I have Windows 10 and for some reason it wont allow me (this is my own personal computer) to do many things like Update my files, or turn my History settings On. When I go into my Settings in Windows 10 in Red writing it says certain items cannot be changed because of your "Organization". Well I am completely oblivious to this statement and I would like you to help me figure out who this Organization is that has obviously taken control of my computer.
Please help! Thank you Tina D.
Hi,
Need help to update Windows server 2k8 standard but getting error code 80070005.
My company is looking at implementing media (file) type filtering on WSUS using McAfee Web Gateway.
Does anyone know what are the media/file types needed by WSUS in order for it to work properly?
Thanks.
Single Primary Site running SCCM 2012 R2 on Windows Server 2012 R2.
WSUS on same server using Ports Http: 8530 and HTTPS: 8531 and is using SUSDB as database.
No Proxy in place.
Everything was working and issue started last week. No changes were made.
We get following WSUS errors
System.net.webException: The request failed with HTTP status 503: Sevice Unavailable~~~ Failures reported during periodic health check by the WSUS server. will retry check in 1 mins
I then ran the WSUSutil.exe checkhealth command and in event viewer, get a few different errors:
Event ID 13042: Self-update is not working.
Event ID 10021: The catalog was last synchronized successfully 1 or more days ago.
Event ID 12002: The Reporting Web Service is not working.
Event ID 12012: The API Remoting Web Service is not working.
Event ID 12032: The Server Synchronization Web Service is not working.
Event ID 12022: The Client Web Service is not working.
Event ID 12042: The SimpleAuth Web Service is not working.
Event ID 12052: The DSS Authentication Web Service is not working.
Event ID 12072: The WSUS content directory is not accessible.
System.Net.WebException: The remote server returned an error: (503) Server Unavailable.
at System.Net.HttpWebRequest.GetResponse()
at Microsoft.UpdateServices.Internal.HealthMonitoring.HmtWebServices.CheckContentDirWebAccess(EventLoggingType type, HealthEventLogger logger)
Please suggest.I am having issues with patching some newly created Windows Server 2012 R2 servers.
Windows Server 2012 Update rollup 2919355 is not cumulative despite the description
https://support.microsoft.com/en-gb/kb/2919355
It states "This update is a cumulative update that includes the security updates and the non-security updates for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 that were released before March 2014. In addition to previous updates, it includes features such as improved Internet Explorer 11 compatibility for enterprise applications, usability improvements, extended mobile device management, and improved hardware support. "
I have this update applied, but it does not contains the fixes in Windows Server 2012 R2 update rollup: November 2013
https://support.microsoft.com/en-gb/kb/2887595
the specific fix it does not contain is https://support.microsoft.com/en-gb/kb/2896636"You cannot use certain third-party devices to send a document to a shared folder in Windows RT 8.1, Windows 8.1, or Windows Server 2012 R2"
If this is the case as I believe, then the only way to fully patch Server 2012 R2, is to manually apply every single Rollup ever released. Because WSUS has marked the previous rollups as "Superseded".
also the article at https://blogs.technet.microsoft.com/chad/2015/01/21/current-windows-server-2012-r2-windows-8-8-1-update-rollups/ seems to say you just need to put on :-
April 2014 – http://support2.microsoft.com/kb/2919355
November 2014 – http://support2.microsoft.com/kb/3000850
and December 2014 – http://support2.microsoft.com/kb/3013769
Am I correct? can anyone else verify if this as the case?
Is there some other cumulative rollup we should be applying instead ?
I'm kinda at my wits end here.
I've got a disconnected environment using Windows 2008R2 WSUS servers (WSUS 3.2) which has stopped recognizing new updates. I''ve already worked past the metadata export size problem, but now even though I've copied all the WsusContent and metadata between networks, checked the products and classifications and approval rules, and checked the permissions on WsusContent, but the WSUS server continues to show hundreds of gigabytes of updates that are waiting on files.
My source server shows no updates waiting on files.
I've spot-checked some files that are showing as file download pending and was able to physically locate the indicated files in the WsusContent structure.
I don't understand why the system isn't showing the updates as available and I'm not sure what log files, if any, show the system actually performing a validation of files indicated by the metadata.
