Connexion
Microsoft.com
 
Pour les professionnels de l’informatique
 
 
 
Pour les professionnels de l’informatique > Forums - Accueil > System Center Essentials - General > Clients not conntecting to SCE/WSUS
Poser une questionPoser une question
Rechercher dans les forums :
 

TraitéeClients not conntecting to SCE/WSUS

  • lundi 29 juin 2009 14:56Nazta Médailles de l'utilisateurMédailles de l'utilisateurMédailles de l'utilisateurMédailles de l'utilisateurMédailles de l'utilisateur
     
    Connectez-vous pour voter
    0
    Connectez-vous pour voter
    hello,

    we use SCE 2007 as our Windows update server as well and we recently re-built the server from scratch.  We are trying to iron out a few issues.

    At the moment all the clients are showing in SCE as "not bieng contacted by SCE yet" to get updates and inventory

    when I checked the WindowsUpdate.log on the client after running the wuauclt /detectnow it shows the following - for Privacy I have replaced the server name with SCEServer

    2009-06-29 15:48:54:393 1244 ff0 AU Triggering AU detection through DetectNow API
    2009-06-29 15:48:54:393 1244 ff0 AU Triggering Online detection (non-interactive)
    2009-06-29 15:48:54:393 1244 210 AU #############
    2009-06-29 15:48:54:393 1244 210 AU ## START ##  AU: Search for updates
    2009-06-29 15:48:54:393 1244 210 AU #########
    2009-06-29 15:48:54:393 1244 210 AU <<## SUBMITTED ## AU: Search for updates [CallId = {2F732F40-CD7F-4B86-9233-333845A0D8E9}]
    2009-06-29 15:48:54:393 1244 270 Agent *************
    2009-06-29 15:48:54:393 1244 270 Agent ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2009-06-29 15:48:54:393 1244 270 Agent *********
    2009-06-29 15:48:54:393 1244 270 Agent   * Online = Yes; Ignore download priority = No
    2009-06-29 15:48:54:393 1244 270 Agent   * Criteria = "IsHidden=0 and IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and IsAssigned=1 or IsHidden=0 and IsInstalled=1 and DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and IsAssigned=1 and RebootRequired=1"
    2009-06-29 15:48:54:393 1244 270 Agent   * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}
    2009-06-29 15:48:54:393 1244 270 Agent   * Search Scope = {Machine}
    2009-06-29 15:48:54:393 1244 270 Misc Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab:
    2009-06-29 15:48:54:393 1244 270 Misc  Microsoft signed: Yes
    2009-06-29 15:48:54:408 1244 270 Misc WARNING: Send failed with hr = 80072f8f.
    2009-06-29 15:48:54:408 1244 270 Misc WARNING: SendRequest failed with hr = 80072f8f. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
    2009-06-29 15:48:54:408 1244 270 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <https://SCE Server:8531/selfupdate/wuident.cab>. error 0x80072f8f
    2009-06-29 15:48:54:408 1244 270 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f8f
    2009-06-29 15:48:54:408 1244 270 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072f8f
    2009-06-29 15:48:54:408 1244 270 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072f8f
    2009-06-29 15:48:54:408 1244 270 Misc WARNING: Send failed with hr = 80072f8f.
    2009-06-29 15:48:54:408 1244 270 Misc WARNING: SendRequest failed with hr = 80072f8f. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
    2009-06-29 15:48:54:408 1244 270 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <https://SCEServer:8531/selfupdate/wuident.cab>. error 0x80072f8f
    2009-06-29 15:48:54:408 1244 270 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f8f
    2009-06-29 15:48:54:408 1244 270 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072f8f
    2009-06-29 15:48:54:408 1244 270 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072f8f
    2009-06-29 15:48:54:408 1244 270 Misc WARNING: Send failed with hr = 80072f8f.
    2009-06-29 15:48:54:408 1244 270 Misc WARNING: SendRequest failed with hr = 80072f8f. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
    2009-06-29 15:48:54:408 1244 270 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <https://SCE Server:8531/selfupdate/wuident.cab>. error 0x80072f8f
    2009-06-29 15:48:54:424 1244 270 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f8f
    2009-06-29 15:48:54:424 1244 270 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072f8f
    2009-06-29 15:48:54:424 1244 270 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072f8f
    2009-06-29 15:48:54:424 1244 270 Misc WARNING: Send failed with hr = 80072f8f.
    2009-06-29 15:48:54:424 1244 270 Misc WARNING: SendRequest failed with hr = 80072f8f. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
    2009-06-29 15:48:54:424 1244 270 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <https://SCEServer:8531/selfupdate/wuident.cab>. error 0x80072f8f
    2009-06-29 15:48:54:424 1244 270 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f8f
    2009-06-29 15:48:54:424 1244 270 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072f8f
    2009-06-29 15:48:54:424 1244 270 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072f8f
