I have following configuration Server1 - WSUS Server Server2 - SCCM Site server What is the correct way to configure first sync with Microsoft updates Do I configure very first sync from WSUS server or should I configure it from SCCM site server ?

Install and configure the SUP role on Server1 and let ConfigMgr do the rest (sync).

Hi, No, you don't required to sync from WSUS server. WSUS server just needs to be installed and it is not required to configure it. You will have to install SUP role on Server1,set it to active. SCCM auto configures WSUS and initiates the sync with Microsoft Update. http://technet.microsoft.com/en-us/library/bb680712.aspx http://technet.microsoft.com/en-us/library/bb680313.aspx http://technet.microsoft.com/en-us/library/bb633236.aspx http://technet.microsoft.com/en-us/library/bb632893.aspx Regards, Madan | www.madanmohan.com

SUP role is configured on SCCM server . No configuration is done on WSUS server . There is no firewall between WSUS and SCCM server. WSUS has direct connectivity to Internet. Still no update appearing in SCCM server console . It is been more than 24hrs .

Have you checked and ensured that SUP is installed successfully? Did you configured it to Active SUP? Open SUPSetup.log in <InstallationPath>\Logs to monitor the installation progress for the software update point. When the installation completes, Installation was successful is written to the log file. Open WCM.log in <InstallationPath>\Logs to verify that the connection to the WSUS server was successful. When the connection to the WSUS server has been established and the WSUS components have been verified, There are no unhealthy WSUS Server components on WSUS Server servername and Successfully checked database connection on WSUS server servername are written to the log file. Regards, Madan | www.madanmohan.com

You need to check the wcm.log, wsynmgr.log and wsusctrl.log all log files on the site server. Most likely the ConfigMgr. server is missing permissions on the WSUS box. Make sure that the site servers computer account is member of the local admin group on the WSUS server.Kent Agerlund | My blogs: http://blog.coretech.dk/author/kea/ and http://scug.dk/ | Twitter @Agerlund | Linkedin: /kentagerlund

Adding server locator point role on SCCM resolved the issue. I cannot find SUPSetup.log on entire drive . Is there something wrong with my configuration of server ? Updates are syncing now though

It should be on server1.Regards, Madan | www.madanmohan.com

Thanks a lot .