I poked around in the database some. I found some tables that show values that looked to be related to the status of the update files. Even tried to manually update one of the entries for the known good file, but it didn't seem to change the status of the update in the WSUS Management Console.
At this point, I've event uninstalled WSUS server, reinstall, reapplied patches for WSUS and recreated the database. While systems automatically re-registered with the server and the newest products and classifications are showing in the console, the file download status hasn't changed. Its currently showing "Downloaded 8 mb or 24X,XXX" (didn't write down the exact number).
I'm stuck. Not sure what to try next.
Hi Everyone,
I have a disconnected Windows environment with a WSUS server that I am trying to apply updates to. Here's my issue: Whenever I import the updates into the import server it gets stuck at some point downloading the updates to the offline server, even though they are all there. I've already tried completely rebuilding the WSUS server and I'm still running into the same issue.
Both the import and export server are Server 2008 R2 with WSUS 3.0 SP2. I've verified that the settings are identical on each one, and that all of the updates are approved and downloaded completely on the export server before I run the export command.
I've followed all of the instructions and troubleshooting for a disconnected WSUS server, and it seems like everything SHOULD work, it just doesn't.
Any help would be greatly appreciated. I've tried everything I can think of to fix it, but nothing seems to be working.
Thanks!
I have Office 365 installed on a Mac and Windows laptop. I keep getting update notifications on the Mac which now says I have 4 different updates to install. I had a standalone version of Office installed on this Mac prior to upgrading to 365.
Do I need to install these updates or is this a legacy update process left over from my standalone version? I thought being cloud-based, I wouldn't need to do this?
Thanks.
Hi.
I want to install WSUS in Windows Server 2008 R2 Enterprise, but when it try I have a prompt to upgrade Web Services (IIS), then I have a Fail message.
Here is the HTML File log:
<Informational>: This server might need to be restarted after the installation completes.
Web Server (IIS)
<Informational>: Find out more about Windows System Resource Manager (WSRM) and how it can help optimize CPU usage
Web Server
Application Development
ASP.NET
.NET Extensibility
ISAPI Extensions
ISAPI Filters
Security
Windows Authentication
Performance
Dynamic Content Compression
Management Tools
IIS 6 Management Compatibility
IIS 6 Metabase Compatibility
Windows Server Update Services
Web Server (IIS): Installation failed
The following role services were not installed:
Web Server
Application Development
ASP.NET
.NET Extensibility
ISAPI Extensions
ISAPI Filters
Security
Windows Authentication
Performance
Dynamic Content Compression
Management Tools
IIS 6 Management Compatibility
IIS 6 Metabase Compatibility
Windows Server Update Services: Installation failed
<Error>: The update could not be found. There may be a network connection issue. Click here for more information.
Please refer to the full log at: 'C:\Windows\logs\ServerManager.log'
And the .log file log is here:
2988: 2009-07-14 09:19:42.125 [InstallationProgressPage] Loading progress page...
2988: 2009-07-14 09:19:42.156 [InstallationProgressPage] Creating WindowsUpdateDownloader.
2988: 2009-07-14 09:19:42.156 [InstallationProgressPage] Searching for Updates...
2988: 2009-07-14 09:19:42.156 [InstallationProgressPage] Starting asynchronous download.
2988: 2009-07-14 09:19:42.171 [WindowsUpdateDownloader] Creating session.
2988: 2009-07-14 09:19:42.171 [WindowsUpdateDownloader] Search query: 'CategoryIDs contains '4e487029-f550-4c22-8b31-9173f3f95786''
2988: 2009-07-14 09:19:42.171 [WindowsUpdateDownloader] Searching....
2988: 2009-07-14 09:19:51.328 [WindowsUpdateDownloader] Initial search failed, try again on WU server.
2988: 2009-07-14 09:19:52.843 [WindowsUpdateDownloader] Search returned: Succeeded, found 0 updates.
2988: 2009-07-14 09:19:52.843 [InstallationProgressPage] Search completed, result: Succeeded.
2988: 2009-07-14 09:19:52.843 [InstallationProgressPage] Downloading...
2988: 2009-07-14 09:19:52.843 [WindowsUpdateDownloader] Sending failure DownloadComplete event.
