SUS Client

Goto the SUS Home Page

This page details problems and issues relating to the SUS Client.
20 Minute Update Delay on Some Clients

I've Installed the SUS Client and made the Registry Entries at the Clients.  The System starts the Update from the right machine, but 20 minutes after the Scheduled time.

From the microsoft.public.softwareupdatesvcs newsgroup
The installation should begin at the scheduled install time, and not wait 20 minutes. There is typically a 5 minute wait, because when the scheduled install starts a dialog is displayed stating that the install is going to occur, with a 5 minute count-down timer. I haven't seen a 20 minute wait period though.

Check the Application Event log from the client machine to see if it contains any clues and doublecheck the values of the following Registry keys:

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate (and the \AU subkey)
 HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update
 

After installing SUS, clients cannot download updates. What should I do?

Contributed By: Cliff Hobbs [MVP SMS]
 So you've installed SUS but none of your clients are downloading updates.  Here's some advice... [Go to article]
 

Applying the "Remove access to use all Windows update features" Policy Remotely

Contributed By: Mike Cook [MSFT] and Torgeir Bakken [MVP]
 Wondering if there's a way to apply this Policy remotely?.. [Go to article]
 

Automatic Update Client Stuck in AU STATE# 4

Contributed By: Mohammed. Athif Khaleel [MVP SUS/ WSUS]
 If some of your AU Clients are stuck in State# 4 help is at hand... [Go to article]
 

Automatic Updates Downloads Keep Pointing at the Microsoft Windows Update Site

Contributed By: Cliff Hobbs [MVP SMS]
 Reproduced from the 21st May 2003 MCP Magazine Newsletter:

If you’ve followed the instructions in Jeremy Moskowitz’s "Patching the Holes" article, but find you can’t get your "automatic updates" download from your server then this should help… [Go to article]
 

Can I Make SUS Silent?

Contributed By: DrC
 If you’re wondering whether you can make SUS updates install completely silently and control reboots then read on… [Go to article]
 
Cannot Install SUS Client on Windows 2000 SP3

I've tried to install the SUS client software on several servers without success. Each is currently updated with all patches. Each server fails with a message indicating only SP2 or XP are supported. Each of these servers is running Win2000 with SP3. Any ideas why I can not install the software?

Contributed By: Cliff Hobbs [MVP SMS]
The reason you are seeing the error is because Windows 2000 SP3 already includes the SUS client (as does XP SP1), so you’ve already got it installed.
 
Client Doesn't Receive/ Process New Updates

I've approved some new updates on my SUS Server but for some reason my Clients aren't receiving them.  Any ideas?

Contributions from the From the microsoft.public.softwareupdatesvcs newsgroup and Cliff Hobbs [MVP SMS]
There could be several reasons for this as documented in Microsoft Knowledge Base Article 323184 'Automatic Updates 2.2 Client Does Not Detect Approved Updates from Software Update Services'.

Updated 13/2/03
A copy of the '%WINDIR%\Windows Update.log' file might show whether or not the AU client is actually hitting your SUS server and running detection correctly. When I've investigated problems like this before, though, it has often turned out that the updates that had been approved on the SUS server didn't actually apply to the client computer that was being tested, due to different IE/SP versions usually. If you're in testing try approving ALL updates on the SUS server to see what the client computer detects.
 
Client Status Shows as 'V=1' Against 'WUTRACK.BIN' Which Isn't in the Deployment Guide

In Appendix C: 'Client Status Logging' of the Client Deployment Whitepaper there is no 'V=1' parameter listed in the values against 'WUTRACK.BIN'. Our client computers seem to provide V=1 quite frequently, though not consistently. What does this parameter refer to?

From the microsoft.public.softwareupdatesvcs newsgroup
'V=1' is an entry indicates that the client machine is running a version of 'IUCTL.DLL' and 'IUENGINE.DLL' that were released after SUS 1.0 was released. The client machines likely downloaded the updated IU controls from the live Windows Update web site.
 

