WSUS客户端无法find更新

我已经在Windows服务器2012 R2上安装了WSUS,并通过组策略configuration了工作站和客户端,以便从WSUS自动安装更新。 服务器由WSUS检测并报告给WSUS服务器。 在WSUS服务器中,我可以看到服务器缺less53个更新。 我昨天批准了包含服务器的计算机组的更新。 但是,如果我在服务器上search更新,它不会find任何更新。 我到目前为止检查的是:

  • 服务器由WSUS服务器检测到
  • 服务器正在联系并向WSUS服务器报告
  • 需要更新包含服务器的计算机组(计算机组的名称:“Prod_01”)
  • GPO正确应用
  • 尝试多次这些命令没有任何影响:wuauclt / resetauthorization / detectnow / reportnow

如果我看看windowsupdate.log我可以看到以下内容:

2015-01-06 08:34:36:715 12 1508 Setup Checking for agent SelfUpdate 2015-01-06 08:34:36:808 12 1508 Setup Client version: Core: 7.6.7600.320 Aux: 7.6.7600.320 2015-01-06 08:34:36:824 12 1508 Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab with dwProvFlags 0x00000080: 2015-01-06 08:34:36:840 12 1508 Misc Microsoft signed: NA 2015-01-06 08:34:36:840 12 1508 Misc WARNING: Cab does not contain correct inner CAB file. 2015-01-06 08:34:36:840 12 1508 Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab with dwProvFlags 0x00000080: 2015-01-06 08:34:36:855 12 1508 Misc Microsoft signed: NA 2015-01-06 08:34:36:855 12 1508 Setup Wuident for the managed service is valid but not quorum-signed. Skipping selfupdate. 2015-01-06 08:34:36:855 12 1508 Setup Skipping SelfUpdate check based on the /SKIP directive in wuident 2015-01-06 08:34:36:855 12 1508 Setup SelfUpdate check completed. SelfUpdate is NOT required. 2015-01-06 08:34:38:462 12 1508 PT +++++++++++ PT: Synchronizing server updates +++++++++++ 2015-01-06 08:34:38:462 12 1508 PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://wsus.schule.local:8530/ClientWebService/client.asmx 2015-01-06 08:34:38:571 12 1508 PT WARNING: Cached cookie has expired or new PID is available 2015-01-06 08:34:38:571 12 1508 PT Initializing simple targeting cookie, clientId = 0c4aed4f-6c60-46a0-b29b-f2080ea315c1, target group = , DNS name = wsus-server 2015-01-06 08:34:38:571 12 1508 PT Server URL = http://wsus.schule.local:8530/SimpleAuthWebService/SimpleAuth.asmx 2015-01-06 08:34:53:844 12 1508 Agent * Found 0 updates and 76 categories in search; evaluated appl. rules of 699 out of 1392 deployed entities 2015-01-06 08:34:53:844 12 1508 Agent ********* 2015-01-06 08:34:53:844 12 1508 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates] 2015-01-06 08:34:53:844 12 1508 Agent ************* 2015-01-06 08:34:53:859 12 16b4 AU >>## RESUMED ## AU: Search for updates [CallId = {95840C02-E405-419D-9DA4-260BC14AA845}] 2015-01-06 08:34:53:859 12 16b4 AU # 0 updates detected 2015-01-06 08:34:53:875 12 16b4 AU ######### 2015-01-06 08:34:53:875 12 16b4 AU ## END ## AU: Search for updates [CallId = {95840C02-E405-419D-9DA4-260BC14AA845}] 2015-01-06 08:34:53:875 12 16b4 AU ############# 2015-01-06 08:34:53:875 12 16b4 AU Successfully wrote event for AU health state:0 2015-01-06 08:34:53:875 12 16b4 AU Featured notifications is disabled. 2015-01-06 08:34:53:875 12 16b4 AU AU setting next detection timeout to 2015-01-06 10:20:45 2015-01-06 08:34:53:875 12 16b4 AU Setting AU scheduled install time to 2015-01-11 01:00:00 2015-01-06 08:34:53:875 12 16b4 AU Successfully wrote event for AU health state:0 2015-01-06 08:34:53:875 12 16b4 AU Successfully wrote event for AU health state:0 2015-01-06 08:34:58:851 12 1508 Report REPORT EVENT: {73BBAB28-58E9-45AC-B910-731F8958C456} 2015-01-06 08:34:53:844+0100 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Software Synchronization Windows Update Client successfully detected 0 updates. 

在第12行,我可以看到客户端连接到了正确的WSUS服务器,但在第14行,“目标组”是空的,应该是“Prod_01”。 那么有人可以解释我做错了什么,或者为什么目标集团至less在24小时内没有更新?

正如我看到一个cookie警告,请按照步骤重新同步; http://support.microsoft.com/kb/903262 (克隆的机器?)

从KB引用;

 Click Start, click Run, type cmd in the Open box, and then click OK. At the command prompt, type net stop wuauserv, and then press ENTER. Click Start, click Run, type regedit in the Open box, and then click OK. Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate In the details pane of Registry Editor, delete the following registry entries: PingID AccountDomainSid SusClientId SusClientIDValidation Note Windows Update Agent 3.0 adds the SusClientIDValidation value. This value was released in May 2007. The other registry entries 

同时存在于Windows Update Agent 2.0和Windows Update Agent 3.0中。 退出registry编辑器 在命令提示符处,键入net start wuauserv,然后按Enter。 在命令提示符处,键入wuauclt.exe / resetauthorization / detectnow,然后按Enter。 等待10分钟,检测周期结束。 启动WSUS控制台以确保客户端显示在WSUS控制台中。

又过了一天,我能够“解决”这个问题,但说实话,这不是一个真正的问题。 WSUS服务器正在下载更新,如果它们尚未下载,客户端将无法识别更新。 现在一切正常。

无论如何感谢您的贡献。

根据我的经验,WSUS客户需要一段时间来检测更改,但应该在25小时内检测到它们,恕我直言。

你可以尝试:

  1. closuresWSUS客户端服务
  2. 将SoftwareDistribution文件夹重新命名为SoftwareDistribution-back
  3. 打开WSUS客户端服务
  4. 运行wuauclt /resetauthorization /detectnow

这应该说服服务器再次下载它的configuration,这应该有望使服务器检测到更新。