SQL Express
(1)
SQL Server
(1)
Windows Server 2003
(1)
Windows Update
(1)
WUAutoUpdateAtShutdown
(1)
IIS
(1)
XP
(1)
Lawrence.Garvin
(1)

SUSDB size after install and detection

Asked By smiller
17-Nov-09 06:46 PM
I have a Windows Server 2003 Standard R2 running WSUS 3.0 SP2. I just
installed it recently with no previous versions or content on this
server. After configuration, my SUSDB file is already over 832MB? I
have not downloaded nor approved anything yet.

The other problem I have is that only 41 of my 90 PCs in my network
have been detected. I am using this .bat to put into the group policy.
should I be doing anything else for the group policy to detect and
install updates easier? I am trying to simplify this procedure as much
as I can.

@echo on
Echo This batch file will Force the Update Detection from the AU
client:
Echo 1. Stops the Automatic Updates Service (wuauserv)
Echo 2. Deletes the LastWaitTimeout registry key (if it exists)
Echo 3. Deletes the DetectionStartTime registry key (if it exists)
Echo 4. Deletes the NextDetectionTime registry key (if it exists)
Echo 5. Restart the Automatic Updates Service (wuauserv)
Echo 6. Force the detection
@echo on
net stop wuauserv
REG DELETE
Update" /v LastWaitTimeout /f
REG DELETE
Update" /v DetectionStartTime /f
Reg Delete
Update" /v NextDetectionTime /f
net start wuauserv
@echo off
Echo This AU client will now check for the Updates on the Local WSUS
Server.
exit


--
smiller
------------------------------------------------------------------------
smiller's Profile: http://forums.techarena.in/members/155728.htm
View this thread: http://forums.techarena.in/server-update-service/1272325.htm

http://forums.techarena.in

smiller wrote:Look in WindowsUpdate.

Harry Johnston [MVP] replied to smiller
17-Nov-09 11:16 PM
Look in WindowsUpdate.log on the missing PCs and see if there are any useful
error messages.

Are your PCs imaged?


Ouch.  That's way out of date.

All you need is one line:

wuauclt /detectnow

Harry.

None of my PCs are imaged. Most are all OEM of XP, a couple vista andone 2000.

smiller replied to Harry Johnston [MVP]
18-Nov-09 12:45 AM
None of my PCs are imaged. Most are all OEM of XP, a couple vista and
one 2000. I am using 8530 and that server indicates that WSUS is working
correctly. There is another website running on this server controlled by
another network admin and he will not approve to uninstall IIS (if that is
where the problem lies) There are no errors on client machines
indicating any problems. I have not approved any updates but I have kept
everything for 2009 as unapproved.  How can my SUSDB file be 832 MB with
no approved updates?? The .bat that I have now seems to list all
detected computers in WSUS to report. Before I roll this out to the
domain, my other admin wants me to prove that this is the best method to
be using. Any other scripts or ideas and a better explanation on SUSDB
would be very helpful.

Thanks


--
smiller
------------------------------------------------------------------------
smiller's Profile: http://forums.techarena.in/members/155728.htm
View this thread: http://forums.techarena.in/server-update-service/1272325.htm

http://forums.techarena.in

Only 832mb?

Lawrence Garvin [MVP] replied to smiller
18-Nov-09 11:18 AM
Only 832mb? :)

it is not uncommon for the WSUS database to grow to 3gb-4gb in size (which is
one of the reasons SQL Server Express Edition is not recommended for use
with WSUS).


Well, technically speaking the BATCH file only configures the registry; it
does not do anything at all with Group Policy. In addition, as is the case
with *many* such tidbits floating around the net, it has flaws, and my
recommendation is to not "look on the web" for quick fixes, but to actually
download the product documentation and configure your environment as
recommended in that documentation.

- not necessary

- not necessary

- not necessary


Which means, all this batch file really does is restart the service and run
a detection -- all of which is *useless* if you have not actually configured
the client system to use WSUS -- and if you have, this script is totally
unnecessary.


Ha!... except that it does not actually check for anything. The script never
actually initiates a detection. <sigh>


--
Lawrence Garvin, M.S., MCITP:EA, MCDBA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)

My Blog: http://onsitechsolutions.spaces.live.com
Microsoft WSUS Website: http://www.microsoft.com/wsus
My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
"Out of date".
Lawrence Garvin [MVP] replied to Harry Johnston [MVP]
18-Nov-09 11:19 AM
does not appear to be what the O.P. thinks it is supposed to do.

