Installing Windows Server Update Services 3.0 on Windows Small Business Server 2003

Updated: August 20, 2009

Applies To: Windows SBS 2003, Windows Server Update Services

Windows Server® Update Services (WSUS) 3.0 provides a comprehensive solution for managing updates within your network that is running the Windows® Small Business Server (Windows SBS) server software. WSUS 3.0 is supported on Windows SBS 2003 with Server Pack 1 (SP1) and Windows SBS 2003 R2.

If you would like to take advantage of the improved features offered by WSUS 3.0, then you can do so by installing WSUS 3.0 on you server that is running Windows SBS 2003.

Use this article to perform any of the following:

• Install WSUS 3.0 on a server that is running either Windows SBS 2003 with SP1 or Windows SBS 2003 R2.

• Upgrade a server that is running WSUS 3.0 from Windows SBS 2003 with SP1 to Windows SBS 2003 R2.

• Uninstall and reinstall Windows SBS 2003 R2 components on a server that is running WSUS 3.0.

• Troubleshoot WSUS 3.0.

For an overview of WSUS 3.0, see "Microsoft Windows Server Update Services 3.0 Overview" at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=89205).

Minimum Hardware Requirements

The following table lists the minimum hardware requirements necessary to run WSUS 3.0 on Windows SBS.

Before You Begin

This article applies only to Windows SBS 2003 with SP1 and to Windows SBS 2003 R2. Before you begin using this article, complete the following:

• Set Up Windows Small Business Server 2003, including the Connect to the Internet task on the To Do List. The To Do List appears at the end of Setup so you can finish configuring Windows SBS 2003.

• Configure the proxy server. If your network uses a proxy server to communicate with the Internet, you need to verify the protocols that the proxy server supports. WSUS 3.0 communicates with Microsoft Update via HTTP and SSL, so the proxy server must support both of these protocols. In addition, the proxy server should support either a basic authentication or Windows authentication method.

  For more information about configuring the proxy server on your network so it works with WSUS 3.0, see the "Configure Your Network" section in "Deploying Microsoft Windows Server Update Services 3.0" at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=89206).

• Configure the firewall. If you have a firewall between WSUS 3.0 and the Internet, then you need to configure the firewall to ensure that WSUS can obtain updates.

  For more information about configuring the firewall on your network so it works with WSUS 3.0, see the "Configure Your Network" section in "Deploying Microsoft Windows Server Update Services 3.0" at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=89206).

• Install required software. For a list of software that WSUS 3.0 requires, see the "Installation of Required Software" section in "Deploying Microsoft Windows Server Update Services 3.0" at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=89206).

• Do not install WSUS 3.0 if the update service displays a blue shield. If you are installing WSUS 3.0 on Windows SBS R2, ensure that the update service does not display a blue shield. For more information, see Knowledge Base article 921910 at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=95156).

• Disconnect external storage devices. To avoid problems during Setup, disconnect all external storage devices before installing WSUS 3.0. This includes portable USB devices and external backup drives.

Install Windows Server Update Services 3.0

You can download WSUS 3.0 from the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=89204). (To install WSUS 3.0 on a server that is running either Windows SBS 2003 with SP1 or Windows SBS 2003 R2, see "Deploying Microsoft Windows Server Update Services 3.0" (up to "Install the WSUS 3.0 Server") at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=89206).

After you install WSUS 3.0, the Windows Server Update Services Configuration Wizard launches automatically. At this point, stop following the instructions in "Deploying Microsoft Windows Server Update Services 3.0." Instead, click Cancel to close the Windows Server Update Services Configuration Wizard.

Upgrading Windows Small Business Server 2003 with Service Pack 1 to Windows Small Business Server 2003 R2 while running Windows Server Update Services 3.0

If you want to upgrade Windows SBS 2003 with SP1 to Windows SBS 2003 R2, and your server uses WSUS 3.0 to manage updates, you need to first uninstall WSUS 3.0. Use the following procedure.

To upgrade Windows Small Business Server 2003 with Service Pack  1 to Windows Small Business Server  2003 R2 while running Windows Server Update Services 3.0

1. Back up the WSUS 3.0 databases, updates, and log files.

   Use ntbackup.exe to create a backup of WSUS 3.0 databases, updates, and log files that are located in the %windir%\system32 folder. For instructions about how to back up WSUS 3.0 databases, see the "Backing Up Windows Server Update Services 3.0" section in the "Microsoft Windows Server Update Services Operations Guide" at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=89371).

2. Uninstall WSUS 3.0.

   Use Add or Remove Programs in Control Panel to remove the WSUS databases, downloaded updates, and log files. In the Microsoft Windows Server Update Services Setup Wizard, choose to remove the databases, downloaded updates, and log files. If your server is also running the Microsoft SQL Server™ database software, see the "Uninstalling WSUS from SQL" section in the "Microsoft Windows Server Update Services Operations Guide" at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=89371).