Clients not Connecting to Content Distribution Point

Contributed By: Jose Morris [MS]
 So you’ve setup a Content Distribution Point but your clients aren't using it.  Wondering why?.. [Go to article]
 

Clients Still Trying to Connect to the Microsoft Windows Update Server

From the microsoft.public.softwareupdatesvcs newsgroup
 If you’ve got problems with your clients still trying to connect to the Microsoft SUS Server even though you’ve set the correct server in Group Policy then read on… [Go to article]
 

Confusion over XP Clients not installing Updates

Contributed By: Jose Morris [MS]
If you’re confused as to why some of your XP machines don’t install updates despite downloading them it could be down to the value you have set for AUOptions… [Go to article]
 

Deleting Uninstall Files Created on SUS Clients

Contributed By: Torgeir Bakken (MVP)
 If you’re a bit concerned that some of your clients are going to run out of disk space because of the uninstall files the SUS Client creates every time a new update is installed here’s some advice… [Go to article]
 
Disabling the Automatic Updates 'Balloon' in the System Tray

Is there a way to prevent the balloon saying "New Updates are ready to install" from popping up? Does this show up to both Administrators and Power Users?

From the microsoft.public.softwareupdatesvcs newsgroup
The balloon only shows up for Admin users, not Users or Power Users. There is a way (through Policy) to turn off ALL balloons, but there isn't a way to turn off just the AU balloon. To just remove the balloons you can do the following:

1) Go to HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced

2) Create a new DWORD key named 'EnableBalloonTips'

3) Set the value to '0'

The computer needs to be rebooted before this change takes effect, and it this will affect all programs that support Windows XP Themes, not just Automatic Update.

This capability exists in the TweakUI PowerToy for Windows XP.
 

Do Clients Need Admin Rights in Order to Download SUS Updates?

Contributed By: Wayne Flynn and from the microsoft.public.softwareupdatesvcs newsgroup
 Wondering if you can only download updates from a SUS server if you have Admin rights?.. [Go to article]
 

Do I Need to Configure the "Allow Service to interact with Desktop" AU service?

From the microsoft.public.softwareupdatesvcs newsgroup
 If you’re wondering whether you need to configure the Automatic Update Service on a Windows 2000 machine to 'Allow Service to interact with Desktop' so that the Update icon will show up in the system tray then read on… [Go to article]
 

"Download Failed 80190194 ctx=5" message

Contributed By: Wayne Flynn
 If you’re seeing this error message then changing your SUS Server name has probably got something to do with it… [Go to article]
 

Download Process Appears to Start Then Just Hangs

From the microsoft.public.softwareupdatesvcs newsgroup
 So you get the notification that you have updates to install but after double-clicking on the Globe on the Taskbar the download just seems to hang… [Go to article]
 

Error 0x80072EFD During the Update of IUIDENT.CAB

Contributed By: Jose Morris [MS]
 If you’re seeing this error on some of your SUS clients then here’s some advice… [Go to article]
 

“Error 0x800B0004: The subject is not trusted for the specified action.”

From the microsoft.public.softwareupdatesvcs newsgroup
 If you’re seeing the above error message in your log files then chances are the problem will sort itself out over time… [Go to article]
 

"Error 0x80190191" in Windows Update Log on Clients

Contributed by Wayne Flynn
 If you’re seeing this error in the Windows Update log on your clients here's some help and advice on getting to the bottom of it… [Go to article]
 

"Error 0x801901F7" on Clients

Contributed By: Christopher Hill
 If you’re seeing this error on your SUS clients then here is a fix from Christopher Hill… [Go to article]
 
"Error IUENGINE Querying software update catalog from" Windows Update.Log

Contributed by Cliff Hobbs [MVP SMS] and Rick Anthony
 Here's some help if you're seeing this problem… [Go to article]
 

Event ID 10000 When Trying to Install the SUS Client

Contributed By: Paul Richards
 If you’re trying to install the SUS Client on a machine but it fails and writes this Event ID to the Event Log then the answer could be simpler than you think… [Go to article]
 
Forcing a Client to Connect to the SUS Server

While I'm testing SUS in a closed environment, is there a way to force a client to connect to the SUS server? We don't use AD yet so pushing AU settings via GPO is out the question for now, but I did do the registry settings as described in the deployment guide, but it doesn't seem to be working.

Contributed by Wayne Flynn
Stop the AutoUpdate service, delete the ‘LastWaitTimeout’ registry key and if the ‘AUState’ key is something other than 2, delete it also. Then restart the AU service.

Those keys are at:

HKLM\software\microsoft\windows\currentversion\windowsupdate\Auto Update

Others may recommend a different approach, but this is what I do and it performs an update cycle within about 10 minutes from restarting the service.
 
Globe Not Appearing Next to the Clock for Non-Admin Users

Contributed By: Scott Korman [MVP SUS]
Wondering why the globe doesn’t appear next to the clock for a user with non-administrative privileges?.. [Go to article]
 
How Can I Force Update Detection from the AU client?

