SCCM 2007 Patch Deployment issue "The requested header was not found"
-
Monday, January 31, 2011 7:29 PMI've been deploying patches through SCCM for quite a while but now i am receiving the error "The requested header was not found" and the updates will not push. Well some updates will, but the majority of MS patches will not due to this error. I have checked the rights on the patch download folders and checked event viewer info and just can't seem to figure out what changed. Software/OS pushes have no issues, just MS Patches. I'd love some info because i can not deploy patches until i get this figured out.
All Replies
-
Tuesday, February 01, 2011 2:11 AM
Hello - Did you check the log files?
scanagent.log, WUAHandler.log and UpdatesHandler.log
checkout the above mentioned logs on client machine. May be, you will get more details?
Anoop C Nair -
Tuesday, February 01, 2011 2:25 PM
I am seeing these in the WUAHandler.log.
[Unable to read existing resultant WUA policy. Error = 0x80070002.
<![LOG[Group policy settings were overwritten by a higher authority (Domain Controller) to: Server and Policy NOT CONFIGURED]LOG]!><time="14:07:02.393+300" date="12-17-2008" component="WUAHandler" context="" type="3" thread="10944" file="sourcemanager.cpp:1107">
<![LOG[Failed to Add Update Source for WUAgent of type (2) and id ({FB50A1D9-BCB1-4AD7-B38C-7BBD0C6F35E1}). Error = 0x80040692.]LOG]!><time="14:07:02.393+300" date="12-17-2008" component="WUAHandler" context="" type="3" thread="10944" file="cwuahandler.cpp:2358"> -
Tuesday, February 01, 2011 2:46 PM
Hello - It seems a GP conflict
Troubleshooting Group Policy Configuration for Software Updatescheck out the technet article
http://technet.microsoft.com/en-us/library/bb735866.aspx
Anoop C Nair -
Tuesday, February 01, 2011 3:38 PM
the problem still lies on the server though. I select my updates and choose to deploy the updates, go through the steps and the summary screen is where i receive the requested header not found error. It won't even download the updates on the server for these patches. I do not have an issue with the client machines receiving the patches.
And this was all working before and something changed but i am just not sure what. I know this server was patched , which included Nov and Dec patches but i didnt see anything that would affect this.
I'm at a loss for what to look for now.
-
Tuesday, February 01, 2011 3:51 PMI also checked the server where SCCM is housed and the gpo for our servers is configured how it should be, per the article you provided. I did also make the change to Not configured just to see if that made any difference, which it did not.
- Edited by DS Jones Tuesday, February 01, 2011 4:12 PM
-
Tuesday, February 01, 2011 4:11 PMAlso in SCCM, under Deployment Management the deployment i create no longer gets created and the updates i select to download and deploy are not added to the Deployment Packages in SCCM.
-
Tuesday, February 01, 2011 4:38 PM
go through the steps and the summary screen is where i receive the requested header not found error.
I get that in my lab when the networking guys are playing with firewall rules and forget to exclude SCCM and it's needed ports. I usually have to remind them to keep the Firewall rules in place so I can test stuff.
But looking at the message from the above log file, it does look like a GPO is in conflict with the Windows update setting which should be set to disabled. Teh SCCM client is the point of management. If you set it to not configured it "dials" back to microsoft for updates. Enabled it obviously looks for the WSUS service.
From personal experience when moving from SU to WSUS there were GPO's all over the place that were overwriting the Windows Update service. Namely the domain level GPO on the root. Took a week trying to figure out where the last guy put it all (GPO settings). GPO's and rabbits have one thing in common, they tend to multiply over time.
- Edited by Christopher Lynn Tuesday, February 01, 2011 4:40 PM additional info
-
Tuesday, February 01, 2011 4:43 PMIf you want I can send you the procedure guide I wrote for our service desk. Nice thing about being the engineer is making sure you have documents to give to other people so they can test the theory of whether or not I'm useful. SU is a little complicated, but the procedural nightmare is easy enough once you get it rolling.
-
Tuesday, February 01, 2011 4:57 PMthat would be great if you could send me the guide. i'll follow-up if i find it useful or if i run into issues if you'd like.
-
Tuesday, February 01, 2011 5:28 PMSounds good. I'll throw it over now.
