{"id":30474,"date":"2019-10-31T21:35:44","date_gmt":"2019-10-31T18:35:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/chinim-klientov-wsus\/"},"modified":"2019-10-31T21:35:44","modified_gmt":"2019-10-31T18:35:44","slug":"chinim-klientov-wsus","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/chinim-klientov-wsus","title":{"rendered":"Naprawiamy klient\u00f3w WSUS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Klienci WSUS nie chc\u0105 si\u0119 aktualizowa\u0107 po zmianie serwera?
\nW takim razie przychodzimy do Ciebie. (C)<\/i><\/p>\n

Ka\u017cdy mia\u0142 sytuacje, gdy co\u015b przestawa\u0142o dzia\u0142a\u0107.
\nW tym artykule mowa b\u0119dzie o WSUS (wi\u0119cej informacji o WSUS mo\u017cna uzyska\u0107 tutaj<\/a><\/noindex> i tutaj<\/a><\/noindex>).
\nA konkretniej o tym, jak zmusi\u0107 klient\u00f3w WSUS (czyli nasze komputery) do ponownego pobierania aktualizacji po przeniesieniu lub przywr\u00f3ceniu istniej\u0105cego serwera aktualizacji.<\/p>\n

Wi\u0119c sytuacja jest nast\u0119puj\u0105ca.<\/b>
\nSerwer WSUS pad\u0142. A dok\u0142adniej kontroler RAID z 2000 roku. Jednak ta informacja nie przynios\u0142a rado\u015bci. Po kr\u00f3tkim szukaniu rozwi\u0105zania (z pr\u00f3bami przywr\u00f3cenia RAID, uszkodzonego przez umieraj\u0105cy kontroler), podj\u0119to decyzj\u0119 o uruchomieniu nowego serwera WSUS.
\nW efekcie uzyskali\u015bmy dzia\u0142aj\u0105cy WSUS, do kt\u00f3rego z jakiego\u015b powodu nie mog\u0142y po\u0142\u0105czy\u0107 si\u0119 klienci.
\nSytuacje: WSUS jest powi\u0105zany z FQDN poprzez wewn\u0119trzny serwer DNS, serwer WSUS jest zapisany w zasadach grupowych i rozprzestrzeniany na klient\u00f3w poprzez AD, ustawienia dla serwera domy\u015blne, przed rozpocz\u0119ciem wszystkich dzia\u0142a\u0144 zaktualizuj sam WSUS i przeprowad\u017a synchronizacj\u0119 aktualizacji.<\/p>\n

Po przeanalizowaniu sytuacji zidentyfikowano kilka kluczowych punkt\u00f3w.<\/b>
\n1) Klient WP (mowa o wuauclt) pr\u00f3buje po\u0142\u0105czy\u0107 si\u0119 z SID starego serwera WSUS.
\n2) Problem z niezgodnymi aktualizacjami pobranymi ze starego serwera WSUS.
\n3) Zatrzymywanie us\u0142ug wp\u0142ywaj\u0105cych na dzia\u0142anie wuauclt (mowa o wuauserv, bits i cryptsvc). Zatrzymanie mia\u0142o r\u00f3\u017cne przyczyny, kt\u00f3re nie zosta\u0142y dok\u0142adnie zbadane.
\nW efekcie wszystko sko\u0144czy\u0142o si\u0119 ma\u0142ym skryptem, kt\u00f3ry jest dystrybuowany poprzez zasady grupowe przez AD lub r\u0119cznie. Skrypt wykorzystuje najbezpieczniejsz\u0105 metod\u0119 naprawy i nie przynosi\u0142 \u017cadnych negatywnych rezultat\u00f3w przez p\u00f3\u0142 roku u\u017cytkowania.
\n<\/a><\/noindex>
\nOpisz\u0119, co si\u0119 dzieje (dla szczeg\u00f3lnie ciekawych).<\/b>
\nZatrzymujemy us\u0142ug\u0119 serwera aktualizacji, czy\u015bcimy deskryptor bezpiecze\u0144stwa us\u0142ugi komunikacyjnej z WSUS, usuwamy aktualizacje z poprzedniego WSUS, czy\u015bcimy rejestr z odniesieniami do poprzedniego WSUS, uruchamiamy us\u0142ugi automatycznych aktualizacji (wuauserv), inteligentnej us\u0142ugi transferu w tle (bits) oraz us\u0142ugi kryptograficznej (cryptsvc), na ko\u0144cu wymuszamy po\u0142\u0105czenie z WSUS z zresetowaniem autoryzacji, wykrywaniem nowego WSUS i generowaniem raportu na serwer.
\nI jak zawsze: wszystkie dzia\u0142ania opisane powy\u017cej i poni\u017cej wykonujesz na w\u0142asne ryzyko. Prosz\u0119 upewnij si\u0119, \u017ce wszystkie niezb\u0119dne dane zosta\u0142y zapisane przed uruchomieniem skryptu.<\/p>\n

