has not been contacted yet!!!

Monday, January 07, 2008 5:32 PMGMcA

0
Sign In to Vote

Hi, I have been fighting with this issue for a few days now and I am hoping someone might be able to help.

All the clients and servers in SCE2007 are sitting at "This computer has not been contacted yet", under management status they show OK on Monitoring but Error on Deployments and Inventory and the only computer to show any information is the SCE server its self.

I have checked the GPO and they are correct (have deleted and recreated them just in case), checked the registry and its correct, disabled any old WSUS policies and enforced the new System Centre policies, the SCE group in AD has all the machines in it and I am running out of ideas.

I have built a new test machine that has Windows XP on it only and included some of the windowsupdate.log file bellow, Oh and we don’t use any proxy servers.

Any help with this would be much appreciated.

Code Block

Triggering AU detection through DetectNow API
2008-01-07 17:18:09:749 1064 f6c AU Triggering Online detection (non-interactive)
2008-01-07 17:18:09:749 1064 304 AU #############
2008-01-07 17:18:09:749 1064 304 AU ## START ## AU: Search for updates
2008-01-07 17:18:09:749 1064 304 AU #########
2008-01-07 17:18:09:749 1064 304 AU <<## SUBMITTED ## AU: Search for updates [CallId = {964D2668-2B15-47DD-9B29-24649595533B}]
2008-01-07 17:18:09:749 1064 890 Agent *************
2008-01-07 17:18:09:749 1064 890 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
2008-01-07 17:18:09:749 1064 890 Agent *********
2008-01-07 17:18:09:749 1064 890 Agent   * Online = Yes; Ignore download priority = No
2008-01-07 17:18:09:749 1064 890 Agent   * Criteria = "IsHidden=0 and IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and IsAssigned=1 or IsHidden=0 and IsInstalled=1 and DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and IsAssigned=1 and RebootRequired=1"
2008-01-07 17:18:09:749 1064 890 Agent   * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}
2008-01-07 17:18:09:749 1064 890 Misc Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab:
2008-01-07 17:18:09:749 1064 890 Misc Microsoft signed: Yes
2008-01-07 17:18:21:783 1064 890 Misc WARNING: Send failed with hr = 80072efd.
2008-01-07 17:18:21:783 1064 890 Misc WARNING: SendRequest failed with hr = 80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2008-01-07 17:18:21:783 1064 890 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <https://glascout.Moneyquest.co.uk:8531/selfupdate/wuident.cab>'>https://glascout.Moneyquest.co.uk:8531/selfupdate/wuident.cab">https://glascout.Moneyquest.co.uk:8531/selfupdate/wuident.cab>;. error 0x80072efd
2008-01-07 17:18:21:783 1064 890 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efd
2008-01-07 17:18:21:783 1064 890 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efd
2008-01-07 17:18:21:783 1064 890 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efd
2008-01-07 17:18:21:783 1064 890 Misc WARNING: Send failed with hr = 80072efd.
2008-01-07 17:18:21:783 1064 890 Misc WARNING: SendRequest failed with hr = 80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2008-01-07 17:18:21:783 1064 890 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <https://glascout.Moneyquest.co.uk:8531/selfupdate/wuident.cab>'>https://glascout.Moneyquest.co.uk:8531/selfupdate/wuident.cab">https://glascout.Moneyquest.co.uk:8531/selfupdate/wuident.cab>;. error 0x80072efd
2008-01-07 17:18:21:783 1064 890 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efd
2008-01-07 17:18:21:783 1064 890 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efd
2008-01-07 17:18:21:783 1064 890 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efd
