Windows Server Update Services keeps reinstalling the root certificates update that is described in KB 931125 on the clients that are running Windows XP
- Open the Windows Server Update Services Administration console. In the Updates list, locate the following updates:
- "Update for root certificates" (Release date : 2/20/2009)
- "Update for root certificates" (Release date : 9/22/2009)
- "Update for root certificates" (Release date : 2/24/2009)
- "Update for root certificates" (Release date : 5/26/2006)
- Confirm that all the updates are declined except "Update for root certificates" (Release date : 9/22/2009). If the update is not declined, right-click the update, and then click Decline.
- Approve the update "Update for root certificates" (Release date : 9/22/2009). To do this, right-click the update, click Approve, and then click OK.
Note Do not make any changes to the approval settings in the Approve Updates dialog box.
- Computers should now successfully complete detection against the Windows Server Update Services server and should now receive any applicable updates. To verify that a computer can synchronize the updates, follow these steps:
- Open a command prompt.
- Type the following command:
- Press ENTER.
- Examine the WindowsUpdate.log file to verify that the synchronization is successful. You may have to run the command that is mentioned in step 4b two times. Because in some cases, the first synchronization fails but successive synchronizations succeed.
- If you have a hierarchy of Windows Server Update Services servers, repeat this procedure on each server. You must start this procedure from the top-level server.
Note If any of the servers is a replica child server, change it to be autonomous by using the Update Source and Proxy Server dialog box that can be open in Options. Follow these steps, and then change the autonomous server back to a replica child server.
Article ID: 978335 - Last Review: 12/14/2009 05:39:43 - Revision: 1.0
- kbtshoot kbexpertiseadvanced kbsurveynew kbprb KB978335