{"id":30474,"date":"2019-10-31T21:35:44","date_gmt":"2019-10-31T18:35:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/chinim-klientov-wsus\/"},"modified":"2019-10-31T21:35:44","modified_gmt":"2019-10-31T18:35:44","slug":"chinim-klientov-wsus","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/chinim-klientov-wsus","title":{"rendered":"Nous r\u00e9parons les clients WSUS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Les clients de WSUS ne veulent pas se mettre \u00e0 jour apr\u00e8s le changement de serveur ?
\nAlors, nous venons \u00e0 vous. (C)<\/i><\/p>\n

Tout le monde a d\u00e9j\u00e0 rencontr\u00e9 des situations o\u00f9 quelque chose cessait de fonctionner.
\nCet article concerne WSUS (vous pouvez obtenir plus d'informations d\u00e9taill\u00e9es sur WSUS ici<\/a><\/noindex> et ici<\/a><\/noindex>).
\nEt plus pr\u00e9cis\u00e9ment sur la mani\u00e8re de faire en sorte que les clients WSUS (c'est-\u00e0-dire nos ordinateurs) re\u00e7oivent \u00e0 nouveau des mises \u00e0 jour apr\u00e8s le transfert ou la restauration d'un serveur de mise \u00e0 jour existant.<\/p>\n

Donc, la situation est la suivante.<\/b>
\nLe serveur WSUS est mort. En fait, le contr\u00f4leur RAID date de 2000. Mais ce fait n'a pas apport\u00e9 de joie. Apr\u00e8s quelques efforts (avec des tentatives de r\u00e9cup\u00e9rer le RAID, compromis par le contr\u00f4leur mourant), il a \u00e9t\u00e9 d\u00e9cid\u00e9 de tout laisser pour mettre en place un nouveau serveur WSUS.
\nAu final, nous avons un WSUS fonctionnel, sur lequel les clients ne se connectaient pas pour une raison quelconque.
\nPoints \u00e0 noter : WSUS est li\u00e9 par FQDN via un serveur DNS interne, le serveur WSUS est sp\u00e9cifi\u00e9 dans les strat\u00e9gies de groupe et s'\u00e9tend aux clients via AD, param\u00e8tres par d\u00e9faut pour le serveur, avant de commencer toute action, mettez \u00e0 jour WSUS et effectuez la synchronisation des mises \u00e0 jour.<\/p>\n

Apr\u00e8s analyse de la situation, plusieurs points cl\u00e9s ont \u00e9t\u00e9 identifi\u00e9s.<\/b>
\n1) Le client rencontre (il s'agit de wuauclt) en essayant de se connecter avec le SID de l'ancien serveur WSUS.
\n2) Probl\u00e8me avec des mises \u00e0 jour non install\u00e9es, t\u00e9l\u00e9charg\u00e9es depuis l'ancien serveur WSUS.
\n3) Services bloqu\u00e9s affectant le fonctionnement de wuauclt (il s'agit de wuauserv, bits et cryptsvc). Les blocages sont survenus pour diverses raisons, qui n'ont pas \u00e9t\u00e9 analys\u00e9es en d\u00e9tail.
\nEn fin de compte, toute la solution a \u00e9t\u00e9 condens\u00e9e dans un petit script, qui est distribu\u00e9 via des strat\u00e9gies de groupe \u00e0 travers AD ou manuellement. Le script utilise l'option de r\u00e9paration la plus s\u00fbre et n'a entra\u00een\u00e9 aucun r\u00e9sultat n\u00e9gatif depuis six mois d'utilisation.
\n<\/a><\/noindex>
\nJe vais d\u00e9crire ce qui est fait (pour les plus curieux).<\/b>
\nNous d\u00e9sactivons le service de mise \u00e0 jour, nettoyons le descripteur de s\u00e9curit\u00e9 du service de communication avec WSUS, supprimons les mises \u00e0 jour existantes de l'ancien WSUS, nettoyons le registre des mentions de l'ancien WSUS, d\u00e9marrons les services de mise \u00e0 jour automatique (wuauserv), le service de transfert intelligent en arri\u00e8re-plan (bits) et le service de cryptographie (cryptsvc), enfin, nous allons frapper de force WSUS avec une r\u00e9initialisation de l'autorisation, une d\u00e9tection du nouveau WSUS et une g\u00e9n\u00e9ration de rapport sur le serveur.
\nEt comme toujours : toutes les actions d\u00e9crites ci-dessus et ci-dessous sont effectu\u00e9es \u00e0 vos propres risques. Veuillez vous assurer que toutes les donn\u00e9es n\u00e9cessaires sont sauvegard\u00e9es avant d'ex\u00e9cuter le script.<\/p>\n

