Wsus console fails to launch after windows updates/eventid 7053/the wsus administration console has encountered an unexpected error. This may be a transient error, try restarting the administration console.

Inrecently encountered an error on wsus server running on OS 2012 R2.  The KB3159706 was the cluprit. There are some manual configuration agter installing this update.

Go to c:\program files\update services\tools\wsusutil.exe postinstall /servicing. Wait for a few minutes.

Restart wsus service

Remove wsus from %appdata%\microsoft\mmc

The wsus console should now be working.

This solved the issue for me. Hope this helps someone. 

Advertisements

Windows Server update services – Troubleshooting

  1. Telnet wsus server on port 80 (default) or other as per your environment.
  2. Check windows update log in the location c:\windows\windowsupdate.log
  3. Check if the group policy is correct , gpedit.msc – Local Computer Policy – Computer Comfiguration – Administrative Templates – Windows Components – Windows update –  a)check “specify intranet microsoft update service location” – It should point to your wsus server and the port number should be correct b) Check if “client-side targeting is enabled” (If enabled, the computer will appear under the group name mentioned in wsus server, if not enabled ignore).
  4. Check the proxy settings.
  5. Check firewall.
  6. Delete the software distribution folder from the location c:\Windows\SoftwareDistribution and run the command wuauclt.exe /detectnow.

Windows server 2012 shows as Windows 6.3 in WSUS console

Open SQL management studio.

Start a new query from SUSDB database and paste the below.

UPDATE [SUSDB].[dbo].[tbComputerTargetDetail]
SET [OSDescription] = ‘Windows Server 2012 R2 Standard’
WHERE [OSMajorVersion] = ‘6’
AND [OSMinorVersion] = ‘3’
AND [OldProductType] <> ‘1’
AND ([OSDescription] <> ‘Windows Server 2012 R2 Standard’ or [OSDescription] IS NULL)

Execute the above query and check the WSUS console. The OS would now show as Windows Server 2012 R2 Standard.

Extra Information :

Open SQL Management Studio – Expand SUSDB – Expand Tables – Right click ” dbo.tbcomputertargetdetail” and select edit top 200 rows to see the details of the table which we are going to update. In that check for OSMajorVersion=6 and OSMinorVersion=3 and build=9600. ie, that is windows server 2012 R2. If you go the end, you will find that the description is NULL. By executing the script, we are updating the OS description in the SQL table.

Execute the above query and check the wsus

Wsus freezes when you try to delete a computer group/target group from wsus console. Cannot delete a target group/computer group from wsus console.

Open SQL Management Studio and connect to SQL database or Microsoft inbuilt database \\.\pipe\MSSQL$MICROSOFT##SSEE\sql\query.

Right click the SUSDB database and select new query.

  1. Select * from dbo.targetgroup

This will list all the computer/target groups in the wsus console.

Find the target group id corresponding to the target/computer group which you want to delete.

  1. delete from dbo.tbTargetGroup where TargetGroupID = ‘****’

Execute the above query.

If the query gives you an error like “Msg 547, Level 16, State 0, Line 1

The DELETE statement conflicted with the REFERENCE constraint “FK__tbFlatten__Targe__1EF99443”. The conflict occurred in database “SUSDB”, table “dbo.tbFlattenedTargetGroup“, column ‘TargetGroupID’.

The statement has been terminated “ , follow the steps below

  1. select * from dbo.tbFlattenedTargetGroup where TargetGroupID = ‘****’

This query should get you a list with the target group id which you got from the statement 1 and the parent group id to which it is associated to.

  1. delete from dbo.tbFlattenedTargetGroup where TargetGroupID = ‘****’ AND ParentGroupID = ‘****’

You should see a message “ 1 row affected” .

Try to execute the statement

  1. delete from dbo.tbTargetGroup where TargetGroupID = ‘****’

This should give an error message “Msg 547, Level 16, State 0, Line 1

The DELETE statement conflicted with the REFERENCE constraint “FK__tbDeploym__Targe__442B18F2”. The conflict occurred in database “SUSDB”, table “dbo.tbDeployment“, column ‘TargetGroupID’.

The statement has been terminated. “

Now we should connect to the dbo.tbdeployment table.

The below query will list contents with target group id.

  1. select * from dbo.tbDeployment where TargetGroupID = ‘****’

The below query will delete the list from above query.

  1. delete from dbo.tbDeployment where TargetGroupID = ‘****’

Once the above query is completed successfully,

  1. delete from dbo.tbTargetGroup where TargetGroupID = ‘****’

And the computer/target group should be deleted successfully.

Execute the query “ Select * from dbo.targetgroup “ and you should not see the target group .

Open wsus console and confirm.

In Short, execute the commands in the order

  1. Select * fromtargetgroup
  2. delete from dbo.tbTargetGroup where TargetGroupID = ‘****’
  3. select * from dbo.tbFlattenedTargetGroup where TargetGroupID = ‘****’
  4. delete from dbo.tbFlattenedTargetGroup where TargetGroupID = ‘****’ AND ParentGroupID = ‘****’
  5. select * from dbo.tbDeployment where TargetGroupID = ‘****’
  6. delete from dbo.tbDeployment where TargetGroupID = ‘****’
  7. delete from dbo.tbTargetGroup where TargetGroupID = ‘****’

Automatic approvals on WSUS Server/how to approve a list of updates to a specific computer/group.

Open update services “ – Select “ Options “ – Select “ automatic approvals” – Select “New Rule”

In the add rule window – Step1 – “ Select the required options” – Step2 – “Select the group for which the updates needs to be approved”.

Enter a name for the rule and click ok. Click Apply and select “ Run Rule”.

Delete duplicate SID in windows update server (wsus)

Issue : you will see that a computer dissapears and appears in the windows update server (wsus) or only one of the two computers appear .

Cause : Using a cloned system without doing a sysprep leads to creation of duplicate SID’s

Solution :

* Open Regedit

* Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate In the details pane of Registry Editor, 

* Delete the following registry entries: PingID AccountDomainSid SusClientId SusClientIDValidation

 

* Open command prompt and type without qoutes 

1. wuauclt.exe /resetauthorization / detectnow

2. Wuauclt.exe /detectnow

 

NOTE : Do this on all computers with duplicate sus id’s to fix the issue.