(And such is the risk of persons who do not understand scripting using
scripts from untrusted third parties.)



So true.



--
Lawrence Garvin, M.S., MCITP:EA, MCDBA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)

My Blog: http://onsitechsolutions.spaces.live.com
Microsoft WSUS Website: http://www.microsoft.com/wsus
My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
Not really wanting to seem contradictory, or burst anybody's bubble, butthat
Lawrence Garvin [MVP] replied to smiller
18-Nov-09 11:22 AM
Not really wanting to seem contradictory, or burst anybody's bubble, but
that batch file did *nothing* for your enviroment.


Do *not* roll that script out to the domain. It does *nothing* of value.



Kudos to your other admin for questioning the process!



Forget about SUSDB.

I'd suggest starting with the WSUS Step By Step Guide, which covers basic
installation and configuration of WSUS.
http://technet.microsoft.com/en-us/library/dd939822(WS.10).aspx


--
Lawrence Garvin, M.S., MCITP:EA, MCDBA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)

My Blog: http://onsitechsolutions.spaces.live.com
Microsoft WSUS Website: http://www.microsoft.com/wsus
My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
Configuring, detecting and rolling out updates to machines.
smiller replied to Lawrence Garvin [MVP]
18-Nov-09 01:33 PM
Configuring, detecting and rolling out updates to machines. A good
majority of these machines are either left on (meaning they never
restart, log off or shutdown their computers) or they are users with
laptops and bring them home every night. If I use a login script to
delete those registry keys and for a group policy update and run
wuauclt.exe, then it will only occur to computer that are going home
overnight and scan when they log back into the network.

My other admin is questioning why WSUS SuSDB is already 832MB? We have
WSUS into port 8530 as we have another website running on pot 80. My
opinion is that during the initial installation it had synchronized with
Windows Update going back to 2003 for Updates? Is this the logic why
this SUSDB is 832MB? We use SQL Express because we have no licenses for
SQL 2005. When we installed it, we had a previous website already
running on port 80 and it is NOT possible to uninstall it nor uninstall
IIS as it is a very critical application that needs to be running at all
times. This program is by Elsinore Technologies called Issuenet. Could
this be a huge issue that is not detecting and updating computers? We
have not approved any updates YET and we are still trying to figure this
out. That .bat file I wrote seems to work on computers and WSuS checks
them in. i do not have a gupdate /force or wuauclt.exe in this .bat. My
other admin thinks it is not necessary for it to be in there.

This has been a problem for a while now and we need to get this
functional ASAP.


--
smiller
------------------------------------------------------------------------
smiller's Profile: http://forums.techarena.in/members/155728.htm
View this thread: http://forums.techarena.in/server-update-service/1272325.htm

http://forums.techarena.in
Here is one computer that leaves a lot every night and comes back andconnects
smiller replied to smiller
18-Nov-09 06:10 PM
Here is one computer that leaves a lot every night and comes back and
connects back onto the domain. Remember again, I have not approved any
updates yet.


