DetailPage-MSS-KB

Microsoft small business knowledge base

Article ID: 2720211 - Last Review: October 10, 2012 - Revision: 9.0

On This Page

Summary

Microsoft has released an update for Windows Server Update Services (WSUS) 3.0 Service Pack 2 (SP2). This article includes information about the contents of the update and how to obtain the update.

Notes
  • After you install this update, Windows Update Agent (WUA) will be upgraded automatically.
  • WSUS must be in a known, good working state for this update to work. WSUS must be able to synchronize from Microsoft Update, and clients must be able to communicate with the WSUS server. For more information about how to perform basic health checks on a WSUS server, go to the following TechNet websites:
    Reindex the WSUS Database (http://technet.microsoft.com/en-us/library/dd939795(v=ws.10))
    Use the Server Cleanup Wizard (http://technet.microsoft.com/en-us/library/dd939856(v=ws.10))

Issues that are fixed in this update


The following Microsoft Knowledge Base articles describe the issues that are included in this update:
  • 2530678  (http://support.microsoft.com/kb/2530678/ ) System Center Update Publisher does not publish customized updates to a computer if WSUS 3.0 SP2 and the .NET Framework 4.0 are installed
  • 2530709  (http://support.microsoft.com/kb/2530709/ ) "Metadata only" updates cannot be expired or revised in WSUS 3.0 SP2
This update strengthens the WSUS communication channels. This includes trusting only files that are issued by the Microsoft Update certification authority.

Known issues

  • If you use the Local Publishing feature from a remote WSUS console, when your WSUS Server is updated with this update, the remote WSUS consoles must also be updated to make sure the API versions match.
  • Consider the following scenario:
    • You connect to Windows Update through a network proxy that uses HTTPS or SSL content inspection.
    • An intermediate server is in between the SSL traffic of the client and Windows Update.
    In this scenario, you have to create exception rules in your HTTPS inspection server so that the Windows Update traffic is tunneled without inspection. For more information about how to create HTTPS inspection exceptions for Microsoft Forefront Threat Management Gateway (TMG), go to the following Microsoft website:
    Excluding sources and destinations from HTTPS inspection (http://technet.microsoft.com/en-us/library/dd441085.aspx)
    For a list of URLs and domains to exclude, click the following article number to view the article in the Microsoft Knowledge Base:
    885819  (http://support.microsoft.com/kb/885819/ ) You experience problems when you access the Windows Update Version 6 website through a server that is running ISA Server
  • If you install the executable file (.exe) manually, you will have to restart the computer to apply the update.
  • Remote Microsoft SQL Server administrators must download and install the update by using an account that has SQL Server Administrator permissions. Remote SQL Server installation will always require manual installation.
  • To apply this update, you must be running Windows Internal Database or SQL Server.
  • The IIS and WSUS services must be stopped to prevent the database from being accessed while the Network Load Balancing (NLB) clusters are upgraded. For more information about how to upgrade NLB, see the "To upgrade NLB on all computers" section.
  • After you apply this update, WSUS Health Monitoring Services may stop reporting the health of services correctly. This issue may occur if you use SSL.

    Note You can safely ignore this issue.

To upgrade NLB on all computers

  1. Shut down the NLB service on each node in the NLB cluster. To do this, at a command prompt, type the following command, and then press Enter:
    nlb.exe suspend
  2. Shut down IIS and the WSUS service. To do this, at a command prompt, type the following commands, and press Enter after each command:
    • iisreset/stop
    • net stop wsusservice
  3. Make sure that no other services can access the database during the upgrade window. To do this, at a command prompt, type nlb.exe disable together with the appropriate additional parameters for the port or application:
    disable {vip[{:Port | :all}] | all[{:Port | :all}]} {Cluster[:{Host]| all {local | global}}}


    Note In this step and in the following steps, press Enter every time that you type a command at a command prompt.
  4. Back up your database. For more information about how to back up a SQL Server database, go to the following Microsoft website:
    How to: Back Up a Database (SQL Server Management Studio) (http://msdn.microsoft.com/en-us/library/ms187510(v=sql.105).aspx)
  5. Upgrade each front-end computer individually. To do this, follow these steps:
    1. Set up WSUS. To do this, at a command prompt, type one of the following commands, as applicable to your system:
      • WSUS-KB2720211-x64.exe /q C:\MySetup.log
      • WSUS-KB2720211-x86.exe /q C:\MySetup.log

      The update will install immediately, without any prompts.
    2. Review the setup log to verify the upgrade was successful. To do this, at a command prompt, type C:\MySetup.log.
    3. Make sure that IIS and the WSUS service are stopped. To do this, at a command prompt, type the following commands:
      • iisreset/stop
      • net stop wsusservice
    4. Continue to the next computer.
  6. After all nodes are upgraded, start IIS and the WSUS service. To do this, at a command prompt, type iisreset, and then type net start wsusservice on each node in the NLB cluster.
  7. Start the NLB service on each node in the NLB cluster. To do this, at a command prompt, type nlb.exe resume.
  8. At a command prompt, type nlb.exe enable for all the ports or applications that you disabled in step 3.

    Note You must restart the computer after you apply this update.

Update information

The following files are available for download from the Microsoft Download Center:


Update for Windows Server Update Services 3.0 SP2 (KB2720211)

Collapse this imageExpand this image
Download
Download the package now. (http://www.microsoft.com/downloads/details.aspx?FamilyId=c3c8f171-33d6-4bbf-b8ff-0bac7259c9bc)

Update for Windows Server Update Services 3.0 SP2 for x64-based Systems (KB2720211)

Collapse this imageExpand this image
Download
Download the package now. (http://www.microsoft.com/downloads/details.aspx?FamilyId=2ba0b137-d85b-4734-9a95-11a04004a355)

Release Date: June 8, 2011

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591  (http://support.microsoft.com/kb/119591/ ) How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Prerequisites

You must have Windows Server Update Services 3.0 SP2 installed to apply this update.

For more information about Service Pack 2 for Windows Server Update Services 3.0, click the following article number to view the article in the Microsoft Knowledge Base:
972455  (http://support.microsoft.com/kb/972455/ ) Description of Windows Server Update Services 3.0 Service Pack 2

Restart information

You must restart the computer after you apply this update.

Replacement information

This update does not replace a previously released update.
File information

Hash values

Collapse this tableExpand this table
File NameSizeSHA1 SHA2
WSUS-KB2720211-x64.exe296106802EB6D00F051CE98CBAACA4FF75E120229DCC49AA8855CABD259FA4F3AD6815E1CDE75536038B8E46280865E79D1934932A4B4CB2
WSUS-KB2720211-x86.exe29535928A894CE3E0A17D44E61B4813D27DBB13B4F9D49CF81685C13E3E3F7753B1F8979E0DC8B6FDAF3FDB5FA7496AB417627CCCA71B43D

References

For more information about Windows Server Update Services, go to the following Microsoft TechNet website:
General information about Windows Server Update Services (http://technet.microsoft.com/en-us/windowsserver/bb332157.aspx)
For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684  (http://support.microsoft.com/kb/824684/ ) Description of the standard terminology that is used to describe Microsoft software updates

Applies to
  • Windows Server Update Services 3.0 Service Pack 2
Keywords: 
kbupdate kbbug kbfix kbwindowsupdate kbqfe KB2720211
Share
Additional support options
Ask The Microsoft Small Business Support Community
Contact Microsoft Small Business Support
Find Microsoft Small Business Support Certified Partner
Find a Microsoft Store For In-Person Small Business Support