SCCM 2012: Clients Won't Install / Download Windows Updates.

[Philaroni]

I recently took over a project on deploying / updating software on our network. We have been able to deploy things like Flash, Java, Firefox and so on with out any issues. Recently we started to work on pushing out a large backlog of Windows 7 x64 updates.

I have a test set up that are imaged the same as the computers we wish to update later on. However we have not been able to do so. At times in SCCM it will show the compliance increase but when I go to check the units no updates where installed....

In the ScanAgent.log I get reports saying the sources are not current..

 

In the LocationServices.log I get reports saying Unexpected row count (0) retrieved from AD and Failed to refresh certificate information from AD

 

I have been researching this issue for most of this week, the way our system is set up is we have 1 server as our Active Directory and for our Group Policy. Then a second that is running SCCM and WSUS. I feel like the issue is somehow related to how them and the client computers are communicating with each other.

 

--- What I am currently trying --

 

Trying to update the Configuration Manager Client to be the same version but am getting installation errors. I'm not sure how important it is that SCCM and the clients are on the exact same builds and versions. I only learned of the CU1 and CU2 updates today and applied them.

 

I would appreciate any help or direction on where to focus my efforts. If it was possible I'd rebuild from scratch our WSUS and SCCM so I knew better how it was configured and why though that is out of my power.

 

** Site note: I was told a new router / firewall was installed back in Dec and it was around then when we started having such issues. I have been told several times by those above that its set up correctly and should not be the cause. Again, however I don't and won't get access to even see it so for now I have to rule other issues out.

 

 

 

Thanks for any help in advanced, let me know what log files I can attach that would make the situation more clear. I won't be able to respond / update this till Monday as I won't be in the office again till then.