[Jake M]

The Environment

We have a single production WSUS server (2003 Server Standard SP1) that is currently used to patch and manage all devices (~15,000) in our environment. This has been working fine for quite a while now. However, we have decided to dedicate this server to workstation-only deployments and setup a second WSUS server for server-only deployments. Both WSUS servers will operate independently of each other, we are not doing a hierarchy or parent-child setup.

WSUS is installed and synchronized on the new server which is also running 2003 Server Standard SP1. The only thing left to do is migrate the approvals from the existing WSUS server to my new WSUS server and update the GPO.

The Problem

The SUS to WSUS migration guide tells you to run wsusutil.exe. That worked great for the SUS-WSUS migration I did a year ago but the tool fails when trying to migrate approvals from WSUS to WSUS.

The Question

Does anyone know of a tool or utility that will migrate approvals from one WSUS server to another? I'm only interested in migrating approvals, not content. Is there an updated wsusutil.exe I'm not aware of? The new WSUS server was loaded with source files that I downloaded today from Microsoft so it's got to be the most current version.

Thanks in advance for any help you can provide!

-Jake

[Jake M]

I found a solution:

http://www.microsoft...ds/default.mspx

Download the WSUS API Samples and Tools package. Once you install it there will be a folder called WsusMigrate. All tools and supporting documentation are there.

For those of you who downloaded this in past months or last year you will probably want to download it again. I say this because the migration tools were not a part of the original package (October 2005 timeframe).

Anyway, good luck!!

[gigafunk]

I will be checking this out tomorrow, I have not been able to migrate to wsus on two totally seperate disconnected networks and the mirrorly engineered other site got it to work but cannot do wsus to wsus migrations.



You just might be my savior.


I WILL let ya know Thank You so much.

[johndoe123]

Ok, next time I'll actually read the question. How about doing using tradiotonal back/restore disaster recovery methods to the new server? Would this work?

This post has been edited by johndoe123: 06 Apr 2006, 09:38

[shawnyong]

I've use the WsusMigrate from the WSUS API Samples and Tools package. Works great. All the infomation of WSUS were replicate to another server (except the download files ). The tools export the info to XML format and by following the ReadMe, i was able to replicate the setting,approval,computers ..... to another WSUS Server.

[dvanmeter]

wsus will run on a 64bit server, it will just run in 32 bit mode. WSUS 3.0 which will be out soon will have a true 64bit installer so migration would be easy

[mijohnst]

I'm glad I found this forum... So far it's been very helpful!

I'm also trying to go from WSUS to WSUS. I have a disconnected network and I'm trying to move updates into it. I've gone step by step through the process from the "Deploying Microsoft Server Update Service.doc" guide with setting up an identical server on a connected network, mirroring the options, downloading patches, backing it up, moving it over, etc... Well, I'm now at the part where I'm importing the Metadata and it keeps crashing out with this error:

Import failed to import updates. Please look at the log file for error details. Fatal error: Access to the path "C:\DOCUME~1\mijohnst\LOCALS~1\Temp\tmp99a.tmp" is denied.

I've found a few places on the web that say to add the NETWORK group, but that doesn't help. I've even opened up the full path to EVERYONE and that didn't help either. All I can see is that the job bombs when the temp file gets to a certain size. At that size (2048kb I think) it stops.

Any ideas where to look next? I'm running a Windows 2000 server on both my export and import machine both with SP4. Thanks!

[mijohnst]

mijohnst, on Wed 7th Feb 2007, 03:54 pm, said:

I'm glad I found this forum... So far it's been very helpful!

I'm also trying to go from WSUS to WSUS. I have a disconnected network and I'm trying to move updates into it. I've gone step by step through the process from the "Deploying Microsoft Server Update Service.doc" guide with setting up an identical server on a connected network, mirroring the options, downloading patches, backing it up, moving it over, etc... Well, I'm now at the part where I'm importing the Metadata and it keeps crashing out with this error:

Import failed to import updates. Please look at the log file for error details. Fatal error: Access to the path "C:\DOCUME~1\mijohnst\LOCALS~1\Temp\tmp99a.tmp" is denied.

I've found a few places on the web that say to add the NETWORK group, but that doesn't help. I've even opened up the full path to EVERYONE and that didn't help either. All I can see is that the job bombs when the temp file gets to a certain size. At that size (2048kb I think) it stops.

Any ideas where to look next? I'm running a Windows 2000 server on both my export and import machine both with SP4. Thanks!

