What would keep updates that have been approved for install from downloading to WSUS? I have a couple machines that can't get their updates simply because it can't be downloaded. Says it could be a permissions issue but I don't see the update on the harddrive of WSUS. Could this be related to my recently added Automation server and group management changes?
↧
Updates not downloading to WSUS
↧
Update Errors Windows Server 2016
Hi,
Today we created multiple new virtual Servers with Windows Server 2016. But they doesn't show up in WSUS console. This WSUS is also on server 2016.
- One Server showed up in console (and was moved in correct wsus group) only once but it's wuauclt stated Errors 0x80072EFD and 0x80240438. In eventviewer between the errors Informational events are logged: successful: "0 updates were found" - but this is simply wrong because this server isn't up to date. A rename of SoftwareDistribution folder and /resetauthorization were no Solutions.
- Other new installed Servers loaded and installed updates from this wsus (configured in GPO) but doesn't Show up in the WSUS console. They have no Internet Connection. The Updates only could be downloaded from this wsus.
What can I do?
- I can open and show the IIS Default Website of the IIS on the WSUS.
- 4 Win10 Clients are already connected to the wsus and are updating well.
- The WSUS itself (Client component) updates from itself well too.
Thanks.
↧
↧
Cannot download updates into SCCM
We recently moved our Patch Manager to a Windows 2016 server. To deploy updates we are using SCCM. In SCCM I am able to open 3rd Party Updates and publish the updates. But when I go to Software Updates-> All Software Updates and try to download the updates, I get an error message saying "The SMS Provider reported an Error" and the download fails. SCCM version is 1710.
Thanks.
↧
Cleaning up UpdateServicesPackages folder
I'm combating some high disk usage on my Patch Manager install.
How do I clean up the 'Wsus\UpdateServicesPackages' directory? It's the only large folder I haven't found documentation to clean up.
I was able to clean the C: drive up with https://support.solarwinds.com/Success_Center/Patch_Manager/Patch_Manager_C_drive_is_running_out_of_space
I was able to partially clean up my data drive with https://support.solarwinds.com/Success_Center/Patch_Manager/Run_Server_Cleanup_wizard_to_avoid_unnecessary_updates_on_WSUS , but this only addresses the Wsus\WsusContent directory.
↧
Getting error - unable to connect using account ...
We are new to Solarwinds patch manager tool. In our environment, we installed the PAS and 3 automation role servers. We have added the Solarwinds id to the local admin group on all client systems.
About 1800 client servers are reporting to the patch manager console. Out of these 1800 systems, 330 systems are reporting the WMI Connect as "NO". I picked 1 client system that has the WMI issue, the Computer details on the console reported the following error:
The following errors were detected or one or more datasources have exceptions:
Exception occurred at 9/24/2013 1:44:21 AM: Unable to resolve the MAC address. Message: Retrieved MAC address for IP Address: 151.149.58.172 MAC Address: 00-50-56-9F-29-A1
ICMP Ping succeeded.
Unable to retrieve MAC address of 151.149.58.172. Error Code: 0x80004005 Message: GetMACAddress()::Error retrieving MAC address for 151.149.58.172. Error Code: 67
Unable to connect to target using WMI. Message:
The RPC server is unavailable
COM Exception: Error Code: 0x800706BA . Unable to connect using account Domain\Id
I reviewed the article - SolarWinds Knowledge Base :: Troubleshooting "Access Denied" Errors in Patch Manager and followed the below steps to troubleshoot that 1 client system -
- Verify you can ping the remote computer by name from the Patch Manager server. - YES
- Verify the account specified in the error is a local administrator on the remote computer. - YES
- Verify that you can connect to the remote computer's admin$ share with the account specified in the error: - The command completed successfully. I see a mapped drive.
- Verify that you can make a WMI connection to the remote computer using wbemtest - From the PAS server, I ran the wbemtest and got the following error. "The RPC server is unavailable."
- I was able to RDP and login to the client system using the Solarwinds id that is added to the local admin group on the client system.
Not sure what to do next ... Also, how do I troubleshoot 300 systems? Is there anything that I can try on all of them and reduce the numbers to more manageable size where I can get to individual systems?
Thanks
↧
↧
bit locker
We are required to turn on bit locker on our Windows systems. I was looking for a report that might say yes or no if bit locker is enabled. I couldn't find one. Is there a report or a custom report I could make to search for this?
