WSUS Server Cleanup Wizard task “Delete computers that have not contacted the server in 30 days or more” fails with connection error

Hello Everyone, my name is Moni and I am a Support Engineer in the Windows Devices and Deployment team here at Microsoft. In this post, I’ll be discussing an issue where the Server Cleanup Wizard for WSUS 3.0 Service Pack 2 times out when attempting to delete computers that have not contacted the server in 30 days or more.

...

Details of the error are as follows:
The WSUS administration console was unable to connect to the WSUS Server Database.Verify that SQL server is running on the WSUS Server. If the problem persists, try restarting SQL.System.Data.SqlClient.SqlException — Access to table dbo.tbDownstreamServerClientSummaryRollup is blocked because the signature is not valid.Source.Net SqlClient Data ProviderStack Trace:at System.Windows.Forms.Control.MarshaledInvoke(Control caller, Delegate method, Object[] args, Boolean synchronous)at System.Windows.Forms.Control.Invoke(Delegate method, Object[] args)at Microsoft.UpdateServices.UI.SnapIn.Wizards.ServerCleanup.ServerCleanupWizard.OnCleanupComplete(Object sender, PerformCleanupCompletedEventArgs e) 

Source : SUS Blog

Recreating the SUSDB and WSUS Content folder for a Windows Server 2012 based WSUS computer | SUS Blog

Occasionally you may find that you want to start over in WSUS with a fresh database (SUSDB). There can be any number of reasons for this, but typically I see people doing this if their SUSDB is rather old, has a ton of unneeded updates in it, and maintenance has not been done on the SUSDB in years. In those cases you can find that a rebuild may be faster and easier than fixing the problematic SUSDB. Typically speaking, I see people wanting to recreate the just the content dir if they accidentally unchecked the “download update files to this server only when updates are approved” and ended up with a hard drive full of unneeded files. Whatever the reason, here are the steps for recreating the SUSDB and the WSUS Content folder for a Windows Server 2012 based WSUS computer

Source : SUS Blog

Update on WSUS 3.0 SP2 End of Life

As you may have seen, there has been an update to the extended support lifecycle for WSUS 3.0 SP2 (WSUS 3.2). We received feedback that ending this product’s life in July 2017 would cause a significant disruption for those Windows Server 2008/R2 deployments that planned to rely upon it until January 2020. As such, the end of life for this product is now January 2020.

Source : WSUS Product Team Blog

WSUS : The long-term fix for KB3148812 issues

A new update is available for Windows Server 2012 and 2012 R2. This update requires manual steps in order to complete the installation. While the KB itself covers those steps, this post provides additional details on the release.

Source : WSUS Product Team Blog

HOTFIX: Update to enable WSUS support for Windows 10 feature upgrades

A new hotfix is available that enables Windows Server Update Services (WSUS) on a Windows Server 2012 or Windows Server 2012 R2 to sync and distribute feature upgrades for Windows 10. Note that this hotfix is not required to enable WSUS to sync and distribute servicing updates for Windows 10. This hotfix also addresses an issue where Windows 10 computers are displayed as Windows Vista.

Source : Microsoft WSUS and Software Update Team Blog

For those on WSUS 3.0 SP2 (or SBS 2011)

As indicated in a previous post, we are making changes to WSUS 4.0 and later that will provide a smoother Windows 10 servicing experience. Because WSUS 3.0 SP2 is already in extended support (receiving no support at all after July 2017), and we are not shipping these improvements further down-level, it is a good idea to start planning your WSUS migration now. Here is some guidance on how to respond to the recent changes based on your current situation, with the assumption that you intend to deploy Windows 10 in your environment.

Source : WSUS Product Team Blog

Want to break your WSUS? Don’t install KB 3095113 for Windows 10 upgrades - 4sysops

Microsoft released KB 3095113 to enable future Windows 10 feature upgrades. Whether you will deploy upgrades or not, you need to know what this hotfix does and how not applying it can break WSUS.

Source : 4sysops

FREE: ABC-Update – Install Windows updates at the command prompt

ABC-Update is a free command-line tool that allows you to install Windows updates. It is easy to use and gives you the flexibility of deploying only specific updates in your scripts.

Source : FREE: ABC-Update – Install Windows updates at the command prompt - 4sysops

Windows 8.1 Update (KB 2919355) prevents interaction with WSUS 3.2 over SSL

 There is a known issue which causes some PCs updated with the Windows 8.1 Update (KB 2919355) to stop scanning against Windows Server Update Services 3.0 Service Pack 2 (WSUS 3.0 SP2 or WSUS 3.2) servers which are configured to use SSL and have not enabled TLS 1.2.

Microsoft plans to issue an update as soon as possible that will correct the issue and restore the proper behavior for Windows 8.1 Update KB 2919355 scanning against all supported WSUS configurations. Until that time, we are temporarily suspending the distribution of the Windows 8.1 Update KB 2919355 to WSUS servers.

Source : blogs.technet.com/b/wsus/

FREE: SolarWinds Diagnostic Tool for the WSUS Agent

The free SolarWinds Diagnostic Tool for the WSUS Agent is designed to diagnose and even suggest corrections to common WSUS/agent issues.

