Submit a ticketCall us

Solarwinds & Cisco Live! Barcelona
Join us from the 29th of January to the 2nd of February at Cisco Live 2018 in Barcelona, where we will continue to show how monitoring the network with SolarWinds will keep you ahead of the game. At our booth (WEP 1A), we will demonstrate how SolarWinds network solutions can help. As a bonus, we are also hosting a pre-event webinar - Blame the Network, Hybrid IT Edition with our SolarWinds Head Geek™, Patrick Hubbard on January 24th - GMT (UTC+0): 10:00 a.m. to 11:00 a.m. There's still time to RSVP.

Home > Success Center > Patch Manager > Cannot publish to WSUS server

Cannot publish to WSUS server

Created by Brandon Painter, last modified by Abdul.Aziz on Nov 24, 2017

Views: 1,472 Votes: 1 Revisions: 6

Overview

 

You get the following error when you try to publish a package to your WSUS server.

Error:
Package: yourPackage
Status: Failure
Message: Failed to publish yourPackage. CreateDirectory failed

 

OR

 

You may see the packages getting published but the state of the packages is shown Failed to Download / Installation Not possible.

image.png

Environment

  • All Patch Manager versions
  • WSUS

Cause 

There are issues with the WSUS configuration.

  • The permissions on the \\WSUSServer\UpdateServicesPackages and \\WSUSServer\WSUSContent folders are not set correctly.
  • The \\WSUSServer\UpdateServicesPackages and \\WSUSServer\WSUSContent folders are not shared at all.

Resolution

Correct the share and security permissions on the \\WSUSServer\UpdateServicesPackages and \\WSUSServer\WSUSContent folders. The share is required for Patch Manager to publish files locally to the WSUS server.

To correct the permissions on the UpdateServicesPackages and WSUSContent(root) folder (Instructions apply to 2012 and 2016 Server):

  1. Locate the UpdateServicesPackages and WSUSContent folders on your WSUS server.
  2. Ensure the SYSTEM account owns the folder.
  3. Ensure the folder is shared with the following share permissions:
    • Full Control: Administrators, NETWORK SERVICE, WSUS Administrators
    • Read: Everyone/users
  4. Ensure the folder has the following security permissions:
    • Full Control: Administrators, SYSTEM, WSUS Administrators
    • Read, Write: NETWORK SERVICE
    • List Folder Contents, Read, Read & Execute: Users/Everyone
    Note: Apply these permissions to all subfolders and files.
  5. In the Patch Manager console, ensure the credential mapped to access the WSUS server is a member of the Administrators and WSUS Administrators group on WSUS server

 

To verify whether this fixed the issue:

  1. Log in to the Patch Manager server using the credential assigned to the WSUS server.
  2. Map a drive to the \\WSUSServer\UpdateServicesPackages and \\WSUSServer\WSUSContent folders.

If you are able to map the drive, Patch Manager should be able to publish updates to the WSUS server.

 

For more info refer to WSUS Permission checks MS KB

Supplemental Procedures

To share a folder with Windows Server 2008:

  1. Right-click the folder, and then select Properties.
  2. Click the Sharing tab.
  3. Click Share.
  4. Enter group to which you want to share the file, and then click Add.
  5. To modify the share permissions for a group, click the group and then select the appropriate permission level.
  6. Repeat Steps 4 and 5 for all of the groups to which you want to share the file.
  7. Click Share.
  8. Click Done.
  9. Click Close.

To change the security permissions for a folder with Windows Server 2008:

  1. Right-click the folder, and then select Properties.
  2. Click the Security tab.
  3. Click Edit.
  4. In the Groups or user names list, select the group or user for which you want to change permissions.
  5. Under Permissions for group/user name, select or clear the check boxes as appropriate.
  6. Repeat Steps 4 and 5 for all of the groups or users for which you want to change permissions.
  7. Click OK.
  8. Click Close.

 

 

Last modified

Tags

Classifications

Public