2988: 2009-07-14 09:19:52.843 [InstallationProgressPage] Download completed, result: NotStarted.
2988: 2009-07-14 09:19:52.843 [InstallationProgressPage] Error (Id=0) Failure message: 'The update could not be found. There may be a network connection issue. <a href="WSUS.chm::/html/54a9eb1f-5dd1-42d8-ad00-dae55d7b9463.htm">Click here for more information.</a>'
2988: 2009-07-14 09:19:52.843 [InstallationProgressPage] Invoking LoadFinishPage.
2988: 2009-07-14 09:19:52.859 [InstallationProgressPage] About to load finish page...
2988: 2009-07-14 09:19:52.859 [InstallationFinishPage] Loading finish page
2988: 2009-07-14 09:19:52.875 [InstallationFinishPage] Finish page loaded
I checked my Internet Connection, and no problems with that, Wndows update works fine.
Regards
Hi People,
I'm having all kinds of trouble installing this 'ESD Decryption provision in WSUS in Windows Server 2012' patch on my server.
My WSUS Server
2012 R2
SQL Server 2014 as the DB engine
All patched up to date
When I run the command suggested;
“C:\Program Files\Update Services\Tools\wsusutil.exe” postinstall /servicing
It throws this error;
--------------------------------------------------
PS C:\Program Files\Update Services\Tools> .\wsusutil.exe postinstall SQL_INSTANCE_NAME="SWS-WSUS\SQLEXPRESS" CONTENT_DIR=D:\WSUS /Servicing
Log file is located at C:\Users\xxxxxx\AppData\Local\Temp\tmpF651.tmp
Post install is starting
Fatal Error: User does not have permission to alter database 'SUSDB', the database does not exist, or the database is not
in a state that allows access checks.
ALTER DATABASE statement failed.
---------------------------------------------------
Cant find anything on the net regarding this error so does anyone have any ideas?.
Thanks in advance.
Hi,
When I run the post-install command elevated:
"C:\Program Files\Update Services\Tools\wsusutil.exe" postinstall /servicing
it finishes just fine, but the WSUS console does not connect to the WSUS service afterwards.
If I instead run the post-install command and specify the name of the SQL server hosting the database:
"C:\Program Files\Update Services\Tools\wsusutil.exe" postinstall /servicing SQL_INSTANCE_NAME=theSQLserver.domain.local
the log indicates "Generation of encryption key to save to the database failed".
Our WSUS service is presently using the "network service" account, meaning it uses the computer account to connect to the database. I am suspecting that the introduction of encryption keys for WSUS are possibly somehow not able to be used with the computer account. Is using a specific service account for WSUS the only solution?
full log:
2016-05-30 18:40:39 Postinstall started 2016-05-30 18:40:39 Detected role services: Api, UI, Services 2016-05-30 18:40:39 Start: LoadSettingsFromParameters 2016-05-30 18:40:39 Content local is: False 2016-05-30 18:40:39 SQL instname is: sql-sccm2012-1.domain.local 2016-05-30 18:40:39 End: LoadSettingsFromParameters 2016-05-30 18:40:39 Start: Run 2016-05-30 18:40:39 Fetching WsusAdministratorsSid from registry store 2016-05-30 18:40:39 Value is S-1-5-21-hidden-1001 2016-05-30 18:40:39 Fetching WsusReportersSid from registry store 2016-05-30 18:40:39 Value is S-1-5-21-hidden-1002 2016-05-30 18:40:39 Update synchronization in progress. Cancelling... 2016-05-30 18:40:39 Configuring content directory... 2016-05-30 18:40:39 Configuring groups... 2016-05-30 18:40:39 Starting group configuration for WSUS Administrators... 2016-05-30 18:40:39 Found group in regsitry, attempting to use it... 2016-05-30 18:40:42 Writing group to registry... 2016-05-30 18:40:42 Finished group creation 2016-05-30 18:40:42 Starting group configuration for WSUS Reporters... 2016-05-30 18:40:42 Found group in regsitry, attempting to use it... 2016-05-30 18:40:42 Writing group to registry... 2016-05-30 18:40:42 Finished group creation 2016-05-30 18:40:42 Configuring permissions... 2016-05-30 18:40:42 Fetching content directory... 2016-05-30 18:40:42 Fetching ContentDir from registry store 2016-05-30 18:40:42 Value is C:\Program Files\Update Services 2016-05-30 18:40:42 Fetching group SIDs... 2016-05-30 18:40:42 Fetching WsusAdministratorsSid from registry store 2016-05-30 18:40:42 Value is S-1-5-21-hidden-1001 2016-05-30 18:40:42 Fetching WsusReportersSid from registry store 2016-05-30 18:40:42 Value is S-1-5-21-hidden-1002 2016-05-30 18:40:42 Creating group principals... 