    2009-06-29 15:48:54:424 1244 270 Misc WARNING: DownloadFileInternal failed for https://SCEServer:8531/selfupdate/wuident.cab: error 0x80072f8f
    2009-06-29 15:48:54:424 1244 270 Setup FATAL: IsUpdateRequired failed with error 0x80072f8f
    2009-06-29 15:48:54:424 1244 270 Setup WARNING: SelfUpdate: Default Service: IsUpdateRequired failed: 0x80072f8f
    2009-06-29 15:48:54:424 1244 270 Setup WARNING: SelfUpdate: Default Service: IsUpdateRequired failed, error = 0x80072F8F
    2009-06-29 15:48:54:424 1244 270 Misc Registering binary: C:\WINDOWS\system32\regsvr32.exe  /s "C:\WINDOWS\system32\wintrust.dll"
    2009-06-29 15:48:54:486 1244 270 Misc Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab:
    2009-06-29 15:48:54:486 1244 270 Misc  Microsoft signed: Yes
    2009-06-29 15:48:54:486 1244 270 Misc WARNING: Send failed with hr = 80072f8f.
    2009-06-29 15:48:54:486 1244 270 Misc WARNING: SendRequest failed with hr = 80072f8f. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
    2009-06-29 15:48:54:486 1244 270 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <https://SCEServer:8531/selfupdate/wuident.cab>. error 0x80072f8f
    2009-06-29 15:48:54:486 1244 270 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f8f
    2009-06-29 15:48:54:486 1244 270 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072f8f
    2009-06-29 15:48:54:486 1244 270 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072f8f
    2009-06-29 15:48:54:502 1244 270 Misc WARNING: Send failed with hr = 80072f8f.
    2009-06-29 15:48:54:502 1244 270 Misc WARNING: SendRequest failed with hr = 80072f8f. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
    2009-06-29 15:48:54:502 1244 270 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <https://SCEServer:8531/selfupdate/wuident.cab>. error 0x80072f8f
    2009-06-29 15:48:54:502 1244 270 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f8f
    2009-06-29 15:48:54:502 1244 270 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072f8f
    2009-06-29 15:48:54:502 1244 270 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072f8f
    2009-06-29 15:48:54:518 1244 270 Misc WARNING: Send failed with hr = 80072f8f.
    2009-06-29 15:48:54:518 1244 270 Misc WARNING: SendRequest failed with hr = 80072f8f. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
    2009-06-29 15:48:54:518 1244 270 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <https://SCEServer:8531/selfupdate/wuident.cab>. error 0x80072f8f
    2009-06-29 15:48:54:518 1244 270 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f8f
    2009-06-29 15:48:54:518 1244 270 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072f8f
    2009-06-29 15:48:54:518 1244 270 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072f8f
    2009-06-29 15:48:54:518 1244 270 Misc WARNING: Send failed with hr = 80072f8f.
    2009-06-29 15:48:54:518 1244 270 Misc WARNING: SendRequest failed with hr = 80072f8f. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
    2009-06-29 15:48:54:518 1244 270 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <https://SCEServer:8531/selfupdate/wuident.cab>. error 0x80072f8f
    2009-06-29 15:48:54:518 1244 270 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f8f
    2009-06-29 15:48:54:518 1244 270 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072f8f
    2009-06-29 15:48:54:518 1244 270 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072f8f
    2009-06-29 15:48:54:518 1244 270 Misc WARNING: DownloadFileInternal failed for https://SCEServer:8531/selfupdate/wuident.cab: error 0x80072f8f
    2009-06-29 15:48:54:518 1244 270 Setup FATAL: IsUpdateRequired failed with error 0x80072f8f
    2009-06-29 15:48:54:518 1244 270 Setup WARNING: SelfUpdate: Default Service: IsUpdateRequired failed: 0x80072f8f
    2009-06-29 15:48:54:518 1244 270 Setup WARNING: SelfUpdate: Default Service: IsUpdateRequired failed, error = 0x80072F8F
    2009-06-29 15:48:54:518 1244 270 Agent   * WARNING: Skipping scan, self-update check returned 0x80072F8F
    2009-06-29 15:48:55:486 1244 270 Agent   * WARNING: Exit code = 0x80072F8F
    2009-06-29 15:48:55:486 1244 270 Agent *********
    2009-06-29 15:48:55:486 1244 270 Agent **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2009-06-29 15:48:55:486 1244 270 Agent *************
    2009-06-29 15:48:55:486 1244 270 Agent WARNING: WU client failed Searching for update with error 0x80072f8f
    2009-06-29 15:48:55:486 1244 efc AU >>##  RESUMED  ## AU: Search for updates [CallId = {2F732F40-CD7F-4B86-9233-333845A0D8E9}]
    2009-06-29 15:48:55:486 1244 efc AU   # WARNING: Search callback failed, result = 0x80072F8F
    2009-06-29 15:48:55:486 1244 efc AU   # WARNING: Failed to find updates with error code 80072F8F
    2009-06-29 15:48:55:486 1244 efc AU #########
    2009-06-29 15:48:55:486 1244 efc AU ##  END  ##  AU: Search for updates [CallId = {2F732F40-CD7F-4B86-9233-333845A0D8E9}]
    2009-06-29 15:48:55:486 1244 efc AU #############
    2009-06-29 15:48:55:486 1244 efc AU AU setting next detection timeout to 2009-06-29 15:45:42
    2009-06-29 15:48:55:486 1244 efc AU Setting AU scheduled install time to 2009-07-03 15:00:00