Source : 4sysops.com, www.solarwinds.com

FREE: WSUS Offline Update – Update Windows and Office without an Internet connection

WSUS Offline Update is a free portable tool that allows you to download updates for Windows XP, Vista, Windows 7, and all Office versions and install those updates on computers with no Internet connection.

Source : 4sysops

WSUS ClientManager for Workgroups

The free Microsoft tool WSUS ClientManager allows you to add Windows workgroup computers to a WSUS server. To add multiple computers to WSUS, you can use the REG file that WSUS ClientManager creates.

Source : 4sysops.com
Download : wsusworkgroup.codeplex.com

Microsoft Security Essentials anti-malware definitions now available via WSUS

Microsoft Security Essentials antimalware definitions are now available via WSUS.

Source : blogs.technet.com/wsus

WSUS 3.0 SP2 RC Program now available on Microsoft Connect!

I am very pleased to announce that WSUS 3.0 SP2 RC will be available to the general public today, May 26, via the Connect Site.

All you have to do is sign in to your Connect account or sign up now in order to participate in the RC program.
This program is available to all registered and authenticated users of Connect.

New Windows Server and Client Version Support

• Integration with Windows Server® 2008 R2
• Support for the BranchCache feature on Windows Server 2008 R2
• Support for Windows 7 client

Source : WSUS Product Team Blog

WuInstall

WuInstall is a command line tool for windows, which enables you to install windows-updates for a certain workstation in a controlled way by using a command line script instead of the standard window update functionality.

WuInstall uses the windows update API and is written in C++. It searches either on the Microsoft - Update - Server or at the internal WSUS-Sever (depending on system configuration) for currently available updates for the current workstation and can also download and/or installs these updates

Usage: WUInstall.exe [/search | /download | /install | /help]
/search -> Searches only for available downloads
/download -> Searches and downloads updates
/install -> Searches and downloads and installs update
Return codes: 0  ... sucessful, no reboot required
              1  ... at least one error occured, no reboot required
              2  ... no more updates availabed
              20 ... sucessful, reboot required
              21 ... at least one error occured, reboot required
Copyright by hs2n Informationstechnologie GmbH 2009

Source : www.xeox.com

Error 8024400E When Trying to Download Updates Via WSUS?

For a few days I'm not able to check for new updates from my WSUS server, I always get an error 8024400E. Strangely if I check for updates from Microsoft Update I've got no error.

A few computers (and servers) at my location got the same problem.

Today I've tired the workaround published by Cecilia Cole (WSUS Program Manager) and it WORKED !

Many thanks Cecilia,

Source : Client/Server Synchronization issues

Windows Vista SP1 Released to Windows Update

Windows Vista SP1 is released to Windows Update ... as an optional update (since march 18th). It should be available as an automatic update around mid-april. The Windows Vista Team explained all that in there blog.

If you have a WSUS server in your organisation you could deploy SP1 now by importing the update from Microsoft Update Catalog. The WSUS team has a post describing the procedure in there blog.

You should however note that you can't import an update in WSUS from the Microsoft Update Catalog if your server is setup as a downstream server. You will receive an error number 80131509.

Deploying Vista SP1 into a WSUS 3.0 Server

For WSUS users, the Standalone Package of the Service Pack and its prerequisites will be available on the MU Catalog Tuesday March 25 but before that, there are a few things to take into consideration:

• This process applies to WSUS 3.0 RTM and SP1 servers only.
• If you are running your WSUS server on a Windows 2003 Server, you will first need to download and install the WinTrustVerify update (KB 938759) on that server.

Read the complete article : WSUS Product Team Blog

WSUS 3.0 SP1 is now RTM!!!

Dear WSUS users,

I am very excited to announce the release of WSUS 3.0 SP1, now live and ready for download! This is a significant release that represents a huge milestone for all involved and we thank you greatly for your feedback and support through out the life cycle of this project. 

The improvements that SP1 offers include:

• Support for Windows Server 2008.
• New Client Servicing API:
• Support client registration.
• Filter of updates by category and classification. 
• Provide applicability rule extension mechanism. 
• Obtain package metadata and report update status for each client.
• Improvements for local publishing: supports publishing of drivers within the enterprise by using vendor provided catalogs. API include support for bundles and prerequisites.
• All hotfixes: WSUS 3.0 SP1 includes all the changes and hotfixes that have been issued since the release of WSUS 3.0.
• Support for Microsoft SQL Server 2005: WSUS 3.0 SP1 lets you use SQL Server 2005. 

WSUS 3.0 SP1 is now located at the Microsoft Download Center. To download and to obtain installation instructions,  please visit the following Microsoft Web site:

www.microsoft.com/downloads

Congratulations team and WSUS community on this great milestone, enjoy!

Cecilia Cole

WSUS Program Manager

Source : WSUS Product Team Blog
More infos : Release Notes for Windows Server Update Services 3.0 SP1, WSUS Techcenter

WDS 3.01 & WSUS: Apologies accepted

In the saga of the Windows Desktop Search 3.01 update (kb917013) that was installed on all Windows XP computers via WSUS, Microsoft finally admited they made a mistake.

Read the apolgies post on the WSUS Product Team Blog