2016-05-30 18:40:42 Granting directory permissions... 2016-05-30 18:40:42 Granting permissions on content directory... 2016-05-30 18:40:42 Granting registry permissions... 2016-05-30 18:40:42 Granting registry permissions... 2016-05-30 18:40:42 Granting registry permissions... 2016-05-30 18:40:42 Configuring shares... 2016-05-30 18:40:42 Configuring network shares... 2016-05-30 18:40:42 Fetching content directory... 2016-05-30 18:40:42 Fetching ContentDir from registry store 2016-05-30 18:40:42 Value is C:\Program Files\Update Services 2016-05-30 18:40:42 Fetching WSUS admin SID... 2016-05-30 18:40:42 Fetching WsusAdministratorsSid from registry store 2016-05-30 18:40:42 Value is S-1-5-21-hidden-1001 2016-05-30 18:40:42 Content directory is local, creating content shares... 2016-05-30 18:40:43 Creating share "UpdateServicesPackages" with path "C:\Program Files\Update Services\UpdateServicesPackages" and description "A network share to be used by client systems for collecting all software packages (usually applications) published on this WSUS system." 2016-05-30 18:40:43 Deleting existing share... 2016-05-30 18:40:43 Creating share... 2016-05-30 18:40:43 Share successfully created 2016-05-30 18:40:43 Creating share "WsusContent" with path "C:\Program Files\Update Services\WsusContent" and description "A network share to be used by Local Publishing to place published content on this WSUS system." 2016-05-30 18:40:43 Deleting existing share... 2016-05-30 18:40:43 Creating share... 2016-05-30 18:40:43 Share successfully created 2016-05-30 18:40:43 Creating share "WSUSTemp" with path "C:\Program Files\Update Services\LogFiles\WSUSTemp" and description "A network share used by Local Publishing from a Remote WSUS Console Instance." 2016-05-30 18:40:43 Deleting existing share... 2016-05-30 18:40:43 Creating share... 2016-05-30 18:40:43 Share successfully created 2016-05-30 18:40:43 Finished creating content shares 2016-05-30 18:40:43 Stopping service WSUSService 2016-05-30 18:40:43 Stopping service W3SVC 2016-05-30 18:42:13 Starting service W3SVC 2016-05-30 18:42:13 Configuring IIS... 2016-05-30 18:42:13 Start: ConfigureWebsite 2016-05-30 18:42:14 Configuring website on port 8530 2016-05-30 18:43:06 2016-05-30 18:42:25 Info IISCustomAction Performing Setup Action, Command /Install 2016-05-30 18:43:04 Info IISCustomAction Command /Install Succeeded 2016-05-30 18:43:06 End: ConfigureWebsite 2016-05-30 18:43:06 Configuring performance counters... 2016-05-30 18:43:06 Configuring Stats.NET perf counter... 2016-05-30 18:43:06 Configuring reporting perf counter... 2016-05-30 18:43:06 Configuring client webservice perf counter... 2016-05-30 18:43:06 Configuring server sync webservice perf counter... 2016-05-30 18:43:06 Configuring API remoting perf counter... 2016-05-30 18:43:06 Bringing services online... 2016-05-30 18:43:06 StartServer starting... 2016-05-30 18:43:06 Generating encryption key to write to the registry... 2016-05-30 18:43:06 Generating encryption key to write to the database... 2016-05-30 18:43:06 Generation of encryption key to save to the database failed. Error=System.IndexOutOfRangeException: Index was outside the bounds of the array. at Microsoft.UpdateServices.Internal.DatabaseAccess.GenericReadableRow.GetInt32(Int32 index) at Microsoft.UpdateServices.Internal.ConfigurationTableRow.ReadRow(IDataRecord record) at Microsoft.UpdateServices.Internal.DatabaseAccess.AdminDataAccess.ExecuteSPGetConfiguration() at Microsoft.UpdateServices.Internal.BaseApi.UpdateServerConfiguration.Load() at Microsoft.UpdateServices.Setup.StartServer.StartServer.GenerateNewDatabaseEncryptionKey() 2016-05-30 18:43:06 StartServer encountered errors. Exception=Index was outside the bounds of the array. 2016-05-30 18:43:06 Microsoft.UpdateServices.Administration.CommandException: Failed to start and configure the WSUS service at Microsoft.UpdateServices.Administration.PostInstall.Run() at Microsoft.UpdateServices.Administration.PostInstall.Execute(String[] arguments)
Greetings,
I have a hyperV member server (server 2012 R2), vanilla install. I added the WSUS role and point to e:\WSUS as the storage location. During the post install phase it failed with the following in the log file:
2015-05-16 08:07:22 Starting WSUSService...Any ideas?
