We have an installation of SCE that is an upgrade of WSUS v3. I have set up a number of groups in SCE which each have different software packages approved to them. When you open up the WSUS console you can see that these groups have been replicated OK to WSUS. It seems that when a client detects updates it will not receive the packages approved to the groups it is a member of in SCE unless it's membership of those groups has been replicated to WSUS. The problem I have with this is we are deploying new laptops and I need to push out new software to these laptops following the OS build in a timely manner. Once the SCE agent has been installed and the PC account added to the relevant groups it is taking too long for WSUS to pick up the changes in the group membership and hence the clients are not receiving the software packages for a long time after they have been assigned in SCE. I need toinstall the agentsand deploy the software so it is pushed out to the client without delay. Under Authoring in the SCE console I have found the following rule: 'System.SCE.MP.GroupSynchronizationRule' Can anyone confirm if this rule controls the synchronization of groups and group membership between SCE and WSUS? The rule is set to run every 60mins and It doesn't allow you to change this setting in the console. If this rule does control the group synchronization between SCE and WSUS then I need to shorten the interval for replication. Thanks, Tom

Hi, This rule is responsible for updating the membership of the WSUS group to match the membership of the correspoding OpsMgr group. It is in sealed MP and we cannot change the default value. Hope it helps.

Jie, What is the logic behind setting the replication schedule to every hour? This is a fundamental part of how SCE\WSUS operates, I can't beleive no-one else has had problems with this. It is very unsatisfactory to have to wait an hour every time before software packages are deployed. We have software assurance and I am thinking of raising a call with Microsoft about this, do you think it would be possible to get a hotfix for this? Thanks, Tom

Hi Tom, By default, this rule runs every 60mins on a schedule, but changes in Group Membership also trigger this sync on demand as well. Also, if you need a call with Microsoft PSS for more information, please refer to following: http://support.microsoft.com/oas/default.aspx?gprid=12684 Hope it helps.

Hi Tom, I am currently standing by for an update from you and would like to know how things are going on your end. If the problem still persists, please use following steps to collect needed information: 1. Go to <SCE installerdir> \tools folder and run StartTracing.cmd VER command. 2. Repro adding a computer to a deployment group in SCE then stop tracing by running the following StopTracing.cmd in <installdir>\tools. 3. Sendus a zip of the etl files found in %windir%\temp to the scedata@microsoft.com. Please note copy following lines in the email body: http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=2703288&SiteID=17 Jie-Feng Ren - MSFT 4. At the same time, we also need the version of the SCE and QFE you installed. Thanks.

Hi, As this thread has been quiet for a while we will be changing the issue type to Comment. If you wish to return to this question you can go ahead and change the type back to Question. Then you can edit your initial post and change the radio button at the top of the post editor window. If the issue has been resolved, wed love to hear your solution. By sharing your experience you can help other community members facing similar problems. Thanks

Since installing SCE sp1 and configuring the override for the group synchronization rule and I am now seeing new problems with group synchronization between SCE and WSUS. Currently when computers are added or removed from exisiting groups the changes are not being synched at all to WSUS and I am seeing many of the following events (ID 30103) being logged in the ops manager eveny log: The SCE Group identified by 'cf025346-9f0a-7a3b-e401-c2673ed8f9d9' could not synchronize to its associated WSUS Group identified by '2fd649fc-d4af-489e-90ae-684a7631c463' because a connection to the SCE server could not be made. The synchronization will be retried. Management Group: *************** Rule: System.SCE.MP.GroupSynchronizationRule Instance: 2fd649fc-d4af-489e-90ae-684a7631c463.cf025346-9f0a-7a3b-e401-c2673ed8f9d9 Instance Id:{2760EC35-48CF-F028-4F1D-CEA73BEB5B77} The following error occurred. Microsoft.EnterpriseManagement.Common.ServerDisconnectedException: The client has been disconnected from the server. Please call ManagementGroup.Reconnect() to reestablish the connection. ---> System.ServiceModel.CommunicationObjectAbortedException: The communication object, System.ServiceModel.Channels.ServiceChannel, cannot be used for communication because it has been Aborted. Server stack trace: at System.ServiceModel.Channels.CommunicationObject.ThrowIfDisposedOrNotOpen() at System.ServiceModel.Channels.ServiceChannel.EnsureOpened(TimeSpan timeout) at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout) at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs) at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation) at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message) Exception rethrown at [0]: at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg) at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type) at Microsoft.EnterpriseManagement.Common.ITypeSpaceDataAccess.GetManagementPackLastChangeTime(String languageCode, Boolean forceDatabaseSync) at Microsoft.EnterpriseManagement.DataAbstractionLayer.TypeSpaceOperations.GetManagementPackLastChangeTime(String languageCode, Boolean forceDatabaseSync) --- End of inner exception stack trace --- at Microsoft.EnterpriseManagement.DataAbstractionLayer.SdkDataAbstractionLayer.HandleIndigoExceptions(Exception ex) at Microsoft.EnterpriseManagement.DataAbstractionLayer.TypeSpaceOperations.GetManagementPackLastChangeTime(String languageCode, Boolean forceDatabaseSync) at Microsoft.EnterpriseManagement.Configuration.TypeSpaceCacheBaseWithManagementPacks.GetLatestManagementPackChangedTime(String languageCode, Boolean forceDatabaseSync) at Microsoft.EnterpriseManagement.Configuration.TypeSpaceCache.Refresh(Boolean forceDatabaseSync, ManualResetEvent acquireCacheUpdateLockEvent) at Microsoft.EnterpriseManagement.ManagementGroupInternal.RefreshTypeCacheInternal(Boolean forceDatabaseSync, ManualResetEvent acquireCacheUpdateLockEvent) at Microsoft.EnterpriseManagement.ManagementGroup.RefreshTypeCache() at Microsoft.EnterpriseManagement.SCE.Modules.DeploymentGroupWriteActionModule.StartWriteAction() For more information, see Help and Support Center at Thanks, Tom

I am still making no progress with this problem. I am getting error ID 30103 being generated at half hour intervals. If I create a new computer group in SCE the group is synchronized to WSUS but the computers who are members are not: the new group just stays empty in WSUS. Tom

Hi, I have the same problem. I create group ONLY in SCE but in WSUS group membership is not the same. Some computers are missing in group. Did you find a sollution? Thanks Jan

Sori, I didnt notice that I have to change view in WSUS console to "any" updates from "needed". Group membership is OK but I still get mentioned event ID 30103 (warning) after each restart of SCE server. Maybe I will override this rule not to alerting me when group membership is OK. Jan

Thanks Tom, I dont have so many groups, just 5 till now. I have this alert only after restart SCE so I will override this rule. Maybe it is due to starting services and their dependencies. Jan

Our SCE 2007 SP1 system has these issues. We have about 40 computer groups. Is there a solution for systems with more that 29 groups (as above?)ThanksBrian