file. Review the article Managing WSUS Using PowerShell at TechNet Library (http://go.microsoft.com/fwlink/?LinkId=235499) for more information on the recommended steps to perform WSUS installation using PowerShell.
   at Microsoft.UpdateServices.Administration.PostInstall.GetConfigValue(String filename, String item)
   at Microsoft.UpdateServices.Administration.PostInstall.LoadSettingsFromXml()
   at Microsoft.UpdateServices.Administration.PostInstall.Initalize(Parameters parameters)
   at Microsoft.UpdateServices.Administration.PostInstall.Execute(String[] arguments)
Fatal Error: A required configuration value was not found in the system. This is usually caused by installing WSUS through PowerShell and not specifying a configuration file. Review the article Managing WSUS Using PowerShell at TechNet Library (http://go.microsoft.com/fwlink/?LinkId=235499) for more information on the recommended steps to perform WSUS installation using PowerShell.

Upon closer inspection the specifics of my error were right there for me, I just had to look at it long enough to decipher the details.  What I now read is that Post-deployment configuration finds a file called UpdateServices-Services.xml (I found it in Windows\System32\ServerManager\ComponentConfiguration\).  It determines that ContentLocal=True which correctly indicates that my updates are to be stored locally.  It proceeds to inquire about the ContentDirectory, but comes back without a value.  Here are my UpdateServices-Services.xml file contents

<?xml version="1.0" encoding="utf-16"?><INSTANCE CLASSNAME="ServerComponent_UpdateServices_Services"><PROPERTY NAME="ContentDirectory" TYPE="string"></PROPERTY><PROPERTY NAME="ContentLocal" TYPE="boolean"><VALUE>true</VALUE></PROPERTY></INSTANCE>

I can see that the ContentLocal property did indeed have the value true, but the ContentDirectory property did not have a value.  I now needed to figure out if a String value could be specified in the same way a Boolean value was, or if it needed quotes around it, or was supposed to be specified more like an attribute (learned about that somewhere along the way).  I couldn't find any conclusive websites, and I didn't want to just try it for fear of the Post-deployment configuration running with an invalid ContentDirectory.  Once again I returned to my log file and searched for answers at the http://go.microsoft.com/fwlink/?LinkId=235499 that was indicated.  I didn't find any exact matches, but eventually I found a sample .xml file that specified a string value.  It specified it as <VALUE>string</VALUE> with no brackets, so I knew to specify mine as <VALUE>C:\LocalMSUpdateCache</VALUE> and saved it.  My UpdateServices-Services.xml now looks like this:

<?xml version="1.0" encoding="utf-16"?><INSTANCE CLASSNAME="ServerComponent_UpdateServices_Services"><PROPERTY NAME="ContentDirectory" TYPE="string"><VALUE>C:\LocalMSUpdateCache</VALUE></PROPERTY><PROPERTY NAME="ContentLocal" TYPE="boolean"><VALUE>true</VALUE></PROPERTY></INSTANCE>

I returned to Server Manager -> WSUS and re-attempted the Postdeployment configuration.  It completed successfully!

I'm glad that my fix was relatively simple and that Lawrence was particular about the details of the log file. 

1. My exact error isn't always going to be documented

2. Just because the log file looks unintelligible (I have thus far avoided both powershell and xml), doesn't mean it's useless.

Good luck to anyone with a similar issue.  You too may be able to figure it out yourself.

Shahidul

I have an issue on Windows Server 2008 R2 SP1 which is vCenter server.

Installation Failure: Windows failed to install the following update with error 0x800f0818: Update for Windows Server 2008 R2 x64 Edition (KB2454826).

I run Solarwinds Diagnostic Tool for the WSUS with following result:

My customer configured WSUS server to "Not to save update file locally", so after detected update from WSUS, client tried to download update files from Microsoft Update; due to no internet access, client failed to finish the downloading.

Now customer changed WSUS server to "save update file locally". Client can detect the approved update on WSUS, but client still tried to download file from MU, but not from WSUS.

Due to large number of impacted clients in workgroup, customer does not accept the workaround to remove local SoftwareDistribution on client (it could work per test result). He would like to make client recover automatically without any manual aciton on client computer.

