locked
Windows updates issue RRS feed

  • Question

  • Hi,

    I have just started rolling out SCCM 2012 client, and I notice the following in my windowsupdate.log which seems to indicate that the client is trying to go out to the internet to download updates. We do not allow clients to go out through the firewall, all updates are downloaded by the SUP. I'm just wondering if this is something to do with an SCEP setting

    2013-03-01 08:37:58:515 1132 ac8 Misc WARNING: Send failed with hr = 80072ee2.
    2013-03-01 08:37:58:515 1132 ac8 Misc WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
    2013-03-01 08:37:58:515 1132 ac8 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://download.windowsupdate.com/v9/windowsupdate/redir/muv4wuredir.cab>. error 0x80072ee2
    2013-03-01 08:37:58:515 1132 ac8 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2013-03-01 08:37:58:515 1132 ac8 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2013-03-01 08:37:58:515 1132 ac8 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2

    Is there a setting to stop the above messages which all appear in red in the windowsupdate.log? I have disabled alternate sources for initial endpoint definition update on client settings, and I only have definitions distributed from Configmgr and WSUS (is the wsus mentioned my internal wsus which the sup uses?) enabled for my custom antimalware policy. I haven't touched the default antimalware policy.

    Thanks


    Jaz


    • Edited by JazK Friday, March 1, 2013 12:44 PM added
    Friday, March 1, 2013 12:43 PM

Answers

  • I think the problem may be scep related, so I'll raise a different question.

    thanks


    Jaz

    • Marked as answer by JazK Friday, March 1, 2013 2:06 PM
    Friday, March 1, 2013 2:06 PM

All replies

  • CmTrace just marks the lines based on keywords (error = red, warning = yellow ...).

    So although the entries colour your log file red, it does not always mean there is a problem ...

    Friday, March 1, 2013 12:51 PM
  • Hi,

    It looks like it is trying to access Microsoft Update, have you enabled the client settings for Software Updates (it is default though) Is the SUP Active in the site? There should be a local policy which configure the client to use the SUP as the Software Update source.

    Regards,
    Jörgen 


    -- My System Center blog ccmexec.com -- Twitter @ccmexec

    Friday, March 1, 2013 1:31 PM
  • Hi,

    I have an active SUP and the wuauhandler log shows it is pointing to the sup. The local policy also shows the correct wu server info. windows updates get downloaded from the sup.

    I think it may be to do with SCEP 2012 trying the MS windows update site, and I have been through all the settings and haven't got ms website selected.


    Jaz

    Friday, March 1, 2013 1:38 PM
  • I think the problem may be scep related, so I'll raise a different question.

    thanks


    Jaz

    • Marked as answer by JazK Friday, March 1, 2013 2:06 PM
    Friday, March 1, 2013 2:06 PM