Contributed By: Mohammed. Athif Khaleel [MVP SUS/ WSUS]
This script will help... [Go to article]
 
How can I tell if my client computers are talking to my SUS server and not the Windows Update Web site?

Contributed By: Cliff Hobbs [MVP SMS]
If you want to ensure SUS is working correctly you're going to want to know that your SUS Clients are going to your SUS Server for their updates rather than the Microsoft Windows Update site but how do you find this out?.. [Go to article]
 
How Can I Tell When the Last Detection Cycle Occurred?

Contributed by Cliff Hobbs [MVP SMS]
To check the last time a Client performed a Detection Cycle look at the value for the 'DetectionStartTime' Registry key which holds the time stamp of the last cycle. This key is kept under:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update
 
How Often Does the Client Perform a Detection Cycle?

Contributed By: Cliff Hobbs [MVP SMS] and Tony Hobson
Wondering how often the SUS Client performs a detection cycle and what happens?.. [Go to article]
 
I moved SUS to a new server, but I still see some clients trying to download updates from the SUS server that no longer exists. How can I stop this?

Contributed by Cliff Hobbs [MVP SMS]
To start with you’ll need to disable the Automatic Updates component... [Go to article]
 
Is it possible to disable the automatic reboot after a scheduled install?

Contributed By: Cliff Hobbs [MVP SMS]
If you're running SUS SP1 the answer is yes as detailed here... [Go to article]
 

Is there a difference between a "single user with administrative privileges" and a "normal domain administrator"?

From the microsoft.public.softwareupdatesvcs newsgroup
 If you’re reading the Deployment Whitepaper and wondering whether there is a difference between a "single user with administrative privileges" and a "normal domain administrator" this article will hopefully clarify things… [Go to article]
 

Most Clients Update But a Few Don't

Contributed By: Sandie Gies on the SUS Forum
 If you’re pulling your hair out because a few of your clients aren't installing updates even though they're identical to other machines that are working then here's some tips from someone who's been there… [Go to article]
 
Problem with Distributing New Patches to Clients already waiting to install Patches

It seems like once an update gets sent to the client, if that's not installed no more come. I have some internal servers that I don't like to reboot all the time so some an IE patch came out like 2 months ago, and I thought I would wait till more important patches came out to run it. Since then lots of new patches have come but no more show up on the list, what I'll have to do is install that one, then reboot then wait for all the rest. Which is not good.

It would be much better if new patches that came got distributed to clients that already had patches ready to install don't you think? Or maybe I'm missing something

From the microsoft.public.softwareupdatesvcs newsgroup
Nope, you're not missing anything, and you're probably right that distributing new patches while a machine is waiting to install current patches is a better solution. We are hopefully going to add such a capability in the next version. Unfortunately, in the current version once Automatic Update is in an install pending state, all other AU related activity ceases and, as you noticed, no further detection or downloading occurs. The only way around this is to disable AU and then re-enable it which causes AU to discard anything that it's already downloaded and do a new detection/download cycle.

In your situation, instead of doing the install that is pending, rebooting, and then waiting for AU to do detection again so that you can get the update that you really want, it might be possible for you to put together a batch file that does the following:

net stop wuauserv
change the AUState registry key from 5 (install) to 2 (detect)
net start wuauserv

That way AU will run detection and pick up all updates that are currently available prior to doing the install.
 

Results of Group Policy 'Denied (Security)' when SUS Clients Login

Contributed By: Chris Cowden and Cliff Hobbs [MVP SMS]
 If you notice that when your users initially logon (or Group Policy is reloaded) the results of the GPO is 'Denied (Security)' then here’s some help from someone who’s seen it before… [Go to article]
 
"Software Update Services failed to load some configuration information" Error on SP1 Startup

When the SUS SP1 service starts it puts the following error in the Event logs:

-----------------------------
Event Type: Warning
Event Source: WUSyncService
Event Category: None
Event ID: 107
Date: 2003.02.10
Time: 17:21:51
User: N/A
Computer: VLN-SOFT-01
Description:
Software Update Services failed to load some configuration information.
Examples of configuration information include: proxy server configuration, content location, and client locales to support. Because not all configuration information was loaded successfully, the default settings will be used instead.

User Action
To confirm your configuration, go to the Software Update Services Admin Web site (http://<YourServerName>/SUSAdmin), and click the Set options link.

