Re: Should WSUS force clients to install updates?

Hi Chace,

We have 2 NIC's & I checked all settings. The only one that I have an
issue/question is on the workstation.

Gateway: assigned by DHCP. Doing an ipconfig /all shows the gateway pointing
to the server 192.168.16.2

Any recommendations?

"chace zhang" wrote:

Hi,

Thank you for your update.

Yes I agree with KJ's input, at this moment please check the networking
settings on client:

For 2 NICs on SBS:

On SBS server:

External NIC:
IP: assigned by your hardware router
Gateway: your Hardware router IP
DNS: SBS INTERNAL NIC IP as the only entry

Internal NIC:
IP: Fixed IP
Gateway: None
DNS: SBS INTERNAL NIC IP as the only entry

On workstation:

IP: Assigned by DHCP
Gateway: Your ISP or your Hardware router IP
DNS: SBS INTERNAL NIC IP as the only entry



For one NIC on SBS:

On SBS server:

NIC:
IP: Fixed IP
Gateway: Your ISP or your Hardware router IP
DNS: SBS NIC IP as the only entry

In the DNS console (dnsmgmt.msc), right click your ServerName and click
properties. In the Forwarders tab, your ISP DNS server IP should be
inputted there.

Hope this helps, if anything unclear, please feel free to let me know.

Have a nice day!

Best Regards,

Chace Zhang (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.


