Jeff's Connected Corner

Windows Server System news and real-world info

WSUS 3.0 RTM Available (Updated*)

 * See end of post for updated content

Congratulations to the WSUS team on shipping version 3.0 to the world.  This is an important release for several reasons:

  • WSUS 3.0 is the update management engine for two System Center products (SCOM 2007 and SCE 2007)
  • WSUS 3.0 offers significant performance and usability improvements over its predecessor, WSUS (or WSUS 2.0 if you prefer)
  • WSUS 3.0 integrates with the new Microsoft Update Catalog site, allowing you to import additional Microsoft updates

Head over to the Microsoft download site and grab a copy of WSUS 3.0 and the associated documentation.  Also check out the new WSUS Home Page.  Very nice redesign, guys!

Other Useful WSUS 3.0 Information

  • In-place upgrades from WSUS 2.0 and WSUS 3.0 RC1 are supported as long as the host OS is Windows Server 2003 SP1 or later.  WSUS 3.0 will not install on Windows 2000 Server - although Windows 2000 Server and Professional are still supported as WSUS clients.
  • A clean install is required for anyone still running SUS, or WSUS 3.0 Beta 2.  Beta 2 was retired quite a while ago - so very few users will be impacted by this caveat.  Check Add/Remove programs if you're not sure what version of WSUS 3.0 is installed.  Build numbers below 3.0.6000.318 (RC1) must be uninstalled.

I feel fortunate to have been involved with WSUS 3.0 throughout the development process... from early UI prototypes all the way to a TAP deployment.  The product has come a long way, and I'm confident it will be well-received by WSUS administrators.

Next Steps

The best way to appreciate WSUS 3.0 is to see it in action... so I'll post a video overview soon.  Until then you can check out my RC1 post for product information and the new RTM Photo Gallery for screen shots.

Updates (5/6/07)

My first WSUS 3.0 whitepaper just went live on the main WSUS page (www.microsoft.com/wsus).  Check it out for an overview of the UI and some new/improved features.  I'm working on a second whitepaper (Distributed WSUS Deployments) that should go live at the end of May.  Stay tuned.

Only published comments... Apr 30 2007, 11:18 AM by Jeff
Filed under:

Comments

 

jchambers said:

Can wait to get this in at some of my clients.

April 30, 2007 10:38 AM
 

Charles Palmer said:

I am trying to install WSUS 3.0, but it is telling me there is SUS 1.0 on my system. It was in the Add/Remove Programs, but when I ran it, it failed. I have been trying to find how to manually purge it, but despite my best efforts, it is still seeing SUS 1.0 on the system (BTW, I have been using WSUS 2.0 for almost 2 years now on this server, so why SUS 1.0 still has a vestige, I am not sure).

Any help you can provide to fix this would be great.

June 5, 2007 10:08 PM
 

Charles Palmer said:

I figured out what I need to do to purge the last of SUS 1.0 from my system so WSUS 3.0 would install. I had to search the registry for every ocurrence of the following GUID:

{AFF0D9D3-6F0D-437E-9327-98108B4A8644}

I found this here:

http://technet2.microsoft.com/windowsserver/en/library/2f276be4-f276-4bec-a565-c8757c6736b81033.mspx?mfr=true

Once I deleted every ocurrence of that GUID from the registry, I was finally able to successfully run the WSUS 3.0 install without it failing on the install check.

BTW, I found my self into this mess because someone over-zealously cleaned up the SUS directory from the computer without doing a proper uninstall when trying to recover disk space...

Thanks,

Charles

June 6, 2007 7:49 AM
 

Jeff said:

Charles - glad you found the solution. Isn't it interesting how a good night's sleep helps in troubleshooting. ;)

June 6, 2007 8:01 AM
 

Justin said:

Is there a way to run a report to see if a specific update like IE 7 got installed?

Thanks!

June 14, 2007 3:07 PM
 

Nes said:

Software Distribution Service 3.0 automatically downloaded to my computer and every time I sign off of the computer, it downloads again and installs again on the next start up. What is going on... 4 times so far... Nes

July 11, 2007 7:11 PM
 

Scott said:

Jeff-

Your whitepaper titled "WSUS 3 Improvements for Distributed Networks" refers to "Configurable Content Source" which would allow us to have our replica WSUS servers donwload the updates directly from Microsoft but all metadata from our master WSUS server.  I am unable to find any documentation that indicates how to configure this.  Can you please point me to some instructions for this setup?

Thanks!

-Scott

July 19, 2007 9:51 AM
 

Jeff said:

Catching up on replies...

Justin - you can easily run a status report on each update (including IE 7). Just right-click and select 'Status Report'. This allows you to see exactly how your deployments are progressing on an update-by-update basis. You can also run status reports on individual computer objects using the same procedure (right-click a computer and select 'Status Report').