Additional Data
One or more errors occurred while loading the settings file 'I:\SUS\vroot\autoupdate\dictionaries\settings.txt'. (Error 0x80070057: The parameter is incorrect.)

For more information about administering a server running Software Update Services and for a list of the default values, see the Microsoft Software Update Services Deployment Guide (http://go.microsoft.com/fwlink/?LinkId=6928).

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
-----------------------------

I had the same error in SUS 1.0 which seems to be quite common from searching the newsgroups. Is there a fix for it?

Contributed By: The microsoft.public.softwareupdatesvcs newsgroup and Andrew Kriuckovas
If I remember correctly, this one is left for the next version of SUS. The problem is with DATES inside the configuration file - like last approval, last synch and so on - this does not impact the functionality in anyway.

You can erase sections yourself, and restart SUS - Event 107 is gone, restart once more (dates are written back to INI) and the Event re-appears.

It look like the SUS engine cannot read or interpret dates in the INI file correctly and thus generates the error which you can safely ignore.

This problem wasn't fixed in SP1 as it was decided that SP1 would fix major issues or address major lack of functionality, not annoying error messages like this.  It is unlikely that a fix will be available for this version of SUS as Microsoft is busy working out the details of the next version of SUS, which is going to be a complete re-write of many of the SUS components. Timescale wise, rumour has it this will be done by the end of the year.
 
SUS Client can’t Find Internal SUS Server

I have been trying to implement SUSSP1. I have made the following registry changes and the client still cannot find the server. What else needs to be changed on the client to use the server for AU?

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"WUServer"="http://NT2"
"WUStatusServer"="http://NT2"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000002
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:00000008
"UseWUServer"=dword:00000001

From the microsoft.public.softwareupdatesvcs newsgroup
The registry changes look fine. Check your '%windir%Windows\Update.log' file and see if it is accessing your SUS server.
 

SUS Isn’t Working as My C:\WUtemp Folder is Empty

Contributed By: Jose Morris [MS]
 So you’ve got a C:\WUtemp folder but it’s empty so SUS isn’t working right? Wrong… [Go to article]
 

System Log Event IDs

Contributed By: Cliff Hobbs [MVP SMS]
 The Automatic Updates client can potentially write several different Event IDs to the System Event Log. Here’s a list of IDs and descriptions to help you understand what’s going on… [Go to article]
 
"The description for Event ID (18) in Source (Automatic Updates) cannot be found" Error on Some Clients

On most of our workstations, when updates become available for installation, the Windows Update globe icon appears in the System Tray just as it is supposed to. In addition, Event ID 18 is written to the workstation's System Log stating 'Installation Ready.'

However, on some workstations, the globe icon DOES NOT appear and the following is written to the Application Log:

 The description for Event ID (18) in Source (Automatic Updates) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer.
Has anyone else experienced this problem? What registry information or DLL is missing? What needs to be done to fix this?

From the microsoft.public.softwareupdatesvcs newsgroup
The event that you are getting in the Application Log instead of the System Log is a known bug that only occurs the very first time that AU does an install. After you do the install on that computer, the next time the event will be written to the System Log just like the other computer.

As far as the Globe icon not appearing in the System Notification area on that machine, it should be appearing unless you've already installed all the updates that are listed in the Application Log entry.
 

Unapproved Updates Don’t De-Install

Contributed By: Cliff Hobbs [MVP SMS]
 So you’ve installed an update using SUS, but after unapproving it the update doesn’t de-install… [Go to article]
 
User Configuration Group Policies Being Ignored in SUS SP1

Contributed by DrC on the SUS Forum
If you’re having problems trying to workout why User Configuration Group Policies seem to be ignored by SUS then here’s why… [Go to article]
 
Values for the AUState Registry Value

Does anyone know what the different values for the 'AUState' value under 'HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate' key mean? I know that 7 = disable auto update and 2 seems to mean "waiting to download" or some such. I'm wondering about other possible values however. I noticed that after AU downloads updates but before they are installed AUState seems to be set to 5. Can anyone confirm that AUState=5 means "pending updates ready to install"?

From the microsoft.public.softwareupdatesvcs newsgroup
Here's a list that should help:

Value Description
0 Initial 24 hour timeout (the AU wizard doesn't run until 24 hours after it first detects an Internet connection)
 
1 Waiting for user to run AU wizard
 
2 Detect pending
 
3 Download pending (waiting for user to accept pre-download prompt)
 
4 Download in progress
 
5 Install pending
 
6 Install complete
 
7 Disabled (Adoptions will also be set to a value of 0x1)
 
8 Reboot pending (updates that require a reboot were installed but the reboot was declined - AU will not do anything until the reboot occurs and this value is cleared)
 

What Does the Message "1|0|||||0|0||||" mean?

