I apparently don't have the "normal" problems here because I have tried all the usual fixes for this and nothing has worked. I really hope someone else has an idea for me. I have dozens of hours into this now and it probably would have been faster to P2V
this box then start from complete scratch with a fresh install, new domain, create new users, then copy over mail for users.
I can view & deploy updates from the SBS console, but I still get the error when attempting to view (change the software update settings).
Fixes I have tried (in order of attempt IIRC):
- Checked all GP settings and "real" WSUS console settings/options probably half a dozen times.
- "Repair windows server update services" technet article.
- Server cleanup wizard and reindex database
- Complete WSUS uninstall and reinstall (don't remember the source but followed directions to make sure WSUS was COMPLETELY gone before reboot, reinstall, reboot again).
- KB2720211 (fully broke WSUS)
- KB2734608 (got me back to pre-KB2720211 functionality)
- I figured KB945985 was a long-shot and after viewing the output log I had high hopes but no dice.
Output log from KB945985:
Changed database context to 'SUSDB'. Using SUSDB No work to do. Record already exists. Automatic Approval For Detection is already enabled Target group of approval for detection is not "AllComputers" Inserting "AllComputers" group"AllComputers" Group added Critical update is not in approval for detection classification Critical update is inserted to approval for detection classification Security update is not in approval for detection classification Security update is inserted to approval for detection classification Service pack is not in approval for detection classification Service pack is inserted to approval for detection classification
I also uninstalled WSUS from an old database server on our domain thinking that may have been a problem (used to be DC, but that was two DC's ago).
I have not fully rebooted the server since the KB945985 script or the uninstallation of WSUS from the old old demoted DC, but I have restarted the SBS Console, SBS Manager service, and the Update Services service on the SBS 2011 server.
-Linksep