I tried to change WSUS server ID. The client detected "ServerChanged", but it still stubbornly tried to download update files from MU, not from WSUS. It seems declining and re-approving updates also not working.

My questions:

1. Is there any way to automatically make client recover and download update file from WSUS?

2. By default, how long will client cache the old information and then recover from such situation automatically?

Dear All,

I'm unable to update FEP 2010 client with the error code 0x80244019. The client is updated from its WSUS server and it is integrated with SCCM. Please find the below windowsupdate.log. Your help will be much helpful to me.

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Jay :)

Hi all,

I've landed myself in some hot water by breaking our WSUS server, unfortunately I'm at a loss as to where to go from here and was hoping someone who has some more knowledge of WSUS workings might be able to point me in the right direction.

I have WSUS 3.0 (3.2.7600.226) running on Server 2008 R2. The server also hosts our SCCM environment. As we are rolling out FEP 2010 I updated the server with SP1 and the the other critical / security updates that were available after doing so (bunch of .NET 3.5 fixes). Since this update however, the WSUS server is unable to synchronise updates. I receive the following message:

WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: No connection could be made because the target machine actively refused it 65.54.51.180:443
at System.Net.HttpWebRequest.GetRequestStream(TransportContext& context)
   at System.Net.HttpWebRequest.GetRequestStream()
   at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
   at Microsoft.UpdateServices.ServerSyncWebServices.ServerSync.ServerSyncProxy.GetAuthConfig()
   at Microsoft.UpdateServices.ServerSync.ServerSyncLib.InternetGetServerAuthConfig(ServerSyncProxy proxy, WebServiceCommunicationHelper webServiceHelper)
   at Microsoft.UpdateServices.ServerSync.ServerSyncLib.Authenticate(AuthorizationManager authorizationManager, Boolean checkExpiration, ServerSyncProxy proxy, Cookie cookie, WebServiceCommunicationHelper webServiceHelper)
   at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.SyncConfigUpdatesFromUSS()
   at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.ExecuteSyncProtocol(Boolean allowRedirect)

Unfortunately I'm unable to find much on this message out on the web (regarding the no connection could be made part). We had synchronisations errors in the past that ended up being a proxy error, unfortunately I do not control this proxy so I cannot check if it's getting stuck there - I have logged a request with the team that does however. Just to clarify - WSUS is not configured to use a proxy, it is set to sync directly from MS Updates, however a direct exception is made on the proxy for this server.

I have tried uninstalling the .NET updates from the Server, but haven't gone so far as to remove the SP1 installation yet. I did notice there was a WSUS update available (KB2720211), which I applied, however the installation failed and this broke the console altogether, so I fixed that issue and reinstalled WSUS on the box, still no love however.

Can anyone out there offer up some suggestions? Many Thanks.

he following updates fail to install on a Windows Server 2003 Standard Edition SP2 file server.

Security Update for Microsoft .NET Framework 1.1 SP1 on Windows Server 2003 and Windows Server 2003 R2 x86 (KB2901115)

Security Update for Microsoft .NET Framework 1.1 SP1 on Windows Server 2003 and Windows Server 2003 R2 x86 (KB2898860)

KB2901115 log

0.453: 2014/03/12 08:22:46.429 (local)
0.453: C:\WINDOWS\SoftwareDistribution\Download\9d53f804e0198422c019c40c49b12668\update\update.exe (version 6.3.4.1)
0.453: Failed To Enable SE_SHUTDOWN_PRIVILEGE
0.453: Hotfix started with following command line: -q -z -er /ParentInfo:5a4383affe66c049ae6dc7084f9ad5a2 
0.453: In Function GetBuildType, line 1170, RegQueryValueEx failed with error 0x2
0.453:  Exec SP1QFE.SP1Check.Section: Result SOFTWARE\Microsoft\NET Framework Setup\NDP\v1.1.4322 Key Not Found 
0.453: Condition Check for Line 1 of PreRequisite returned FALSE 
0.469: ReadStringFromInf: UpdSpGetLineText failed: 0xe0000102
0.469: KB2901115 Setup encountered an error:  Setup cannot continue because one or more prerequisites required to install KB2901115 failed. For More details check the Log File c:\windows\KB2901115.log
0.469: ReadStringFromInf: UpdSpGetLineText failed: 0xe0000102
0.469: Setup cannot continue because one or more prerequisites required to install KB2901115 failed. For More details check the Log File c:\windows\KB2901115.log
0.469: Update.exe extended error code = 0xf0f4

