Recently I fixed one large WSUS implementation for couple of major and minor issues, so I thought it would be great to document and make it public for people those who want to fix and continue enjoying the simplicity of WSUS for keeping their Server Infrastructure compliant to the recent security and critical patches.
Environment: Windows 2008 R2 SP1 WSUS server
The issues reported within this WSUS infrastructure were the following:
- WSUS reports does not provide the actual updates were installed and not installed on the servers
- WSUS server fails to install updates on Windows Server 2012 and always fails to make them 100%
- WSUS server database had huge list of expired updates and never purged the suppressed updates
- Making the WSUS server compliant to Windows Server 2012 Operating System
You can following the below outlined steps for ensuring the health of your WSUS server and can fix above listed issues:
1) First of all we will clean the WSUS database for the expired and suppressed updates from the Options and then Server Cleanup Wizard.
This will perform the similar operations as displayed in the blow example.
1) In the second step we will install the relevant hot-fixes on our WSUS to cover couple of bugs found in the product. And in addition to this we will also install the latest WSUS 3.x service pack to make it compliant with Windows Server 2012.
http://support.microsoft.com/kb/2734608
http://technet.microsoft.com/en-us/windowsserver/bb466203.aspx
http://www.microsoft.com/en-us/download/details.aspx?id=5216
2) In the last step you can approve all updates with the status of unapproved for any status this will ensure that all your server becomes 100% in the reports and have related security vulnerabilities fixed.
It’s pretty straight forward from the solution standpoint but I thought it would be great from the knowledge sharing prospective side. You all have a bless day!
Azure Hybrid & Cloud Migration Blog 