Mikey C

actually, while i am here - Will machines get policies if their time is inaccurate but date correct? Is being out by x number of hours OK, and if so, what does x equal? AD/GP is 4 hours by default isnt it? Or is it 1? Thank you

Cheers Niall, it is working fine now, strange. Thanks for responding. FYI It was this one: Step 1. Download the following script WinPE_timesync.zip 1.49KB 185 downloads

Hi Niall There is a 404 on that script download, can you check it please?

So basically WSUS and SCCM are not talking to each other, i would definitely do the same as posted above, carrying out each of the following steps carefully accurately (attention to detail again!!!) ) 1. Uninstall the SUP role. Wait until you are certain this has completed, or check the log to make sure. 2. Reboot SCCM server. 3. Uninstall WSUS, verify this has completed successfully, even log should help. 4. Reboot WSUS server. 5. Install WSUS. 6. Install first update. 7 Reboot 8. Install second update depending on OS i think.... 9 Reboot 11 DO NOT GO INTO WSUS CONSOLE AT ALL EVER! 12 Add SUP role to SCCM 13 Wait until that completes, check the SCCM server logs to confirm 14 Configure/confirm SCCM SUP settings are as required (i would recommend only ticking a couple of products for testing 14 Trigger a WSUS sync from the SCCM console. 15 Check the status of SCCM logs. Post back to let us know how you got on.

Mikey, not Mickey Attention to detail!!!.....

It says quite clearly in the above log file REFER TO THE WCM.LOG FOR CONFIGURATION ERROR DETAILS. Have you done that? Have you attached the WCM.log to the forum?........

Post the script on here

I agree, your client does not seem to be pointing to a WSUS server. It is checking MS for updates via internet. What is in the above registry key?

I do not understand what your requirements are, you say you are trying to name PCs based on site, therefore automate the PC naming, but you continue to say you want the script to prompt for a computer name...

from wsyncmgr: Failed to sync update 91efe48b-7f85-4a74-9f33-26952da55c80. Error: The Microsoft Software License Terms have not been completely downloaded and cannot be accepted. Source: Microsoft.UpdateServices.Internal.BaseApi.LicenseAgreement.GetById SMS_WSUS_SYNC_MANAGER 05/06/2014 11:57:43 3148 (0x0C4C) Failed to sync update 20c93660-7d50-4ffb-a621-688ccc973abf. Error: The Microsoft Software License Terms have not been completely downloaded and cannot be accepted. Source: Microsoft.UpdateServices.Internal.BaseApi.LicenseAgreement.GetById SMS_WSUS_SYNC_MANAGER 05/06/2014 11:57:45 3148 (0x0C4C) Identify what these updates are: 91efe48b-7f85-4a74-9f33-26952da55c80 and 20c93660-7d50-4ffb-a621-688ccc973abf I have seen this issue "The Microsoft Software License Terms have not been completely downloaded and cannot be accepted" before, but i cannot remember what the solution was. You could try removing these two updates from the package, as a workaround

Have you searched all local disks of your sccm box for the PatchDownloader.log? Do you have wsus and sccm on the same box?

The process I follow which works pretty well is: Add Vanilla WIM. Offline service updates into the WIM (either using SCCM console or using dism) Use that WIM in a build and capture TS which has update steps which installs all non Windows updates and any recent updates (as well as installing all c++/.NET pre-reqs etc. Then use that captured WIM in the deployment TS which has no update step, making it much faster. The Deployment TS writes the build version to the OS description and that version no. is updated when the B&C is updated. This would eliminate any mismatch between the updates your machines have, so you are maintaining a baseline per build, indicated by the version number. This also makes supporting issues with your desktops that may be update related more straight forward as you can compare builds. Hope this helps!

InstallTargetUpdates failed, error 80040708 It seemed it isn't seeing the updates. Make sure you have advertised updates to the collection. Also, deploying the updates to the unknown computers is an option. There are definitely some updates installing to the machine the logs have been taken from.....So perhaps not the updates you want are deployed to the collection the device is a member of?

When you have a large number of updates deployed to a device, each one has a policy, and each policies is deleted from the device as part of the above process. It will take a long time, but this is normal and required.

So you are saying that you want to automate the process of naming a PC to reflect "our sites"? Good, this is a much better idea than relying on technicians to not get a typo. Human beings make mistakes, they cannot be relied upon. You could set task sequence variables based on the information that is unique to each site. For example a subnet is detected when a device is image on site. Then you vbs can use that information to generate and populate the OSDComputerName - Is this the kind of thing you are trying to achieve?