3. Upgrade Windows SBS 2003 with SP1 to Windows SBS 2003 R2.

   For instructions about how to upgrade Windows SBS 2003 with SP1 to Windows SBS 2003 R2, see "How to Install the Windows Small Business Server 2003 R2 Technologies" at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=89370).

4. Upgrade WSUS 2.0 to WSUS 3.0.

   For information about upgrading WSUS 2.0 to WSUS 3.0, see "Deploying Microsoft Windows Server Update Services 3.0" (up to "Install the WSUS 3.0 Server") at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=89206). After you upgrade WSUS 2.0 to WSUS 3.0, the Windows Server Update Services Configuration Wizard launches automatically. Close the wizard, and then go to the next step of this procedure.

5. Restore the WSUS 3.0 databases, updates, and log files.

   For instructions about how to restore the WSUS 3.0 databases, updates, and log files, see the "Backing Up Windows Server Update Services 3.0" section in the "Microsoft Windows Server Update Services Operations Guide" at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=89371).

Uninstalling and reinstalling Windows Small Business Server 2003 R2 components on a server that is running WSUS 3.0

You cannot reinstall Windows SBS 2003 R2 components if Setup detects WSUS 3.0 on the server. To reinstall Windows SBS 2003 R2 components on your server, do the following:

1. Back up the WSUS 3.0 databases, updates, and log files.

2. Uninstall WSUS 3.0.

3. Uninstall Windows SBS 2003 R2 components.

4. Reinstall Windows SBS 2003 R2 components in Maintenance Mode.

5. Upgrade WSUS 2.0 to WSUS 3.0.

6. Restore the WSUS 3.0 databases, updates, and log files.

Use the following procedure to reinstall the Windows SBS 2003 R2 components.

To uninstall and reinstall Windows SBS 2003 R2 components on a server that is running WSUS 3.0

1. Back up the WSUS 3.0 databases, updates, and log files.

   Use ntbackup.exe to back up WSUS 3.0 databases, updates, and log files, which are located in the %windir%\system32 folder. For instructions about how to back up WSUS 3.0 databases, see the "Backing Up Windows Server Update Services 3.0" section in the "Microsoft Windows Server Update Services Operations Guide" at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=89371).

2. Uninstall WSUS 3.0.

   Use Add or Remove Programs in Control Panel to remove the WSUS databases, downloaded updates, and log files. In the Microsoft Windows Server Update Services Setup Wizard, choose to remove the databases, downloaded updates, and log files. If your server is also running SQL Server, see the "Uninstalling WSUS from SQL" section in the "Microsoft Windows Server Update Services Operations Guide" at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=89371).

3. Uninstall the Windows SBS 2003 R2 components.

   Uninstall the Windows SBS 2003 R2 components by using Add or Remove Programs in Control Panel.

4. Reinstall the Windows SBS 2003 R2 components.

   You must be in Maintenance Mode to reinstall the Windows SBS 2003 R2 components. For instructions about how to install the Windows SBS 2003 R2 components, see the "Installing the Windows Small Business Server 2003 R2 Technologies" section in "How to Install the Windows Small Business Server 2003 R2 Technologies" at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=89370). On the Windows SBS Update Services page, choose to install Windows SBS Update Services. Proceed to the next step of this procedure after you complete the Setup Wizard.

5. Upgrade WSUS 2.0 to WSUS 3.0.

   For information about upgrading WSUS 2.0 to WSUS 3.0, see "Deploying Microsoft Windows Server Update Services 3.0" (up to "Install the WSUS 3.0 Server") at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=89206).

6. After you upgrade WSUS 2.0 to WSUS 3.0, the Windows Server Update Services Configuration Wizard launches automatically. Close the wizard, and then go to the next step of this procedure.

7. Restore the WSUS 3.0 databases, updates, and log files.

   For instructions about how to restore the WSUS 3.0 databases, updates, and log files, see the "Backing Up Windows Server Update Services 3.0" section in the "Microsoft Windows Server Update Services Operations Guide" at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=89371).

Troubleshoot Windows Server Update Services 3.0

For more information about troubleshooting WSUS 3.0, see the "WSUS Server Administration Issues" section in the "Microsoft Windows Server Update Services Operations Guide" at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=89371).

The upgrade to Windows Server Update Services 3.0 does not complete successfully.

When you upgrade to WSUS 3.0 on a server running Windows SBS 2003 R2, Setup automatically uninstalls WSUS 2.0. If the upgrade does not complete successfully, you must take steps to recover the server to the state that it was in before the upgrade. After you recover the server, you can try again to upgrade to WSUS 3.0.

To recover your server to the state it was in before upgrading to WSUS 3.0

1. Open Windows Explorer to the hard disk volume that contains the most free space, and then locate the file Drive:\WSUS\susdb.bak.

   This is the database backup file that was created while installing WSUS 3.0. Remember the location. You will use it later in this procedure.

