Deployment with WSUS server

Question

Hi everybody

I have several computers and servers without a new updates.

I tried to deploy new update by WSUS server but the server didn't get the update.

I ran on the server the follow command: GPRESULT /V or GPRESULT /R(to see if my GPO apply to this server)

I got only an USER SETTINGS no computer Setting.

How can I see Computer Settings?

How can i fix the problem to get updates from WSUS server?

Thanks

Michael

Answer 1

Hello Michael,

Thank you for your question and for reaching out with your question today.

To view the computer settings in the Group Policy Result (GPResult) output, you need to run the command with administrative privileges. Here's how you can do it:

1. Open Command Prompt with administrative privileges. Right-click on the Command Prompt icon and select "Run as administrator."
2. In the elevated Command Prompt window, run the following command to generate the GPResult report with computer settings:

gpresult /r /scope computer

This command will display the Group Policy settings applied to the computer.

Now, regarding the issue with WSUS server and not receiving updates on your servers, here are some steps you can take to troubleshoot the problem:

1. Verify WSUS Configuration: Ensure that your WSUS server is correctly configured and synchronized with Microsoft Update servers. Check the synchronization status and confirm that the updates are being downloaded to the WSUS server.
2. Confirm GPO Settings: Verify that the Group Policy settings for Windows Update are correctly configured to point the servers to the WSUS server. Ensure that the GPO is linked to the correct OU containing the servers.
3. Check Firewall and Proxy Settings: Make sure that the servers can communicate with the WSUS server over the network. Check the firewall rules and proxy settings to ensure that they allow communication between the servers and the WSUS server.
4. Run Windows Update Troubleshooter: On the affected servers, you can run the built-in Windows Update Troubleshooter. It can help identify and resolve common issues related to Windows Update.
5. Restart Windows Update Service: Restart the Windows Update service on the servers by running the following commands in an elevated Command Prompt:

net stop wuauserv

net start wuauserv

6. Check Windows Update Logs: Review the Windows Update logs on the servers to identify any errors or issues. The logs are located in the %windir%\WindowsUpdate.log file.
7. Manually Reset Windows Update Components: If all else fails, you can try resetting the Windows Update components on the servers. Microsoft provides a script called "Reset Windows Update Agent" that automates the process. You can download it from the Microsoft website and run it on the affected servers.

I used AI provided by ChatGPT to formulate part of this response. I have verified that the information is accurate before sharing it with you.

If the reply was helpful, please don’t forget to upvote or accept as answer.

Answer 2

Michael,

You will only get USER scope if you run the gpresult from a NON-ELEVATED cmd.

If you elevate your cmd (Run As Administrator), and then run gpresult, you will get both the user AND computer scope.

https://www.ajtek.ca/wsus/client-machines-not-reporting-to-wsus-properly/