--------------------
| From: "kj" <kj@xxxxxxxxxxx>
| References: <8EA53DAD-7CDB-432D-86A8-6FAD8268D561@xxxxxxxxxxxxx>
<e$HZBc79GHA.3480@xxxxxxxxxxxxxxxxxxxx>
<6188A275-1633-42F8-A770-3E1009A6B5E6@xxxxxxxxxxxxx>
<u$LiM6#9GHA.4376@xxxxxxxxxxxxxxxxxxxx>
<686C4B19-B97F-4D2B-8376-D1B76CE9B037@xxxxxxxxxxxxx>
<ODsPsuE#GHA.4356@xxxxxxxxxxxxxxxxxxxx>
<21A76DA8-38D9-45E2-B0EA-2FC1F4E3D5E2@xxxxxxxxxxxxx>
| Subject: Re: Should WSUS force clients to install updates?
| Date: Wed, 25 Oct 2006 13:38:36 -0700
| Lines: 159
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.2869
| X-RFC2646: Format=Flowed; Original
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2962
| Message-ID: <#npBOWH#GHA.2408@xxxxxxxxxxxxxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: ip68-2-173-248.ph.ph.cox.net 68.2.173.248
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:307967
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| I'd say there's some updates a comming! ClientDiag lookin' good now.
|
| You might want to check and see if group policy wasn't working.
|
| Most likely cause is the client workstation (static) or the DHCP settings
| not pointing DNS to (and only to) the SBS server.
|
| --
| /kj
| "Rod" <Rocket@xxxxxxxxxxxxxxxx> wrote in message
| news:21A76DA8-38D9-45E2-B0EA-2FC1F4E3D5E2@xxxxxxxxxxxxxxxx
| > Hi KJ,
| >
| > I ended up uninstalling/reinstalling WSUS, checking all possible
settings.
| > Then I ran the clientdiag.exe and it said Option 2, so I ran gpupdate
| > /force
| > from a command line and now the client says Option 4 Scheduled Install.
| >
| > I guess I will see what happens tonight, but here is the log in case you
| > might see something out of place. Thanks for your help.
| >
| > WSUS Client Diagnostics Tool
| >
| > Checking Machine State
| > Checking for admin rights to run tool . . . . . . . . . PASS
| > Automatic Updates Service is running. . . . . . . . . . PASS
| > Background Intelligent Transfer Service is running. . . PASS
| > Wuaueng.dll version 5.8.0.2607. . . . . . . . . . . . . PASS
| > This version is WSUS 2.0
| >
| > Checking AU Settings
| > AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
| > Option is from Policy settings
| >
| > Checking Proxy Configuration
| > Checking for winhttp local machine Proxy settings . . . PASS
| > Winhttp local machine access type
| > <Direct Connection>
| > Winhttp local machine Proxy. . . . . . . . . . PASS
| > Winhttp local machine ProxyBypass. . . . . . . PASS
| > Checking User IE Proxy settings . . . . . . . . . . . . PASS
| > User IE Proxy
| > SERVER1:8080
| > User IE ProxyByPass
| > <local>
| > User IE AutoConfig URL Proxy . . . . . . . . . PASS
| > User IE AutoDetect
| > AutoDetect not in use
| >
| > Checking Connection to WSUS/SUS Server
| > WUServer = http://SERVER1:8530
| > WUStatusServer = http://SERVER1:8530
| > UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
| > Connection to server. . . . . . . . . . . . . . . . . . PASS
| > SelfUpdate folder is present. . . . . . . . . . . . . . PASS
| >
| >
| >
| >
| > "kj" wrote:
| >
| >> > AU Option is 2: Notify prior to download
| >>
| >> OK, well there's your answer.
| >>
| >> Post the complete results from the clientdiag and I can give you some
| >> directions.
| >>
| >> --
| >> /kj
| >> "Rod" <Rocket@xxxxxxxxxxxxxxxx> wrote in message
| >> news:686C4B19-B97F-4D2B-8376-D1B76CE9B037@xxxxxxxxxxxxxxxx
| >> > Yes all computers are showing up in WSUS and been approved that
require
| >> > a
| >> > reboot.
| >> >
| >> > I ran the WSUS diannostic tool & it shows:
| >> > AU Option is 2: Notify prior to download
| >> >
| >> > Which is not what is chosen in wizards or other consoles. I want "4"
| >> > install.
| >> >
| >> > So it apears that the clients are not picking up the needed setting
to
| >> > require the install & reboot if needed.
| >> >
| >> > Not sure where to go next.
| >> >
| >> > Thanks
| >> > Rod
| >> >
| >> > "kj" wrote:
| >> >
| >> >> Are the workstations showing up in WSUS and have updates been
approved
| >> >> that
| >> >> require a reboot?
| >> >>
| >> >> Might want to get and run the WSUS "clientdiag.exe diagnostic.
| >> >>
| >> >>
http://www.microsoft.com/windowsserversystem/updateservices/downloads/defaul
t.mspx
| >> >>
| >> >>
| >> >> --
| >> >> /kj
| >> >> "Rod" <Rocket@xxxxxxxxxxxxxxxx> wrote in message
| >> >> news:6188A275-1633-42F8-A770-3E1009A6B5E6@xxxxxxxxxxxxxxxx
| >> >> > Option #4 is already set in GPO.
| >> >> >
| >> >> > "kj" wrote:
| >> >> >
| >> >> >> Yes that is Windows Update option #4 set in your GPO or manual
| >> >> >> registry
| >> >> >> settings. For it to be effective the user can not be a local
| >> >> >> workstation
| >> >> >> administrator and logged on at the selected install time.
| >> >> >>
| >> >> >> Also, the workstation must be up and running of course.
| >> >> >>
| >> >> >> --
| >> >> >> /kj
| >> >> >> "Rod" <Rocket@xxxxxxxxxxxxxxxx> wrote in message
| >> >> >> news:8EA53DAD-7CDB-432D-86A8-6FAD8268D561@xxxxxxxxxxxxxxxx
| >> >> >> > Upgraded to SBS 2003 R2 & installed WSUS. Followed the
| >> >> >> > Step-by-Step
| >> >> >> > for
| >> >> >> > WSUS
| >> >> >> > on SBS 2003 in setting it up.
| >> >> >> >
| >> >> >> > WSUS seems to work with clients showing up in the console,
| >> >> >> > clients
| >> >> >> > getting
| >> >> >> > notfied of updates, etc.
| >> >> >> >
| >> >> >> > Should the clients automatically download & install the updates
| >> >> >> > without
| >> >> >> > user
| >> >> >> > intervention? I would like to automatically install the
updates
| >> >> >> > at
| >> >> >> > night
| >> >> >> > when
| >> >> >> > the office is closed & not have users ignore that there are
| >> >> >> > updates
| >> >> >> > to
| >> >> >> > d/l
| >> >> >> > &
| >> >> >> > install.
| >> >> >> >
| >> >> >> > Thanks
| >> >> >> > Rod
| >> >> >>
| >> >> >>
| >> >> >>
| >> >>
| >> >>
| >> >>
| >>
| >>
| >>
|
|
|


.

Relevant Pages

  • Re: .com domain not accessible from .local workstations. Server O
    ... Les Connor [SBS MVP] ... I was able to get rid of it by resetting it up as the only gateway ... DNS server listed for both the Lan nic and the Internet nic should list ...
    (microsoft.public.windows.server.sbs)
  • Re: 2nd Server Gateway changes from time to time!!
    ... Could be that the IP is not being changed when most users are signing on because they don't have permission to do so but when someone with higher priveleges on the TS signs on the gateway changes. ... SBS remote support services. ... If it is a domain member server it should only use the SBS DNS server service. ...
    (microsoft.public.windows.server.sbs)
  • Re: TCP/IP Properties Windows Server 2003
    ... if you have the wrong default gateway. ... caused the settings to change, ... DNS look ups stopped working 3 days ago - that's why I've gone in to ... Subnet Mask: 255.255.255.255 ...
    (microsoft.public.windows.server.general)
  • Re: Moving office
    ... you only need to rerun CEICW to change DNS forwarders and IP ... settings (if you have a router in front of SBS you don't even need to change ... Javier [SBS MVP] ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 Premium ISA 2000
    ... Which DNS settings? ... If you let your SBS do the DHCP, WINS and DNS and if you ... it should push the necessary settings. ...
    (microsoft.public.windows.server.sbs)