{"id":30474,"date":"2019-10-31T21:35:44","date_gmt":"2019-10-31T18:35:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/chinim-klientov-wsus\/"},"modified":"2019-10-31T21:35:44","modified_gmt":"2019-10-31T18:35:44","slug":"chinim-klientov-wsus","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/chinim-klientov-wsus","title":{"rendered":"Vi fixar WSUS-kunder","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

WSUS-klienter v\u00e4grar att uppdatera efter serverbytet?
\nD\u00e5 kommer vi till er. (C)<\/i><\/p>\n

Alla har haft situationer d\u00e4r n\u00e5got pl\u00f6tsligt slutade fungera.
\nI denna artikel kommer vi att prata om WSUS (mer detaljerad information om WSUS kan erh\u00e5llas h\u00e4r<\/a><\/noindex> och h\u00e4r<\/a><\/noindex>).
\nN\u00e4rmare best\u00e4mt hur man f\u00e5r WSUS-klienterna (dvs. v\u00e5ra datorer) att p\u00e5 nytt ta emot uppdateringar efter att en befintlig uppdateringsserver har flyttats eller \u00e5terst\u00e4llts.<\/p>\n

S\u00e5, situationen \u00e4r f\u00f6ljande.<\/b>
\nWSUS-servern dog. N\u00e4rmare best\u00e4mt RAID-kontrollern som \u00e4r fr\u00e5n 2000. Men denna fakta tillf\u00f6rde ingen gl\u00e4dje. Efter en kort tids trassel (med f\u00f6rs\u00f6k att \u00e5terst\u00e4lla RAID, vilket f\u00f6rst\u00f6rdes av den d\u00f6ende kontrollern), togs beslutet att s\u00e4tta upp en ny WSUS-server.
\nResultatet blev att vi fick en fungerande WSUS, till vilken kunderna av n\u00e5gon anledning inte kunde ansluta.
\nMoment: WSUS \u00e4r kopplad med FQDN genom intern DNS-server, WSUS-servern \u00e4r angiven i gruppolicyer och sprids till kunder genom AD, standardinst\u00e4llningar f\u00f6r servern, innan n\u00e5gra \u00e5tg\u00e4rder vidtas, uppdatera sj\u00e4lva WSUS och utf\u00f6r synkronisering av uppdateringar.<\/p>\n

Efter analys av situationen identifierades flera viktiga punkter.<\/b>
\n1) Klienten h\u00e4nger (det handlar om wuauclt) n\u00e4r den f\u00f6rs\u00f6ker ansluta till SID f\u00f6r den gamla WSUS-servern.
\n2) Problem med ej installerade uppdateringar som laddats ner fr\u00e5n den gamla WSUS-servern.
\n3) Parkeringsproblem med tj\u00e4nster som p\u00e5verkar wuauclt:s funktion (det handlar om wuauserv, bits och cryptsvc). Parkeringsproblemen uppstod av olika sk\u00e4l som inte analyserades i detalj.
\nSom ett resultat mynnade hela l\u00f6sningen ut i ett litet skript som distribueras genom gruppolicyer via AD eller med egna h\u00e4nder (och f\u00f6tter). Skriptet anv\u00e4nder den s\u00e4kraste metoden f\u00f6r reparation och har inte orsakat n\u00e5got negativt resultat under ett halv\u00e5r av anv\u00e4ndning.
\n<\/a><\/noindex>
\nJag kommer att beskriva vad som g\u00f6rs (f\u00f6r de s\u00e4rskilt nyfikna).<\/b>
\nVi stoppar uppdateringstj\u00e4nsten, reng\u00f6r s\u00e4kerhetsbeskrivaren f\u00f6r tj\u00e4nsten som kommunicerar med WSUS, tar bort befintliga uppdateringar fr\u00e5n tidigare WSUS, reng\u00f6r registret fr\u00e5n omn\u00e4mnanden av tidigare WSUS, startar automatiska uppdateringstj\u00e4nster (wuauserv), bakgrundstj\u00e4nsten f\u00f6r intelligent \u00f6verf\u00f6ring (bits) och kryptografi-tj\u00e4nsten (cryptsvc), och till sist tvingar vi kontakt med WSUS genom att nollst\u00e4lla autentiseringen, uppt\u00e4cka den nya WSUS och generera en rapport till servern.
\nOch som alltid: alla handlingar som beskrivs ovan och nedan utf\u00f6rs p\u00e5 egen risk. Var god se till att all n\u00f6dv\u00e4ndig data \u00e4r sparad innan skriptet k\u00f6rs.<\/p>\n

Skript<\/b>
\nnet stop wuauserv
\nsc sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)
\ndel \/f \/s \/q %windir%SoftwareDistributiondownload*.*
\nREG DELETE \"HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate\" \/v AccountDomainSid \/f
\nREG DELETE \"HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate\" \/v PingID \/f
\nREG DELETE \"HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate\" \/v SusClientId \/f
\nnet start wuauserv && net start bits && net start cryptsvc
\nwuauclt \/resetauthorization \/detectnow \/reportnow<\/code>
\n
K\u00e4lla: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043b\u0438\u0435\u043d\u0442\u044b WSUS \u043d\u0435 \u0445\u043e\u0442\u044f\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u0441\u043c\u0435\u043d\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u0430? \u0422\u043e\u0433\u0434\u0430 \u043c\u044b \u0438\u0434\u0435\u043c \u043a \u0432\u0430\u043c. (\u0421) \u0423 \u0432\u0441\u0435\u0445 \u0431\u044b\u0432\u0430\u043b\u0438 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438, \u043a\u043e\u0433\u0434\u0430 \u0447\u0442\u043e-\u043d\u0438\u0431\u0443\u0434\u044c \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u0432\u0430\u043b\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0440\u0435\u0447\u044c \u043f\u043e\u0439\u0434\u0435\u0442 \u043e WSUS (\u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e WSUS \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0437\u0434\u0435\u0441\u044c \u0438 \u0437\u0434\u0435\u0441\u044c). \u0410 \u0442\u043e\u0447\u043d\u0435\u0435 \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 WSUS (\u0442.\u0435. \u043d\u0430\u0448\u0438 \u0441 \u0432\u0430\u043c\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b) \u0437\u0430\u043d\u043e\u0432\u043e \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-30474","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Reparera WSUS-klienter | ProHoster","description":"Vill inte WSUS-klienter uppdatera efter serverbytet? D\u00e5 \u00e4r vi h\u00e4r f\u00f6r att hj\u00e4lpa dig. (C) Alla har varit med om situationer d\u00e4r n\u00e5got slutade fungera.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/chinim-klientov-wsus","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0427\u0438\u043d\u0438\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 WSUS | ProHoster","og:description":"\u041a\u043b\u0438\u0435\u043d\u0442\u044b WSUS \u043d\u0435 \u0445\u043e\u0442\u044f\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u0441\u043c\u0435\u043d\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u0430? \u0422\u043e\u0433\u0434\u0430 \u043c\u044b \u0438\u0434\u0435\u043c \u043a \u0432\u0430\u043c. (\u0421) \u0423 \u0432\u0441\u0435\u0445 \u0431\u044b\u0432\u0430\u043b\u0438 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438, \u043a\u043e\u0433\u0434\u0430 \u0447\u0442\u043e-\u043d\u0438\u0431\u0443\u0434\u044c \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u0432\u0430\u043b\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/chinim-klientov-wsus","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:35:44+00:00","article:modified_time":"2019-10-31T18:35:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30474","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 01:23:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 15:43:19","updated":"2026-01-21 01:23:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/30474","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=30474"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/30474\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=30474"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=30474"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=30474"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}