Windows Server 2016 won't connect to WSUS

Question

Windows Server 2016 won't connect to WSUS

BOULAY Romain 0

Hello community,

I have an issue, my windows server 2016 are unable to connect to WSUS but other os (windows 10, windows server 2019 are updated using this update service).

User's image

Here are tests :

$(New-Object -ComObject "Microsoft.Update.ServiceManager").Services | Select-Object Name, IsDefaultAUService > WSUS is true and windows update is false
WSUS is reachable on web interface using selfupdate/iuident.cab or browse to ClientWebService/client.asmx
Regedit is up to date with GPO
On event viewer, i got this error : Windows Update failed to check for updates with error 0x80072EE6.
I tested all tips on this site : https://www.ajtek.ca/wsus/client-machines-not-reporting-to-wsus-properly/
Create a GPO only for this windows version : same issue

Please can you help me to solve this issue?

Best regards,

Romain

Answer 1

Adam J. Marshall 7,261 MVP

Does the computer show up on WSUS at all as a computer? If so, have you tried deleting it and running the client side script?

Does it appear again and report in after a while?

BOULAY Romain 0 Reputation points

2023-11-15T15:06:03.0933333+00:00

Hello Adam,

This server never appeared in Computers menu in WSUS even as a computer even with a refresh.

After running this script, i got the same issue:

Stop-Service -Name BITS, wuauserv -Force Remove-ItemProperty -Name AccountDomainSid, PingID, SusClientId, SusClientIDValidation -Path HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\ -ErrorAction SilentlyContinue Remove-Item "$env:SystemRoot\SoftwareDistribution" -Recurse -Force -ErrorAction SilentlyContinue Start-Service -Name BITS, wuauserv wuauclt /resetauthorization /detectnow (New-Object -ComObject Microsoft.Update.AutoUpdate).DetectNow()

It's weird because i got the good parameters in regedit on this server and i can communicate with wsus url
Adam J. Marshall 7,261 Reputation points MVP

2023-11-15T15:19:13.2566667+00:00

If the computer doesn't appear in WSUS there are 2 possible issues - either it has been cloned and the SusClientId already exists so it thinks it's the same as that computer and 'joins' with it, or it can't reach the service endpoints.

Try resetting the GPO settings https://www.ajtek.ca/wsus/reset-windows-update-gpo-settings/
BOULAY Romain 0 Reputation points

2023-11-16T09:34:35.78+00:00

Hello,

I tried resetting GPO, server doesn't appear on WSUS.

I checked for multiple servers, they have unique SusclientID (checked with powershell command).

I can reach endpoint using 2 links : http://wsus:8530/selfupdate/iuident.cab and http://wsus:8530/ClientWebService/client.asmx

Do you have another lead?
Adam J. Marshall 7,261 Reputation points MVP

2023-11-16T14:05:54.22+00:00
From an elevated (Run as administrator) Command or PowerShell prompt on an affected client, run the following:

gpresult /h gpo.htm

Share it with your favourite method or Pastebin it so that we can see it.
BOULAY Romain 0 Reputation points

2023-11-16T15:04:00.34+00:00

Here you can find the resultt of gpresult command:
Adam J. Marshall 7,261 Reputation points MVP

2023-11-16T15:23:45.84+00:00

can't reach the site. tried twice with 10+ min between.
BOULAY Romain 0 Reputation points

2023-11-16T15:27:57.2266667+00:00

You can create a htm file to see in web
Adam J. Marshall 7,261 Reputation points MVP

2023-11-16T17:04:11.1933333+00:00

I don't see anything wrong with this - (I'd suggest deleting it now).

I re-read your original question... it appears it is attempting to try to check Microsoft as well.

disable your setting (switch to Not Configured)

Do not connect to any Windows Update Internet locations

See if that fixes the problem. And then of course re-check the scan source.

Windows Server 2016 won't connect to WSUS

1 answer

Activity