SUS and Windows Server 2003

[John Orme]

Hi,

I have installed SUS on my Windows 2003 server. When the clients are scheduled to update, they query the server but the server sends no updates to the client, when I visit the Windows Update web page, downloads are found. All patched are approved and downloaded on the SUS server. Any help would be appriciated.

Thanks

[Jon Finley]

Make sure that you are using SUS SP1 and current client.

Resources:
http://www.microsoft.com/windowsserversystem/sus/default.mspx

http://www.microsoft.com/downloads/details.aspx?FamilyId=38D7E99B-E780-43E5-AA84-CDF6450D8F99&displaylang=en

It may also be due to the SUS server NOT being added to the Trusted Internet or Local Intranet site in IE.

http://download.microsoft.com/download/1/E/F/1EF330AA-D356-40A7-BC1B-86E8200E6F00/SUS_sp1_install-final.doc

Jon

[Jonas Back_2]

Also, make sure that Background Intelligent Transfer Service is running.

Check the logs of the IIS C:\WINDOWS\System32\Logfiles\ and see if the clients are actually talking to the SUS.

[Rune J. Winje]

http://www.susserver.com/FAQs/FAQ-IsYourSUSServerWorking.asp

You might also want to take WUS (Windows Update Server) for a test-drive, which will take over for SUS with a range of cool, new features and better management.

It's an open beta:
http://www.microsoft.com/windowsserversystem/sus/wusbeta.mspx


Cheers,
Rune

[Rune J. Winje]

Sorry, seems WUS is not ready for download yet, but you can sign up for it though...


Cheers,
Rune

[John Orme]

Hi,

I built up a new win 2K machine and set up SUS client on it. At the scheduled time, it installed SP4 and rebooted. Nothing else happened. Today at the scheduled time, noting happened to the client either. There are 18 critical updates available on the Microsoft site. Can SUS only install one update per day? I have set the install time forward 1 hour to see if anything happens. I have also attached the log file.

Thanks

[Jonas Back_2]

Have you checked the IIS logfile to see if the client actually contacts the SUS-server?

[John Orme]

where would I find the log file. I have looked at some iis log files and couldnt understand them at all!

Thanks

[Jonas Back_2 · Accepted solution]

Check out C:\WINDOWS\system32\LogFiles\W3SVC1.

Here you can see which IP-address that talks to the IIS-server. Example:

2004-05-05 00:09:52 192.168.25.98 HEAD /iuident.cab 0405050009 80 - 192.168.0.65 Industry+Update+Control 200 0 0
2004-05-05 00:09:52 192.168.25.98 GET /iuident.cab 0405050009 80 - 192.168.0.65 Industry+Update+Control 200 0 0
2004-05-05 00:09:52 192.168.25.98 HEAD /selfupdate/AU/x86/XP/sv/wuaucomp.cab 0405050009 80 - 192.168.0.65 Industry+Update+Control 200 0 0
2004-05-05 00:09:52 192.168.25.98 GET /selfupdate/AU/x86/XP/sv/wuaucomp.cab 0405050009 80 - 192.168.0.65 Industry+Update+Control 200 0 0

Here you can see that 192.168.0.65 talks to the IIS. If you don't get any logs in this file, then the clients are probably not talking to the SUS server at all.

[John Orme]

I have looked at the logs and it seems that the clients are talking to the server and the test PC has just receives some updates so I assume I am not being patient enough. The next problem I have is that the updates are received and then the updates icon appears in the notificaiton area. How do I makle them install automatically? all users are local administrators and I would like the clients to check daily and install without offering the user the choice of installing or not installing.

Thanks

[Jonas Back_2]

You can decide this in the GPO-setting (if you have loaded wuau.adm administrative template).

Computer Configuration -> Administrative Templates -> Windows Update and "Configure Automatic Updates".

There you can choose
4- Auto download and scheduele the install.

Like every day at 03.00.

[John Orme]

Hi,

It all seems to be working OK now.

Thanks very much for your help

Johno

[Marco Schirmer]

Hi,
for information on SUS there is a greta web page:

http://www.susserver.com/

Greetings Marco

[John Orme]

Hi,

That is a great web page. Does anyone know why SUS doesnt install IE6 SP1? Just noticed that today and thought it was a bit odd.

Thanks

[Rune J. Winje]

Maybe because (?):

"Note: Internet Explorer 6 SP1 is included with Windows XP Service Pack 1 (SP1). If Windows XP SP1 is installed on your computer, you do not need to download and install Internet Explorer 6 SP1."

Hmm, also from the communication on 5.th of may I see you did not read my post from 1.st of may. (Logfiles discussion and web-tool for parsing of SUS-logfiles in the first link).


Cheers,
Rune

[Rune J. Winje]

Also a quick search in the
http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&group=microsoft.public.softwareupdatesvcs


Will give this result:
http://groups.google.com/groups?q=%22service+pack%22+group:microsoft.public.softwareupdatesvcs&hl=en&lr=&ie=UTF-8&group=microsoft.public.softwareupdatesvcs&selm=rby%24qg99DHA.2052%
40cpmsftngxa07.phx.gbl&rnum=7

"At this time SUS will only do Critical Update and the latest SP for Windows 2000 and Windows XP. It will not do the SP for
IE. As a note SP1 for Windows XP also includes SP1 or IE so if your clients are Windows XP pushing the Windows XP SP1
will also update IE on these systems.

You cannot manually add updates to be provided by the SUS server.

Bill Peele
Microsoft Enterprise Support"
(dated 20. february 2004)


Cheers,
Rune