    I have another post which details the SCE side issue more

    http://social.technet.microsoft.com/Forums/en-US/systemcenter/thread/3abf8f8a-3796-4440-b7aa-150b7f3d95e6/?prof=required
     

Réponses

  • mercredi 1 juillet 2009 04:23Jie-Feng Ren - MSFTMSFT, ModérateurMédailles de l'utilisateurMédailles de l'utilisateurMédailles de l'utilisateurMédailles de l'utilisateurMédailles de l'utilisateur
     Traitée
    Connectez-vous pour voter
    0
    Connectez-vous pour voter
    Hi,

    From the log, I find following error message:

    2009-06-29 15:48:54:408 1244 270 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <https://SCE Server:8531/selfupdate/wuident.cab>. error 0x80072f8f

    clients contact with SCE server using netbios name instead of FQDN of SCE server. Please change to FQDN name in GPO and check if you can browser https://<FQDNSceserver>:8531/selfupdate/wuident.cab correctly on problematice clients.

    Run rsop.msc on clients to check whether the GPOs: SCE Managed Computers Group Policy& System Center Essentials All Computers Policy had been applied correctly on clients.
    Check that the client is configured to use the SCE server for Windows Updates.  The following registry entries should be set to https://<SCEServerFQDN>:8531
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\WUServer
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\WUStatusServer

    Check whether the required ports for communication between clients and server had been opened, or disable the firewall as a test. 

    Is there a proxy server in your scenario? If not, please ensure there is no proxy setting in IE and run proxycfg -d (netsh winhttp reset proxy in vista)command on problematic SCE clients.

    Run wuauclt /detectnow and reportnow on the SCE agents.

    HTH.

