SUS Server

Goto the SUS Home Page

This page details problems and issues relating to the SUS Server.

"/<Rejected-By-UrlScan>" in IIS Log

From the microsoft.public.softwareupdatesvcs newsgroup and Wayne Flynn, MVP SUS
 If you’re seeing this message in your IIS Log and wondering how you fix it let us explain…  [Go to article]
 
Approve Updates Page Blank

I've made a new install of SUS SP1 on an Windows 2000 server. I'm able to access the administration, log and synchronization pages fine, and my first synchronization (~100 updates) went off without a hitch. But when I click on "Approve Updates", the right pane goes blank and stays blank, so I can't actually approve the updates. No error, no nothing. I also get no errors in the server's event logs.

I've checked to make sure that ‘publish.asp’ resides in the correct location and that its include files are in their correct locations. I've also checked permissions to make sure administrators have access. I also ran a repair of SUS using the original installation file, but still no joy.

Contributed By: Simon Binder
Problem fixed- here are the steps I took to do it.  First, I copied the content folder away and uninstalled SUS. After restarting, reinstalling SUS and copying the content back, still no joy.

Then I uninstalled SUS, uninstalled IIS, restarted, reinstalled IIS, reinstalled SUS and copied the content back, and everything seems to work just fine.

I had already been hosting two static sites identified via host headers, so perhaps some setting change I made in the past was causing the problem. The reinstall returned everything to default, so after verifying SUS was working I added both sites again and everything seems to be getting along well.
 

Automatically Approving Updates

From the FAQShop SUS Forum
 If you’re getting confused as to why even though you set SUS to automatically approve updates, in some cases you still need to go in and manually approve some updates then let us try to de-mystify this…  [Go to article]
 
Blank Screen in SUS Admin Console on Windows 2003 Member Server

From the microsoft.public.softwareupdatesvcs newsgroup
So you’ve installed SUS on a Windows 2003 Member server but when you open the management console all you get is a blank white screen… [Go to article]
 

Can a Single SUS Server Support Multiple Client Configurations?

Contributed By: Scott Korman [MVP SUS]
 Wondering if one SUS Server can support multiple GPO’s with different client settings?..  [Go to the article]
 

Can I be Selective About which Updates I Download?

Contributed by Cliff Hobbs [MVP SMS]
 If you’re wondering whether you can be selective on which updates you download BEFORE you download them then I’m the answer is…  [Go to article]
 
Can I Change the Port SUS Runs On from Port 80?

I'm running a W2K/SP3 domain controller with ISA/SP1 installed. After installing SUS/SP1, Web Proxy is showing binding failures on 127.0.0.1:80, 10.0.100.1:80, and my external NIC:80. I can get rid of the errors by changing SUS to port 8000, but then I can't see the SUS page. Is there a way to amend the SUS shortcut to look at port 8000?

From the microsoft.public.softwareupdatesvcs newsgroup
Although you can access the SUS Admin page by using something like:

http://susserver:8000/susadmin

the Automatic Update clients will no longer be able to communicate with the SUS server if it's on anything other than port 80. So the answer is no there is no way to use a different port other than 80 for your clients.
 

Can I Create Multiple Web Sites on the same SUS Server?

Contributed By: Don Cottam [MS]
 The answer is no and here's why...  [Go to article]
 
Can I Have Multiple Implementations of SUS on the Same Server?

Can a SUS server be configured to run multiple instances of SUS on a single server that would allow different updates to be approved based on particular needs? Since a single server can run multiple web servers, and the SUS configuration is done via a web server, can this be done?

From the microsoft.public.softwareupdatesvcs newsgroup
Unfortunately, not. In this release (including SP1), only one instance can run per server, and it doesn't allow for need-based approvals. Microsoft are examining how to provide for some simple group targeting in the next version of SUS that will hopefully allow you to accomplish what you're after (sending certain updates to certain groups of machines), although it's unlikely to allow multiple instances of SUS on a single server.
 

Can I Install SUS on a Server that is also running other IIS Enabled Applications like SharePoint?

Contributed By: Mohammed. Athif Khaleel [MVP SUS/ WSUS]
 If you're wondering if this is possible our resident SUS Expert shows you how...  [Go to article]
 
Can I Install the Server Component on an Active Directory Domain Controller?

Contributed by Cliff Hobbs [MVP SMS]
You can't install the ORIGINAL Server component on an AD DC (which includes a server running Small Business Server which has to be DC in the first place), but you CAN install SP1 on a DC or SBS.