2. Uninstall the Windows SBS 2003 R2 components. Refer to the instructions earlier in this article.

3. Reinstall the Windows SBS 2003 R2 components. Refer to the instructions earlier in this article.

4. Open a command window. To do this, click Start, click Run, type cmd, and then click OK.

5. At the command prompt, type net stop "update services" and then press ENTER.

6. At the command prompt, type osql -E -S (local)\WSUS and then press ENTER. An osql command prompt appears.

7. Open a second command window as described in step 4.

8. In the second command window, type net pause mssql$wsus and then press ENTER. This command pauses the WSUS MSDE database.

9. Close the second command window.

10. In the first command window, type restore database susdb from disk = 'drive:\wsus\susdb.bak', where drive is the letter of the partition that contains the database file that you located earlier, and then press ENTER.

11. Type go, and then press ENTER.

    The message "RESTORE DATABASE successfully processed ..." appears.

12. Type exit to exit the osql command prompt.

13. At the command prompt, type net continue mssql$wsus. This command resumes the WSUS MSDE database.

14. At the command prompt, type net start "update services". After completing this step, your Windows SBS 2003 R2 database is recovered.

15. Investigate and resolve the issue that caused your upgrade to WSUS 3.0 to fail, and then perform the upgrade again.

I get a "Server Error in '/UpdateServices' Application" error.

Cause: This occurs if you delete the Default Auto Approval Rule by using the WSUS 3.0 Administration Console. The Windows SBS 2003 R2 Update Services node in the Server Management console does not load if you delete this rule.

Solution: Recreate the Default Auto Approval Rule by using the following procedure.

To recreate Default Auto Approval Rule

1. From the server, copy the following script on a notepad and save the file as C:\FixR2.SQL.

   USE SUSDB;
   PRINT 'Using SUSDB';
   GO
   IF NOT EXISTS (SELECT * FROM dbo.tbAutoDeploymentRule WHERE ID = 2)
   BEGIN
       PRINT 'Setting IDENTITY_INSERT to On';
       SET IDENTITY_INSERT tbAutoDeploymentRule ON;
       PRINT 'Inserting auto deployment rule';
       INSERT INTO dbo.tbAutoDeploymentRule(ID, Enabled, ActionID, Name) VALUES (2, 0, 0, 'Default Auto Approval Rule');
       IF @@ROWCOUNT = 0
           PRINT 'Warning: No rows were affected.';
       ELSE
           PRINT 'Rows were updated.';
       PRINT 'Setting IDENTITY_INSERT to Off';
       SET IDENTITY_INSERT tbAutoDeploymentRule OFF;
   END
   ELSE
       PRINT 'No work to do.  Record already exists.';
   GO
   

2. Depending upon which version of WSUS 3.0 you are using, do one of the following:

   • If you are using WSUS 3.0 with Service Pack 1, click Start, click Command Prompt, and then type %Programfiles%\Common files\update services\setup\executesql.exe -S MICROSOFT##SSEE -i C:\fixR2.SQL -l C:\output.log.

   • If you are using WSUS 3.0 with Service Pack 2, click Start, click Command Prompt, and then type %Programfiles%\update services\setup\executesql.exe -S MICROSOFT##SSEE -i C:\fixR2.SQL -l C:\output.log.

3. Review the information in the C:\output.log file to ensure that it contains the following:

   Changed database context to 'SUSDB'.

   Using SUSDB

   Setting IDENTITY_INSERT to On

   Inserting auto deployment rule

   Rows were updated.

   Setting IDENTITY_INSERT to Off

   If the file contains these items, the script successfully recreated the Default Auto Approval Rule.

I get an error that says “Windows SBS Update Services is not running…," and I see a blue shield instead of a green check in Update Services.

Cause: This occurs if you have modified any of the default settings for Windows SBS R2 Update Services or for WSUS 3.0.

Solution: For information about how to resolve this issue, see the Knowledge Base article at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=106211).

I cannot install Windows Small Business Server 2003 R2 components when I upgrade from Windows Small Business Server 2003 with Service Pack 1.

Cause: This can occur if WSUS 3.0 is detected on the server that you are trying to upgrade from Windows SBS 2003 with SP1 to Windows SBS 2003 R2.

Solution: Use the procedure in "Upgrading Windows Small Business Server 2003 with Service Pack 1 to Windows Small Business Server 2003 R2 while running Windows Server Update Services 3.0," earlier in this article to upgrade a server that is running WSUS 3.0 from Windows SBS 2003 with SP1 to Windows SBS 2003 R2.

I cannot set up Windows Small Business Server 2003 R2 components when I try to reinstall them on Windows SBS 2003.

Cause: This can occur if WSUS 3.0 is detected on the server where you are trying to reinstall the Windows SBS 2003 R2 components.

Solution: Use the procedure in "Uninstalling and reinstalling Windows Small Business Server 2003 R2 components on a server that is running WSUS 3.0," earlier in this article to uninstall and reinstall Windows SBS 2003 R2 components on a server that is running WSUS 3.0.