KB2898860.log

0.359: 2014/03/12 08:22:46.929 (local)
0.359: C:\WINDOWS\SoftwareDistribution\Download\796443382934bf8f75f7c098c5fe7023\update\update.exe (version 6.3.4.1)
0.359: Failed To Enable SE_SHUTDOWN_PRIVILEGE
0.359: Hotfix started with following command line: -q -z -er /ParentInfo:549ffa455131174dba2210fe16739168 
0.359: In Function GetBuildType, line 1170, RegQueryValueEx failed with error 0x2
0.359:  Exec SP1QFE.SP1Check.Section: Result SOFTWARE\Microsoft\NET Framework Setup\NDP\v1.1.4322 Key Not Found 
0.359: Condition Check for Line 1 of PreRequisite returned FALSE 
0.359: ReadStringFromInf: UpdSpGetLineText failed: 0xe0000102
0.359: KB2898860 Setup encountered an error:  Setup cannot continue because one or more prerequisites required to install KB2898860 failed. For More details check the Log File c:\windows\KB2898860.log
0.359: ReadStringFromInf: UpdSpGetLineText failed: 0xe0000102
0.359: Setup cannot continue because one or more prerequisites required to install KB2898860 failed. For More details check the Log File c:\windows\KB2898860.log
0.359: Update.exe extended error code = 0xf0f4

I would really appreciate any help on this matter.

Kind Regards

Chris

I have been struggling for a long time now doing updates on Remote Desktop Session Host servers. I have WSUS installed and that works. The server is Win 2008R2 SP1. It starts with about 130 updates to do. If I try to select them all and update, it basically all fails. If I do them one by one, most of them work. Then once in a while, one fails. I skip it and install other updates and eventually go back to that one and eventually it works. It's really tedius and just not workable. The error code is 80070643.

I updated other servers which never had Remote Desktop Session Host role installed on them (such as a Domain Controller). No problem. Select 150 updates, let it roll, done.

I tried all tips and ticks I found on the web.

Windows Update Log: http://pastebin.com/iAiizcF5
CBS Log: https://drive.google.com/file/d/0Bwg5PJ3oN9n0elgyb2xLVDJlUG8/edit?usp=sharing

• I create the msi with AdvancedInstaller. For that I copy all the content from the folder Mozilla Firefox of that version from another computer with that version already installed.
  Thanks!

Hey Guys,

I was trying to put together a script to report status of WSUS client updates after OS patching activity and found this: http://get-mailbox.net/wsus-reporting-with-powershell-part-3

Script I am running is embedded below. Upon running it in PS on WSUS server, I get this loads of MethodException errors.  PowerShell Transcript output embeded below for review. I had to add/delete lot of " ` " characters but still hitting an unknown roadblock. Can someone please review script and associated errors and advise how to get this working? Also, if this is an inferior script, I welcome you to point me to something better.

SCRIPT:

###########################
$wsusserver = "ZIDCWSUS01"
# load the WSUS assembly:
[void][reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration") | Out-Null
#
# connect to WSUS and set the connection into a variable for future use. 
# Use $true to force a connection via SSL
# enter the port number to be used.
$WSUS = [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer($wsusserver,$False)
#
# In order to make some queries within WSUS we’ll be using the GetSummariesPerComputerTarget method
# This method requires a computer scope and additionally we will be using an update scope to refine the query.
# First create a default update scope and then modify it only include the latest approved revisions.
$UpdateScope = New-Object Microsoft.UpdateServices.Administration.UpdateScope
$UpdateScope.ApprovedStates = [Microsoft.UpdateServices.Administration.ApprovedStates]::LatestRevisionApproved
#
# create the computer scope
$ComputerScope = New-Object Microsoft.UpdateServices.Administration.ComputerTargetScope
#
#Return the groups that you have established in the WSUS console:
$WSUS.GetComputerTargetGroups()
#
# Identify one of the group ids and use Where-Object to filter a specific group and set it into a variable. 
# Then enumerate all the members of the group:
$ComputerTargetGroups = $WSUS.GetComputerTargetGroups() | Where {$_.id -eq 'aa60f906-b555-4b81-bd3b-a050fde63ce8'}
$MemberOfGroup = $wsus.getComputerTargetGroup($ComputerTargetGroups.Id).GetComputerTargets()
#
# You will now have detailed information about each computer object that is a member of your WSUS group stored in the $MemberOfGroup variable.
# We’ll use this to find out what updates are needed for the members of this group
# Now query a group in WSUS and provide a summary of computers that need updates from the most recent synchronization.
# Create empty arrays to contain collected data.
$UpdateStatus = @()
$SummaryStatus = @()
#
# Use a foreach loop to process summaries per computer for each
#  member of the "Email Servers" group. Then populate an array
#  with a updates needed.
Foreach ($Object in $wsus.GetSummariesPerComputerTarget($updatescope,$computerscope)) {
    # Use a nested foreach to process the Mail Servers members.
    Foreach ($object1 in $MemberOfGroup){
        # Use an if statement to match the wsus objects that contains update summaries with
    #  the members of the Mail servers members.
        If ($object.computertargetid -match $object1.id) {
        # Set the fulldomain name of the Mail Server member in a variable.
        $ComputerTargetToUpdate = $wsus.GetComputerTargetByName($object1.FullDomainName)
        # Filter the server for updates that are marked for install with the state
        #  being either downloaded or notinstalled.  These are updates that are needed.
        $NeededUpdate = $ComputerTargetToUpdate.GetUpdateInstallationInfoPerUpdate() | where {($_.UpdateApprovalAction -eq "install") -and 
    (($_.UpdateInstallationState -eq "downloaded") -or 
    ($_.UpdateInstallationState -eq "notinstalled"))}
    # Null out the following variables so that they don't contaminate
    #  op_addition variables in the below nested foreach loop.
    $FailedUpdateReport = $null
    $NeededUpdateReport = $null
     # Use a nested foreach loop to accumulate and convert the needed updates to `
     # the KB number with URL in an HTML format.
     if ($NeededUpdate -ne $null){
      foreach ($Update in $NeededUpdate){
       $myObject2 = New-Object -TypeName PSObject
       $myObject2 | add-member -type Noteproperty -Name Server -Value (($object1 | select -ExpandProperty FullDomainName) -replace ".get-mailbox.net", "")
       $myObject2 | add-member -type Noteproperty -Name Update -Value ('<a>' + (($wsus.GetUpdate([Guid]$update.updateid)).title) + '<' + '/' + 'a' + '>')
       $UpdateStatus += $myObject2
      if ($Update.UpdateInstallationState -eq "Failed"){
       $FailedUpdateReport += ('</a><a>' + "(" + (($wsus.GetUpdate([Guid]$update.updateid)).KnowledgebaseArticles) + ") " + 

'<' + '/' + 'a' + '>')
      }
      if ($Update.UpdateInstallationState -eq "Notinstalled" -or $Update.UpdateInstallationState -eq "Downloaded"){
 $NeededUpdateReport += ('</a><a>' + "(" + (($wsus.GetUpdate([Guid]$update.updateid)).KnowledgebaseArticles) + ") " + '<' + 

