Five common faults of patch servers

 
Figure 1 100% CPU usage

 

Figure 2 svchost.exe occupies a large amount of CPU resources

Figure 3 install the KB927891 patch

 

Set automatic property update

WSUS is a Server provided by Microsoft to provide Patch Management for Microsoft operating systems, Microsoft Office, Microsoft Server products, ISA Server, and other products, such as Visual Studio series. Many enterprises have deployed WSUS servers, but the use of WSUS servers is not smooth. This article describes several important problems encountered when using the WSUS server and the solutions.

When the CPU usage is 100%

When you configure the WSUS server for the first time and use the WSUS server to upgrade the system for the workstation, the speed of some workstation will become very slow. The task manager of these workstations may display a CPU usage of 100%, and the svchost.exe process may also occupy 100% or nearly 100% of CPU resources 1, figure 2 ).

When this problem occurs, you can temporarily stop the svchost.exe process, download the patch, install it on the workstation, and restart the computer to solve the problem. Note that when installing the patch, the interface shown appears to indicate that the patch is correctly installed. On Some workstations, you need to install the patch multiple times to solve the problem.

To solve this problem, there are two other Notes: 1. The WSUS server has provided this patch. However, due to various reasons, some workstation cannot be installed in time, so the CPU usage is 100%. 2. When WSUS automatically installs patches in the background, the CPU usage may reach 100% for the moment, but it will not remain at 100%, but at 40% ~ 100%. This is normal.

Wks cannot contact WSUS

When using gpedit. the msc configuration workstation updates the WSUS server, or imports the edited "Registry File" into the workstation and upgrades the WSUS server from within the enterprise, to enable the workstation to immediately download the patch from the WSUS server, enter the following content at the command prompt:

Wuauclt/detectnow

Wuauclt1/detectnow

Then use netstat-an. If no WSUS server connection is found or the preceding command is not used, the workstation will not download any patches from the WSUS server a few days later, this workstation is not found on the WSUS server, so you need to install the WSUS client agent on the workstation and restart the computer to solve this problem.

For: http://download.windowsupdate.com/Windows

Update/redist/standalone/7.0.6000

. 381/WindowsUpdateAgent30-x86.exe.

An error occurred while updating automatically.

When the workstation is configured to be automatically downloaded and scheduled to be installed, the workstation will be installed at the specified time 4 ). Some people may think that the workstation will not be installed at the specified time, but after multiple tests, the results are as follows:

After the workstation downloads the patch from the WSUS server, a yellow exclamation point appears in the lower right corner, prompting "you have prepared updates for your computer. Click here to install these updates ". There will be three situations based on whether the user chooses:

1. If you click a yellow exclamation point, the automatic update dialog box is displayed. Click the "quick install" button to install the patch.

2. If you do not select a patch, the WSUS client automatically installs the patch in the background after the set time is reached. 4. In this case, if the task manager is opened, a svchost.exe process occupies a large amount of CPU resources and occupies a large amount of memory, and the patch is automatically installed. In addition, you can see the installed patch in the "process.

After the installation is complete, if the installed patch needs to restart the computer, if the Scheduled Automatic update installation is disabled or not configured, the 5-minute countdown window is displayed, no one will cancel this operation and the computer will restart. If the configuration is "enabled", the message "update complete, whether to restart the computer" is displayed. If the installed patch does not need to restart the computer, no prompt is displayed.

3. If the update is not installed at the specified time, Windows XP will install the update when it is shut down.

WSUS cannot download patches

If the WSUS server cannot download the patch, we can see the following error in "Event Viewer": "the download of the Content File failed. Cause: This server does not support the necessary HTTP protocol. The backend smart Transmission Service (BITS) requires the server to support the range protocol header ." The solution is as follows:

First, enter the command prompt.

If you use the MSDE or WMSDE database that comes with WSUS 2.0 and is installed by default, run the following code: % programfiles % \ Update Services \

Tools \ osql \ osql.exe-S % Computer

Name % \ WSUS-E-B-n-Q "USE SUSDB update tbConfigurationC set BitsDownloadPriorityFore

Ground = 1"

If WSUS 2.0 and an existing Microsoft SQL Server database are used, run the following code: % programfiles % \ Update Services \

Tools \ osql \ osql.exe "-S % Computer

Name %-E-B-n-Q "USE SUSDB update tbConfigurationC set BitsDownloadPriorityForeground = 1"

If WSUS 3.0 and Windows Internal Database are installed by default), run the following code: % programfiles % \ Update Services \

Setup \ ExecuteSQL.exe-S % Computername % \ MICROSOFT # SS

EE-d "SUSDB"-Q "update tb

ConfigurationC set BitsDownload

PriorityForeground = 1"

If WSUS 3.0 is used and an existing SQL Server database is installed, run the following code: % programfiles % \ Update Services \ Setup \ Execute

SQL .exe "-S % Computername %-d" SUSDB "-Q" update tb

ConfigurationC set BitsDownload

PriorityForeground = 1"

Then restart the Update Services Service.

Error 0x80070002

Some Workstation may encounter "one problem preventing Windows from correctly checking the license for this machine. Error Code 0x80070002. If you log out of the computer and enter again, the system still prompts this error, indicating that the update cannot be used.

This is because the computer is installed with a cracked version of Windows XP. Generally, when the WSUS server is used to patch the workstation on the network, it does not check whether the operating system is genuine, except in the following cases: windows Media Player 11 is installed, IE 7.0 is later installed, and XP SP3 is upgraded.

After this problem occurs, you can recover the oembios. binfile under C: \ windows \ system32. But in fact, to solve this problem, you need to reinstall the operating system in most cases. We recommend that you use the VL version of Windows XP instead of the cracked or Lite version.

Understanding these typical problems can help you easily manage WSUS servers. Of course, the network is evolving, and WSUS is not static, and the actual situation of each unit is different, and the habits of each administrator are different. The WSUS server may have different problems. However, as long as we are calm and calm, we can quickly solve the problem after careful analysis and judgment.