{"id":30474,"date":"2019-10-31T21:35:44","date_gmt":"2019-10-31T18:35:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/chinim-klientov-wsus\/"},"modified":"2019-10-31T21:35:44","modified_gmt":"2019-10-31T18:35:44","slug":"chinim-klientov-wsus","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/chinim-klientov-wsus","title":{"rendered":"Remediem clien\u021bii WSUS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Clien\u021bii WSUS nu se vor actualiza dup\u0103 schimbarea serverului?
\nAtunci venim la voi. (C)<\/i><\/p>\n

Toat\u0103 lumea a avut situa\u021bii \u00een care ceva a \u00eencetat s\u0103 func\u021bioneze.
\n\u00cen acest articol va fi vorba despre WSUS (informa\u021bii mai detaliate despre WSUS pot fi ob\u021binute aici<\/a><\/noindex> \u0219i aici<\/a><\/noindex>).
\nMai exact, despre cum s\u0103 facem ca clien\u021bii WSUS (adic\u0103 calculatoarele noastre) s\u0103 primeasc\u0103 din nou actualiz\u0103ri dup\u0103 mutarea sau restaurarea serverului de actualiz\u0103ri existent.<\/p>\n

A\u0219adar, situa\u021bia este urm\u0103toarea.<\/b>
\nServerul WSUS a murit. Mai exact, controladorul RAID este din anul 2000. Dar acest fapt nu a adus vreo bucurie. Dup\u0103 o r\u0103scolire scurt\u0103 (cu \u00eencerc\u0103ri de recuperare a RAID-ului, distrus de un controller muribund), s-a decis s\u0103 instal\u0103m un nou server WSUS.
\n\u00cen cele din urm\u0103, am ob\u021binut un WSUS func\u021bional, la care din vreun motiv nu se conectau clien\u021bii.
\nAspecte: WSUS este legat de FQDN printr-un server DNS intern, serverul WSUS este specificat \u00een politicile de grup \u0219i se r\u0103sp\u00e2nde\u0219te pe clien\u021bi prin AD, set\u0103rile pentru server sunt implicite, \u00eenainte de a \u00eencepe toate ac\u021biunile, actualiza\u021bi WSUS-ul \u0219i efectua\u021bi sincronizarea actualiz\u0103rilor.<\/p>\n

Dup\u0103 analiza situa\u021biei, au fost identificate c\u00e2teva puncte cheie.<\/b>
\n1) Clipele clientului (vorbim despre wuauclt) \u00een \u00eencercarea de a se conecta la SID-ul vechiului server WSUS.
\n2) Problema actualiz\u0103rilor neinstalate, desc\u0103rcate de pe vechiul server WSUS.
\n3) Blocarea serviciilor care afecteaz\u0103 func\u021bionalitatea wuauclt (vorbim despre wuauserv, bits \u0219i cryptsvc). Blocarea s-a produs din diferite motive, care nu au fost analizate \u00een detaliu.
\n\u00cen cele din urm\u0103, totul s-a transformat \u00eentr-un mic script, care este distribuit prin politicile de grup prin AD sau manual. Scriptul folose\u0219te cea mai sigur\u0103 op\u021biune de reparare \u0219i nu a avut niciun rezultat negativ pe parcursul a \u0219ase luni de utilizare.
\n<\/a><\/noindex>
\nVoi descrie ce se face (pentru cei foarte curio\u0219i).<\/b>
\nOprim serviciul de actualizare, cur\u0103\u021b\u0103m descriptorul de securitate al serviciului de comunica\u021bie cu WSUS, elimin\u0103m actualiz\u0103rile existente de la vechiul WSUS, cur\u0103\u021b\u0103m registrul de men\u021biuni despre vechiul WSUS, pornim serviciile de actualizare automat\u0103 (wuauserv), serviciul de transfer de fonduri inteligente (bits) \u0219i serviciul de criptografie (cryptsvc), iar la final ne conect\u0103m for\u021bat la WSUS reset\u00e2nd autorizarea, descoperind noul WSUS \u0219i gener\u00e2nd un raport pe server.
\n\u0218i ca \u00eentotdeauna: toate ac\u021biunile men\u021bionate mai sus \u0219i mai jos le efectua\u021bi pe propriul risc. V\u0103 rug\u0103m s\u0103 v\u0103 asigura\u021bi c\u0103 toate datele necesare sunt salvate \u00eenainte de a rula scriptul.<\/p>\n

Script<\/b>
\nnet stop wuauserv
\nsc sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)
\ndel \/f \/s \/q %windir%SoftwareDistributiondownload*.*
\nREG DELETE \"HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate\" \/v AccountDomainSid \/f
\nREG DELETE \"HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate\" \/v PingID \/f
\nREG DELETE \"HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate\" \/v SusClientId \/f
\nnet start wuauserv && net start bits && net start cryptsvc
\nwuauclt \/resetauthorization \/detectnow \/reportnow<\/code>
\n
Sursa: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043b\u0438\u0435\u043d\u0442\u044b WSUS \u043d\u0435 \u0445\u043e\u0442\u044f\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u0441\u043c\u0435\u043d\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u0430? \u0422\u043e\u0433\u0434\u0430 \u043c\u044b \u0438\u0434\u0435\u043c \u043a \u0432\u0430\u043c. (\u0421) \u0423 \u0432\u0441\u0435\u0445 \u0431\u044b\u0432\u0430\u043b\u0438 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438, \u043a\u043e\u0433\u0434\u0430 \u0447\u0442\u043e-\u043d\u0438\u0431\u0443\u0434\u044c \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u0432\u0430\u043b\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0440\u0435\u0447\u044c \u043f\u043e\u0439\u0434\u0435\u0442 \u043e WSUS (\u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e WSUS \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0437\u0434\u0435\u0441\u044c \u0438 \u0437\u0434\u0435\u0441\u044c). \u0410 \u0442\u043e\u0447\u043d\u0435\u0435 \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 WSUS (\u0442.\u0435. \u043d\u0430\u0448\u0438 \u0441 \u0432\u0430\u043c\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b) \u0437\u0430\u043d\u043e\u0432\u043e \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-30474","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Repar\u0103m clien\u021bi WSUS | ProHoster","description":"Clien\u021bii WSUS nu vor s\u0103 se actualizeze dup\u0103 schimbarea serverului? Atunci venim la voi. (C) To\u021bi am avut situa\u021bii c\u00e2nd ceva a \u00eencetat s\u0103 func\u021bioneze.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/chinim-klientov-wsus","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0427\u0438\u043d\u0438\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 WSUS | ProHoster","og:description":"\u041a\u043b\u0438\u0435\u043d\u0442\u044b WSUS \u043d\u0435 \u0445\u043e\u0442\u044f\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u0441\u043c\u0435\u043d\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u0430? \u0422\u043e\u0433\u0434\u0430 \u043c\u044b \u0438\u0434\u0435\u043c \u043a \u0432\u0430\u043c. (\u0421) \u0423 \u0432\u0441\u0435\u0445 \u0431\u044b\u0432\u0430\u043b\u0438 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438, \u043a\u043e\u0433\u0434\u0430 \u0447\u0442\u043e-\u043d\u0438\u0431\u0443\u0434\u044c \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u0432\u0430\u043b\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/chinim-klientov-wsus","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:35:44+00:00","article:modified_time":"2019-10-31T18:35:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30474","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 01:23:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 15:43:19","updated":"2026-01-21 01:23:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/30474","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=30474"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/30474\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=30474"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=30474"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=30474"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}