'/' + 'a' + '>')
      }
     }
    }
    # Create a custom PSObject to contain summary data about each server and updates    needed.
    $myObject1 = New-Object -TypeName PSObject
    $myObject1 | add-member -type Noteproperty -Name Server -Value (($object1 | select -ExpandProperty FullDomainName) -replace ".d1.na.ihs.gov", "")
    $myObject1 | add-member -type Noteproperty -Name UnkownCount -Value $object.UnknownCount
    $myObject1 | add-member -type Noteproperty -Name NotInstalledCount -Value  $object.NotInstalledCount
    $myObject1 | add-member -type Noteproperty -Name NotApplicable -Value $object.NotApplicableCount
    $myObject1 | add-member -type Noteproperty -Name DownloadedCount -Value $object.DownloadedCount
    $myObject1 | add-member -type Noteproperty -Name InstalledCount -Value $object.InstalledCount
    $myObject1 | add-member -type Noteproperty -Name InstalledPendingRebootCount -Value $object.InstalledPendingRebootCount
    $myObject1 | add-member -type Noteproperty -Name FailedCount -Value $object.FailedCount
    $myObject1 | add-member -type Noteproperty -Name ComputerTargetId -Value $object.ComputerTargetId
    $myObject1 | add-member -type Noteproperty -Name NeededCount -Value ($NeededUpdate | measure).count
    $myObject1 | add-member -type Noteproperty -Name Failed -Value $FailedUpdateReport
    $myObject1 | add-member -type Noteproperty -Name Needed -Value $NeededUpdateReport
    $SummaryStatus += $myObject1
    }
  }
}
# Only return the values that are most interesting.
$SummaryStatus | select server,notinstalled*,downloaded*,installedpending*,failed*,needed* | ft
# Filtering the returned data a little further and then using some HTML formatting to send an acceptable looking report.
# Filter the results to trim down the report.
# Use HTML formatting to prepare an email.
# Send the report via an HTML formatted email.
# Record the last time that WSUS was syncronized with updates from Microsoft.
 $LastSync = ($wsus.GetSubscription()).LastSynchronizationTime
# Rewrite the array and eliminate servers that have 0 for needed updates.
 $SummaryStatus = $SummaryStatus | where {$_.neededcount -ne 0} | sort server
# List a summary of changes in a special table leveraging the "First" table class style listed above.
 $WSUSHead += "<table class=`"First`">`r`n"
 # Note the LastSync time.
 $WSUSHead += "<tr><td class=`"First`"><b>Last Sync:</b></td><td class=`"First`">" +
 $LastSync + "</td></tr>`r`n"
 $WSUSHead += "</Body>`r`n"
 $WSUSHead += "</Style>`r`n"
 $WSUSHead += "</Head>`r`n"
# Create a generic HTML Header to use throughout the script for the body of the 
 #  email message with table styles to control the formatting of any tables present it it.
 $HTMLHead = "<Html xmlns=`"http://www.w3.org/1999/xhtml`">`r`n"
 $HTMLHead += "<Head>`r`n"
 $HTMLHead += "<Style>`r`n"
 $HTMLHead += "TABLE{border-width: 1px;border-style: outset;border-color: `
 black;border-spacing: 1px;border-collapse: separate;}`r`n"
 $HTMLHead += "TH{border-width: 1px;padding: 1px;border-style:
 inset;border-color: black;}`r`n"
 $HTMLHead += "TD{border-width: 1px;padding-left: 3px;padding-right: `
 3px;border-style: inset;border-color: black;}`r`n"
 $HTMLHead += "TABLE.First{border-style: none;}`r`n"
 $HTMLHead += "TD.First{border-style: none;}`r`n"
 $HTMLHead += "</Style>`r`n"
 $HTMLHead += "</Head>`r`n"
 $HTMLHead += "<Body>`r`n"
# Build a variable with HTML for sending a report.
 $UpdatesHTML = $HTMLHead
 # Continue building HTML with the updates needed
 $UpdatesHTML += $SummaryStatus | convertto-html -Fragment 
 @{Label="Server";Expression={$_.server}}, @{Label="Needed Count";Expression={$_.NeededCount}}, @{Label="Not 

Installed";Expression={$_.NotInstalledCount}}, `
 @{Label="Downloaded";Expression={$_.DownloadedCount}}, @{Label="Pending Reboot";Expression=

{$_.InstalledPendingRebootCount}}, @{Label="Failed Updates";Expression={$_.FailedCount}}, `
 @{Label="Needed";Expression={$_.Needed}}
# Add an assembly to fix up powershell HTML markup. Ensures all special characters
 # are converted correctly.
 Add-Type -AssemblyName System.Web
 $UpdatesHTML = [System.Web.HttpUtility]::HtmlDecode($UpdatesHTML)
# Create HTML email by adding all the various HTML sections from above.
 $MailMessage= "<html><body>
 $WSUSHead
 $UpdatesHTML</body></html>"
# Get the date and time.
 $DateTime = Get-Date -Format "ddd MM/dd/yyyy h:mm tt"
 # Set subject line to include the $DateTime variable.
 $EmailSubject = "Update Status for " + $DateTime
# Send an email with all the compiled data.
 [string[]] $EmailTo = "XXXXXXXXy@YYYYYY.com"
 Send-MailMessage -To $EmailTo `
 -Subject $EmailSubject -From "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXX" `
 -Body $MailMessage -BodyasHTML `
 -SmtpServer "MailRelayServer"

