Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Generic User Avatar

Unable to Install WSUS on Windows Server 2012 R2 via GUI or PS


  • Please log in to reply
15 replies to this topic

#1 jzpmgllc

jzpmgllc

  •  Avatar image
  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:11:59 PM

Posted 14 October 2023 - 09:26 PM

I am attempting to install WSUS on one of my Windows Server 2012 R2 boxes and keep running into the same issue.

 

I've logged onto the server, "Add Roles and Features" and all that, and at the very end it fails because the server requires a restart. Restarted server and re-attempted. Failed again.

 

I've logged onto the server and ran the cmdlet "Install-WindowsFeature Update Services" from PowerShell as an Admin. Same error message produced.



BC AdBot (Login to Remove)

 


#2 cryptodan

cryptodan

    Bleepin Madman


  •  Avatar image
  • Members
  • 33,826 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:04:59 AM

Posted 14 October 2023 - 10:17 PM

https://learn.microsoft.com/en-us/windows-server/get-started/extended-security-updates-overview

US Navy Veteran from 2002 to 2006

Masters in Computer and Digital Forensics Expert - Stevenson University Alumni 2015

Arch Desktop - https://termbin.com/epij

Arch Laptop - https://www.termbin.com/dnwk

Ubuntu Server - https://termbin.com/zvra


#3 jzpmgllc

jzpmgllc
  • Topic Starter

  •  Avatar image
  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:11:59 PM

Posted 14 October 2023 - 10:55 PM

Thank you for responding. Unfortunately, I'm stuck dealing with Windows Server 2012 R2 for at least a few more months until the Board Members approve something, whether it be a new box or ESU through Azure.

 

In the meantime, my primary goal is to push Windows Updates to the host PCs on my network. The last Administrator relied on sneaker net whereas I want to avoid that route as much as possible. Since WSUS doesn't seem to be cooperating --- not surprised --- do you have any suggestions or recommendations?

 

Is it possible to create a task scheduled in a GPO to have an OU of devices seek, download and install Windows Updates on a regular basis?

 

Thanks in advance.



#4 SleepyDude

SleepyDude

  •  Avatar image
  • Malware Response Team
  • 4,146 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Portugal
  • Local time:04:59 AM

Posted 15 October 2023 - 06:44 AM

Hi,

 

Make sure that SFC /scannow and dism /online /cleanup-image /restorehealth both return no problems or that found problems and fixed them, also check for any Windows Updates not installed.


• Please do not PM me asking for support. Post on the forums instead it will increases the chances of getting help for your problem by one of us.
• Posts in the Malware section that are not replied to within 4 days will be closed. PM me or a moderator to reactivate.
• Please post your final results, good or bad. We like to know! Thank you!

 
Proud graduate of GeekU and member of UNITE
___
Rui

 
 


#5 jzpmgllc

jzpmgllc
  • Topic Starter

  •  Avatar image
  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:11:59 PM

Posted 16 October 2023 - 08:55 AM

Two Updates for Windows Server 2012 R2 have failed repeatedly. After researching their KB numbers, I don't believe they are required.

 

Here are their numbers/information:

KB2955164 - update for Windows 8.1 systems (27 KB) - failed. Error Code: 80070BCP - Windows Update ran into a problem.

KB3068708 - update for Windows 7 x64-based systems (525 KB) - failed. Error Code: 80070BCP - Windows Update ran into a problem.

 

I've run SFC /scannow (no errors were found). Is there anything else I should do prior to running dism /online /cleanup-image /restorehealth?

 

I'm also assuming that both of these commands should be run outside of business hours, correct?

----

Perhaps at this point in time, I should create a batch file and Link the GPO to a small OU to test the Check for Windows Updates / Install / Restart command of wuauclt.exe /updatenow?



#6 SleepyDude

SleepyDude

  •  Avatar image
  • Malware Response Team
  • 4,146 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Portugal
  • Local time:04:59 AM

Posted 16 October 2023 - 10:42 AM

I'm also assuming that both of these commands should be run outside of business hours, correct?
 
It's recommended also because if the tools do some repairs a reboot must be done.
 
Because SFC didn't report problems and repairs you can run dism after without rebooting first.

• Please do not PM me asking for support. Post on the forums instead it will increases the chances of getting help for your problem by one of us.
• Posts in the Malware section that are not replied to within 4 days will be closed. PM me or a moderator to reactivate.
• Please post your final results, good or bad. We like to know! Thank you!