Thanks
David Z
Our WSUS server (Windows Server 2012 R2) hanged when it was installing updates on itself. I rebooted it in a harsh way, it started normally and finished installing the updates. However, now I can't start the WSUS management console due to a connection error. The WSUS server service itself doesn't start as well.
The Application server contains multiple events 18456, source MSSQL$MICROSOFT##WID, message "Login failed for user 'NT AUTHORITY\NETWORK SERVICE'. Reason: Failed to open the explicitly specified database 'SUSDB'. [CLIENT: <named pipe>]" If I try to connect to the server using SQL Server Management Studio, it displays the following error:
"Cannot connect to \\.\pipe\MICROSOFT##WID\tsql\query. Login failed for user 'MY-LOGIN'. (Microsoft SQL Server, Error: 18456)"
The Application even log contains the same event mentioned above, only the message is different: "Login failed for user 'MY-LOGIN'. Reason: Token-based server access validation failed with an infrastructure error. Check for previous errors. [CLIENT:<named pipe>]".
If I restart the Windows Internal Database service, it starts normally and doesn't throw any errors in the Application log. Among other things, it successfully mounts the SUSDB database. No other errors (including DCOM errors) can be found in the log.
Seems that security setting on the WID engine are damaged. Any ideas how to fix them? Besides reinstalling the server, of course? :)
Evgeniy Lotosh // MCSE: Server infrastructure, MCSE: Messaging
We first had the issue when update KB3148812 was applied to our WSUS server (Windows Server 2012).
So KB3148812 was uninstalled and this resolved the issues.
Yesterday KB3159706 was installed and we have the same issue again. Uninstalling resolves the issues.
I found this article but not really helpful so posting a question https://blogs.technet.microsoft.com/wsus/2016/05/05/the-long-term-fix-for-kb3148812-issues/
Anyone else experiencing this? MS do you have a long long term fix instead? Please stop borking my server it's very frustrating!
Cheers
Craig
Standard problem with WSUS Cleanup Wizard timing out without removing any unnecessary updates. SBS2K8. WSUS 3. 6000+ unnecessary updates awaiting approval. Huge database. Unresponsive SQL server. Lot of people have this problem:
http://social.technet.microsoft.com/Forums/en-US/9724778f-c1a0-4d24-82e4-8b2d054257d6/wsus-hangs-on-cleanup-wizard-for-unused-updates-then-disconnects-from-console?forum=winserverwsus
Drives are regularly defragged in the background. Not gonna shut down the server and have down time just to fix this.
Tried the reindexing script from
http://technet.microsoft.com/en-us/library/dd939795(WS.10).aspx
, (don't copy the command line, it has weird characters in it, just type it in manually.) and it completes but it didn't improve anything.
Found this:
http://wsus.codeplex.com/releases/view/17612
and it also times out.
