{"id":30474,"date":"2019-10-31T21:35:44","date_gmt":"2019-10-31T18:35:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/chinim-klientov-wsus\/"},"modified":"2019-10-31T21:35:44","modified_gmt":"2019-10-31T18:35:44","slug":"chinim-klientov-wsus","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/chinim-klientov-wsus","title":{"rendered":"Oprava klientov WSUS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Klienti WSUS nechc\u00fa aktualizova\u0165 po zmene servera?
\nTak ideme k v\u00e1m. (C)<\/i><\/p>\n

Ka\u017ed\u00fd mal situ\u00e1cie, ke\u010f nie\u010do prestalo fungova\u0165.
\nV tomto \u010dl\u00e1nku sa budeme bavi\u0165 o WSUS (podrobnej\u0161ie inform\u00e1cie o WSUS mo\u017eno z\u00edska\u0165 tu<\/a><\/noindex> a tu<\/a><\/noindex>).
\nA konkr\u00e9tnej\u0161ie o tom, ako don\u00fati\u0165 klientov WSUS (t.j. na\u0161e po\u010d\u00edta\u010de) znova prij\u00edma\u0165 aktualiz\u00e1cie po prenose alebo obnove existuj\u00faceho servera aktualiz\u00e1ci\u00ed.<\/p>\n

Tak\u017ee situ\u00e1cia je nasleduj\u00faca.<\/b>
\nServer WSUS zhasol. Presnej\u0161ie, RAID ovl\u00e1da\u010d z roku 2000. Ale tento fakt nepridal na radosti. Po kr\u00e1tkom tr\u00e1pen\u00ed (s pokusmi obnovi\u0165 RAID, ktor\u00fd sa pokazil z umieraj\u00faceho ovl\u00e1da\u010da) sme sa rozhodli postavi\u0165 nov\u00fd WSUS server.
\nNakoniec sme dostali funk\u010dn\u00fd WSUS, ku ktor\u00e9mu sa z nejak\u00e9ho d\u00f4vodu nepripojili klienti.
\nBody: WSUS je viazan\u00fd na FQDN prostredn\u00edctvom intern\u00e9ho DNS servera, WSUS server je zaregistrovan\u00fd v skupinov\u00fdch politik\u00e1ch a roz\u0161iruje sa na klientov cez AD, predvolen\u00e9 nastavenia servera, pred za\u010diatkom v\u0161etk\u00fdch akci\u00ed aktualizujte samotn\u00fd WSUS a vykonajte synchroniz\u00e1ciu aktualiz\u00e1ci\u00ed.<\/p>\n

Po anal\u00fdze situ\u00e1cie sa uk\u00e1zalo nieko\u013eko k\u013e\u00fa\u010dov\u00fdch bodov.<\/b>
\n1) Klientsky konflikt (re\u010d o wuauclt) pri pokuse o spojenie so SID star\u00e9ho servera WSUS.
\n2) Probl\u00e9m s neupraven\u00fdmi aktualiz\u00e1ciami stiahnut\u00fdmi zo star\u00e9ho WSUS servera.
\n3) Parkovanie slu\u017eieb ovplyv\u0148uj\u00facich pr\u00e1cu wuauclt (re\u010d o wuauserv, bits a cryptsvc). Parkovanie sa stalo z r\u00f4znych d\u00f4vodov, ktor\u00e9 neboli podrobne analyzovan\u00e9.
\nNakoniec v\u0161etky rie\u0161enia vy\u00fastili do mal\u00e9ho skriptu, ktor\u00fd sa \u0161\u00edri skupinov\u00fdmi politikami cez AD alebo vlastn\u00fdmi rukami (a nohami). Skript pou\u017e\u00edva najbezpe\u010dnej\u0161iu variantu opravy a u\u017e pol roka nepriniesol \u017eiadny negat\u00edvny v\u00fdsledok.
\n<\/a><\/noindex>
\nOp\u00ed\u0161em, \u010do sa rob\u00ed (pre tie najzvedavej\u0161ie).<\/b>
\nParkujeme slu\u017ebu servera aktualiz\u00e1ci\u00ed, \u010dist\u00ed sa bezpe\u010dnostn\u00fd deskriptor slu\u017eby spojenia s WSUS, odstra\u0148uj\u00fa sa existuj\u00face aktualiz\u00e1cie zo star\u00e9ho WSUS, \u010dist\u00ed sa registr od zmienok o predch\u00e1dzaj\u00facom WSUS, sp\u00fa\u0161\u0165ame slu\u017eby automatick\u00fdch aktualiz\u00e1ci\u00ed (wuauserv), pozadov\u00fa inteligentn\u00fa slu\u017ebu prenosu (bits) a slu\u017ebu kryptografie (cryptsvc), na konci sa don\u00fatime pripoji\u0165 k WSUS so resetovan\u00edm autoriz\u00e1cie, objavovan\u00edm nov\u00e9ho WSUS a generovan\u00edm spr\u00e1vy na server.
\nA ako v\u017edy: v\u0161etky \u00fakony op\u00edsan\u00e9 vy\u0161\u0161ie a ni\u017e\u0161ie vykon\u00e1vate na vlastn\u00e9 riziko. Pros\u00edm, uistite sa, \u017ee v\u0161etky potrebn\u00e9 \u00fadaje s\u00fa ulo\u017een\u00e9 pred spusten\u00edm skriptu.<\/p>\n