2008-01-07 17:18:21:783 1064 890 Misc WARNING: Send failed with hr = 80072efd.
2008-01-07 17:18:21:783 1064 890 Misc WARNING: SendRequest failed with hr = 80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2008-01-07 17:18:21:783 1064 890 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <https://glascout.Moneyquest.co.uk:8531/selfupdate/wuident.cab>'>https://glascout.Moneyquest.co.uk:8531/selfupdate/wuident.cab">https://glascout.Moneyquest.co.uk:8531/selfupdate/wuident.cab>;. error 0x80072efd
2008-01-07 17:18:21:783 1064 890 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efd
2008-01-07 17:18:21:783 1064 890 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efd
2008-01-07 17:18:21:783 1064 890 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efd
2008-01-07 17:18:21:783 1064 890 Misc WARNING: Send failed with hr = 80072efd.
2008-01-07 17:18:21:783 1064 890 Misc WARNING: SendRequest failed with hr = 80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2008-01-07 17:18:21:783 1064 890 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <https://glascout.Moneyquest.co.uk:8531/selfupdate/wuident.cab>'>https://glascout.Moneyquest.co.uk:8531/selfupdate/wuident.cab">https://glascout.Moneyquest.co.uk:8531/selfupdate/wuident.cab>;. error 0x80072efd
2008-01-07 17:18:21:783 1064 890 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efd
2008-01-07 17:18:21:783 1064 890 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efd
2008-01-07 17:18:21:783 1064 890 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efd
2008-01-07 17:18:21:783 1064 890 Misc WARNING: DownloadFileInternal failed for https://glascout.Moneyquest.co.uk:8531/selfupdate/wuident.cabhttps://glascout.Moneyquest.co.uk:8531/selfupdate/wuident.cab">https://glascout.Moneyquest.co.uk:8531/selfupdate/wuident.cab</A< A>>: error 0x80072efd
2008-01-07 17:18:21:783 1064 890 Setup FATAL: IsUpdateRequired failed with error 0x80072efd
2008-01-07 17:18:21:783 1064 890 Setup WARNING: SelfUpdate: Default Service: IsUpdateRequired failed: 0x80072efd
2008-01-07 17:18:21:783 1064 890 Setup WARNING: SelfUpdate: Default Service: IsUpdateRequired failed, error = 0x80072EFD
2008-01-07 17:18:21:783 1064 890 Agent   * WARNING: Skipping scan, self-update check returned 0x80072EFD
2008-01-07 17:18:22:236 1064 890 Agent   * WARNING: Exit code = 0x80072EFD
2008-01-07 17:18:22:236 1064 890 Agent *********
2008-01-07 17:18:22:236 1064 890 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
2008-01-07 17:18:22:236 1064 890 Agent *************
2008-01-07 17:18:22:236 1064 890 Agent WARNING: WU client failed Searching for update with error 0x80072efd
2008-01-07 17:18:22:236 1064 698 AU >>## RESUMED ## AU: Search for updates [CallId = {964D2668-2B15-47DD-9B29-24649595533B}]
2008-01-07 17:18:22:236 1064 698 AU   # WARNING: Search callback failed, result = 0x80072EFD
2008-01-07 17:18:22:236 1064 698 AU   # WARNING: Failed to find updates with error code 80072EFD
2008-01-07 17:18:22:236 1064 698 AU #########
2008-01-07 17:18:22:236 1064 698 AU ## END ## AU: Search for updates [CallId = {964D2668-2B15-47DD-9B29-24649595533B}]
2008-01-07 17:18:22:236 1064 698 AU #############
2008-01-07 17:18:22:236 1064 698 AU AU setting next detection timeout to 2008-01-07 22:18:22
2008-01-07 17:18:22:236 1064 698 AU Setting AU scheduled install time to 2008-01-08 03:00:00
2008-01-07 17:18:26:790 1064 890 Report REPORT EVENT: {FB3D5569-3F47-42FC-8888-4AF7A2ED2854} 2008-01-07 17:18:21:783-0000 1 148 101 {D67661EB-2423-451D-BF5D-13199E37DF28} 0 80072efd SelfUpdate Failure Software Synchronization Windows Update Client failed to detect with error 0x80072efd.
- Reply
- Quote

