When deploying windows updates using SCCM you may get Failed to Add Update Source for WUAgent of type (2) and id... error msg in WUAHandler.log (WUAHandler can be found under C:\Windows\CCM\Logs)
If we check one line above the actual error msg, it will say Group policy settings were overwritten by a higher authority (Domain Controller) to: Server http://servername:port
So basically what is happening is; group policy applying the windows updates WUServer path which will be different than the actual SCCM server path and port.
First confirm the WUServer path under HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\
Then validate the WUServer value with actual SCCM software update point server name and port by going to \Administration\Overview\Site Configuration\Servers and Site System Roles and properties.
Correct the values then run the Machine Policy Retrieval & Evaluation Cycle under control panel. Now the machine should start downloading the updates.
So basically what is happening is; group policy applying the windows updates WUServer path which will be different than the actual SCCM server path and port.
First confirm the WUServer path under HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\
Then validate the WUServer value with actual SCCM software update point server name and port by going to \Administration\Overview\Site Configuration\Servers and Site System Roles and properties.
Correct the values then run the Machine Policy Retrieval & Evaluation Cycle under control panel. Now the machine should start downloading the updates.
I found that my Group Policy setting had a mismatch with SCCM because I did not use the fully qualified domain name in my group policy. Make sure your GPO setting matches what SCCM is expecting for the Updates Server name exactly. The WUAHandler log should show you this in back to back error lines.
ReplyDelete