From the microsoft.public.softwareupdatesvcs newsgroup
 Seeing an entry like "&M=1%7C0%7C%7C%7C%7C%7C0%7C0%7C%7C%7C%7C&X" in your SUS log and wondering what it means? Well look no further… [Go to article]
 

What Happens if the Computer is Off When the Scheduled Install Time Passes?

Contributed by Wayne Flynn
 If you’re wondering what happens if any SUS Clients you are sending updates to are turned off when the Scheduled Install time passes?  We tell you in this article... [Go to article]
 

What Happens if there's No Network Connection when the AU Service Checks for Updates?

Contributed By: Don Cottam [MS]
 So you can configure the Windows Automatic Updates service to check for updates every 17-22 hours but what happens if there’s no network connection at the time?... [Go to article]
 

When I attempt to install the client MSI (wuau22*.msi) I get an error that Service Pack 2 is required. What should I do?

Contributed By: Cliff Hobbs [MVP SMS]
 This is most likely caused by you trying to install the SUS Client on an OS that already includes the Automatic Updates Client... [Go to article]
 
Where Can I Download the SUS Client Component?

Contributed by Cliff Hobbs [MVP SMS]
The SUS Client is included in Windows 2000 SP3 and XP SP1 as standard, but in case you're running Windows 2000 SP2 or XP native here's the link:

http://www.microsoft.com/windows2000/windowsupdate/sus/susdownload.asp

Which Port Does the SUS Client Use to Connect When Set to Use the Microsoft Windows Update Server?

From the microsoft.public.softwareupdatesvcs newsgroup
 Want to know which port the SUS client tries to connect to when it's set to use Microsoft Windows Update server (not the local SUS)?.. [Go to article]
 

Why do updates continue to be re-offered and re-installed on my client machines?

Contributed By: Cliff Hobbs [MVP SMS]
 There are potentially many causes for this problem as detailed in this article... [Go to article]
 

Why do my Clients show two Windows Update Log Files?

Contributed By: Mohammed. Athif Khaleel [MVP SUS/ WSUS]
 If you’re wondering why there are two Windows Update Log Files on your SUS Clients let us explain…  [Go to article]
 

Why is the Way My Clients Are Notified of Updates Different?

From the microsoft.public.softwareupdatesvcs newsgroup
 If you’re wondering why some updates are notified through the System Tray whereas others come via the "Windows is prepared to begin to install the updates...", message then let us explain…  [Go to article]
 
Why is the Minimum Value for Installing Updates after Logon not 0?

Why is the minimum value that the SUS administrator can specify that the Auto Updates client should install the relevant updates once a scheduled time has been missed and the service restarts hard coded to “1” and not “0”?

From the microsoft.public.softwareupdatesvcs newsgroup
The reason why SUS can't install immediately after logon is that the Auto Update service needs to wait for all the other services to start. Microsoft fell it is more prudent to wait for all the logon processes to finish before Auto Update installs any packages.
 

Windows 2000 Professional Automatic Update Fails with an HTTP 404 Error

Contributed by Wayne Flynn
 If you’re seeing HTTP 404 errors on your Windows 2000 machines here's some help and advice…  [Go to article]
 

WUAUENG.DLL From SUS SP1 Not Loading

Contributed by Wayne Flynn
 So you’ve upgraded to SUS SP1 but you notice that your newly built Windows 2000 SP3 workstations are failing to load the updated 'WUAUENG.DLL' from SUS SP1 on reboot…  [Go to article]
 

WUAUENG.DLL Version Confusion

Contributed By: Cliff Hobbs [MVP SMS]
 SUS clients need to have version 5.4.3630.11 or later of the WUAUENG.DLL file installed so what happens if you’ve got an older version installed such as version 5.4.3628.1 that ships with Windows 2000 SP3?.. [Go to article]
 

WUTRACK.BIN and "Pending" Updates

From the microsoft.public.softwareupdatesvcs newsgroup
 If after reading the Deployment Guide you’re wondering if the Pending identifier on the Status flag is used frequently then you’d be slightly mistaken…  [Go to article]
 
© FAQShop.com 2003 - 2008

Goto the SUS Home Page

 Email the Author