Nes - not sure if you're talking about the WSUS client or the server software. Regardless, if you have multiple 'offers' then you might try stopping 'wuauserv' at a command line, deleting the contents of the Software Distribution folder, then restart 'wuauserv'. This is kind of draconian... but it just might do the trick. Not much else to suggest given the limited info you've presented. Post again w/ more feedback... or check the Microsoft WSUS newsgroup (microsoft.public.windows.server.update_services).

Scott - This one is kind of hidden... and even more so if you are playing around with only 1 server. Once you have a true hierarchy set up, go to the Options page on a downstream server and click the 'Update Files and Languages' option. Inside this new window you'll see a check box that says "Download files from Microsoft Update, do not download from upstream server". Give that a whirl and let me know how it turns out.

Cheers all! Thanks for the continued readership... and sorry for the delayed responses.

July 25, 2007 10:34 PM
 

Toby said:

How can I access the WSUS through my workstation ( I'm the Network Admin )?  Before all I had to do was pull up the website http://<servername>/wsusadmin.  The only way I can access it now is to be physically at the server or use Remote Desktop.  And beings I have 3 servers spread out all over the US, it would just be easier for me to access it from one terminal.

August 8, 2007 8:38 AM
 

Jeff said:

Toby - yes, many people have commented on the loss of remote web-based admin. However, based on the new capabilities of the WSUS 3.0 MMC I'm willing to deal with it (as are MOST other IT Pros). Besides RDP, you can access multiple WSUS 3.0 servers from your domain-joined workstation by installing the WSUS admin console. The install package is the same one that you'd run on a server to install WSUS 3.0... just choose the option to only install the Admin tools and you're all set. And notice that I said domain-joined workstation. This won't work if your PC or the WSUS servers are in a workgroup. Kerberos authentication is required. Hope this helps.

August 9, 2007 1:00 PM
 

Gregorious said:

Few people getting this error... has been working fine and suddenly this... The WSUS administration console was unable to connect to the WSUS Server via the remote API.

Verify that the Update Services service, IIS and SQL are running on the server. If the problem persists, try restarting IIS, SQL, and the Update Services Service.

The WSUS administration console has encountered an unexpected error. This may be a transient error; try restarting the administration console. If this error persists,

Try removing the persisted preferences for the console by deleting the wsus file under %appdata%\Microsoft\MMC\.

System.IO.IOException -- The handshake failed due to an unexpected packet format.

Source

System

Stack Trace:

  at System.Net.Security.SslState.StartReadFrame(Byte[] buffer, Int32 readBytes, AsyncProtocolRequest asyncRequest)

  at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)

  at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)

  at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)

  at System.Threading.ExecutionContext.runTryCode(Object userData)

  at System.Runtime.CompilerServices.RuntimeHelpers.ExecuteCodeWithGuaranteedCleanup(TryCode code, CleanupCode backoutCode, Object userData)

  at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)

  at System.Net.TlsStream.ProcessAuthentication(LazyAsyncResult result)

  at System.Net.TlsStream.Write(Byte[] buffer, Int32 offset, Int32 size)

  at System.Net.PooledStream.Write(Byte[] buffer, Int32 offset, Int32 size)

  at System.Net.ConnectStream.WriteHeaders(Boolean async)

** this exception was nested inside of the following exception **

System.Net.WebException -- The underlying connection was closed: An unexpected error occurred on a send.

Source

Microsoft.UpdateServices.Administration

Stack Trace:

  at Microsoft.UpdateServices.Administration.AdminProxy.CreateUpdateServer(Object[] args)

  at Microsoft.UpdateServices.Administration.AdminProxy.GetUpdateServer(String serverName, Boolean useSecureConnection, Int32 portNumber)

  at Microsoft.UpdateServices.UI.AdminApiAccess.AdminApiTools.GetUpdateServer(String serverName, Boolean useSecureConnection, Int32 portNumber)

  at Microsoft.UpdateServices.UI.SnapIn.Scope.ServerSummaryScopeNode.GetUpdateServer(PersistedServerSettings settings)

  at Microsoft.UpdateServices.UI.SnapIn.Scope.ServerSummaryScopeNode.ConnectToServer()

  at Microsoft.UpdateServices.UI.SnapIn.Scope.ServerSummaryScopeNode.ConnectToServerAndPopulateNode(Boolean connectingServerToConsole)

  at Microsoft.UpdateServices.UI.SnapIn.Scope.ServerSummaryScopeNode.OnExpandFromLoad(SyncStatus status)

August 22, 2007 6:07 AM
 

Remo said:

People (worksation) kep getting disconnected from the server (a couple) regulary (like clock work) any ideas on what it is?

September 12, 2007 7:59 PM
 

Joe H said:

Reporting is extremely slow with WSUS 3.0

I have about 650 clients on Windows 2003.   I am using the default database that comes with WSUS.