Skrypt<\/b>
\nnet stop wuauserv
\nsc sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)
\ndel \/f \/s \/q %windir%SoftwareDistributiondownload*.*
\nREG DELETE \"HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate\" \/v AccountDomainSid \/f
\nREG DELETE \"HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate\" \/v PingID \/f
\nREG DELETE \"HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate\" \/v SusClientId \/f
\nnet start wuauserv && net start bits && net start cryptsvc
\nwuauclt \/resetauthorization \/detectnow \/reportnow<\/code>
\n
\u0179r\u00f3d\u0142o: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043b\u0438\u0435\u043d\u0442\u044b WSUS \u043d\u0435 \u0445\u043e\u0442\u044f\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u0441\u043c\u0435\u043d\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u0430? \u0422\u043e\u0433\u0434\u0430 \u043c\u044b \u0438\u0434\u0435\u043c \u043a \u0432\u0430\u043c. (\u0421) \u0423 \u0432\u0441\u0435\u0445 \u0431\u044b\u0432\u0430\u043b\u0438 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438, \u043a\u043e\u0433\u0434\u0430 \u0447\u0442\u043e-\u043d\u0438\u0431\u0443\u0434\u044c \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u0432\u0430\u043b\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0440\u0435\u0447\u044c \u043f\u043e\u0439\u0434\u0435\u0442 \u043e WSUS (\u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e WSUS \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0437\u0434\u0435\u0441\u044c \u0438 \u0437\u0434\u0435\u0441\u044c). \u0410 \u0442\u043e\u0447\u043d\u0435\u0435 \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 WSUS (\u0442.\u0435. \u043d\u0430\u0448\u0438 \u0441 \u0432\u0430\u043c\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b) \u0437\u0430\u043d\u043e\u0432\u043e \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-30474","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Naprawiamy klient\u00f3w WSUS | ProHoster","description":"Klienci WSUS nie chc\u0105 si\u0119 aktualizowa\u0107 po zmianie serwera? W takim razie przychodzimy do Ciebie. (C) Ka\u017cdy mia\u0142 sytuacj\u0119, gdy co\u015b przestawa\u0142o dzia\u0142a\u0107.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/chinim-klientov-wsus","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0427\u0438\u043d\u0438\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 WSUS | ProHoster","og:description":"\u041a\u043b\u0438\u0435\u043d\u0442\u044b WSUS \u043d\u0435 \u0445\u043e\u0442\u044f\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u0441\u043c\u0435\u043d\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u0430? \u0422\u043e\u0433\u0434\u0430 \u043c\u044b \u0438\u0434\u0435\u043c \u043a \u0432\u0430\u043c. (\u0421) \u0423 \u0432\u0441\u0435\u0445 \u0431\u044b\u0432\u0430\u043b\u0438 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438, \u043a\u043e\u0433\u0434\u0430 \u0447\u0442\u043e-\u043d\u0438\u0431\u0443\u0434\u044c \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u0432\u0430\u043b\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c.","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/chinim-klientov-wsus","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:35:44+00:00","article:modified_time":"2019-10-31T18:35:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30474","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 01:23:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 15:43:19","updated":"2026-01-21 01:23:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/30474","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=30474"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/30474\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=30474"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=30474"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=30474"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}