Discussion:
MDT - WSUSServer - can it use https?
(too old to reply)
James
2008-12-30 21:43:32 UTC
Permalink
Hello,

I am changing our MDT setup to use an internal WSUS server instead of going
over the internet every time. I am not in control of this WSUS server. I was
told it only accepts HTTPS connections. Upon first try of setting my MDT
WSUSServer property to the server, eg. https://myWSUS.corp.net, it fails
with "Error searching for updates: (-2147012867)" (taken from
ZTIWindowsUpdate log). The log does show what looks like succefull config of
the WUA to use the right server...

I can ping the WSUS server by name and IP from a server being deployed...

I won't be able to get in touch with the admin of this WSUS server until
Monday to coordinate troubleshooting so I wanted to get as much info from
the MDT side of things right away...

1. does ZTIWindowsUpdate support using https?
2. what does "Error searching for updates: (-2147012867)" indicate?
3. suggestions I could try while I don't have access to the WSUS server?

any input would be greatly appreciated. Thanks.
unknown
2009-01-03 15:36:40 UTC
Permalink
Yes, it works... but you need to deploy the certificate before running
the ztiwindowsupdate.wsf script...

Regards

Johan Arwidmark
Microsoft MVP - Setup / Deployment
http://www.deployvista.com
Post by James
Hello,
I am changing our MDT setup to use an internal WSUS server instead of going
over the internet every time. I am not in control of this WSUS server. I was
told it only accepts HTTPS connections. Upon first try of setting my MDT
WSUSServer property to the server, eg. https://myWSUS.corp.net, it fails
with "Error searching for updates: (-2147012867)" (taken from
ZTIWindowsUpdate log). The log does show what looks like succefull config of
the WUA to use the right server...
I can ping the WSUS server by name and IP from a server being deployed...
I won't be able to get in touch with the admin of this WSUS server until
Monday to coordinate troubleshooting so I wanted to get as much info from
the MDT side of things right away...
1. does ZTIWindowsUpdate support using https?
2. what does "Error searching for updates: (-2147012867)" indicate?
3. suggestions I could try while I don't have access to the WSUS server?
any input would be greatly appreciated. Thanks.
James
2009-01-09 20:05:02 UTC
Permalink
Hello Johan,

Just getting back to this post... I assume the certificate could be deployed
in an automated fashion? vbscript/wsh?

thanks for the reply
Post by unknown
Yes, it works... but you need to deploy the certificate before running
the ztiwindowsupdate.wsf script...
Regards
Johan Arwidmark
Microsoft MVP - Setup / Deployment
http://www.deployvista.com
Post by James
Hello,
I am changing our MDT setup to use an internal WSUS server instead of going
over the internet every time. I am not in control of this WSUS server. I was
told it only accepts HTTPS connections. Upon first try of setting my MDT
WSUSServer property to the server, eg. https://myWSUS.corp.net, it fails
with "Error searching for updates: (-2147012867)" (taken from
ZTIWindowsUpdate log). The log does show what looks like succefull config of
the WUA to use the right server...
I can ping the WSUS server by name and IP from a server being deployed...
I won't be able to get in touch with the admin of this WSUS server until
Monday to coordinate troubleshooting so I wanted to get as much info from
the MDT side of things right away...
1. does ZTIWindowsUpdate support using https?
2. what does "Error searching for updates: (-2147012867)" indicate?
3. suggestions I could try while I don't have access to the WSUS server?
any input would be greatly appreciated. Thanks.
unknown
2009-01-10 18:01:47 UTC
Permalink
If its a standard deployment you can just use Group Policy...

If its your reference build (eg. workgroup) you have to a custom
action in the TS that deploys it...

Regards

Johan Arwidmark
Microsoft MVP - Setup / Deployment
http://www.deployvista.com
Post by James
Hello Johan,
Just getting back to this post... I assume the certificate could be deployed
in an automated fashion? vbscript/wsh?
thanks for the reply
Post by unknown
Yes, it works... but you need to deploy the certificate before running
the ztiwindowsupdate.wsf script...
Regards
Johan Arwidmark
Microsoft MVP - Setup / Deployment
http://www.deployvista.com
Post by James
Hello,
I am changing our MDT setup to use an internal WSUS server instead of going
over the internet every time. I am not in control of this WSUS server. I was
told it only accepts HTTPS connections. Upon first try of setting my MDT
WSUSServer property to the server, eg. https://myWSUS.corp.net, it fails
with "Error searching for updates: (-2147012867)" (taken from
ZTIWindowsUpdate log). The log does show what looks like succefull config of
the WUA to use the right server...
I can ping the WSUS server by name and IP from a server being deployed...
I won't be able to get in touch with the admin of this WSUS server until
Monday to coordinate troubleshooting so I wanted to get as much info from
the MDT side of things right away...
1. does ZTIWindowsUpdate support using https?
2. what does "Error searching for updates: (-2147012867)" indicate?
3. suggestions I could try while I don't have access to the WSUS server?
any input would be greatly appreciated. Thanks.
Loading...