WSUS Post Install on SCCM Server Fails

Question

Hi all,

Trying to clean up and reinstall WSUS on my SCCM server as it had never been maintained and I thought it would be easier to start over. Uninstalled WSUS and SCCM's SUP. Once WSUS install is complete, guides say to cancel the configuration wizard and do all config in SCCM.

I'm encountering a WSUS post-installation setup error that seems to be related to IIS:

2021-01-29 11:02:04 Configuring IIS...
2021-01-29 11:02:04 Start: ConfigureWebsite
2021-01-29 11:02:05 Configuring website on port 8530
2021-01-29 11:02:06 System.ComponentModel.Win32Exception (0x80004005): The system cannot find the file specified
at System.Diagnostics.Process.StartWithShellExecuteEx(ProcessStartInfo startInfo)
at System.Diagnostics.Process.Start(ProcessStartInfo startInfo)
at Microsoft.UpdateServices.Administration.UseCustomWebSite.ExecuteIisCustomAction(String arguments)
at Microsoft.UpdateServices.Administration.UseCustomWebSite.InstallAndConfigure(IisConfiguration& iisConfiguration, Int32 newPortNumber)
at Microsoft.UpdateServices.Administration.UseCustomWebSite.CreateWebsite(Int32 newPortNumber)
at Microsoft.UpdateServices.Administration.PostInstall.ConfigureWebsite(Int32 portNumber)
at Microsoft.UpdateServices.Administration.PostInstall.Run()
at Microsoft.UpdateServices.Administration.PostInstall.Execute(String[] arguments)

Running SCCM CB 2006 on Windows Server 2012 R2. Windows patch for .NET 4.8 is installed. Old WSUS content location was F:\WSUS, I want to set back up in the same location. Have tried the post install with the WSUS folder manually created and automatically created by the setup.

Been following a combination of guides to uninstall and reinstall. The steps I have performed:

• Remove WSUS and WID role/features, restart.
• Deleted C:\Windows\WID and C:\Program Files\Update Services folders. (SCCM uses dedicated SQL instance, nothing else was using WID)
• Deleted old F:\WSUS folder
• Deleted HKLM\SOFTWARE\Microsoft\Update Services registry key
• Deleted WsusPool application pool and WSUS Administration site
• Ran "dism.exe /online /Cleanup-Image /StartComponentCleanup /ResetBase" and "sfc /scannow", restart
• Install WSUS and WID through server manager, restart
• Try to run post-install tasks through server manager - errors and log generated is very short and nonspecific
• Run from admin PowerShell - .\wsusutil postinstall content_dir=F:\WSUS - errors and I have included the relevant part from the log file

I'm seeing various guides around the place saying .NET 4.7 must not be installed or the WSUS post install will always fail, but am unsure if these are still relevant. The KB updates for .NET 4.8, 4.7.2, 4.7.1, and 4.7 are all installed and cannot be uninstalled because they are in use by the OS, so if this is still relevant I am unable to remove them.

Focusing on IIS for now, we have the SCCM SMS provider, distribution point, and management point roles installed on this server, so I do not think it is possible to blow away IIS and reinstall this too. SCCM IIS requirements from this page: https://learn.microsoft.com/en-us/mem/configmgr/core/plan-design/configs/site-and-site-system-prerequisites#bkmk_2012smsprovpreq

Any advice on how to resolve this would be much appreciated!

Answer 1

Hi all, thanks for the responses. I'm afraid I had already found and tried the steps in the links suggested and was unable to get .NET 4.7 and above removed. I had also attempted all the steps to remove WSUS, per my original post.

After some tinkering over the weekend I upgraded to Windows Server 2019 and successfully installed WSUS on there with additional permissions set to prepare for SCCM's SUP to manage. It took some more work to get updates to sync and I had to do a wsusutil reset as the initial sync would keep showing as "cancelled" in WSUS console. I finally tested it all this morning with some VMs and they are getting updates as expected.

Moral of the story: get off Server 2012 (R2).

Answer 2

Follow the instructions in my guide here:
https://www.ajtek.ca/wsus/how-to-remove-wsus-completely-and-reinstall-it/

On Server 2012, yes, 4.7/4.8 is still an issue, simply remove it temporarily, install WSUS and get it working, re-install 4.8.

Also, make sure you delete the IIS Website as indicated in the guide.

Answer 3

Hi Adam, thanks for the reply. Yours is one of the guides I was following.

Unfortunately I am unable to uninstall the problem .NET versions. Screenshot attached here of trying to uninstall .NET 4.8 but I get the same for the 4.7 variants too.

I'm going to try upgrading to Server 2019 as that seems to be the only version where WSUS is compatible with .NET 4.7 and up installed.

Answer 4

According to the info on the Update Catalog

Restart behavior: Can request restart
May request user input: No
Must be installed exclusively: No
Requires network connectivity: No
Uninstall Notes:
This software update can be removed by selecting View installed updates in the Programs and Features Control Panel.
Uninstall Steps: n/a

Answer 5

Found this link: https://cyberark-customers.force.com/s/article/00004276