Deleted Update Services GPOs on SBS 2008

Somehow as part of the migration from SBS 2003 to SBS 2008 several GPOs were deleted (personally I blame the Jr. Admin who was helping me with the migration – that will teach me to let someone else muck around with my SBS Server / just kidding).

They managed to break the default settings in WSUS I ran the SBS BPA and it reported the following: The default AutoApproval rule is enabled. Because of this, software updates are not managed by Windows SBS 2008 Update Services. This results in a blue question mark in the the Updates section of the Windows SBS Console.

Also from the Tasks menu within the SBS Console when you ckick on the “Change the software update Settings” the error is reported back “Software Update Settings = Cannot display Software Update Settings The Update Service group policy settings are not accessible.  For resolving this issue, please contact Microsoft Product Support”

The problem was:

The error message indicates that SBS cannot find the default WSUS GPOs or these GPOs are corrupted. If there are problems with the default WSUS GPOs, this error message will popup and the console will crash subsequently.

The fix was the following:

Please run “gpmc.msc” to open GPMC and then verify if the following GPOs are available and linked to the domain level:

Update Services Client Computers Policy

Update Services Common Settings Policy

Update Services Server Computers Policy

 

If not, please link them to the domain and see if it works.

If the problem persists or the default WSUS GPOs are missing, we need to recreate the three GPOs with the default names and configurations. Please create the GPOs and configure them according to the attachment:

http://msmvps.com/members/levy/files/Update-Services-Client-Computers-Policy.zip.aspx

Please note the following two policy settings in the “Update Services Common Settings Policy” GPO must be modified to the real SBS server name in your scenario:

“Computer Configuration”->”Administrative Templates”->”Windows Components”->”Windows Update”:

Set the intranet update service for detecting updates: http://<SERVER>:8530

Set the intranet statistics server: http://<SERVER>:8530

3 thoughts on “Deleted Update Services GPOs on SBS 2008”

  1. Thank you! A quick web search brought up this fix and after about 10 minutes of implementing, it now appears that it is fixed!! I haven’t had any updates downloaded yet, but everything in the SBS Console now works for the configuration.

    I think that part of the problem with this issue (from migrations) is that part of the migration steps have you deleting your policies as it states that they don’t convert.

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>