Script<\/b>
\nnet stop wuauserv
\nsc sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)
\ndel \/f \/s \/q %windir%SoftwareDistributiondownload*.*
\nREG DELETE \"HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate\" \/v AccountDomainSid \/f
\nREG DELETE \"HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate\" \/v PingID \/f
\nREG DELETE \"HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate\" \/v SusClientId \/f
\nnet start wuauserv && net start bits && net start cryptsvc
\nwuauclt \/resetauthorization \/detectnow \/reportnow<\/code>
\n
Source : habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043b\u0438\u0435\u043d\u0442\u044b WSUS \u043d\u0435 \u0445\u043e\u0442\u044f\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u0441\u043c\u0435\u043d\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u0430? \u0422\u043e\u0433\u0434\u0430 \u043c\u044b \u0438\u0434\u0435\u043c \u043a \u0432\u0430\u043c. (\u0421) \u0423 \u0432\u0441\u0435\u0445 \u0431\u044b\u0432\u0430\u043b\u0438 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438, \u043a\u043e\u0433\u0434\u0430 \u0447\u0442\u043e-\u043d\u0438\u0431\u0443\u0434\u044c \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u0432\u0430\u043b\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0440\u0435\u0447\u044c \u043f\u043e\u0439\u0434\u0435\u0442 \u043e WSUS (\u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e WSUS \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0437\u0434\u0435\u0441\u044c \u0438 \u0437\u0434\u0435\u0441\u044c). \u0410 \u0442\u043e\u0447\u043d\u0435\u0435 \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 WSUS (\u0442.\u0435. \u043d\u0430\u0448\u0438 \u0441 \u0432\u0430\u043c\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b) \u0437\u0430\u043d\u043e\u0432\u043e \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-30474","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Nous r\u00e9parons les clients WSUS | ProHoster","description":"Les clients WSUS ne veulent pas se mettre \u00e0 jour apr\u00e8s le changement de serveur ? Alors nous venons \u00e0 vous. (C) Tout le monde a d\u00e9j\u00e0 eu des situations o\u00f9 quelque chose cessait de fonctionner.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/chinim-klientov-wsus","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0427\u0438\u043d\u0438\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 WSUS | ProHoster","og:description":"\u041a\u043b\u0438\u0435\u043d\u0442\u044b WSUS \u043d\u0435 \u0445\u043e\u0442\u044f\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u0441\u043c\u0435\u043d\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u0430? \u0422\u043e\u0433\u0434\u0430 \u043c\u044b \u0438\u0434\u0435\u043c \u043a \u0432\u0430\u043c. (\u0421) \u0423 \u0432\u0441\u0435\u0445 \u0431\u044b\u0432\u0430\u043b\u0438 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438, \u043a\u043e\u0433\u0434\u0430 \u0447\u0442\u043e-\u043d\u0438\u0431\u0443\u0434\u044c \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u0432\u0430\u043b\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/chinim-klientov-wsus","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:35:44+00:00","article:modified_time":"2019-10-31T18:35:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30474","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 01:23:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 15:43:19","updated":"2026-01-21 01:23:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/30474","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=30474"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/30474\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=30474"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=30474"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=30474"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}