Software Updates- 2 servers not detecting any updates

Hi,
I have found a couple of servers (w2008) that haven't installed updates for quite a few months.
In the windows update log it says '0 updates detected' when checking from my WSUS/SUM server  and I can't see anything obviously wrong with the client in any of the logs. They run other software distribution tasks fine in their maintenance window and are a member of the collection that receives server software updates.
 
When I change the reg key- useWUServer to 0 (so that it checks Microsoft) and do a windows update it detects several updates. and when i put it back and it checks mine it goes back to not detecting anything.
I have done a repair on the client on both of the servers and it seems the same.
 
Does anyone have some idea as to what i should check for or why this is happening? It just seems to be these two that can't find updates. one thing i did think of was that their was too many updates to run in the maintenace windows, but surely it would actually detect the updates first!
 
Thanks
Jane

Do you use Zanders' Client Center?  What does it say for detected updates on those two (compared against a known working one of the same OS)

thanks. However, the server is in the DMZ so i run it locally but it says access denied at the bottom. do i need to somehow "run as admin" ?
 
Cheers
Jane
 

Yes, when using client center against localhost you usually need to run as admin.  If you are using the click-once version of client center, the .exe will be in a randomly named folder, I think somewhere in C:\Users\<your profile>\AppData\

Thanks Sherry- that worked a  treat.
Anyway- have no idea whats happening- client centre says its missing updates- but not the updates that i've deployed. these are the important updates that i've not deployed (not security and critical).
 
When it does its self scan for updates, it finds no updates. when i manually run a check for updates (from MS), it finds updates (probably the same important ones)
i removed it from the server updates collection, downloaded the policy, added back in, downloaded policy etc and it still doesn't find updates.
 
There are 3 servers like this one- not identical, but very similar and two of them have this issue and have not installed updates this year. The 3rd one has and seems to work fine.
 
I'm at a loss as to why its not finding this years critical and security updates.
i'm thinking of uninstalling the client.....
 
any other ideas would be appreciated.
 
Thanks
Jane

What do the logs say?  Usually for me when a box isn't scanning, it'll say "something" in the wuahandler.log, or the %windir%\windowsupdate.log.  usually (in my case) it's some rogue domain-level GPO smacking down the local policy the CM client tries to set.

Hi,
can't see any rogue GPOs that would affect it.
wuahandler.log- for today:
?Its a WSUS Update Source type ({10122CEA-C8E1-42FB-A727-77E64B6AD6DF}), adding it.    WUAHandler    10/07/2012 12:27:00    236 (0x00EC)
Existing WUA Managed server was already set (http://Supserver.fqdn:80), skipping Group Policy registration.    WUAHandler    10/07/2012 12:27:00    236 (0x00EC)
Added Update Source ({10122CEA-C8E1-42FB-A727-77E64B6AD6DF}) of content type: 2    WUAHandler    10/07/2012 12:27:00    236 (0x00EC)
Async searching of updates using WUAgent started.    WUAHandler    10/07/2012 12:27:00    236 (0x00EC)
Async searching completed.    WUAHandler    10/07/2012 12:27:37    3408 (0x0D50)
Successfully completed scan.    WUAHandler    10/07/2012 12:27:39    2320 (0x0910)
 
and attached is the windowsupdatelog when ccm does its own scan.
(i've not attached the whole log as i accidentally clicked the 'download now' button in windows updates (ms) earlier and it started   downloading these before i cancelled it and i thought it might confuse things!)
silly me- too many things open!
 
Thanks
Jane
 

Attachment(s)

windowsu.txt (178.24 KB) - downloaded 67 times