ERRORS (truncated to fit):

**********************
Windows PowerShell Transcript Start
Start time: 20140313193454
Username  : ZIDCWSUS01\P12345 
Machine	  : ZIDCWSUS01 (Microsoft Windows NT 6.1.7601 Service Pack 1) 
**********************
Transcript started, output file is D:\Scripts\output.txt
PS D:\Scripts> .\WSUS_Report_2.ps1

UpdateServer                            Id                                      Name                                   
------------                            --                                      ----                                   
Microsoft.UpdateServices.Internal.Ba... cedbf2-a30e-4f0d-82c8-008a8069f    ABC                                     
Microsoft.UpdateServices.Internal.Ba... b7ed-5727-47f3-84de-015e03f688a    Unassigned Computers                   
Microsoft.UpdateServices.Internal.Ba... e97deb-848f-4d23-9709-084896736    DEF                     
Microsoft.UpdateServices.Internal.Ba... ae9ba0-0604-4cec-a2eb-0a967ae3b    GHI                                    
Microsoft.UpdateServices.Internal.Ba... 7c1c2-7ec7-4eed-a086-0b6067757a    Blah Blah                         
Microsoft.UpdateServices.Internal.Ba... 79eaf-397e-41ca-98-0df676767955    Test01                                 
                                
Cannot convert argument "0", with value: "", for "GetComputerTargetGroup" to type "System.Guid": "Cannot convert null t
o type "System.Guid"."
At D:\Scripts\WSUS_Report_2.ps1:26 char:46+ $MemberOfGroup = $wsus.getComputerTargetGroup <<<< ($ComputerTargetGroups.Id).GetComputerTargets()+ CategoryInfo          : NotSpecified: (:) [], MethodException+ FullyQualifiedErrorId : MethodArgumentConversionInvalidCastArgument
Exception calling "GetComputerTargetByName" with "1" argument(s): "Specified argument was out of the range of valid val
ues.
Parameter name: Specified argument was out of the range of valid values.
Parameter name: name"
At D:\Scripts\WSUS_Report_2.ps1:45 char:64+         $ComputerTargetToUpdate = $wsus.GetComputerTargetByName <<<< ($object1.FullDomainName)+ CategoryInfo          : NotSpecified: (:) [], MethodInvocationException+ FullyQualifiedErrorId : DotNetMethodException
You cannot call a method on a null-valued expression.
At D:\Scripts\WSUS_Report_2.ps1:48 char:83+         $NeededUpdate = $ComputerTargetToUpdate.GetUpdateInstallationInfoPerUpdate <<<< () | where {($_.UpdateApprova
lAction -eq "install") -and + CategoryInfo          : InvalidOperation: (GetUpdateInstallationInfoPerUpdate:String) [], RuntimeException+ FullyQualifiedErrorId : InvokeMethodOnNull
Exception calling "GetComputerTargetByName" with "1" argument(s): "Specified argument was out of the range of valid val
ues.
Parameter name: Specified argument was out of the range of valid values.
Parameter name: name"
At D:\Scripts\WSUS_Report_2.ps1:45 char:64+         $ComputerTargetToUpdate = $wsus.GetComputerTargetByName <<<< ($object1.FullDomainName)+ CategoryInfo          : NotSpecified: (:) [], MethodInvocationException+ FullyQualifiedErrorId : DotNetMethodException
You cannot call a method on a null-valued expression.
At D:\Scripts\WSUS_Report_2.ps1:48 char:83+         $NeededUpdate = $ComputerTargetToUpdate.GetUpdateInstallationInfoPerUpdate <<<< () | where {($_.UpdateApprova
lAction -eq "install") -and + CategoryInfo          : InvalidOperation: (GetUpdateInstallationInfoPerUpdate:String) [], RuntimeException+ FullyQualifiedErrorId : InvokeMethodOnNull
Exception calling "GetComputerTargetByName" with "1" argument(s): "Specified argument was out of the range of valid val
ues.
Parameter name: Specified argument was out of the range of valid values.
Parameter name: name"
