System Center Configuration Manager и как с ним бороться

SMS_WSUS_CONFIGURATION_MANAGER
ID 6600:

WSUS Configuration Manager failed to configure upstream server settings on WSUS Server «SCCMTEST».

Possible cause: WSUS Server version 3.0 SP1 and above is not installed or cannot be contacted.
Solution: Verify that the WSUS Server version 3.0 SP1 or greater is installed. Verify that the IIS ports configured in the site are same as those configured on the WSUS IIS website.

SMS_WSUS_CONTROL_MANAGER
ID 7000:

WSUS Control Manager failed to configure proxy settings on WSUS Server «SCCMTEST».

Possible cause: WSUS Server version 3.0 SP1 and above is not installed or cannot be contacted.
Solution: Verify that the WSUS Server version 3.0 SP1 or greater is installed. Verify that the IIS ports configured in the site are same as those configured on the WSUS IIS website.You can receive failure because proxy is set but proxy name is not specified or proxy server port is invalid.

SMS_WSUS_CONTROL_MANAGER
ID 7003:

WSUS Control Manager failed to monitor WSUS Server «SCCMTEST».

Possible cause: WSUS Server version 3.0 SP1 and above is not installed or cannot be contacted.
Solution: Verify that the WSUS Server version 3.0 SP1 or greater is installed. Verify that the IIS ports configured in the site are same as those configured on the WSUS IIS website.

SMS_WSUS_SYNC_MANAGER
ID 6703:

WSUS Synchronization failed.
Message: WSUS server not configured.
Source: CWSyncMgr::DoSync.
The operating system reported error 2147500037: Unspecified error

wsyncmgr.log

Sync failed: WSUS server not configured. Source: CWSyncMgr::DoSync
STATMSG: ID=6703 SEV=E LEV=M SOURCE=»SMS Server» COMP=»SMS_WSUS_SYNC_MANAGER» SYS=SCCMTEST SITE=TTT PID=2388 TID=2628 GMTDATE=Mon Sep 05 07:25:08.137 2011 ISTR0=»CWSyncMgr::DoSync» ISTR1=»WSUS server not configured» ISTR2=»» ISTR3=»» ISTR4=»» ISTR5=»» ISTR6=»» ISTR7=»» ISTR8=»» ISTR9=»» NUMATTRS=0
Sync failed. Will retry in 60 minutes
Setting sync alert to active state on site TTT

WSUSCtrl.log

System.Web.Services.Protocols.SoapException: System.Web.Services.Protocols.SoapException: Server was unable to process request. —> System.UnauthorizedAccessException: Access to the temp directory is denied. Identity ‘NT AUTHORITY\NETWORK SERVICE’ under which XmlSerializer is running does not have sufficient permission to access the temp directory. CodeDom will use the user account the process is using to do the compilation, so if the user doesnt have access to system temp directory, you will not be able to compile. Use Path.GetTempPath() API to find out the temp directory location.~ at System.Xml.Serialization.Compiler.Compile(Assembly parent, String ns, XmlSerializerCompilerParameters xmlParameters, Evidence evidence)~ at System.Xml.Serialization.TempAssembly.GenerateAssembly(XmlMapping[] xmlMappings, Type[] types, String defaultNamespace, Evidence evidence, XmlSerializerCompilerParameters parameters, Assembly assembly, Hashtable assemblies)~ at System.Xml.Serialization.TempAssembly..ctor(XmlMapping[] xmlMappings, Type[] types, String defaultNamespace, String location, Evidence evidence)~ at System.Xml.Serialization.XmlSerializer.FromMappings(XmlMapping[] mappings, Evidence evidence)~ at System.Web.Services.Protocols.SoapServerType..ctor(Type type, WebServiceProtocols protocolsSupported)~ at System.Web.Services.Protocols.SoapServerProtocol.Initialize()~ at System.Web.Services.Protocols.ServerProtocol.SetContext(Type type, HttpContext context, HttpRequest request, HttpResponse response)~ at System.Web.Services.Protocols.ServerProtocolFactory.Create(Type type, HttpContext context, HttpRequest request, HttpResponse response, Boolean& abortProcessing)~ — End of inner exception stack trace —~~ at Microsoft.UpdateServices.Administration.AdminProxy.CreateUpdateServer(Object[] args)~~ at Microsoft.UpdateServices.Administration.AdminProxy.GetUpdateServer()~~ at Microsoft.SystemsManagementServer.WSUS.WSUSServer.ConnectToWSUSServer(String ServerName, Boolean UseSSL, Int32 PortNumber)
STATMSG: ID=7000 SEV=E LEV=M SOURCE=»SMS Server» COMP=»SMS_WSUS_CONTROL_MANAGER» SYS=SCCMTEST SITE=TTT PID=2388 TID=2632 GMTDATE=Mon Sep 05 22:11:41.078 2011 ISTR0=»SCCMTEST» ISTR1=»» ISTR2=»» ISTR3=»» ISTR4=»» ISTR5=»» ISTR6=»» ISTR7=»» ISTR8=»» ISTR9=»» NUMATTRS=0
Failed to set WSUS Local Configuration. Will retry configuration in 1 minutes

Оказалось, что в IIS просто… пропал сайт WSUS Administration.

Вариант лечения:

— на папку Windows\Temp даём полные права NT AUTHORITY\NETWORK SERVICE

— удаляем роль Software Update Point

— удаляем роль WSUS, сохраняя базу и обновления

— перезагружаемся

— устанавливаем WSUS с настройками кастомных портов 8530/8531 и указываем «Использовать существующую базу»

— устанавливаем SUP (если всё правильно сделано, то все настройки по синхронизации и классификации останутся старыми)

— запускаем синхронизацию, отслеживая её через wsyncmgr.log.

Остальные варианты лечения можно почитать здесь.