WSUS Design PariP 5/15/2007 2:13:00 PM Is it possible to have a downstream server connected to an upstream server and to configure a replica server connection to the downstream server? I want to have a main WSUS server with downstream servers in every site and for sub sites a replica server because there are the same configuration settings (language) needed and also of less administrational tasks. If I want to set it up in that way I get following error message: "The upstream server does not allow an anonymous downstream server to synchronize. This particular server has not been registred on this upstream server, or the upstream server Web service needs authentication"

Re: WSUS Design DaveMills <DaveMills[ at ]newsgroup.nospam> 5/15/2007 4:50:38 PM You must have a lot of machines in you sub site to justify another wsus server. The loading is not too high. If you give details I expect someone will give an opinion on the loading, e.g number of PC and link bandwidth. On Tue, 15 May 2007 07:13:00 -0700, PariP <PariP[ at ]discussions.microsoft.com> wrote: [Quoted Text] >Is it possible to have a downstream server connected to an upstream server >and to configure a replica server connection to the downstream server? I want >to have a main WSUS server with downstream servers in every site and for sub >sites a replica server because there are the same configuration settings >(language) needed and also of less administrational tasks. If I want to set >it up in that way I get following error message: >"The upstream server does not allow an anonymous downstream server to >synchronize. This particular server has not been registred on this upstream >server, or the upstream server Web service needs authentication" -- Dave Mills There are 10 type of people, those that understand binary and those that don't.

Re: WSUS Design PariP 5/16/2007 6:30:00 AM Thanks for your reply. This is not because of bandwidth problem or the number of clients. We have seperated production networks in the sub sites where we need to have also security patch management available but it is not allowed to connect the production network through the WAN to the other WSUS servers. Thats why I thought to have an replica server in the sub site so we could configure the firewall to point to this server in the same site from the production network and to have less administration work (replica mode). "DaveMills" wrote: [Quoted Text] > You must have a lot of machines in you sub site to justify another wsus server. > The loading is not too high. If you give details I expect someone will give an > opinion on the loading, e.g number of PC and link bandwidth. > > > > On Tue, 15 May 2007 07:13:00 -0700, PariP <PariP[ at ]discussions.microsoft.com> > wrote: > > >Is it possible to have a downstream server connected to an upstream server > >and to configure a replica server connection to the downstream server? I want > >to have a main WSUS server with downstream servers in every site and for sub > >sites a replica server because there are the same configuration settings > >(language) needed and also of less administrational tasks. If I want to set > >it up in that way I get following error message: > >"The upstream server does not allow an anonymous downstream server to > >synchronize. This particular server has not been registred on this upstream > >server, or the upstream server Web service needs authentication" > -- > Dave Mills > There are 10 type of people, those that understand binary and those that don't. >

Re: WSUS Design DaveMills <DaveMills[ at ]newsgroup.nospam> 5/16/2007 6:01:51 PM On Tue, 15 May 2007 23:30:00 -0700, PariP <PariP[ at ]discussions.microsoft.com> wrote: [Quoted Text] >Thanks for your reply. >This is not because of bandwidth problem or the number of clients. We have >seperated production networks in the sub sites where we need to have also >security patch management available but it is not allowed to connect the >production network through the WAN to the other WSUS servers. Thats why I >thought to have an replica server in the sub site so we could configure the >firewall to point to this server in the same site from the production network >and to have less administration work (replica mode). > While I don't have an answer the added info will sure help those that may have one. >"DaveMills" wrote: > >> You must have a lot of machines in you sub site to justify another wsus server. >> The loading is not too high. If you give details I expect someone will give an >> opinion on the loading, e.g number of PC and link bandwidth. >> >> >> >> On Tue, 15 May 2007 07:13:00 -0700, PariP <PariP[ at ]discussions.microsoft.com> >> wrote: >> >> >Is it possible to have a downstream server connected to an upstream server >> >and to configure a replica server connection to the downstream server? I want >> >to have a main WSUS server with downstream servers in every site and for sub >> >sites a replica server because there are the same configuration settings >> >(language) needed and also of less administrational tasks. If I want to set >> >it up in that way I get following error message: >> >"The upstream server does not allow an anonymous downstream server to >> >synchronize. This particular server has not been registred on this upstream >> >server, or the upstream server Web service needs authentication" >> -- >> Dave Mills >> There are 10 type of people, those that understand binary and those that don't. >> -- Dave Mills There are 10 type of people, those that understand binary and those that don't.