-
Tuesday, February 01, 2011 5:37 PM
http://cid-c90f28873d8dcada.office.live.com/browse.aspx/.Public
It's up on my skydrive. I tried to remove the reference (location) stuff. If you want to reuse the template just change EC to whatever your group/company name is.
- Edited by Christopher Lynn Tuesday, February 01, 2011 5:38 PM edits
-
Tuesday, February 01, 2011 6:55 PMI actually follow this method you have documented already and i thank you for sharing. But this doesnt help me troubleshoot the issue. I turned the gpo to disabled(Specify Intranet MS Update Service Location) and this did not solve the problem. Any other ideas would be most invited and i thank you again for your time.
-
Tuesday, February 01, 2011 7:26 PM
Did you do GPO Results on one of your clients to determine if the GPO is being pulled/overwritten by a hidden GPO setting that is possibly being inherited. A GPO doesn't necessarily have to be in the OU or on the domain root to mess with your workstations. I think we all learn that once or twice the hard way.
SU went well for myself, I did catch a couple inherited GPO's from a test workstation OU I have operating as staging taht would have caused me problems.
The Header information though is the tricky one. I would ask what your firewall rules are, but this is a public forum. If you can terminal into the firewall (if it's an appliance) and watch the logs on the firewall when you force a download to your deployment template package.
Keep an eye out for your internal SCCM IP address and make sure it actually has an ack and syn, to and from Microsoft update service (on the MS site) back to your SCCM server.
Or is your setup a Client <-> SCCM/SU <-> WSUS <- Microsoft , instead of a Client <-> SCCM/SU <-Microsoft ?
With the GPO errors and the Header error message I think you are chasing a couple of rabbits at the same time. Easiest to fix is the GPO one first.
Then double check on how the setup of SU is configured.
Then take a look at the firewall configuration (both the layer 3 perimeter FW/VPN and Windows Firewall on SCCM/Client).
-
Tuesday, May 10, 2011 6:28 PMDid you ever figure this out? I'm having the exact same issue. Everyone keeps saying client this and client that but it is the SERVER that is not pulling download the updates and creating the deployments. Anyway, if you figured it out can you tell me how you did it? Thanks!
-
Thursday, May 12, 2011 3:18 PM
I am having the same issues as well. Everything was working for last months patches. Nothing has changed as far as I know. It seems to be sporadic as sometimes I am able to get a file downloaded other times not. Just to be clear here is what I am attempting to do.
I've created a new deployment package to make sure that wasn't it. I go to the update I am looking for under my search folders and select "download software updates." I specify the package, tell it to download from the internet, and get a warning when the wizard completes saying "The requested header was not found" When I look at my SmsAdminUI.log file it shows the error:
[11][5/12/2011 8:14:46 AM] :(SMS_PackageToContent.ContentID=34761,PackageID='CCC00059') does not exist or its IsContentValid returns false. We will (re)download this content.
[11][5/12/2011 8:14:46 AM] :Error Downloading SourceURL
http://download.windowsupdate.com/msdownload/update/software/crup/2011/05/outlfltr_c3168cd59cb1d194edcb831e6edaffa52d49707f.ca0b
[11][5/12/2011 8:14:46 AM] :Failed to download update f06a7a85-24d1-48f4-8806-f96c915c8b87!
[11][5/12/2011 8:14:46 AM] :Error: The requested header was not found
Someone mentioned looking at network traffic and doing a capture seems to show that our server is able to communicate with the MSupdate server and begins to download the file. I'm by no means a network expert so I could be missing something but all looks well on that side.
This one really has be stumped so any input or suggestions would be appreciated.
-
Saturday, May 14, 2011 1:38 PM
JPER02,
Check if you have web content filtering application in your netowrk, like Bluecoat or websense.
-
Friday, May 25, 2012 8:00 AM
Hi all,
Please refer the below link for similar issue and solution.
- http://social.technet.microsoft.com/Forums/en-US/configmgrsum/thread/e2ff1495-8f30-428f-9e7f-00e73d8e86b3
- http://social.technet.microsoft.com/Forums/en-US/configmgrsum/thread/4f6b3315-3f66-4d76-b7e9-ff755c5c7940
scorpITs | http://scorpITs.blogspot.com