Thanks
Matt
↧
Patch Manager not connecting to workstation off of the Domain
We are using Patch Manager to update workstations both on and off the domain. We have a group of about 80 workstations that are off the domain which we need to manage. In testing I found that I cannot connnect to a workstation off the domain unless I add the workstations IP/Hostname to the Patch Manager server's hosts file. Once I add the IP/Hostname to the hosts file on the server, I can run any of the functions on computer explorer but if I remove the workstation info from the hosts file I can only ping it.
I'd like to not have to add a list of 80 workstations to the hosts file on the Patch Manager server. Is there some configuration within Patch Manager that I need to set in order to be able to connect to these workstations without adding them to the hosts file?
This is the error message I get when I attempt to run any function from computer explorer AFTER I remove the workstations IP/Hostname from the Patch Manager server hosts file.
Source: Data Grid Server (Patch_Manager_Server)
Device: TestWorkstation-XP01
Details: Computer connect
Exception occurred at 6/11/2013 3:27:17 PM: Attempt to connect to TestWorkstation-XP01 failed.
The following attempts were made:
ARP Resolution result: No
DNS Resolution result: No
NETBIOS Name Resolution: No
MS Endpoint Mapper: No
WMI Connection: No
EminentWare Provider Connection: No
File and Print Sharing Ports: No
Unable to connect to the NetBIOS (139) or NetBIOS over TCP/IP direct hosting (445) ports on TestWorkstation-XP01 and provisioning of the EminentWare provider requires the 'File and Print Sharing' exception to be enabled.
↧
WSUS Version mismatch 3.2.x 3.2.y ?
What does this error mean, if i try to publish 3rd Party updates to another wsus-server?:
"The Server has the required certificates for Publishing. There is a version mismatch between the WSUS Server API version: 3.2.7600.274 and the WSUS Client API version: 3.2.7600.226"
I have 3 WSUS. 2 of them (one of them PM) are Server 2008 R2 and are showing Client and Server api version 3.2.7600.274. The 3rd with the Error is a Server 2003 R2. The WSUS console on the 2003r2 Shows version 3.2.7600.274 for this Server, but in the programs/software list (programs and Features in Server 2008 r2) the KB2720211 is listed as removed (and this isn't removable).
1. I thought a mismatch could only occur between main Versions like WSUS3 / WSUS6 and so on?
2. How can I update the Client API on WSUS? Do it have to selfupdate? And how can I force this with Patchmanager?
Thanks
↧
Some Updates Aren't Signed Correctly.
Having my first attempt at 3rd Party patching of Adobe. I have patch checked in and approved - on the client machine I see the following in WSUS. Some update files aren't signed correctly. Error code: (0x800b0109) I have the certs etc in place. Any ideas? Thanks
↧
↧
Did the Flash updates change?
Hi,
Are there some changes to the Flash packages? We use the flash MSI packages from solarwinds repository. Until now we only used the full package (not update) to install and update. This were running fine.
Now my clients show "not applicable" only for the "flash player plugin MSI" package. The "flash player activex MSI" is applicable.
Same problem with 32.0.0.156 and 171.
Any suggestions?
Thanks
Edit:
I found the Applicability Rules of the MSI Plugin Package seems to be wrong for x32 and x64:
- First check if Reg Value "Version" under SOFTWARE\Macromedia\FlashPlayerPlugin is lower than the needed version --> OK
- Then Check if the new NPSWF32*.dll under System32\Macromed\flash\ doesn't exist already --> OK
- But then check that the Reg-Path mentioned above doens't exist (SOFTWARE\Macromedia\FlashPlayerPlugin) - That looks wrong, if I want to update :-(
↧
Java Runtime 8u202 Third Party Update problem
Hi All,
I have a problem with the latest Java Runtime 8u202 update from the third party updates section
I recently approved the update for some test PCs - the update goes through and installs fine - but when the windows updates does the check for updates it picks up the Java Runtime 8u202 is still needed.
Ive logged in to the PC and checked which version of Java is installed - it has 8u202
Ive checked the applicability and installed ruleset and they look correct
Is they anything I might have missed or anyone else having a similar issue ?
Thanks
↧
Remove old versions of Java 8
Is there anyone out there that has a good solution to removing the old version of Java 8 now that they don't get removed when a new version is installed? My test machine has about 4 old versions of java now...
↧
Some Updates Aren't Signed Correctly.
Having my first attempt at 3rd Party patching of Adobe. I have patch checked in and approved - on the client machine I see the following in WSUS. Some update files aren't signed correctly. Error code: (0x800b0109) I have the certs etc in place. Any ideas? Thanks
↧
↧
Java 7 Update 51 - Populating the Exception Site List on upgrade deployment?
