SCCM WSUS fails to sync or start.

 

Where's my access denied? Here is a cryptic issue where the WSUS service fails to sync or start. 

 

On the SUP we found this error in the WSUSCtrl.log:

“Errors were reported in these WSUS Server components WSUSService, on WSUS Server SCCMSERVERNAME

Failures reported during periodic health check by the WSUS Server SCCMSERVERNAME. Will retry check in 57 minutes.”

 

Eventviewer only contained the following entry:

 

“SMS_WSUS_CONTROL_MANAGER on computer SCCMSERVERNAME reported: Failures were reported on WSUS Server "SCCMSERVERNAME" for WSUS components "WSUSService,".

Solution: Verify that the failed WSUS components are installed and running. SUPSetup.log was clean, and all dll's registered successfully. “

Either the WSUS components weren’t installed and registered correctly or this was an "Access Denied" error. Checked the WSUS component install, everything was perfect, so where was my access denied in the WSUSCtrl.log?

Went to Update Services Service and found that it was set to Automatic, but stopped. Tried to start it and it failed.

Update Services Service was set to run under the Network Service account. This didn't have rights to the SUSDB. Changed this to LOCALSYSTEM as a test. Added the SUP server SCCMSERVERNAME to the SUSDB with rights to the SUSDB.mdf and SUSDB.ldf.

Started Updates Services Service, and the WSUS sync began, and finished successfully.