At D:\Scripts\WSUS_Report_2.ps1:45 char:64+         $ComputerTargetToUpdate = $wsus.GetComputerTargetByName <<<< ($object1.FullDomainName)+ CategoryInfo          : NotSpecified: (:) [], MethodInvocationException+ FullyQualifiedErrorId : DotNetMethodException
You cannot call a method on a null-valued expression.
At D:\Scripts\WSUS_Report_2.ps1:48 char:83+         $NeededUpdate = $ComputerTargetToUpdate.GetUpdateInstallationInfoPerUpdate <<<< () | where {($_.UpdateApprova
lAction -eq "install") -and + CategoryInfo          : InvalidOperation: (GetUpdateInstallationInfoPerUpdate:String) [], RuntimeException+ FullyQualifiedErrorId : InvokeMethodOnNull
Exception calling "GetComputerTargetByName" with "1" argument(s): "Specified argument was out of the range of valid val
ues.
Parameter name: Specified argument was out of the range of valid values.
Parameter name: name"
At D:\Scripts\WSUS_Report_2.ps1:45 char:64+         $ComputerTargetToUpdate = $wsus.GetComputerTargetByName <<<< ($object1.FullDomainName)+ CategoryInfo          : NotSpecified: (:) [], MethodInvocationException+ FullyQualifiedErrorId : DotNetMethodException
You cannot call a method on a null-valued expression.
At D:\Scripts\WSUS_Report_2.ps1:48 char:83+         $NeededUpdate = $ComputerTargetToUpdate.GetUpdateInstallationInfoPerUpdate <<<< () | where {($_.UpdateApprova
lAction -eq "install") -and + CategoryInfo          : InvalidOperation: (GetUpdateInstallationInfoPerUpdate:String) [], RuntimeException+ FullyQualifiedErrorId : InvokeMethodOnNull
Exception calling "GetComputerTargetByName" with "1" argument(s): "Specified argument was out of the range of valid val
ues.
Parameter name: Specified argument was out of the range of valid values.
Parameter name: name"
At D:\Scripts\WSUS_Report_2.ps1:45 char:64+         $ComputerTargetToUpdate = $wsus.GetComputerTargetByName <<<< ($object1.FullDomainName)+ CategoryInfo          : NotSpecified: (:) [], MethodInvocationException+ FullyQualifiedErrorId : DotNetMethodException
You cannot call a method on a null-valued expression.
At D:\Scripts\WSUS_Report_2.ps1:48 char:83+         $NeededUpdate = $ComputerTargetToUpdate.GetUpdateInstallationInfoPerUpdate <<<< () | where {($_.UpdateApprova
lAction -eq "install") -and + CategoryInfo          : InvalidOperation: (GetUpdateInstallationInfoPerUpdate:String) [], RuntimeException+ FullyQualifiedErrorId : InvokeMethodOnNull
Exception calling "GetComputerTargetByName" with "1" argument(s): "Specified argument was out of the range of valid val
ues.
Parameter name: Specified argument was out of the range of valid values.
Parameter name: name"
At D:\Scripts\WSUS_Report_2.ps1:45 char:64+         $ComputerTargetToUpdate = $wsus.GetComputerTargetByName <<<< ($object1.FullDomainName)+ CategoryInfo          : NotSpecified: (:) [], MethodInvocationException+ FullyQualifiedErrorId : DotNetMethodException
You cannot call a method on a null-valued expression.
At D:\Scripts\WSUS_Report_2.ps1:48 char:83+         $NeededUpdate = $ComputerTargetToUpdate.GetUpdateInstallationInfoPerUpdate <<<< () | where {($_.UpdateApprova
lAction -eq "install") -and + CategoryInfo          : InvalidOperation: (GetUpdateInstallationInfoPerUpdate:String) [], RuntimeException+ FullyQualifiedErrorId : InvokeMethodOnNull
Exception calling "GetComputerTargetByName" with "1" argument(s): "Specified argument was out of the range of valid val
ues.
Parameter name: Specified argument was out of the range of valid values.
Parameter name: name"
At D:\Scripts\WSUS_Report_2.ps1:45 char:64+         $ComputerTargetToUpdate = $wsus.GetComputerTargetByName <<<< ($object1.FullDomainName)+ CategoryInfo          : NotSpecified: (:) [], MethodInvocationException+ FullyQualifiedErrorId : DotNetMethodException
