Hello
A few months back we replaced our WSUS server, and updated the GPO to point our clients at the new server.
Once I'd spotted some of them starting to appear in the WSUS console I assumed that everything was ok and moved on to the next problem.
We've since spotted that a significant number of our machines - about half at a quick glance - haven't registered.
If I look in the registry on one of the problem machines it still shows the old WSUS address.
I've double and triple checked that they should be getting the "new" server address - group policy modelling wizard clearly shows that it should be there.
I've also made a harmless change in that GPO (desktop wallpaper) and that *is* being applied which confirms that I'm getting and processing (at least some of) the GPO I expected.
If I do a GPUpdate /force on some of the problem machines I get "The processing of Group Policy failed because of an internal system error" half a dozen times. In the Windows System log there are event ID 1125 from Group Policy , repeating the message
above.
If I look at the Group Policy Operations log I see Error 7016, but that just says "Completed Registry Extension Processing in xxx milliseconds" or similar.
I have tried so far....
Removing the PC from the domain and rejoining - no change.
Moving it to an entirely different OU with a new GPO that's applied - no change, still have the incorrect registry settings for WSUS.
Deleting secedit.sdb followed by gpupdate /force - no change.
Manually editing the registry to update the WSUS settings - they come back after a reboot.
New PCs are picking up the correct settings from the current GPO, but I clearly don't want to have to wipe and rebuild half of my machines to fix this.
Any suggestions will be gratefully received.
Any suggestions that fix it will be *very* gratefully received.