Microsoft SUS server - Problems

[snorkel]

Okay. New SUS server configured. All updates downloaded from Microsoft and approved on the SUS server. We are a novell shop so no domain controller here. I
configured a test workstation with the following registry entries.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"WUServer"="

http://update"

"WUStatusServer"="

http://update"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000004
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:00000009
"UseWUServer"=dword:00000001
"RescheduleWaitTime"=dword:00000005

AND the following REG entries


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate]
"WUServer"="

http://update"

"WUStatusServer"="

http://update"

"PingID"=hex:36,7b,9c,89,42,ef,d1,41,80,3e,81,ac,0f,b5,e7,00
"AccountDomainSid"=hex:01,04,00,00,00,00,00,05,15,00,00,00,4b,2c,bc,1a,54,19,\
0e,29,16,c0,ea,00,32

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update]
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000004
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"RescheduleWaitTime"=dword:00000001
"ScheduleInstallDay"=dword:00000000
"ScheduleInstallTime"=dword:00000009
"UseWUServer"=dword:00000001
"AUState"=dword:00000002
"LastWaitTimeout"="2004.10.06 17:43:41"


Question 1: Did I do anything wrong here with the REG entries??? Not sure if I needed entries at both locations.

The windows update log on the client shows the followng:

2004-10-06 08:42:23 12:42:23 Success IUCTL Starting
2004-10-06 08:42:38 12:42:38 Error IUCTL Library download
error. Will retry. (Error 0x80190197)
2004-10-06 08:42:38 12:42:38 Error IUCTL Library download
error. Will retry. (Error 0x80190197)
2004-10-06 08:42:38 12:42:38 Error IUCTL Library download
error. Will retry. (Error 0x80190197)
2004-10-06 08:42:38 12:42:38 Error IUCTL Failed to download
iuident.cab from

http://update

to C:\Program Files\WindowsUpdate\V4 (Error
0x80190197)
2004-10-06 08:42:38 12:42:38 Success IUCTL Ignore above error,
use local copy of iuident.cab from C:\Program Files\WindowsUpdate\V4
2004-10-06 08:42:38 12:42:38 Success IUENGINE Starting
2004-10-06 08:42:39 12:42:39 Error IUENGINE Library download
error. Will retry. (Error 0x80190197)
2004-10-06 08:42:39 12:42:39 Error IUENGINE Library download
error. Will retry. (Error 0x80190197)
2004-10-06 08:42:39 12:42:39 Error IUENGINE Library download
error. Will retry. (Error 0x80190197)
2004-10-06 08:42:39 12:42:39 Success IUENGINE Determining machine
configuration
2004-10-06 08:42:40 12:42:40 Success IUENGINE Querying software
update catalog from

http://update/autoupdate/getmanifest.asp

2004-10-06 08:42:40 12:42:40 Success IUENGINE Determining machine
configuration
2004-10-06 08:42:40 12:42:40 Success IUENGINE Querying software
update catalog from

http://update/autoupdate/getmanifest.asp

2004-10-06 08:42:40 12:42:40 Success IUENGINE Determining machine
configuration
2004-10-06 08:42:41 12:42:41 Success IUENGINE Querying software
update catalog from

http://update/autoupdate/getmanifest.asp

2004-10-06 08:42:51 12:42:51 Success IUENGINE Determining machine
configuration
2004-10-06 08:42:51 12:42:51 Success IUENGINE Querying software
update catalog from

http://update/autoupdate/getmanifest.asp

2004-10-06 08:42:53 12:42:53 Success IUENGINE Shutting down
2004-10-06 08:42:53 12:42:53 Success IUCTL Shutting down


Question 2: Are those errors okay or is that a problem??????

Here are the results of running my server side IIS log file through the

http://www.pdxconsulting.com/sus

web site to see what the log really means

24867 2004-10-06 12:43:51 192.168.190.148 IU Initialization Succeeded
00000000 5.0.893.2.0.1.0 en-US 367b9c8942efd141803e81ac0fb5e700
24872 2004-10-06 12:44:04 192.168.190.148 AU Detection Succeeded 00000000
items=12 5.0.893.2.0.1.0 en-US 367b9c8942efd141803e81ac0fb5e700


Question 3: It doesn't look like anything downloaded to the client and it
never asked me to reboot. What is wrong that I am not
downloading/installing updates on this test client?

 

[MisterNiceGuy]

If the user logged onto the test PC at install time is a local administrator, it will NEVER install automatically. To make the installation install Automatically for an administrator you have to set the policy that denies access to Windows Updates. It is done through a group policy, but basically it's this:

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate]
"DisableWindowsUpdateAccess"=dword:00000001

Good Luck.

Additionally, you can verify that Automatic updates is working by checking the event log for entries from Automatic Updates.