2009-11-18	12:34:49:843	 432	654	Misc	===========  Logging initialized
(build: 7.4.7600.226, tz: -0600)  ===========
2009-11-18	12:34:49:843	 432	654	Misc	  = Process:
\??\C:\WINDOWS\system32\winlogon.exe
2009-11-18	12:34:49:843	 432	654	Misc	  = Module:
C:\WINDOWS\system32\wuaueng.dll
2009-11-18	12:34:49:843	 432	654	Shutdwn	FATAL: WUAutoUpdateAtShutdown
failed, hr=80240FFF
2009-11-18	14:43:19:772	6072	16b0	Misc	===========  Logging initialized
(build: 7.4.7600.226, tz: -0600)  ===========
2009-11-18	14:43:19:772	6072	16b0	Misc	  = Process:
C:\WINDOWS\system32\rundll32.exe
2009-11-18	14:43:19:772	6072	16b0	Misc	  = Module:
C:\WINDOWS\system32\wuapi.dll
2009-11-18	14:43:19:757	6072	16b0	ARP	Connected to update session.
2009-11-18	14:43:19:772	6072	16b0	ARP	User is allowed to install
published content.
2009-11-18	14:43:19:897	1388	14d8	Misc	===========  Logging initialized
(build: 7.4.7600.226, tz: -0600)  ===========
2009-11-18	14:43:19:897	1388	14d8	Misc	  = Process:
C:\WINDOWS\System32\svchost.exe
2009-11-18	14:43:19:897	1388	14d8	Misc	  = Module:
C:\WINDOWS\system32\wuaueng.dll
2009-11-18	14:43:19:897	1388	14d8	Service	*************
2009-11-18	14:43:19:897	1388	14d8	Service	** START **  Service: Service
startup
2009-11-18	14:43:19:897	1388	14d8	Service	*********
2009-11-18	14:43:19:976	1388	14d8	Misc	Registering binary:
C:\WINDOWS\system32\regsvr32.exe  /s "C:\WINDOWS\system32\wups.dll"
2009-11-18	14:43:20:445	1388	14d8	Misc	Registering binary:
C:\WINDOWS\system32\regsvr32.exe  /s "C:\WINDOWS\system32\wups2.dll"
2009-11-18	14:43:20:789	1388	14d8	Agent	  * WU client version
7.4.7600.226
2009-11-18	14:43:20:789	1388	14d8	Agent	  * Base directory:
C:\WINDOWS\SoftwareDistribution
2009-11-18	14:43:20:789	1388	14d8	Agent	  * Access type: No proxy
2009-11-18	14:43:20:789	1388	14d8	Agent	  * Network state: Connected
2009-11-18	14:43:22:400	1388	67c	Agent	***********  Agent: Initializing
Windows Update Agent  ***********
2009-11-18	14:43:22:400	1388	67c	Agent	***********  Agent: Initializing
global settings cache  ***********
2009-11-18	14:43:22:400	1388	67c	Agent	  * WSUS server:
http://Orion:8530
2009-11-18	14:43:22:400	1388	67c	Agent	  * WSUS status server:
http://Orion:8530
2009-11-18	14:43:22:400	1388	67c	Agent	  * Target group: All Computers
2009-11-18	14:43:22:415	1388	67c	Agent	  * Windows Update access
disabled: No
2009-11-18	14:43:22:415	1388	67c	DnldMgr	Download manager restoring 0
downloads
2009-11-18	14:43:22:446	6072	16b0	ARP	Managed service found.
2009-11-18	14:43:24:167	1388	14d8	Report	***********  Report:
Initializing static reporting data  ***********
2009-11-18	14:43:24:167	1388	14d8	Report	  * OS Version =
5.1.2600.3.0.65792
2009-11-18	14:43:24:292	1388	14d8	Report	  * Computer Brand = Dell
Inc.
2009-11-18	14:43:24:292	1388	14d8	Report	  * Computer Model = MP061

