Windows-Server-2012
WSUS 客戶端找不到更新
我已經在 Windows server 2012 R2 上安裝了 WSUS，並通過組策略配置了工作站和客戶端，以從 WSUS 自動安裝更新。這些伺服器由 WSUS 檢測並報告給 WSUS 伺服器。在 WSUS 伺服器中，我可以看到伺服器缺少 53 個更新。我昨天為包含伺服器的電腦組批准了這些更新。但是，如果我在伺服器上搜尋更新，它不會找到任何更新。到目前為止我檢查過的內容：
- WSUS 伺服器檢測到伺服器
- 伺服器正在聯繫 WSUS 伺服器並向其報告
- 已批准包含伺服器的電腦組所需的更新（電腦組的名稱：“Prod_01”）
- GPO 應用正確
- 多次嘗試這些命令沒有任何影響： wuauclt /resetauthorization /detectnow /reportnow
如果我查看 windowsupdate.log 我可以看到以下內容：
2015-01-06 08:34:36:715 12 1508 Setup Checking for agent SelfUpdate 2015-01-06 08:34:36:808 12 1508 Setup Client version: Core: 7.6.7600.320 Aux: 7.6.7600.320 2015-01-06 08:34:36:824 12 1508 Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab with dwProvFlags 0x00000080: 2015-01-06 08:34:36:840 12 1508 Misc Microsoft signed: NA 2015-01-06 08:34:36:840 12 1508 Misc WARNING: Cab does not contain correct inner CAB file. 2015-01-06 08:34:36:840 12 1508 Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab with dwProvFlags 0x00000080: 2015-01-06 08:34:36:855 12 1508 Misc Microsoft signed: NA 2015-01-06 08:34:36:855 12 1508 Setup Wuident for the managed service is valid but not quorum-signed. Skipping selfupdate. 2015-01-06 08:34:36:855 12 1508 Setup Skipping SelfUpdate check based on the /SKIP directive in wuident 2015-01-06 08:34:36:855 12 1508 Setup SelfUpdate check completed. SelfUpdate is NOT required. 2015-01-06 08:34:38:462 12 1508 PT +++++++++++ PT: Synchronizing server updates +++++++++++ 2015-01-06 08:34:38:462 12 1508 PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://wsus.schule.local:8530/ClientWebService/client.asmx 2015-01-06 08:34:38:571 12 1508 PT WARNING: Cached cookie has expired or new PID is available 2015-01-06 08:34:38:571 12 1508 PT Initializing simple targeting cookie, clientId = 0c4aed4f-6c60-46a0-b29b-f2080ea315c1, target group = , DNS name = wsus-server 2015-01-06 08:34:38:571 12 1508 PT Server URL = http://wsus.schule.local:8530/SimpleAuthWebService/SimpleAuth.asmx 2015-01-06 08:34:53:844 12 1508 Agent * Found 0 updates and 76 categories in search; evaluated appl. rules of 699 out of 1392 deployed entities 2015-01-06 08:34:53:844 12 1508 Agent ********* 2015-01-06 08:34:53:844 12 1508 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates] 2015-01-06 08:34:53:844 12 1508 Agent ************* 2015-01-06 08:34:53:859 12 16b4 AU >>## RESUMED ## AU: Search for updates [CallId = {95840C02-E405-419D-9DA4-260BC14AA845}] 2015-01-06 08:34:53:859 12 16b4 AU # 0 updates detected 2015-01-06 08:34:53:875 12 16b4 AU ######### 2015-01-06 08:34:53:875 12 16b4 AU ## END ## AU: Search for updates [CallId = {95840C02-E405-419D-9DA4-260BC14AA845}] 2015-01-06 08:34:53:875 12 16b4 AU ############# 2015-01-06 08:34:53:875 12 16b4 AU Successfully wrote event for AU health state:0 2015-01-06 08:34:53:875 12 16b4 AU Featured notifications is disabled. 2015-01-06 08:34:53:875 12 16b4 AU AU setting next detection timeout to 2015-01-06 10:20:45 2015-01-06 08:34:53:875 12 16b4 AU Setting AU scheduled install time to 2015-01-11 01:00:00 2015-01-06 08:34:53:875 12 16b4 AU Successfully wrote event for AU health state:0 2015-01-06 08:34:53:875 12 16b4 AU Successfully wrote event for AU health state:0 2015-01-06 08:34:58:851 12 1508 Report REPORT EVENT: {73BBAB28-58E9-45AC-B910-731F8958C456} 2015-01-06 08:34:53:844+0100 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Software Synchronization Windows Update Client successfully detected 0 updates.在第 12 行，我可以看到客戶端正在連接到正確的 WSUS 伺服器，但在第 14 行，“目標組”是空的，應該是“Prod_01”。那麼任何人都可以解釋我做錯了什麼或為什麼目標組現在至少 24 小時沒有更新？
又過了一天，我能夠“解決”這個問題，但老實說，這並不是真正的問題。WSUS 伺服器仍在下載更新，如果尚未下載，客戶端將無法辨識更新。現在一切正常。
無論如何感謝您的貢獻。
當我看到 cookie 警告時，請按照那裡的步驟重新同步；http://support.microsoft.com/kb/903262（複製機？）
引用自知識庫；
Click Start, click Run, type cmd in the Open box, and then click OK. At the command prompt, type net stop wuauserv, and then press ENTER. Click Start, click Run, type regedit in the Open box, and then click OK. Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate In the details pane of Registry Editor, delete the following registry entries: PingID AccountDomainSid SusClientId SusClientIDValidation Note Windows Update Agent 3.0 adds the SusClientIDValidation value. This value was released in May 2007. The other registry entries存在於 Windows Update Agent 2.0 和 Windows Update Agent 3.0 中。退出系統資料庫編輯器。在命令提示符處鍵入 net start wuauserv，然後按 Enter。在命令提示符處，鍵入 wuauclt.exe /resetauthorization /detectnow，然後按 Enter。等待 10 分鐘以完成檢測週期。啟動 WSUS 控制台以確保客戶端出現在 WSUS 控制台中。