{"id":653,"date":"2019-08-15T23:11:34","date_gmt":"2019-08-16T04:11:34","guid":{"rendered":"http:\/\/zewwy.ca\/?p=653"},"modified":"2020-02-10T10:36:32","modified_gmt":"2020-02-10T16:36:32","slug":"systems-not-showing-up-in-wsus-console","status":"publish","type":"post","link":"https:\/\/zewwy.ca\/index.php\/2019\/08\/15\/systems-not-showing-up-in-wsus-console\/","title":{"rendered":"Systems not showing up in WSUS console"},"content":{"rendered":"<p>When a system doesn&#8217;t show up in WSUS, do these steps on the system not showing up:<\/p>\n<p>1) Verify this registry setting (usually set via a GPO):<\/p>\n<pre><strong>reg query HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate<\/strong><\/pre>\n<p>2) Verify the System can resolve the hostname of the WSUS server, if specified. If IP, move on.<\/p>\n<p>3) Use telnet against the specified port (if different from 8530), this verifies layer 4 and that not firewall ports are in the way.<\/p>\n<p>4) Ensure the Windows Service is actually running via services.msc<\/p>\n<p>5) All else fails try this:<\/p>\n<pre>net stop wuauserv\r\nreg delete HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate \/v SusClientId \/f\r\nreg delete HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate \/v SusClientIdValidation \/f\r\nnet start wuauserv\r\nwuauclt \/resetauthorization \/detectnow\r\nwuauclt \/reportnow<\/pre>\n<p>Wait a couple mins and hard refresh the WSUS MMC Snap-in. I noticed this trick also works for systems that are in WSUS but won&#8217;t report an install percentage of 100%.<\/p>\n<p>I noticed one system was not showing up with 100% install rate, and a yellow icon indicating needed updates still required, however checking for updates on the system kept reporting all updates, even after step 5 a couple times.<\/p>\n<p>So&#8230; to get updates WSUS doesn&#8217;t have on Desktop based version of Windows there&#8217;s usually a nice link that states &#8220;Check for updates from Windows Update Online&#8221;, but this was a core hyper-v server, and no GUI, so&#8230;<\/p>\n<p>*Note ByPassing WSUS on Core, without GPO changes.<\/p>\n<pre>reg add HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate\\AU \/v UseWUServer \/t REG_DWORD \/d 0\r\nnet stop wuauserv\r\nnet start wuauserv\r\nsconfig<\/pre>\n<p>run option 6 and check for all updates (this assumes the server\/system has access to internet servers).<\/p>\n<p>Don&#8217;t forget to set the setting off again:<\/p>\n<pre>reg add HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate\\AU \/v UseWUServer \/t REG_DWORD \/d 1<\/pre>\n<p>Then run Step 5 again.<\/p>\n<p>Update* Feb 2020<\/p>\n<div>I discovered there&#8217;s a new &#8220;Expert&#8221; in WSUS named <a href=\"https:\/\/social.technet.microsoft.com\/profile\/ajtek.ca\/\" target=\"_blank\" rel=\"noopener noreferrer\">Adam<\/a><\/div>\n<div>Following his suggestion on <a href=\"https:\/\/social.technet.microsoft.com\/Forums\/ie\/en-US\/4e054cfe-dd6f-4622-bdc3-d5508c466497\/windows-10-1709-clients-no-longer-report-status-wsus-2012-r2?forum=winserverwsus\" target=\"_blank\" rel=\"noopener noreferrer\">this technet post<\/a>, managed to resolve the issue and have his machine install the CU for 1909 and report it&#8217;s status to WSUS!<\/div>\n<div><\/div>\n<pre>net stop bits<\/pre>\n<pre>net stop wuauserv<\/pre>\n<pre>reg delete \"HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\" \/v AccountDomainSid \/f<\/pre>\n<pre>reg delete \"HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\" \/v PingID \/f<\/pre>\n<pre>reg delete \"HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\" \/v SusClientId \/f<\/pre>\n<pre>reg delete \"HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\" \/v SusClientIDValidation \/f<\/pre>\n<pre>rd \/s \/q \"C:\\WINDOWS\\SoftwareDistribution\"<\/pre>\n<pre>net start bits<\/pre>\n<pre>net start wuauserv<\/pre>\n<pre>wuauclt \/resetauthorization \/detectnow<\/pre>\n<div><\/div>\n<div>Only a couple systems that may need to be manually intervened before all systems report successfully and are 100% updated.<\/div>\n<div><\/div>\n<div>I also first <a href=\"https:\/\/community.spiceworks.com\/topic\/1934869-wsus-clients-contacting-but-not-reporting-to-wsus-server-well-some-of-them\" target=\"_blank\" rel=\"noopener noreferrer\">attempted this fix<\/a> &#8220;I have Declined all superseded updates and then run the clean up tool. Forced a client to \/detectnow and it started working.&#8221;<\/div>\n<div><\/div>\n<div>Which sadly did not work, but very nice to clear up the DB size, and disk spaced used!<\/div>\n","protected":false},"excerpt":{"rendered":"<p>When a system doesn&#8217;t show up in WSUS, do these steps on the system not showing up: 1) Verify this registry setting (usually set via a GPO): reg query HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate 2) Verify the System can resolve the hostname of the WSUS server, if specified. If IP, move on. 3) Use telnet against the specified port &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/zewwy.ca\/index.php\/2019\/08\/15\/systems-not-showing-up-in-wsus-console\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Systems not showing up in WSUS console&#8221;<\/span><\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"sfsi_plus_gutenberg_text_before_share":"","sfsi_plus_gutenberg_show_text_before_share":"","sfsi_plus_gutenberg_icon_type":"","sfsi_plus_gutenberg_icon_alignemt":"","sfsi_plus_gutenburg_max_per_row":"","footnotes":""},"categories":[8,197],"tags":[222,221],"class_list":["post-653","post","type-post","status-publish","format-standard","hentry","category-server-administration","category-windows","tag-system-report","tag-wsus"],"_links":{"self":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts\/653","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/comments?post=653"}],"version-history":[{"count":7,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts\/653\/revisions"}],"predecessor-version":[{"id":822,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts\/653\/revisions\/822"}],"wp:attachment":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/media?parent=653"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/categories?post=653"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/tags?post=653"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}