Skript<\/b>
\nnet stop wuauserv
\nsc sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)
\ndel \/f \/s \/q %windir%SoftwareDistributiondownload*.*
\nREG DELETE \"HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate\" \/v AccountDomainSid \/f
\nREG DELETE \"HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate\" \/v PingID \/f
\nREG DELETE \"HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate\" \/v SusClientId \/f
\nnet start wuauserv && net start bits && net start cryptsvc
\nwuauclt \/resetauthorization \/detectnow \/reportnow<\/code>
\n
Zdroj: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043b\u0438\u0435\u043d\u0442\u044b WSUS \u043d\u0435 \u0445\u043e\u0442\u044f\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u0441\u043c\u0435\u043d\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u0430? \u0422\u043e\u0433\u0434\u0430 \u043c\u044b \u0438\u0434\u0435\u043c \u043a \u0432\u0430\u043c. (\u0421) \u0423 \u0432\u0441\u0435\u0445 \u0431\u044b\u0432\u0430\u043b\u0438 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438, \u043a\u043e\u0433\u0434\u0430 \u0447\u0442\u043e-\u043d\u0438\u0431\u0443\u0434\u044c \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u0432\u0430\u043b\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0440\u0435\u0447\u044c \u043f\u043e\u0439\u0434\u0435\u0442 \u043e WSUS (\u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e WSUS \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0437\u0434\u0435\u0441\u044c \u0438 \u0437\u0434\u0435\u0441\u044c). \u0410 \u0442\u043e\u0447\u043d\u0435\u0435 \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 WSUS (\u0442.\u0435. \u043d\u0430\u0448\u0438 \u0441 \u0432\u0430\u043c\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b) \u0437\u0430\u043d\u043e\u0432\u043e \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-30474","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Oprava klientov WSUS | ProHoster","description":"Klienti WSUS sa nechc\u00fa aktualizova\u0165 po zmene servera? Potom pr\u00eddeme za vami. (C) Ka\u017ed\u00e9mu sa u\u017e stalo, \u017ee nie\u010do prestalo fungova\u0165.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/chinim-klientov-wsus","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0427\u0438\u043d\u0438\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 WSUS | ProHoster","og:description":"\u041a\u043b\u0438\u0435\u043d\u0442\u044b WSUS \u043d\u0435 \u0445\u043e\u0442\u044f\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u0441\u043c\u0435\u043d\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u0430? \u0422\u043e\u0433\u0434\u0430 \u043c\u044b \u0438\u0434\u0435\u043c \u043a \u0432\u0430\u043c. (\u0421) \u0423 \u0432\u0441\u0435\u0445 \u0431\u044b\u0432\u0430\u043b\u0438 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438, \u043a\u043e\u0433\u0434\u0430 \u0447\u0442\u043e-\u043d\u0438\u0431\u0443\u0434\u044c \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u0432\u0430\u043b\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/chinim-klientov-wsus","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:35:44+00:00","article:modified_time":"2019-10-31T18:35:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30474","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 01:23:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 15:43:19","updated":"2026-01-21 01:23:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/30474","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=30474"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/30474\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=30474"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=30474"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=30474"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}