Not sure if anyone reads this board anymore, but in case someone does, the solution to my particular problem was to do another export of the metadata and instead of burning it to a CD, I used a USB drive. I had noticed that the file on my export machine was one 1kb larger then the first metadata file. I don't know why that was and can only think that it might be something to do with the burn. Anyhow, there you have it.

[Rob Dunn]

mijohnst, on Mon 12th Feb 2007, 01:03 pm, said:

mijohnst, on Wed 7th Feb 2007, 03:54 pm, said:

I'm glad I found this forum... So far it's been very helpful!

I'm also trying to go from WSUS to WSUS. I have a disconnected network and I'm trying to move updates into it. I've gone step by step through the process from the "Deploying Microsoft Server Update Service.doc" guide with setting up an identical server on a connected network, mirroring the options, downloading patches, backing it up, moving it over, etc... Well, I'm now at the part where I'm importing the Metadata and it keeps crashing out with this error:

Import failed to import updates. Please look at the log file for error details. Fatal error: Access to the path "C:\DOCUME~1\mijohnst\LOCALS~1\Temp\tmp99a.tmp" is denied.

I've found a few places on the web that say to add the NETWORK group, but that doesn't help. I've even opened up the full path to EVERYONE and that didn't help either. All I can see is that the job bombs when the temp file gets to a certain size. At that size (2048kb I think) it stops.

Any ideas where to look next? I'm running a Windows 2000 server on both my export and import machine both with SP4. Thanks!

Not sure if anyone reads this board anymore, but in case someone does, the solution to my particular problem was to do another export of the metadata and instead of burning it to a CD, I used a USB drive. I had noticed that the file on my export machine was one 1kb larger then the first metadata file. I don't know why that was and can only think that it might be something to do with the burn. Anyhow, there you have it.

People do read this board... Just not many people perform migrations since it isn't something that people have to do very often - - thank you for posting your resolution!

Rob

[TechGromit]

I'm reading of the WSUS to WSUS migration instructions and I'm puzzled by the step by step instructions. It says,

1) Extract the contents of WSUSMigrate.cab to a folder of your choice on the WSUS server(s). This location will be referred to as %wsusmigrate% directory in these instructions.
2) Open a cmd prompt and navigate to the %wsusmigrate% directory.
3) Run the following command:

WSUSMigrationExport WSUS-yyyymmdd.xml
where yyyy represents current year, mm is the current month and dd is the current date.

4) Un-install WSUS, keeping only the downloaded update files

Say what? Why would I want to uninstall WSUS on my working live server? This step makes absolutely no sence to me.

Other than that, it worked as avertised. I will be using this on a daily basis now to make sure my backup server has the latest information on it.

-Thanks

This post has been edited by TechGromit: 16 Feb 2007, 11:39

[jeromem]

mijohnst, on Wed 7th Feb 2007, 10:54 pm, said:

I'm glad I found this forum... So far it's been very helpful!

I'm also trying to go from WSUS to WSUS. I have a disconnected network and I'm trying to move updates into it. I've gone step by step through the process from the "Deploying Microsoft Server Update Service.doc" guide with setting up an identical server on a connected network, mirroring the options, downloading patches, backing it up, moving it over, etc... Well, I'm now at the part where I'm importing the Metadata and it keeps crashing out with this error:

Import failed to import updates. Please look at the log file for error details. Fatal error: Access to the path "C:\DOCUME~1\mijohnst\LOCALS~1\Temp\tmp99a.tmp" is denied.

I've found a few places on the web that say to add the NETWORK group, but that doesn't help. I've even opened up the full path to EVERYONE and that didn't help either. All I can see is that the job bombs when the temp file gets to a certain size. At that size (2048kb I think) it stops.

Any ideas where to look next? I'm running a Windows 2000 server on both my export and import machine both with SP4. Thanks!

Hi,

I assume that your export cab file is stored on a CD or DVD.
The tmp99a.tmp is a copy of the export cab file, if your cab file is stored on a CD or DVD, it is tagged as read-only when wsusutil.exe copies it to the tmp file.
So you can copy your export cab file to the hard drive of your server before running the import or remove the read-only attribute while the import is running.

Hope this help

Jerome

[ecano]

Will the migration utility work for migrating approval status from a WSUS 2.0 server to a WSUS 3.0 server?

This post has been edited by ecano: 15 Jan 2008, 14:30