 
Proud graduate of GeekU and member of UNITE
___
Rui

 
 


#7 jzpmgllc

jzpmgllc
  • Topic Starter

  •  Avatar image
  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:11:59 PM

Posted 16 October 2023 - 11:02 AM

Ok, so DISM is ok to run during business hours with users logged in? SFC reported no issues and the server has been rebooted after SFC - I just wanted to make sure that nothing had to be backed up prior to DISM or if it was ok to run during business hours.



#8 SleepyDude

SleepyDude

  •  Avatar image
  • Malware Response Team
  • 4,146 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Portugal
  • Local time:04:59 AM

Posted 16 October 2023 - 02:55 PM

Ok, so DISM is ok to run during business hours with users logged in?

Dims is safe, with logged in users it will take longer to do the work and any locked files that need to be replaced will only be done during the next reboot.


• Please do not PM me asking for support. Post on the forums instead it will increases the chances of getting help for your problem by one of us.
• Posts in the Malware section that are not replied to within 4 days will be closed. PM me or a moderator to reactivate.
• Please post your final results, good or bad. We like to know! Thank you!

 
Proud graduate of GeekU and member of UNITE
___
Rui

 
 


#9 jzpmgllc

jzpmgllc
  • Topic Starter

  •  Avatar image
  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:11:59 PM

Posted 18 October 2023 - 08:27 AM

I'm working from a Windows Server 2012 R2 box that I cannot get WSUS installed on. Most of my host devices are running on Windows 11 and a handful are still on Windows 10.
 
I'm going to have to create a .bat file and Link it to the appropriate OUs.
Are these the best commands to use to update my devices via scheduled .bat enforced by a GPO?:
 
Check for Windows Updates:
UsoClient /StartScan
 
Download Windows Updates:
UsoClient /StartDownload
 
Start Installing Windows Updates:
UsoClient /StartInstall


#10 SleepyDude

SleepyDude

  •  Avatar image
  • Malware Response Team
  • 4,146 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Portugal
  • Local time:04:59 AM

Posted 18 October 2023 - 11:16 AM

Hi,

 

Not sure if those commands work! Microsoft made so many changes to Windows Update on Windows 10 and above that crippled the user control...

 

Using WSUS you get more control, can choose the updates deployed to the clients, have groups to test updates before mass deploy, etc.


• Please do not PM me asking for support. Post on the forums instead it will increases the chances of getting help for your problem by one of us.
• Posts in the Malware section that are not replied to within 4 days will be closed. PM me or a moderator to reactivate.
• Please post your final results, good or bad. We like to know! Thank you!

 
Proud graduate of GeekU and member of UNITE
___
Rui

 
 


#11 jzpmgllc

jzpmgllc
  • Topic Starter

  •  Avatar image
  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:11:59 PM

Posted 18 October 2023 - 02:26 PM

I'm going to re-attempt downloading and installing WSUS this evening. Wish me luck...



#12 jzpmgllc

jzpmgllc
  • Topic Starter

  •  Avatar image
  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:11:59 PM

Posted 18 October 2023 - 07:48 PM

Another swing and a miss.

 

Looks like I'll have to create a .bat file for host PCs to seek out, download and install Windows Updates after they're tested on a small OU.

 

Would anyone be able to direct me towards a knowledge base for Server 2012 R2 scripts that I can run as a .bat via command prompt or PowerShell?



#13 SleepyDude

SleepyDude

  •  Avatar image
  • Malware Response Team
  • 4,146 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Portugal
  • Local time:04:59 AM

Posted 19 October 2023 - 03:38 AM

Hi,

 

What was the result of DISM?


• Please do not PM me asking for support. Post on the forums instead it will increases the chances of getting help for your problem by one of us.
• Posts in the Malware section that are not replied to within 4 days will be closed. PM me or a moderator to reactivate.
• Please post your final results, good or bad. We like to know! Thank you!

 
Proud graduate of GeekU and member of UNITE
___
Rui

 
 


#14 jzpmgllc

jzpmgllc
  • Topic Starter

  •  Avatar image
  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:11:59 PM

Posted 19 October 2023 - 05:41 PM

DISM was successful.

 

The restore operation completed successfully. The component store corruption was repaired. The operation completed successfully.



#15 SleepyDude

SleepyDude

  •  Avatar image
  • Malware Response Team
  • 4,146 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Portugal
  • Local time:04:59 AM

Posted 20 October 2023 - 07:22 AM

After running DISM make sure the server is rebooted then try to install the pending updates.


• Please do not PM me asking for support. Post on the forums instead it will increases the chances of getting help for your problem by one of us.
• Posts in the Malware section that are not replied to within 4 days will be closed. PM me or a moderator to reactivate.
• Please post your final results, good or bad. We like to know! Thank you!

 
Proud graduate of GeekU and member of UNITE
___
Rui

 
 





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users