I miss being able to see what  what clients are missing the updates that have been approved for installation.   It appears that all updates are sent in a detect state.

September 17, 2007 7:49 AM
 

Enrique said:

Hi to all,

I have 1 upstream Wsus server with its 1 replica Wsus server.

After I synchronized both servers I've realized that 1upstream wsus server showes 1% more than a wsus replica server in the "installed/not applicable" collumn of the computers view in several machines.

Could anyone tell me how to fix it?

Please feel free to send me an email to my personal address  mevscito@hotmail.com

Thanks in advanced for any information ASAP

Enrique

October 20, 2007 2:09 AM
 

Richard Hsu said:

We get error message by startup WSUS in the today Morning. How about the resolution to fix it.  

Our wsus server : Windows 2000 Server+SP4

WSUS Ver.:2.0.0.2620

Microsoft.UpdateServices.Administration.WsusInvalidDataException: The specified string is invalid.

Parameter name: Title ---> System.ArgumentException: The specified string is invalid.

Parameter name: Title

  at Microsoft.UpdateServices.Internal.StringValidation.ValidateUpdateContainerTitleString(String paramName, String value)

  at Microsoft.UpdateServices.Internal.BaseApi.UpdateContainer.set_Title(String value)

  at Microsoft.UpdateServices.Internal.BaseApi.UpdateContainer..ctor(GenericReadableRow row)

  --- End of inner exception stack trace ---

  at Microsoft.UpdateServices.Internal.BaseApi.UpdateContainer..ctor(GenericReadableRow row)

  at Microsoft.UpdateServices.Internal.BaseApi.UpdateCategory..ctor(GenericReadableRow row)

  at Microsoft.UpdateServices.Internal.BaseApi.UpdateCategory.BuildUpdateCategoryCollection(GenericReadableRow[] categoryRows)

  at Microsoft.UpdateServices.Internal.BaseApi.UpdateCategory.GetAll(DateTime fromSyncDate, DateTime toSyncDate)

  at Microsoft.UpdateServices.Internal.BaseApi.UpdateServer.GetUpdateCategories(DateTime fromSyncDate, DateTime toSyncDate)

  at Administration.Reporting.CurrentStatus.CurrentStatusProxy.GetHomeStatus()

  at Administration.Reporting.ReportingXPost.Page_Load(Object sender, EventArgs e)

  at Microsoft.UpdateServices.Internal.BaseApi.UpdateContainer..ctor(GenericReadableRow row)

  at Microsoft.UpdateServices.Internal.BaseApi.UpdateCategory..ctor(GenericReadableRow row)

  at Microsoft.UpdateServices.Internal.BaseApi.UpdateCategory.BuildUpdateCategoryCollection(GenericReadableRow[] categoryRows)

  at Microsoft.UpdateServices.Internal.BaseApi.UpdateCategory.GetAll(DateTime fromSyncDate, DateTime toSyncDate)

  at Microsoft.UpdateServices.Internal.BaseApi.UpdateServer.GetUpdateCategories(DateTime fromSyncDate, DateTime toSyncDate)

  at Administration.Reporting.CurrentStatus.CurrentStatusProxy.GetHomeStatus()

  at Administration.Reporting.ReportingXPost.Page_Load(Object sender, EventArgs e)

Somebody have resolution could you e-mail for me

rih@twn.tuv.com

November 12, 2007 8:20 PM
 

Glenn Mehnert said:

I was under the impression that Windows Small Business Server was designed for any small business owner to set-up and run.  That's the way the marketing made it look.  I bought SBS 2003 in 2004 and had someone do the initial setup.  Since then  I lost a router and the new router uses a different internal IP address.  That has taken me nearly a week to figure out.  Now the Server is connected to the internet.  I understand why big companies need huge IT teams and groups of techies like all of you, but why can't I get an easy to use file and contact database server that I can access from within my office or from a remote connection?   This is an appliance at the level I want to use it and it should be built that way.  One of you microsoft experts should form your own company and just sell pre-configured machines that an entrepreneur can connect to their home ISP and be able to give a team of five to ten people access to.  God knows thats what I bought SBS for, but it sure isn't working that way.  Frustrated with unnecessary complexity.

December 7, 2007 1:32 PM

Trackbacks

Leave a Comment

(required)  
(optional)
(required)  
Add

About Jeff

Jeff Centimano is a Windows Server MVP based in Fairway, KS (USA). In addition to blogging and freelance technical writing for Microsoft, Jeff leads the KC-MEC User Group (kcmec.org) and assists with various site duties here at WindowsConnected.com. Jeff has been in the IT industry since 1994 and is currently a Solutions Architect at EMC Global Services.
Windows is a registered trademark of Microsoft Corporation.
Powered by Community Server (Non-Commercial Edition), by Telligent Systems Themed By nb development