wsus and sccm servers

Question

We have an SCCM server and a WSUS server.  WSUS is configured on the SCCM server and all reports and functions have been done through the sccm interface.  I installed eminentware on the sccm server for that reason.  However, when I configure either the wsus or sccm server or both at the same time in the eminentware interface I am getting a message that the servers are actively refusing the connection.  Not sure what I need to do here.

solarwinds-admin · Answer

OK,

couple of things to understand.

Is the server AFAFG-Pp-sccm01.AFCORP.AFG a Windows Server 2008 or 2008 R2?

If so, is UAC enabled?

If it is enabled, please change/find the credential you have assigned to this server in the credential ring to the built in local Administrator account.

UAC filters the Administrators group SID out of all local logons EXCEPT the built-in Administrator account.

Also, please check the permissions on the following registry key...

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Update Services\Server

and see if it grants the local 'Users' group read access.

If not, please add the local Users groups to have read.

solarwinds-admin · Answer

I am getting this error now.  I have configured the sccm server per the administration guide.  When I click on updates that is listed under the sccm server

I get this error.

Server:    AFAFG-Pp-sccm01.AFCORP.AFG
 Message:    Exception occurred at 10/10/2010 5:11:54 PM: Request for principal permission failed. WSUSConnection::Unable to connect to the WSUS Server (AFAFG-Pp-sccm01.AFCORP.AFG) using the account: afg\sccmadmin Request for principal permission failed.

We have an admin account set up in the 3 locations and I have added those as follows:  afg\sccmadmin, ampublic\sccmadmin, and houston\sccmadmin.  I cannot figure out why I am getting this error.  I have used portqry to check port 80 and port 4092 which are both list within the configuration settings for eminentware.

solarwinds-admin · Answer

The server that you want to target is the site server with the SUP role. A SUP role uses WSUS under the covers as you know, so this is the machine you want to register.

IOW, you want to target and connect to the server that has WSUS on it, which is typically the Site Server.