Mesak 2006-07-25 08:22:29
After I setup Group Policy by enter http://servername. Client computer
doesn’t appear on WSUS console. I can’t see any computer on WSUS. If client
computer connect to WSUS correct, how it shown on client registry? Can I
check it on client registry?
Best Regards,
Lawrence garvi 2006-07-25 08:23:41
The place to determine whether your clients are responding properly, or not,
is the %windir%\WindowsUpdate.log.
However, if the client has not yet appeared in the WSUS console, then the
most likely cause is that the clients have not successfully selfupdated.
This condition will occur if any of the following conditions exists:
(1) The operating system is Windows XP RTM or earlier and the computer
has /never/ been updated from Windows Update.
(2) The operating system is Windows XP SP1 or later, or the system has
been previously updated from Windows Update, and
(a) the Group Policy has not been properly configured or applied
(b) the permissions to the virtual server or virtual directory
of the WSUS server are incorrect
(c) the permissions to the relevant folders of the filesystem of
the WSUS server are incorrect
(d) the Automatic Updates service on the client is not Started
and/or configured to use the Local System account for Log On.
To verify that the group policy has been properly applied,
inspect the registry values at
HKLM\Software\Policies\Windows\WindowsUpdate
and HKLM\Software\Policies\Windows\WindowsUpdate\AU
or run RSOP.MSC on the client to inspect the effective policies applied.
To verify the IIS and NTFS permissions on the WSUS server,
check http://wsusinfo.onsitechsolutions.com/articles/016.htm
and compare to your own server’s configuration.
To verify other aspects of your client-side configuration, download and run
the Client Diagnostics tool from:
http://download.microsoft.com/download/9/7/6/976d1084-d2fd-45a1-8c27-a467c768d8ef/WSUS%20Client%20Diagnostic%20Tool.EXE
I use WindowdsXP SP2 and after run clientdiag.exe result show below:
everything Pass but only Checking Connectio to WSUS/SUS Server Fail
Checking Connectio to WSUS/SUS Server
AU does not have Policy Set
AU does not have Policy Set
Use WuServer is disabled…………………………FAIL
How can I correct this problem?
Emiel 2006-07-25 08:29:57
You must use the address http://
I have had the same problem as you did. when you wil use the addres as show
above the client computers wil be automatically added one by one
Now I can use the address http://
but I can’t use the address http://
computer. How can I test open the address?
The problem here, just as the Client Diagnostic tool says.. is that your
policy is not being applied to the computer.
You need to troubleshoot your Group Policy/AD configuration and determine
why the policy is not being applied.
Once the policy is applied, then we can see what happens with WSUS.
Whether or nor Mesak needs to append port 8530 to his URL cannot be
determined from the information he provided.
Either way, it’s an irrelevant point until the Group Policy is successfully
applied to the client.
If you are using http://
Administration console, then the /correct/ URL to configure in your policy
is http://
You only need the :8530 suffix if your WSUS server is installed on port
8530, which obviously it is not, since you were able to access the
~/wsusadmin page on the default port.
Does it has any problem of policy that not apply to client?
Leave a Reply
You must be logged in to post a comment.