Re: WSUS Design "Cecils\(MSFT\)" <cecils[ at ]online.microsoft.com> 5/16/2007 9:31:08 PM If you have a firewall between the sites (thus the WSUS servers), then you need to create an exception on your firewall, between the sites, for either port 80 or port 8530, which ever way you have configured your WSUS servers. -- Cecil [MSFT] Deployment, WSUS Microsoft This posting is provided "As Is" with no warranties, and confers no rights. Use of included script samples are subject to the terms specified at http://www.microsoft.com/info/cpyright.htm "DaveMills" <DaveMills[ at ]newsgroup.nospam> wrote in message news:3mhm43lcucl6dcvr6mt0lfv4g47cgq2o88[ at ]4ax.com... [Quoted Text] > On Tue, 15 May 2007 23:30:00 -0700, PariP > <PariP[ at ]discussions.microsoft.com> > wrote: > >>Thanks for your reply. >>This is not because of bandwidth problem or the number of clients. We have >>seperated production networks in the sub sites where we need to have also >>security patch management available but it is not allowed to connect the >>production network through the WAN to the other WSUS servers. Thats why I >>thought to have an replica server in the sub site so we could configure >>the >>firewall to point to this server in the same site from the production >>network >>and to have less administration work (replica mode). >> > While I don't have an answer the added info will sure help those that may > have > one. > >>"DaveMills" wrote: >> >>> You must have a lot of machines in you sub site to justify another wsus >>> server. >>> The loading is not too high. If you give details I expect someone will >>> give an >>> opinion on the loading, e.g number of PC and link bandwidth. >>> >>> >>> >>> On Tue, 15 May 2007 07:13:00 -0700, PariP >>> <PariP[ at ]discussions.microsoft.com> >>> wrote: >>> >>> >Is it possible to have a downstream server connected to an upstream >>> >server >>> >and to configure a replica server connection to the downstream server? >>> >I want >>> >to have a main WSUS server with downstream servers in every site and >>> >for sub >>> >sites a replica server because there are the same configuration >>> >settings >>> >(language) needed and also of less administrational tasks. If I want to >>> >set >>> >it up in that way I get following error message: >>> >"The upstream server does not allow an anonymous downstream server to >>> >synchronize. This particular server has not been registred on this >>> >upstream >>> >server, or the upstream server Web service needs authentication" >>> -- >>> Dave Mills >>> There are 10 type of people, those that understand binary and those that >>> don't. >>> > -- > Dave Mills > There are 10 type of people, those that understand binary and those that > don't.

Re: WSUS Design PariP 5/21/2007 8:59:00 AM This is the first we did. The firewalls are configured with the needed ports. The main question is why do I get this authentication error. Is there something special on a domain controller? "Cecils(MSFT)" wrote: [Quoted Text] > If you have a firewall between the sites (thus the WSUS servers), then you > need to create an exception on your firewall, between the sites, for either > port 80 or port 8530, which ever way you have configured your WSUS servers. > > -- > Cecil [MSFT] > Deployment, WSUS > Microsoft > > This posting is provided "As Is" with no warranties, and confers no rights. > Use of included script samples are subject to the terms specified at > http://www.microsoft.com/info/cpyright.htm > > "DaveMills" <DaveMills[ at ]newsgroup.nospam> wrote in message > news:3mhm43lcucl6dcvr6mt0lfv4g47cgq2o88[ at ]4ax.com... > > On Tue, 15 May 2007 23:30:00 -0700, PariP > > <PariP[ at ]discussions.microsoft.com> > > wrote: > > > >>Thanks for your reply. > >>This is not because of bandwidth problem or the number of clients. We have > >>seperated production networks in the sub sites where we need to have also > >>security patch management available but it is not allowed to connect the > >>production network through the WAN to the other WSUS servers. Thats why I > >>thought to have an replica server in the sub site so we could configure > >>the > >>firewall to point to this server in the same site from the production > >>network > >>and to have less administration work (replica mode). > >> > > While I don't have an answer the added info will sure help those that may > > have > > one. > > > >>"DaveMills" wrote: > >> > >>> You must have a lot of machines in you sub site to justify another wsus > >>> server. > >>> The loading is not too high. If you give details I expect someone will > >>> give an > >>> opinion on the loading, e.g number of PC and link bandwidth. > >>> > >>> > >>> > >>> On Tue, 15 May 2007 07:13:00 -0700, PariP > >>> <PariP[ at ]discussions.microsoft.com> > >>> wrote: > >>> > >>> >Is it possible to have a downstream server connected to an upstream > >>> >server > >>> >and to configure a replica server connection to the downstream server? > >>> >I want > >>> >to have a main WSUS server with downstream servers in every site and > >>> >for sub > >>> >sites a replica server because there are the same configuration > >>> >settings > >>> >(language) needed and also of less administrational tasks. If I want to > >>> >set > >>> >it up in that way I get following error message: > >>> >"The upstream server does not allow an anonymous downstream server to > >>> >synchronize. This particular server has not been registred on this > >>> >upstream > >>> >server, or the upstream server Web service needs authentication" > >>> -- > >>> Dave Mills > >>> There are 10 type of people, those that understand binary and those that > >>> don't. > >>> > > -- > > Dave Mills > > There are 10 type of people, those that understand binary and those that > > don't. > >