So Java 7u51 is out with a new feature, Exception Site List. This is stored in C:\Users\username\AppData\LocalLow\Sun\Java\Deployment\security\exception.sites.
Any ideas on how to populate this for all users during the upgrade via Patch Manager? C:\Users\Public\AppData doesn't exist, so that's out...
Upcoming Exception Site List in 7u51 (Java Platform Group, Product Management blog)
Thanks
↧
Error 0x800B0109 (A certificate chain processed but terminated in a root certificate which is not trusted by the trust provider)
This error means that one (or both) of the following has not occurred on the machines you are trying to deploy to:
1) The WSUS signing certificate has been installed. You can use EminentWare’s ‘Client Certificate Management’ or ‘Client Provisioning Wizard’ for this.
2) The GPO setting for ‘Allow signed content from an internal Microsoft update location’ has been enabled.
For more information on setting up 3rd Party Updates, please see our admin guide – available here: https://www.eminentware.com/cs2008/media/p/80.aspx
There is also a setup video available here: https://www.eminentware.com/cs2008/media/p/405.aspx
John
↧
WSUS server cannot issue a self-signed certificate
I'm having an issue with the WSUS server in Patch manager not being provisioned. When I chose my SCCM 2012 WSUS server, it says that it is not provisioned. When I try to create a self-signed certificate, it says the WSUS server cannot issue a self-signed certificate. Can someone assist?
↧
Smartdraw Enterprise MSI Install
Hello All, I am attempting to deploy Smartdraw Enterprise using a customized MSI according to the Smartdraw instructions. I used a tool from Microsoft called Orca to insert the license key into the package then used that MSI to create a package. However, when I get to the step to select the install type (MSI), then select a location on the local file system where the MSI is, PatchManager returns an error: "The digital signature for the download content either does not exist or is not valid. It is possible that the download failed or the download URL is not a valid URL for the requested content. Please verify the URL and retry." I 'ignore' the error and press through to complete the package creation and Publish but the package fails to Publish.
Has anyone else encountered this issue? Sure would appreciate the help!
↧
↧
Updates not downloading to WSUS
What would keep updates that have been approved for install from downloading to WSUS? I have a couple machines that can't get their updates simply because it can't be downloaded. Says it could be a permissions issue but I don't see the update on the harddrive of WSUS. Could this be related to my recently added Automation server and group management changes?
↧
Getting error - unable to connect using account ...
We are new to Solarwinds patch manager tool. In our environment, we installed the PAS and 3 automation role servers. We have added the Solarwinds id to the local admin group on all client systems.
About 1800 client servers are reporting to the patch manager console. Out of these 1800 systems, 330 systems are reporting the WMI Connect as "NO". I picked 1 client system that has the WMI issue, the Computer details on the console reported the following error:
The following errors were detected or one or more datasources have exceptions:
Exception occurred at 9/24/2013 1:44:21 AM: Unable to resolve the MAC address. Message: Retrieved MAC address for IP Address: 151.149.58.172 MAC Address: 00-50-56-9F-29-A1
ICMP Ping succeeded.
Unable to retrieve MAC address of 151.149.58.172. Error Code: 0x80004005 Message: GetMACAddress()::Error retrieving MAC address for 151.149.58.172. Error Code: 67
Unable to connect to target using WMI. Message:
The RPC server is unavailable
COM Exception: Error Code: 0x800706BA . Unable to connect using account Domain\Id
I reviewed the article - SolarWinds Knowledge Base :: Troubleshooting "Access Denied" Errors in Patch Manager and followed the below steps to troubleshoot that 1 client system -
- Verify you can ping the remote computer by name from the Patch Manager server. - YES
- Verify the account specified in the error is a local administrator on the remote computer. - YES
- Verify that you can connect to the remote computer's admin$ share with the account specified in the error: - The command completed successfully. I see a mapped drive.
- Verify that you can make a WMI connection to the remote computer using wbemtest - From the PAS server, I ran the wbemtest and got the following error. "The RPC server is unavailable."
- I was able to RDP and login to the client system using the Solarwinds id that is added to the local admin group on the client system.
Not sure what to do next ... Also, how do I troubleshoot 300 systems? Is there anything that I can try on all of them and reduce the numbers to more manageable size where I can get to individual systems?
Thanks
↧
Windows 10 clients will contact, but not report
I was wondering if anyone else has run into this type of problem. We're a bit behind the times at my company and are just starting to get windows 10 client workstations. The problem is they contact my patch manager server, but don't report so they don't install any updates. I was hoping to find out some possible solutions? If you need any additional information about our environment let me know and I'll get back to you.
Thanks in advance.
Paul
↧