Bear in mind though that by installing SUS on a DC you're either going to be putting an extra load on it, or the SUS Server could end up getting bogged down with AD authentication and replication traffic.  You can install version of the Client (original or SP1), on a DC in order to keep the server up-to-date with any updates.
 

Can I Point My Browser to the SUS Web Site to Get Updates Like Windows Update?

Contributed By: Cliff Hobbs [MVP SMS]
You've installed your SUS Server so can you now point your client's browsers to it to download updates?..  [Go to article]
 
Can the IIS Lockdown Tool be Removed from My SUS Server?

Since installing SUS/SP1, my Trend Office Scan will no longer download virus updates (I'm getting an HTTP failure error). I'm wondering if something in the Lockdown is causing this. Can the Lockdown be removed?

From the microsoft.public.softwareupdatesvcs newsgroup
Yes, it can be safely removed by using Add/Remove Programs to uninstall it if it is causing you problems. I ran into this same problem when I installed a pre-release version of SUS SP1 on a SBS machine for a local business, and the first thing that the administrator did was check to see if OfficeScan still worked.

We couldn't figure out what setting in URLScan.ini was blocking the functionality of OfficeScan so we simply uninstalled URLScan completely. I'm sure that there is a way to modify URLScan.ini to have it co-exist with OfficeScan but we didn't have time to figure it out.  If anyone knows let us know so this article can be updated.
 
Cleaning Up a SUS Server After a Virus Infection

Contributed By: Don Cottam [MS]
If you've been unfortunate in having your SUS Server infected with a virus and wondering what to do about it then here's some advice...  [Go to article]
 

"Error 0x80072EFD: Unable to connect to the server" When Trying to Sync with Microsoft

From the microsoft.public.softwareupdatesvcs newsgroup and Contributed By: Peter H.
 If you’ve installed SUS but get the above error in the synchronise log you’re not on your own…  [Go to article]
 

"Error 0x80072F8C: No description available." When Trying to Use SUS on Windows 2003

From the microsoft.public.softwareupdatesvcs newsgroup
 If you’re seeing this error when you click on "synchronise now" to synchronise a Windows 2003 Beta server running SUS then read on…  [Go to article]
 
"Failed to download from URL 0x8007000d"

Contributed By: Dan Schroedl on the SUS Forum
If you're seeing this error message when trying to synch one of your SUS servers with another SUS server this could by why…  [Go to article]
 
How Do I Configure My SUS Server To Use a Proxy Server?

Contributed By: Cliff Hobbs [MVP SMS]
So you’re installing SUS but a bit confused over how to configure it to use your Proxy server. Well let us walk you through this…  [Go to article]
 
How Do I Use the Administrative Template (wuau.adm)?

Contributed By: Cliff Hobbs [MVP SMS]
Here's the answer to a common FAQ…  [Go to article]
 

How many clients can be supported by a server running SUS using the recommended configuration?

Contributed By: Cliff Hobbs [MVP SMS]
Wondering how many clients one SUS server can support when it's running the recommended configuration?..  [Go to article]
 
I am running out of space on the drive that I had previously configured to store my downloaded updates. How do I resolve this issue?

Contributed By: Cliff Hobbs [MVP SMS]
If you find you're running out of disk space on your SUS Servers here's one way to add more space without upsetting SUS…  [Go to article]
 
I Ran Out of Disk Space When Attempting to Synchronize my SUS Server. What Should I Do?

Contributed By: Cliff Hobbs [MVP SMS]
If you've run into disk space problems when synchronising your SUS Server the number of languages you're synching updates for could be the problem…  [Go to article]
 
Importing content in a test SUS server

I am having trouble setting up a SUS server in our test lab. The SUS server is installed, but not connected to the Internet. I want to "import" content from a live SUS server into the test SUS server.

Can someone explain in detail what files/folders need to be copied (if this is possible)? Anything else I need to do/update/tweak? Are the files/folders below the only files involved?
  • approveditems.txt
  • aucatalog.cab
  • aurtf.cab
  • content (folder with subfolders cabs and selfupdate)

From the microsoft.public.softwareupdatesvcs newsgroup
I actually did this quite awhile ago to see if it would work, and although it did (as far as I could tell) it isn't something that is supported. When I did it I think I copied everything from the wwwroot and content folders, so I don't know what the minimum amount of files that you need are, but at the very least one folder missing from your list below is the wwwroot\dictionaries folder and all it's contents.

