Main cause of the this problem is generally duplicate SUSClientID on clients having problems, and it is very easy to fix by renewing the value.
You can use a batch file like below to fix it easily. You should turn of echo and remove Pause commands if you will run this with GPO or other deployment tool like SMS/SCCM.
@echo on
Echo 1. Stopping the wuauserv service
net stop wuauserv
Pause
Echo 2. Deleting the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\AccountDomainSid registry key (if it exists)
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v AccountDomainSid /f
Echo 3. Deleting the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\PingID registry key (if it exists)
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v PingID /f
Echo 4. Deleting the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\SusClientId registry key (if it exists)
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v SusClientId /f
Echo 5. Deleting the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\SusClientIDValidation registry key (if it exists)
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v SusClientIDValidation /f
Echo 5. Restarting the wuauserv service
net start wuauserv
Pause
Echo 6. Resetting the Authorization Cookie (Wait 10 minutes for a detection cycle to finish)
wuauclt /resetauthorization /detectnow
Pause
Thanks a lot, you saved me a lot of time ;)
ReplyDelete