My advice is not to install WSUS on any DC.
There is a Technet article which says that it is not recommended to install WSUS on a DC as the access permissions for the Windows Internal Database get changed and WSUS will not work.
I'm studying for an exam, so I installed WSUS on a standalone server which worked fine.
When I promoted it to be the first DC, new domain, new forest, then I could no longer connect to the WSUS server on the WSUS Admin Console.
As I use the Hyper V role with virtual servers, I am planning to setup a new Domain, new Forest and have it working then try to install WSUS to see what happens.
If I have time, prior to installing WSUS, I'll setup a 2nd DC and then install WDUS on it to see what happens... and then write in.
> On Friday, March 02, 2007 10:08 PM buddd wrote:
> Hello,
>
> I am quite new to using and configuring WSUS and could use some
> assistamce / guidance.
>
> I have a win2k3 Active directory network, with the majority of clients
> being Windows XP.
>
> I have defined a GPO called WSUS within the Domain level, and from I
> understand it has been configured correctly.
>
> I have an OU within the Domain called "corporate" and within the
> corporate "ou" the various departments.
>
> These OU's are set to inherit the GPO's. Howver, I cannot see these
> computers when I call up the WSUS admin webpage.
>
> The other problem I am having is that while I get the admin webpage
> working when I type:
>
> http://<<server_name>>/wsusadmin/
>
> I get a page cannot be displayed when I try:
>
> http://<<server_name>>
>
> Is this supposed to happen?
>
> I set up the WSUS server using standard ports and default settings
> from the WSUS installation.
>
> Can anyone assit me in understanding what has gone wrong or where I
> made my mistake?
>
> Thanks in advance,
>
> Mark
>
>> On Friday, March 02, 2007 11:26 PM buddd wrote:
>> Just curious - can WSUS be installed on a DC controller (not primary
>> DC)?
>>
>> Thanks,
>>
>> Mark
>>> On Saturday, March 03, 2007 5:58 PM LarMa wrote:
>>> Budd, try using the port 8530 to go to the site. I.E.
>>> http://<server>:8530/wsusadmin
>>>
>>>
>>>
>>> "buddd" wrote:
>>>> On Wednesday, March 07, 2007 8:47 PM Lawrence Garvin \(MVP\) wrote:
>>>> "buddd" <> wrote in message
>>>> news: oups.com...
>>>>
>>>>
>>>> Download and run the Client Diagnostic Tool on one of the client systems and
>>>> post the results.
>>>>
>>>>
>>>>
>>>> Yes, there is no viewable content in the root of the virtual server.
>>>>
>>>> --
>>>> Lawrence Garvin, M.S., MCTS, MVP-Software Distribution
>>>> Everything you need for WSUS is at
>>>> http://technet2.microsoft.com/window...s/default.mspx
>>>> And, everything else is at
>>>> http://wsusinfo.onsitechsolutions.com
>>>> ....
>>>>> On Wednesday, March 07, 2007 8:48 PM Lawrence Garvin \(MVP\) wrote:
>>>>> "LarMan" <> wrote in message
>>>>> news:A6BED261-5646-4474-B640-...
>>>>>
>>>>> This is not the issue.... given that he successfully accessed the
>>>>> ~/wsusadmin/ page on the port 80 server.
>>>>>
>>>>>
>>>>> --
>>>>> Lawrence Garvin, M.S., MCTS, MVP-Software Distribution
>>>>> Everything you need for WSUS is at
>>>>> http://technet2.microsoft.com/window...s/default.mspx
>>>>> And, everything else is at
>>>>> http://wsusinfo.onsitechsolutions.com
>>>>> ....
>>>>>> On Wednesday, March 07, 2007 8:49 PM Lawrence Garvin \(MVP\) wrote:
>>>>>> "buddd" <> wrote in message
>>>>>> news: ups.com...
>>>>>>
>>>>>> Yes, WSUS can be installed on any =DC=/
>>>>>>
>>>>>> (No real concept of primary/secondary in Active Directory.)
>>>>>>
>>>>>> Caveat: Do not promote/demote a DC =after= installing IIS. Always
>>>>>> promote/demote DCs =before= installing IIS, or else uninstall IIS |
>>>>>> promote/demote | reinstall IIS.
>>>>>>
>>>>>> --
>>>>>> Lawrence Garvin, M.S., MCTS, MVP-Software Distribution
>>>>>> Everything you need for WSUS is at
>>>>>> http://technet2.microsoft.com/window...s/default.mspx
>>>>>> And, everything else is at
>>>>>> http://wsusinfo.onsitechsolutions.com
>>>>>> ....