After you've copied everything you'll need to stop/restart IIS in order for the dictionaries to load correctly.
 

"No packages are available to be approved" Message when Trying to Approve Updates

From the microsoft.public.softwareupdatesvcs newsgroup
 If you’re seeing this message when you try to approve updates chances are you’re not running Service Pack 1…  [Go to article]
 

Outlook Web Access Blank After Installing SUS SP1 on Same Server as Exchange 2000

From the microsoft.public.softwareupdatesvcs newsgroup
 If after installing SUS SP1 on a Domain Controller that was already running Exchange 2000 you notice that Outlook Web Access doesn’t show any emails then read on…  [Go to article]
 

Should I Install SUS on a Non-Dedicated Server?

Contributed By: Cliff Hobbs [MVP SMS]
 So you’re thinking of installing SUS on a non-dedicated server and wondering whether it’s such a good idea? Well here’s some advice...  [Go to article]
 

Renaming a SUS Server To Stop Downloads In Progress

Contributed By: Scott Korman
 So you’ve pushed the button then realise that there’s a load of updates going out across your network that shouldn’t be. You’ve disconnected the SUS Server but what now?..  [Go to article]
 

Server Doesn't Synchronise Content on Port 8080

Contributed By: Kurt M Fainman
 If you're wondering why one of your servers can successfully synchronise on port 8080 but another one can't then the ISA port configuration could be the culprit...  [Go to article]
 
Service Pack 1 FAQs

Contributed by Cliff Hobbs [MVP SMS]
Here is a collection of Frequently Asked Questions (FAQs) relating to SUS SP1.  For details on What's New see the What's New in SP1? article on this page.

Do I need to install SUS 1.0 and then apply SP1 or can I just install SP1?
You can just install SP1 without having to install SUS 1.0 first

If I upgrade SUS by applying SP1 will my settings be preserved?
Yes, any settings and list of approved update(s) will be preserved.

If I decide to de-install SUS 1.0 then install SP1 will my settings be preserved?
No. If you de-install SUS then install SP1 any settings and list of approved update(s) will NOT be preserved.

I've already got SP1 installed, but if I try to re-install it I get prompted to remove SP1 - Why?
This ensures that any Beta versions that may be installed are completely removed before the RTM version of SP1 is installed.

Have the disk space requirements for SP1 changed?
Not significantly.  You'll still need about 50 MB of free space just to install SUS.  Additional space will be required for any updates you want to distribute to your clients.

How do I install SP1?
First you need to update at least one of your SUS servers by downloading Sus10sp1.exe from the Microsoft website and then double-click on it to run it.  Once at least one of your SUS servers has been updated and synchronised with the latest updates from the Windows Update servers your clients will automatically update to SP1.

Do I need to install the IIS Lockdown Tool or URL Scanner in order to install SP1?
If you're running Windows 2000 Microsoft strongly recommends that you install both of these tools in order to keep your IIS servers secure (you can download the latest versions from http://microsoft.com/technet/treeview/default.asp?url=/technet/security/tools/tools/locktool.asp).  If you're running SP1 on a Windows 2000 server that has neither of these tools installed then they will automatically be installed and configured as part of the SP1 installation (Lockdown Tool version 2.0 and URL Scanner 2.5).

If the SP1 installation process detects that either the Lockdown Tool OR the URL Scanner is already installed then the SP1 Setup program doesn't install either of them.

In either case, SP1 doesn't change any settings of the Lockdown Tool or URL Scanner and a backup of the IIS metabase is preserved.

If your IIS Server is running IIS 2003 then you don't need to take any action as the functionality provided by the Lockdown Tool and URL Scanner is built in.

The information contained in this article has been extracted from the SUS SP1 Release Notes which you can download at:

http://www.microsoft.com/windowsserversystem/sus/sp1relnotes.mspx

Skipping the Installation of IIS Lockdown and URLSCAN

Contributed By: David Dehghan [MS]
 Wouldn’t it be nice if you could skip the installation of these tools?..  [Go to article]
 
"Software Update Services failed to load some configuration information" Error in Event Log

I've got SUS working on a W2K server that's accessing MS/SUS through Proxy Server on an NT4/SP6a server. Everything's working famously except I'm getting the following System Log warning in Event Viewer:

 Source: WUSyncService
Category : None
Event ID: 107

Software Update Services failed to load some configuration information. Examples of configuration information included: proxy server configuration, content location, and client locales to support. Because not all configuration information was loaded successfully, the default settings will be used instead.

