WSUS Problem After Upgrading SCCM serve from 2012 R2 to 2019

Anthony Vand 146 Reputation points
2023-10-13T02:21:31.6633333+00:00

Hello Everyone

hope all is well

I have followed the steps for SCCM server IPU and all went well, however, I'm having a bit of strange issue with WSUS.

It looks like WSUS is syncing and pulling updates successfully:

User's image

However, I'm getting these errors in components status :

User's image

and as you can see below, it is showing that WSUS sync has been failing constantly :

User's image

Error:

SMS_WSUS_SYNC_MANAGER 6703 WSUS Synchronization failed. Message: Failed to sync some of the updates. Source: Microsoft.SystemsManagementServer.SoftwareUpdatesManagement.WsusSyncAction.WSyncAction.SyncUpdates.

I tired reinstalling the WSUS and SUP by removing the role from the server and SCCM but no luck. When I tried wsusutil rest, the WSUS snap in froze and gave this error :

User's image

Any idea on what the issue might be ?

Microsoft Security | Intune | Configuration Manager | Updates
Windows for business | Windows Server | User experience | Other
Microsoft System Center | Other
0 comments No comments
{count} votes

7 answers

Sort by: Most helpful
  1. Anthony Vand 146 Reputation points
    2023-10-15T00:30:12.2+00:00

    OK so here are the steps I took to remediate the issue, (at least for now):

    1 – uninstall SUP from SCCM Console

    2 – Uninstall WSUS Server role

    3 – Reboot the server

    4 – Remove WSUS Administration website from IIS manually.

    5 – Detach the SUSDB database using SSMS

    6 – Reinstall WSUS role on the server

    7 – After the installation is completed, re-attach the SUSDB database and start he post

    installation task for WSUS

    8 – Add a new SUP role on SCCM

    9 – IMPORTANT: uncheck all classifications on the “classification” page on SUP wizard

    10 – Initiate the sync on WSUS, it will take quite a while

    11 – Once that’s done, initiate a sync from the SCCM console, form the Software library section:

    User's image

    12 – You will see that the sync has been completed under Monitoring > Distribution Status > Software Update Point Synchronization Status. But nothing has been synced because nothing was selected.

    13 – No head to Administration > Site Configuration > Sites. Choose the desired site and select site components > then choose Software Update Point :

    User's image

    14 – Now start adding classifications one by one and then try to initiate a sync from Software Library. You can monitor the process in wsyncmgr.log on SCCM server logs directory.

    15 – This time you will notice that some updates might fail with the previous error:

    Error: The Microsoft Software License Terms have not been completely downloaded and~~cannot be accepted. Source: Microsoft.UpdateServices.Internal.BaseApi.LicenseAgreement.GetById

    But that does not deny other updates to be downloaded. The Sync status of the SCCM server will show failed:

    User's image

    However the new updates, the ones which were downloaded can be accessed and deployed from the software library now.

    This is what I have come up with for now, and is good enough for me,

    I will share anything else that comes up ( Let’s hope not )

    1 person found this answer helpful.
    0 comments No comments

  2. Rahul Jindal [MVP] 10,911 Reputation points MVP
    2023-10-13T06:23:12.25+00:00

    The first sync after the upgrade can take some time. However, what is the error in the sync log? Did you have to re-install Wsus role as well? Did you re-intilize WSUS after you re-installed it?


  3. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.


    Comments have been turned off. Learn more

  4. Anthony Vand 146 Reputation points
    2023-10-15T00:33:29.1066667+00:00

    OK so here are the steps I took to remediate the issue, (at least for now):

    1 – uninstall SUP from SCCM Console

    2 – Uninstall WSUS Server role

    3 – Reboot the server

    4 – Remove WSUS Administration website from IIS manually.

    5 – Detach the SUSDB database using SSMS

    6 – Reinstall WSUS role on the server

    7 – After the installation is completed, re-attach the SUSDB database and start he post

    installation task for WSUS

    8 – Add a new SUP role on SCCM

    9 – IMPORTANT: uncheck all classifications on the “classification” page on SUP wizard

    10 – Initiate the sync on WSUS, it will take quite a while

    11 – Once that’s done, initiate a sync from the SCCM console, form the Software library section:

    User's image

    12 – You will see that the sync has been completed under Monitoring > Distribution Status > Software Update Point Synchronization Status. But nothing has been synced because nothing was selected.

    13 – No head to Administration > Site Configuration > Sites. Choose the desired site and select site components > then choose Software Update Point :

    User's image

    14 – Now start adding classifications one by one and then try to initiate a sync from Software Library. You can monitor the process in wsyncmgr.log on SCCM server logs directory.

    15 – This time you will notice that some updates might fail with the previous error:

    Error: The Microsoft Software License Terms have not been completely downloaded and~~cannot be accepted. Source: Microsoft.UpdateServices.Internal.BaseApi.LicenseAgreement.GetById

    But that does not deny other updates to be downloaded. The Sync status of the SCCM server will show failed:

    User's image

    However the new updates, the ones which were downloaded can be accessed and deployed from the software library now.

    This is what I have come up with for now, and is good enough for me,

    I will share anything else that comes up ( Let’s hope not )


  5. AllenLiu-MSFT 49,316 Reputation points Microsoft External Staff
    2023-10-18T05:51:04.1766667+00:00

    Hi, @Anthony Vand

    Thank you for posting in Microsoft Q&A forum.

    Make sure we checked the correct Products as well and perform a synchronization.

    1


    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Add comment".


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.