Answers

Monday, January 14, 2008 6:23 AMXiu Zhang - MSFTMSFT

0
Sign In to Vote
Hi,

Two certificates for SCE are created during the installation.

Please verify if two certificate exist through the below steps.

1.   If you use domain policy, computer should has two Certificate imported after it applied System Center Essential All Computer group policy.

We can check it via ”Resultant Set of Policy” on the client computer.

“RSOP.MSC”-“Computer Configuration”- “Windows Settings”-“Security Settings”- “Public Key Policy”- ”Trusted Rooter Certification Authorities”

    Check whether certificate- “WSUS Publishers Self-signed” and certificate named with SCEServer full computer name exist in the right pane.

2. If at this time there’s still no certificates information, then we’ll move to check it in the Registry Editor.

Please check whether the key exist on server.

                 “Regedit”-HKLM\Software\Microsoft\System Center Essentials\1.0\PolicySettings (SSLCerthash and WSSUCodeSigningCertHash).

If we can not find certificates on SCE Server,then we have to re-install SCE.

Hope it helps.

Best regards,

Xiu Zhang - MSFT

Microsoft Online Community Support
- Reply
- Quote

All Replies

Wednesday, January 09, 2008 6:11 AMXiu Zhang - MSFTMSFT

0
Sign In to Vote
Hi,

0x80072efd is equal to error code:ERROR_INTERNET_CANNOT_CONNECT.

First,Please open a command prompt and type "Proxycfg" and enter to see whether proxy exists in the computer.

Then, please perform the following steps to delete the proxy settings in IE.

1. Open Internet Explorer on those problematic clients.

2. On the Tools menu, click Internet Options.

3. Click the Connections tab, and then click LAN Settings.

4. In the Local Area Network (LAN) Settings dialog box, click to select the Automatically detect settings check box and ensure there is no proxy setting, and then click OK.

5. Quit Internet Explorer.

6. Click Start, click Run, type cmd , and then click OK.

7. Type the following commands. Press ENTER after each command.

a. proxycfg -d

b. net stop wuauserv

c. net start wuauserv

d. exit

8. Run wuauclt /detectnow command.

If the above steps do not help then please delete all files and folders in c:\windows\SoftwareDistribution folder

1. Stop the Automatic Updates service
2. Delete all files and folders in c:\windows\SoftwareDistribution folder
3. Restart the Automatic Updates service

Please check whether "WSUS Publisher self-signed" in "Trusted Publisher" certificat store in IE(IE-Tools-Internet Options-Content-Certificates)

Artical shared below is just for your reference:

How the Windows Update client determines which proxy server to use to connect to the Windows Update Web site

http://support.microsoft.com/kb/900935/

Hope it helps.

Best regards,

Xiu Zhang - MSFT

Microsoft Online Community Support
- Reply
- Quote
Friday, January 11, 2008 12:51 AMPete Zerger - MVPMVP

0
Sign In to Vote
Obviously a proxy-related issue based on the error code. I wrote up a quick how-to for troubleshooting your Automatic Updates Client issues.

http://www.systemcenterforum.org/troubleshooting-the-automatic-updates-client-communication-for-sce-clients/
- Reply
- Quote
Friday, January 11, 2008 3:32 PMGMcA

0
Sign In to Vote

Thanks for the replies.

I have checked the certificates in IE and I don’t have "WSUS Publisher self-signed" in "Trusted Publisher", I have checked the SCE install folder and the certificates folder is empty on both the clients and the server, should this not contain the certificate for the server and if so can I recreate them?
- Reply
- Quote
Monday, January 14, 2008 6:23 AMXiu Zhang - MSFTMSFT

0
Sign In to Vote
Hi,

Two certificates for SCE are created during the installation.

Please verify if two certificate exist through the below steps.

1.   If you use domain policy, computer should has two Certificate imported after it applied System Center Essential All Computer group policy.

We can check it via ”Resultant Set of Policy” on the client computer.

“RSOP.MSC”-“Computer Configuration”- “Windows Settings”-“Security Settings”- “Public Key Policy”- ”Trusted Rooter Certification Authorities”

    Check whether certificate- “WSUS Publishers Self-signed” and certificate named with SCEServer full computer name exist in the right pane.

2. If at this time there’s still no certificates information, then we’ll move to check it in the Registry Editor.

Please check whether the key exist on server.

                 “Regedit”-HKLM\Software\Microsoft\System Center Essentials\1.0\PolicySettings (SSLCerthash and WSSUCodeSigningCertHash).

If we can not find certificates on SCE Server,then we have to re-install SCE.

Hope it helps.

Best regards,

Xiu Zhang - MSFT

Microsoft Online Community Support
- Reply
- Quote
Monday, January 14, 2008 1:54 PMGMcA

0
Sign In to Vote
Thanks, that's solved the issue.

Checked for the certificates and no sign of them anywhere so reinstalled and agents are now reporting in.
- Reply
- Quote
Tuesday, January 15, 2008 2:41 AMXiu Zhang - MSFTMSFT

0
Sign In to Vote
I'm glad to hear that!
- Reply
- Quote