Additional Data
One or more errors occurred while loading the settings file
C:\INETPUB\WWWROOT\AUTOUPDATE\DICTIONARIES\SETTINGS.TXT

I've looked at this file at see no obvious problems. Can anyone advise how I might fix this?

From the microsoft.public.softwareupdatesvcs newsgroup
It's a known problem that doesn't affect the SUS server behaviour/performance. There should be a KB article appearing about it soon, but you can safely ignore the event log error in this case.
 
Troubleshooting the Installation

Contributed by Cliff Hobbs [MVP SMS]
If you're having trouble installing the SUS Server component you might want to check out Knowledge Base Article 223300 'How to Enable Windows Installer Logging' which might give you a clue as to why the installation is failing.

 
What are the Minimum Hardware Requirements for a SUS Server?

Contributed by Cliff Hobbs [MVP SMS]
The minimum hardware requirements for a SUS server are:

  • Pentium PIII 700 or higher
  • 512 MB RAM
  • 6 GB of free hard disk space

According to Microsoft this configuration will support up to 15,000 clients.
 
What's New in SP1?

Contributed by Cliff Hobbs [MVP SMS]
This article details What's New in SUS Service Pack 1.  For other FAQs relating to the installation of SP1 see the Service Pack 1 FAQs article on this page.

Enhancements to SUS and Automatic Update
 SUS SP1 contains enhancements not only to the SUS 1.0 Server but also the Automatic Updates client.  This following is a high level overview of these.
 
 

SUS 1.0 Server Enhancements Introduced in SUS SP1

  • The Ability to run SUS Server on Windows 2000 Domain Controllers and Small Business Server
    Version 1.0 of SUS could only be installed on a Windows 2000 Member server. SP1 can now be installed on a Windows 2000 Server acting as a Domain Controller or Member server (if you want to install SUS on a Windows 2000 DC you need to promote it to a DC FIRST before installing SUS otherwise you won't be able to remove SUS should the need arise).

    You can also now install SUS on a Windows 2003 Server or a Small Business Server 2000 with SP1 applied.

  • Better Integration with the IIS Lockdown Tool
    As detailed in the     Service Pack 1 FAQs article on this page, if the SP1 installation process detects that either the Lockdown Tool OR the URL Scanner is already installed then the SP1 Setup program doesn't install either of them.  If neither is detected they are automatically installed.  In either case, SP1 doesn't change any settings of the Lockdown Tool or URL Scanner and a backup of the IIS metabase is preserved.

  • Details Links of Software Update Packages
    In some cases the item details page may contain an icon that links to the RTF file, whereas in others it may not.  Whether the RTF file shows up depends on where the RTF file resides.  In some cases the RTF might reside on a website such as Microsoft's which requires an Internet connection.  In such cases the RTF may not be displayed if an Internet connection is not present.

  • Installation Under the Default IIS Web Sites
    Provided that the default Web site is running (regardless of the IP address assigned to it), at the time SUS is installed, SUS will be installed under the default Web site.  If for any reason the default Web site is not running or no Web site is running under port 80 SUS will create and run a Web site under this port.

  • Increased Proxy Server Timeout
    The timeout for the Proxy server has now been hard coded at 5 minutes (so you can't change it).  This should help for those of us that use a Proxy server with a slow Internet connection or have virus scanning enabled on the Proxy which can sometimes cause timeout issues.

  • New Software Catalog Files
    The following two files are now downloaded as part of the synchronisation process:
    o AUCATALOG1.CAB
    o AURTF1.CAB
 

Automatic Updates Improvements Introduced in SUS SP1

  • Rescheduled Wait Time
    It is now possible to set a delay between the time that Automatic Updates runs and the time the actual installation begins for those updates whose scheduled time has passed through a new Registry key.

    The Registry key is a DWORD key called '    RescheduleWaitTime' created in:

     HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU

    The value set for this key denotes minutes and can be any value between '    1' and '60'.

    If no value is set for this key and a scheduled update is missed (probably because the computer was turned off), then the update is deferred until the next scheduled time is reached.  But if a value has been set for this Registry key and a scheduled update is missed, the update is performed at the time the Automatic Update service starts (next boot up) plus the value set for the Registry key.  So if the Registry key has a value of '    5' and the Automatic Update service starts at 08:00, the update is installed at 08:05.