You cannot call a method on a null-valued expression.
At D:\Scripts\WSUS_Report_2.ps1:48 char:83+         $NeededUpdate = $ComputerTargetToUpdate.GetUpdateInstallationInfoPerUpdate <<<< () | where {($_.UpdateApprova
lAction -eq "install") -and + CategoryInfo          : InvalidOperation: (GetUpdateInstallationInfoPerUpdate:String) [], RuntimeException+ FullyQualifiedErrorId : InvokeMethodOnNull
Exception calling "GetComputerTargetByName" with "1" argument(s): "Specified argument was out of the range of valid val
ues.
Parameter name: Specified argument was out of the range of valid values.
Parameter name: name"
At D:\Scripts\WSUS_Report_2.ps1:45 char:64+         $ComputerTargetToUpdate = $wsus.GetComputerTargetByName <<<< ($object1.FullDomainName)+ CategoryInfo          : NotSpecified: (:) [], MethodInvocationException+ FullyQualifiedErrorId : DotNetMethodException
You cannot call a method on a null-valued expression.
At D:\Scripts\WSUS_Report_2.ps1:48 char:83+         $NeededUpdate = $ComputerTargetToUpdate.GetUpdateInstallationInfoPerUpdate <<<< () | where {($_.UpdateApprova
lAction -eq "install") -and + CategoryInfo          : InvalidOperation: (GetUpdateInstallationInfoPerUpdate:String) [], RuntimeException+ FullyQualifiedErrorId : InvokeMethodOnNull
Exception calling "GetComputerTargetByName" with "1" argument(s): "Specified argument was out of the range of valid val
ues.
Parameter name: Specified argument was out of the range of valid values.
Parameter name: name"
At D:\Scripts\WSUS_Report_2.ps1:45 char:64+         $ComputerTargetToUpdate = $wsus.GetComputerTargetByName <<<< ($object1.FullDomainName)+ CategoryInfo          : NotSpecified: (:) [], MethodInvocationException+ FullyQualifiedErrorId : DotNetMethodException
You cannot call a method on a null-valued expression.
At D:\Scripts\WSUS_Report_2.ps1:48 char:83+         $NeededUpdate = $ComputerTargetToUpdate.GetUpdateInstallationInfoPerUpdate <<<< () | where {($_.UpdateApprova
lAction -eq "install") -and + CategoryInfo          : InvalidOperation: (GetUpdateInstallationInfoPerUpdate:String) [], RuntimeException+ FullyQualifiedErrorId : InvokeMethodOnNull
Exception calling "GetComputerTargetByName" with "1" argument(s): "Specified argument was out of the range of valid val
ues.
Parameter name: Specified argument was out of the range of valid values.
Parameter name: name"
At D:\Scripts\WSUS_Report_2.ps1:45 char:64+         $ComputerTargetToUpdate = $wsus.GetComputerTargetByName <<<< ($object1.FullDomainName)+ CategoryInfo          : NotSpecified: (:) [], MethodInvocationException+ FullyQualifiedErrorId : DotNetMethodException
You cannot call a method on a null-valued expression.
At D:\Scripts\WSUS_Report_2.ps1:48 char:83+         $NeededUpdate = $ComputerTargetToUpdate.GetUpdateInstallationInfoPerUpdate <<<< () | where {($_.UpdateApprova
lAction -eq "install") -and + CategoryInfo          : InvalidOperation: (GetUpdateInstallationInfoPerUpdate:String) [], RuntimeException+ FullyQualifiedErrorId : InvokeMethodOnNull

 

PS D:\Scripts> Stop-Transcript | out-null
**********************
Windows PowerShell Transcript End
End time: 20140313193617
**********************

OS: Windows 2008 R2 STD SP1

WSUS Version: 3.2.7600.226

Hi Guys,

Our next downtime event (this sunday 16th March 2014) has been cancelled but all required updates have already been approved in WSUS.

Events from the Windows Update Agent shows that updates are scheduled for Sunday 16th March 2014 @ 7am - what's the best way to cancel this for all servers?

Should I disabled automatic updates in Group Policy?

Many thanks

RC