Thursday, March 15, 2007

SUS (WSUS) CLIENT ID PROBLEM

One of the most annoying and recurring issues with WSUS is the duplicate ID issue where when systems are not properly 'Sysprepped' or Ghosted the WSUS clients appear in the WSUS console only periodically . Recently an administrator imaged two laptops, and the SID changer utility did not work so both Laptops were essentially the same .

To fix this issue on an individual basis, since my problem was not that widespread I found a great .VBS script on the net to fix the issue .

Here it is !

Set oShell = CreateObject("WScript.Shell")

sRegKey = "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate"

On Error Resume Next
' Delete registry values
oShell.RegDelete sRegKey & "\AccountDomainSid"
oShell.RegDelete sRegKey & "\PingID"
oShell.RegDelete sRegKey & "\SusClientId"

' Stop and start the Automatic updates service
oShell.Run "%SystemRoot%\system32\net.exe stop wuauserv", 0, True
oShell.Run "%SystemRoot%\system32\net.exe start wuauserv", 0, True

' Run wuauclt.exe with resetauthorization
sCmd = "%SystemRoot%\system32\wuauclt.exe /resetauthorization /detectnow"
oShell.Run sCmd, 0, True

MsgBox "Finished!", vbSystemModal+vbInformation

Anyways this script immediately changed the values and after a little time both laptops appeared in the WSUS console independantly . Hope this helps someone ! Here is a link to the orgin of this info with other ideas for running this in a startup script if you have a larger problem . http://www.wsus.info/forums/index.php?showtopic=5623

Wednesday, March 14, 2007

WSUS ANNOYANCE

Today I was having an issue with a few systems that were contacting the WSUS server, but would not report back . After Googling the universe, I finally have these two systems reporting normally again, but I am not clear on what the true fix is or if it was a combination of fixes .


Anyways here is what I personally did to resolve the issue :

1. Applied the KB898708 patch to the WSUS Server running Windows 2003 Server ......
2. On the troubled Clients -
Stop the Automatic Updates Service
Delete the folder c:\windows\SoftwareDistribution
rename the windows update log: c:\windows\windowsupdate.log to windowsupdate.log.old
Start the Automatic Updates Service
Go to a command prompt and type: wuauclt /detectnow - After this step wait about 30 Minutes before checking it again !!!

Thanks To "Larry's Head Bangers" for the good troubleshooting info !!
http://cobalabs.coba.unr.edu/support/pcfixes.htm#wu