2009-11-18	14:43:24:292	1388	14d8	Report	  * Bios Revision = A06
2009-11-18	14:43:24:292	1388	14d8	Report	  * Bios Name = Phoenix ROM
BIOS PLUS Version 1.10 A06
2009-11-18	14:43:24:292	1388	14d8	Report	  * Bios Release Date =
2006-12-18T00:00:00
2009-11-18	14:43:24:292	1388	14d8	Report	  * Locale ID = 1033
2009-11-18	14:44:07:313	1388	14d8	AU	###########  AU: Initializing
Automatic Updates  ###########
2009-11-18	14:44:07:313	1388	14d8	AU	AU setting next detection timeout
to 2009-11-18 20:44:07
2009-11-18	14:44:07:313	1388	14d8	AU	AU setting next sqm report timeout
to 2009-11-18 20:44:07
2009-11-18	14:44:07:328	1388	14d8	AU	  # WSUS server:
http://Orion:8530
2009-11-18	14:44:07:328	1388	14d8	AU	  # Detection frequency: 22
2009-11-18	14:44:07:328	1388	14d8	AU	  # Target group: All Computers
2009-11-18	14:44:07:328	1388	14d8	AU	  # Approval type: Scheduled
(Policy)
2009-11-18	14:44:07:328	1388	14d8	AU	  # Scheduled install day/time:
Every day at 6:00
2009-11-18	14:44:07:328	1388	14d8	AU	  # Auto-install minor updates:
Yes (User preference)
2009-11-18	14:44:07:360	1388	14d8	AU	Setting AU scheduled install time
to 2009-11-19 12:00:00
2009-11-18	14:44:07:360	1388	14d8	AU	Initializing featured updates
2009-11-18	14:44:07:375	1388	14d8	AU	Found 0 cached featured updates
2009-11-18	14:44:07:375	1388	14d8	AU	AU finished delayed
initialization
2009-11-18	14:44:07:375	1388	14d8	AU	#############
2009-11-18	14:44:07:375	1388	14d8	AU	## START ##  AU: Search for
updates
2009-11-18	14:44:07:375	1388	14d8	AU	#########
2009-11-18	14:44:07:375	1388	14d8	AU	<<## SUBMITTED ## AU: Search for
updates [CallId = {4EE29768-8DD2-423C-8045-9B48B22B146B}]
2009-11-18	14:44:07:375	1388	cd4	Agent	*************
2009-11-18	14:44:07:375	1388	cd4	Agent	** START **  Agent: Finding
updates [CallerId = AutomaticUpdates]
2009-11-18	14:44:07:375	1388	cd4	Agent	*********
2009-11-18	14:44:07:375	1388	cd4	Agent	  * Online = No; Ignore download
priority = No
2009-11-18	14:44:07:375	1388	cd4	Agent	  * Criteria = "IsHidden=0 and
IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or
IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and
IsAssigned=1 or IsHidden=0 and IsInstalled=1 and
DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or
IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and
IsAssigned=1 and RebootRequired=1"
2009-11-18	14:44:07:375	1388	cd4	Agent	  * ServiceID =
{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
2009-11-18	14:44:07:375	1388	cd4	Agent	  * Search Scope = {Machine}
2009-11-18	14:44:18:494	1388	cd4	Agent	  * Found 0 updates and 48
categories in search; evaluated appl. rules of 117 out of 941 deployed
entities
2009-11-18	14:44:18:541	1388	cd4	Agent	*********
2009-11-18	14:44:18:541	1388	cd4	Agent	**  END  **  Agent: Finding
updates [CallerId = AutomaticUpdates]
2009-11-18	14:44:18:541	1388	cd4	Agent	*************
2009-11-18	14:44:18:541	1388	178c	AU	>>##  RESUMED  ## AU: Search for
updates [CallId = {4EE29768-8DD2-423C-8045-9B48B22B146B}]
2009-11-18	14:44:18:541	1388	178c	AU	  # 0 updates detected
2009-11-18	14:44:18:541	1388	178c	AU	#########
2009-11-18	14:44:18:541	1388	178c	AU	##  END  ##  AU: Search for
updates [CallId = {4EE29768-8DD2-423C-8045-9B48B22B146B}]
2009-11-18	14:44:18:541	1388	178c	AU	#############
2009-11-18	14:44:18:541	1388	178c	AU	Featured notifications is
disabled.
2009-11-18	14:44:18:541	1388	cd4	Report	REPORT EVENT:
{8C017796-E596-4F40-83BB-7571981FDF14}	2009-11-18
14:44:07:375-0600	1	202	102	{00000000-0000-0000-0000-000000000000}	0	0	AutomaticUpdates	Success	Content
Install	Reboot completed.
2009-11-18	14:44:18:557	1388	178c	AU	Setting AU scheduled install time
to 2009-11-19 12:00:00
2009-11-18	14:44:18:572	1388	14d8	AU	#############
2009-11-18	14:44:18:572	1388	14d8	AU	## START ##  AU: Search for
updates
2009-11-18	14:44:18:572	1388	14d8	AU	#########
2009-11-18	14:44:18:572	1388	14d8	AU	<<## SUBMITTED ## AU: Search for
updates [CallId = {2C71C479-0F9E-4055-A385-930D7BA10307}]
2009-11-18	14:44:18:572	1388	cd4	Agent	*************
2009-11-18	14:44:18:572	1388	cd4	Agent	** START **  Agent: Finding
updates [CallerId = AutomaticUpdates]
2009-11-18	14:44:18:572	1388	cd4	Agent	*********
2009-11-18	14:44:18:572	1388	cd4	Agent	  * Online = Yes; Ignore
download priority = No
2009-11-18	14:44:18:572	1388	cd4	Agent	  * Criteria = "IsHidden=0 and
IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or
IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and
IsAssigned=1 or IsHidden=0 and IsInstalled=1 and
DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or
IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and
IsAssigned=1 and RebootRequired=1"
2009-11-18	14:44:18:572	1388	cd4	Agent	  * ServiceID =
{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
2009-11-18	14:44:18:572	1388	cd4	Agent	  * Search Scope = {Machine}
2009-11-18	14:44:18:901	1388	cd4	Misc	Validating signature for
C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab:
2009-11-18	14:44:18:932	1388	cd4	Misc	 Microsoft signed: Yes
2009-11-18	14:44:18:995	1388	cd4	Misc	Validating signature for
C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wsus3setup.cab:
2009-11-18	14:44:18:995	1388	cd4	Misc	 Microsoft signed: Yes
2009-11-18	14:44:19:010	1388	cd4	Setup	***********  Setup: Checking
whether self-update is required  ***********
2009-11-18	14:44:19:010	1388	cd4	Setup	  * Inf file:
C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wsus3setup.inf
2009-11-18	14:44:19:041	1388	cd4	Setup	Update NOT required for
C:\WINDOWS\system32\cdm.dll: target version = 7.4.7600.226, required
version = 7.4.7600.226
2009-11-18	14:44:19:041	1388	cd4	Setup	Update NOT required for
C:\WINDOWS\system32\wuapi.dll: target version = 7.4.7600.226, required
version = 7.4.7600.226
2009-11-18	14:44:19:057	1388	cd4	Setup	Update NOT required for
C:\WINDOWS\system32\wuapi.dll.mui: target version = 7.4.7600.226,
required version = 7.4.7600.226
2009-11-18	14:44:19:057	1388	cd4	Setup	Update NOT required for
C:\WINDOWS\system32\wuauclt.exe: target version = 7.4.7600.226, required
version = 7.4.7600.226
2009-11-18	14:44:19:057	1388	cd4	Setup	Update NOT required for
C:\WINDOWS\system32\wuaucpl.cpl: target version = 7.4.7600.226, required
version = 7.4.7600.226
2009-11-18	14:44:19:057	1388	cd4	Setup	Update NOT required for
C:\WINDOWS\system32\wuaucpl.cpl.mui: target version = 7.4.7600.226,
required version = 7.4.7600.226
2009-11-18	14:44:19:057	1388	cd4	Setup	Update NOT required for
C:\WINDOWS\system32\wuaueng.dll: target version = 7.4.7600.226, required
version = 7.4.7600.226
[a] The client is properly configured to use the WSUS Server[b] The client is
Lawrence Garvin [MVP] replied to smiller
18-Nov-09 07:12 PM
[a] The client is properly configured to use the WSUS Server