Found this comment:
For anyone who is getting Timeout Expired with obsolete updates. I have a solution! Use server name : "
\\.\pipe\MSSQL$MICROSOFT##SSEE\sql\query
" to connect with SQL managment studio. Once connected manually run "
exec spGetObsoleteUpdatesToCleanup
". This will return a list of obsolete ID's. For each one run "
exec spDeleteUpdate @localUpdateID=000000
", where 000000 is the ID. For myself I found the first ID in the list took a full 37 minutes to delete and then after that I could run the cleanup through the GUI as per usual.
by jjdacl on Apr 23 at 12:55 PM
Found that you actually need to do:
USE SUSDB
GO
exec spGetObsoleteUpdatesToCleanup
And to connect in the first place, I had to hit Options, and select named pipe from the middle pull down.
First delete took 6 minutes and memory has spiked up to almost 15GB in use out of 16GB physical. But the WSUS console (Update Services) still shows the same number of old updates. Failure? I don't think so: I'm running the cleanup wizard again and so far it
isn't timing out... It has run over night, and has made some progress; the bar has moved perhaps 5%.
So... My take is that the SQL server causes this problem when there is to much data, because the indexes are poorly designed (not because the indexes need to be re-indexed) causing the first query to time out, which causes the cleanup to fail. Once you get past that first deletion, and have everything loaded into memory, the cleanup tool can stay connected long enough to delete each unneeded update.
Next step will be to find a command line method, such as:
http://wsus.codeplex.com/releases/view/17612
and put it into the task scheduler like Microsoft should have done at the beginning to keep this from getting out of hand.
P.S. Lawrence Garvin, please do NOT reply to this; I have no need of your arrogance.
We had a wsus server running 2008r2 that crashed and has been replaced with a 2012r2 server with the same name/ip. It accesses updates from an upstream server via a proxy (no credentials needed). All computers are reporting but I cannot download
updates. I am getting the following error ID's, 364 (BITS) and 12072 (WSUS content directory is not accessible. Remote server returned an error: (404) Not found). I've verified access and permissions to the wsus content directory but still cannot
download udpates.
After applying Windows Updates and Rebooting the server (2012R2)
WSUS console no longer connects to the service.
The following error is logged in the event log, removing the preferences file does not resolve the problem.
The WSUS administration console has encountered an unexpected error. This may be a transient error; try restarting the administration console. If this error persists,
Try removing the persisted preferences for the console by deleting the wsus file under %appdata%\Microsoft\MMC\.
System.IndexOutOfRangeException -- Index was outside the bounds of the array.
Source
Microsoft.UpdateServices.BaseApi
Stack Trace:
at Microsoft.UpdateServices.Internal.BaseApi.SoapExceptionProcessor.DeserializeAndThrow(SoapException soapException)
at Microsoft.UpdateServices.Internal.DatabaseAccess.AdminDataAccessProxy.ExecuteSPGetConfiguration()
at Microsoft.UpdateServices.Internal.BaseApi.UpdateServerConfiguration.Load()
at Microsoft.UpdateServices.Internal.ClassFactory.CreateWellKnownType(Type type, Object[] args)
at Microsoft.UpdateServices.Internal.ClassFactory.CreateInstance(Type type, Object[] args)
at Microsoft.UpdateServices.Internal.BaseApi.UpdateServer.set_UserSelectedCulture(String value)
at Microsoft.UpdateServices.UI.AdminApiAccess.AdminApiTools.TrySetServerCulture(String culture)
at Microsoft.UpdateServices.UI.AdminApiAccess.AdminApiTools.SetServerCulture()
at Microsoft.UpdateServices.UI.AdminApiAccess.AdminApiTools..ctor(CultureInfo culture, IUpdateServer updateServer)
at Microsoft.UpdateServices.UI.SnapIn.Common.ServerTools..ctor(ServerSummaryScopeNode serverSummaryScopeNode, SnapInTools snapInTools, IUpdateServer updateServer)
at Microsoft.UpdateServices.UI.SnapIn.Scope.ServerSummaryScopeNode.ConnectToServer()
at Microsoft.UpdateServices.UI.SnapIn.Scope.ServerSummaryScopeNode.get_ServerTools()
Any recommendations on troubleshooting this issue are greatly appreciated
Hi,
I have a Windows Server 2012 on which Active Directory is installed. I would like to change the time when Windows does its updates. I used gpedit.msc and changed it from Windows Templates. Made it install the updates at 3 A.M. and restart 15 minutes after finishing. The question is, is this going to apply to the server itself, given that it's got AD installed?
Thanks
