System Center Update Publisher 2011 on Windows Server 2012

SCUP 2011 is not compatible with Windows Server 2012 but there is a workaround to work, except for the following known issues:

  1. On Windows Server 2012, the WSUS version is 4.0. While on all other OS’s, you can only install WSUS 3.0 (with or without service pack). WSUS 3.0 & WSUS 4.0 cannot communicate with each other. So if you install SCUP on a machine with WSUS 3.0 admin console and try to publish to Windows Server 2012 with WSUS 4.0, you’ll get a WSUS version mismatch error in the SCUP log.
      • You can, however, install SCUP 2011 on Windows 8 and publish to the WSUS on Windows Server 2012. You need to install Remote Server Administration Tools for Win 8 on Windows 8 machine. It will install the WSUS 4.0 version of the WSUS admin console binary on Win 8. And with that, you can talk with WSUS 4.0 on Windows Server 2012.

2.  Low right user scenario is broken currently on Windows Server 2012. Normally, the user should only be in the WSUS administrative group to publish updates successfully. But the user to use and publish update to Windows Server 2012 must be a member of the local administrator.

Workaround for this: (do the followings changes, on the Windows Server 2012, at your own risk)

  1. Change the ownership of HKEY_CLASSES_ROOT\AppID\{8F5D3447-9CCE-455C-BAEF-55D42420143B} to Administrators – Change the permission on that key. Make sure Administrators and System have full control on that (
  2. Launch Dcomcnfg.exe in elevated mode.
  3. Select “Component Services – “Computers – “My Computer– “Dcom Config” – “WSusCertServer”, and press Right Click and select “Properties“.
  4. WSusCertServer Properties” dialog will show up, and click on “Security tab
  5. Set “Launch and Activation Permissions” and “Access Permissions” like the following


6.  Restart WSusCertServer service (net stop/net start)

Hope you enjoy using SCUP 2011 with Windows Server 2012.

Article has been copied from:


About João Carlos Dias

Senior Consultant at InfraHouse P/S
This entry was posted in SCCM, SCCM 2012 R2, SCUP, SCUP 2011, Windows 8, Windows Server 2012, WSUS. Bookmark the permalink.

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s