[b] The client is critically MISconfigured to use this target group.
Computers should *NOT* be assigned to the "All Computers" group under any
circumstance.


[c] As a result because there is not actually an "All Computers" group that a
computer can be assigned to (it is a pseudo group populated from computers
that are members of *other* groups -- of which this computer belongs to
*zero* of the other groups, thus is not even populated into what can be
viewed in the console as members of "All Computers".), this computer is not
discovering any approved updates for the "group" it believes it is a member
of.

Note: Even though you may not have approved any updates, there are updates
approved on every WSUS Server. They may, or may not, be needed by any client
systems in your organization.






[d] Finally, you should rethink the use of underscores in your hostnames.
While Microsoft DNS is forgiving about the underscore, the DNS RFCs do not
permit the underscore as a valid character for use in DNS hostnames. The
valid character set includes a-z, 0-9, and the hyphen.

Aside from the target group configuration error, this client is functioning
perfectly, albeit with no updates to detect or install. I am not quite sure
what the point of posting the log segment was.


--
Lawrence Garvin, M.S., MCITP:EA, MCDBA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)

My Blog: http://onsitechsolutions.spaces.live.com
Microsoft WSUS Website: http://www.microsoft.com/wsus
My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
wrote:Conceptually the WSUS database holds the list of updates and for each it
Dave Mills replied to smiller
19-Nov-09 05:07 PM
Conceptually the WSUS database holds the list of updates and for each it has a
flag for its approval. So what would you expect to be the difference in size
between the flag being True or False. In my book it would be the same size
database. Of course WSUS is a little more complicated by "Group approvals" etc.
but I hope you see my point.


We have
--
Dave Mills
There are 10 types of people, those that understand binary and those that do not.
There is a difference.
John replied to Dave Mills
19-Nov-09 05:31 PM
There is a difference. The 0s (False) are fatter and heavier than the 1s
(True) and therefore larger db size. Once they are approved, the 0s become
1s, resulting in a lighter and smaller db size.



Looks like you are the 0 type
Post Question To EggHeadCafe