    Jie-Feng Ren - MSFT
     

Toutes les réponses

  • mercredi 1 juillet 2009 04:23Jie-Feng Ren - MSFTMSFT, ModérateurMédailles de l'utilisateurMédailles de l'utilisateurMédailles de l'utilisateurMédailles de l'utilisateurMédailles de l'utilisateur
     Traitée
    Connectez-vous pour voter
    0
    Connectez-vous pour voter
    Hi,

    From the log, I find following error message:

    2009-06-29 15:48:54:408 1244 270 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <https://SCE Server:8531/selfupdate/wuident.cab>. error 0x80072f8f

    clients contact with SCE server using netbios name instead of FQDN of SCE server. Please change to FQDN name in GPO and check if you can browser https://<FQDNSceserver>:8531/selfupdate/wuident.cab correctly on problematice clients.

    Run rsop.msc on clients to check whether the GPOs: SCE Managed Computers Group Policy& System Center Essentials All Computers Policy had been applied correctly on clients.
    Check that the client is configured to use the SCE server for Windows Updates.  The following registry entries should be set to https://<SCEServerFQDN>:8531
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\WUServer
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\WUStatusServer

    Check whether the required ports for communication between clients and server had been opened, or disable the firewall as a test. 

    Is there a proxy server in your scenario? If not, please ensure there is no proxy setting in IE and run proxycfg -d (netsh winhttp reset proxy in vista)command on problematic SCE clients.

    Run wuauclt /detectnow and reportnow on the SCE agents.

    HTH.

    Jie-Feng Ren - MSFT
     
  • mercredi 1 juillet 2009 07:58Pete Zerger - MVPMVPMédailles de l'utilisateurMédailles de l'utilisateurMédailles de l'utilisateurMédailles de l'utilisateurMédailles de l'utilisateur
     
    Connectez-vous pour voter
    0
    Connectez-vous pour voter
    I agree with Jie-Feng that the issue may well be related to the name, as the 0x80072f8f error code indicates an SSL connectivity-related error. Make sure you can ping SCE Server by FQDN from the downstream node and follow JF's steps below.
    Pete Zerger, MVP-OpsMgr and SCE | http://www.systemcentercentral.com
     
  • lundi 17 août 2009 01:21Surgez Médailles de l'utilisateurMédailles de l'utilisateurMédailles de l'utilisateurMédailles de l'utilisateurMédailles de l'utilisateur
     
    Connectez-vous pour voter
    0
    Connectez-vous pour voter
    Thought i would add my piece to this post as I had this exact same problem, and after hours of searching and troubleshooting and trying all the various ideas offered up, i checked the IIS settings for the WSUS administration site. Under properties and ssl certiciates i had a certificate available but i could not view its details and only had the option to renew or replace certificate under the SSL wizard. It ended up that i had recently loaded the CA Authority as an enterprise trusted root, on to the SBS box running SCE and for some reason the certificate had been removed in this process (no idea as to why and i could not locate the certificate which had been used). I simply issued a certificate for the sceserver.fqdn and using replace in the wizard imported it to the site in IIS and voila problem gone and clients all contactable.

    Quick check if your problem is similar is to visit in a browser, from server or any client:

    1) https://sceserver.fqdn:8531/selfupdate/wuident.cab

    (page cannot be displayed, ssl cert screwed)

    or

    2) http://sceserver.fqdn:8530/selfupdate/wuident.cab

    (file can be downloaded without ssl)

    The problem specified in windowsupdate.log says that 1) is not contactable and hence the problem with the SSL cert. I have seen this on more than one site but i cannot be any more specific as to what caused the problem in the first place as i had installed the CA authority on all sites at the same time, it may be an update, but i think it more likely the installation of the CA authority porked the certificate that was already being used.
     
  • lundi 17 août 2009 09:30Nazta Médailles de l'utilisateurMédailles de l'utilisateurMédailles de l'utilisateurMédailles de l'utilisateurMédailles de l'utilisateur
     
    Connectez-vous pour voter
    0
    Connectez-vous pour voter
    thanks for the reply Surgez,

    I tried both URL - https and http and couldnt access both so I guess ssl is screwed.

    what I wanted to know was how do I check the IIS settings for the WSUS admin site and how do I renew the cert or replace it with the SSL wizard?

    Regards