    Three important rules for this new feature:

    o Missed Scheduled Installation - As per the example above, if a scheduled update is missed it will be rescheduled for the next system startup time plus the value of the 'RescheduleWaitTime' Registry key.

    o Control Panel/ Group Policy Settings Take Precedence - Any changes to the installation schedule made through Control Panel or Group Policy take precedence over the value of the 'RescheduleWaitTime' Registry key.

    o Rescheduled Time Takes Precedence Over Next Scheduled Time - If the next scheduled time is later than the rescheduled time, the rescheduled time takes precedence.

    Further details and examples of this feature can be found on Page 6 in the     SUS SP1 Release Notes

  • No Automatic Restart with Logged On Users
    It is now possible through the use of a new Registry key to stop Automatic Updates from restarting a computer that has users logged onto it after an update has been applied.

    The Registry key is a DWORD key called '    NoAutoRebootWithLoggedOnUsers' created in:

     HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU

    The value set for this is either '    1' True (don't restart if users logged on), or '0' False (restart if users are logged on).

    Further details and examples of this feature can be found on Page 9 in the     SUS SP1 Release Notes

  • Restart Notification to Newly Logged On Users
    Any new users logging onto a machine that has already been sent a restart notification by Automatic Updates but hasn't actually restarted will receive a restart notification at logon.

  • Scheduled Install Respects Shutdown Privileges
    A user can only restart a computer which requires a reboot after an Automatic Update has been applied providing that:

    o They have the 'Shut down the system' Group Policy privilege

    AND

    o No one else is logged into the computer

  • Text Wrapping for an Updates Description
    The issue with text not wrapping correctly has been resolved.

  • "Read More" Link Removed from Software Updates Packages
    The "Read More" link has been removed from the description text for any update that is available for download or installation.  This information is now available at the SUS Server.

The information contained in this article has been extracted from the SUS SP1 Release Notes.
 
Updates don’t Appear in Different Languages

I’ve already installed SUS on our network but it seems to me that synchronisation isn’t working like I configured it. I chose:

"Synchronize installation packages only for these locales:" English and Portuguese.

But when I check the updates, they only appear in English. What’s wrong?

From the microsoft.public.softwareupdatesvcs newsgroup
When you look at the Approval page in the SUS admin, it will only show the description for the updates in English. It doesn't show each update in both English and Portuguese. Your client machines that are running Portuguese should detect the updates and work fine, though.
 
Where Can I Download the SUS Server Component?

Contributed by Cliff Hobbs [MVP SMS]
Here's the link:

http://www.microsoft.com/downloads/details.aspx?FamilyId=A7AA96E4-6E41-4F54-972C-AE66A4E4BF6C&displaylang=en

Where are the IIS Logs for SUS Kept?

From the microsoft.public.softwareupdatesvcs newsgroup
 The IIS logs are one of the key places to go when you’re experiencing a problem. This is all very well assuming you know where to look – well wonder no more…  [Go to article]
 
Where is the Group Policy File 'WUAU.ADM'?

I've been reading a bit about Group Policy and using it for Automatic Updates etc. Microsoft articles talk about adding the 'WUAU.ADM' template through Group Policies. This file is supposed to be in 'C:\WINNT\INF' but it isn't. There are other *.ADM files but not that one. Anyone know where I get it from?

From the microsoft.public.softwareupdatesvcs newsgroup
Go to the SUS homepage and under the 'Downloads' section click on the link "Download SUS Server with Service Pack 1 (SP1)". In the Overview section, the fourth paragraph refers to the updated ADM file which you can download from:

http://microsoft.com/downloads/details.aspx?FamilyId=D26A0AEA-D274-42E6-8025-8C667B4C94E9&displaylang=en

Why do I get a "SUS administration site access problem" when running Windows Server 2003?

Contributed By: Cliff Hobbs [MVP SMS]
 The security enhancements in Windows 2003 can cause this problem as detailed in this article…  [Go to article]
 

Why Does Error 1316 Occur When I Attempt to Upgrade SUS 1.0 to SUS with SP1?

Contributed By: Cliff Hobbs [MVP SMS]
 If you’re seeing this error chances are it’s because of the way you installed SUS originally…  [Go to article]
 
© FAQShop.com 2003 - 2008

Goto the SUS Home Page

 Email the Author