Difference between revisions of "Windows Automatic Updates"

Latest revision as of 00:15, 17 June 2016

Windows Automatic Update Client Command Line Switches

wuauclt:

/r or /reportnow
/a or /resetauthorization
/detectnow
/? or /h or /help

Force an Update

wuauclt.exe /a /detectnow

Force a client to report to the WSUS server

wuauclt.exe /r

Script to reinitialize AutoUpdates

This scrips re-registers the Automatic Update DLL files, restarts the AutoUpdate service and forces the client to detect new updates.
Save this as a .bat or .cmd file. Can be used as a startup scrips via Group Policy

regsvr32 /s wuapi.dll
regsvr32 /s wups.dll
regsvr32 /s wuaueng.dll
regsvr32 /s wucltui.dll
regsvr32 /s msxml3.dll
net start wuauserv
wuauclt.exe /resetauthorization /detectnow

WSUS 3.0 SP1 Tips

1) Make sure Disk Quotas are disabled on the drive where you host the WSUS update files. Otherwise the MMC snap-in will fail with an "Out of disk space" error.

2) If you install WSUS 3 SP1 on port 8530, the SelfUpdate virtual directory isn't created. You will have to manually create the SelfUpdate virtual directory and point it to C:\Program Files\Update Services\Selfupdate (leave the default permissions)
Reference: Error 0x80244019 After Installing WSUS SP1

Testing & Troubleshooting

If you are having trouble with AutoUpdates, the WindowsUpdate.log file is very handy, its located in:

C:\Windows\WindowsUpdate.log

Make sure the WSUS server is reachable via SMB and http(s) Use Windows Explorer to browse to the following UNC path:

\\WSUS.domain.tld\WsusContent

Use a web browser to browse to the following URL:

http://WSUS.domain.tld:8530/selfupdate/wuident.cab

or for https:

https://WSUS.domain.tld:8531/selfupdate/wuident.cab

If you are prompted to download a file then WSUS/IIS is configured correctly.

Clients "Not Yet Reported"

If you have clients that refuse to report to the WSUS server try the following:
1) Stop the Automatic Updates Service

net stop "Automatic Updates"

2) delete

del /s %windir%\SoftwareDistribution

3) Start Automatic Updates Service

net start "Automatic Updates"

4) Run:

wuauclt /detectnow /resetauthorization

The nasty client should report to the WSUS server shortly there after.