Deleted Update Services GPOs on SBS 2008
Fri, Jan 2 2009 12:07
Somehow as part of the migration from SBS 2003 to SBS 2008 several GPOs were deleted (personally I blame the Jr. Admin who was helping me with the migration - that will teach me to let someone else muck around with my SBS Server / just kidding).
They managed to break the default settings in WSUS I ran the SBS BPA and it reported the following: The default AutoApproval rule is enabled. Because of this, software updates are not managed by Windows SBS 2008 Update Services. This results in a blue question mark in the the Updates section of the Windows SBS Console.
Also from the Tasks menu within the SBS Console when you ckick on the “Change the software update Settings” the error is reported back “Software Update Settings = Cannot display Software Update Settings The Update Service group policy settings are not accessible. For resolving this issue, please contact Microsoft Product Support”
The problem was:
The error message indicates that SBS cannot find the default WSUS GPOs or these GPOs are corrupted. If there are problems with the default WSUS GPOs, this error message will popup and the console will crash subsequently.
The fix was the following:
Please run "gpmc.msc" to open GPMC and then verify if the following GPOs are available and linked to the domain level:
Update Services Client Computers Policy
Update Services Common Settings Policy
Update Services Server Computers Policy
If not, please link them to the domain and see if it works.
If the problem persists or the default WSUS GPOs are missing, we need to recreate the three GPOs with the default names and configurations. Please create the GPOs and configure them according to the attachment:
Please note the following two policy settings in the "Update Services Common Settings Policy" GPO must be modified to the real SBS server name in your scenario:
"Computer Configuration"->"Administrative Templates"->"Windows Components"->"Windows Update":
Set the intranet update service for detecting updates: http://<SERVER>:8530
Set the intranet statistics server: http://<SERVER>:8530