locked
WSUS Client computers are installing updates with a higher than 10 percent failure rate. RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    On our WSUS only one PC is failing to install 26 updates other PC has been successfully updated.

    Event log says "ID= 13001; Src= Windows Server Update Services; User= ; Catg= Clients ; D/T= 11/28/2014 08:43:19; EventDesc= Client computers are installing updates with a higher than 10 percent failure rate. This should be monitored."

    When I check the client PC no updates are showing on the PC. When I open report for the PC in the WSUS console, status is showing failed on 26 updates.

    When I click on the failed "No events are available. This may be because the client has not yet sent the event or the events have been purged from the server. Please refer to %WINDIR%\WindowsUpdate.log on wks01-win7.xxx.com for details."

    Tuesday, December 2, 2014 6:04 AM

Answers

  • Question
    Sign in to vote
    2
    Sign in to vote

    2014-11-24    07:53:12:330    1048    1f8    Agent      * WU client version 7.6.7600.320
    2014-11-24    07:54:07:102    1048    518    Misc    WARNING: Cab does not contain correct inner CAB file.

    Looks to me like the WUAgent is updated on this PC but the latest update is not applied to the WSUS server. Install KB2938066.

    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    • Marked as answer by paddy28 Monday, December 8, 2014 10:13 PM
    Friday, December 5, 2014 1:04 AM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    When I open report for the PC in the WSUS console, status is showing failed on 26 updates.

    When I click on the failed "No events are available. This may be because the client has not yet sent the event or the events have been purged from the server. Please refer to %WINDIR%\WindowsUpdate.log on wks01-win7.xxx.com for details."

    Okay... so... what's in the WindowsUpdate.log?

    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Tuesday, December 2, 2014 2:20 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    2014-11-24    07:53:12:268    1048    1f8    Misc    ===========  Logging initialized (build: 7.6.7600.320, tz: +1100)  ===========
    2014-11-24    07:53:12:299    1048    1f8    Misc      = Process: C:\Windows\system32\svchost.exe
    2014-11-24    07:53:12:299    1048    1f8    Misc      = Module: c:\windows\system32\wuaueng.dll
    2014-11-24    07:53:12:268    1048    1f8    Service    *************
    2014-11-24    07:53:12:299    1048    1f8    Service    ** START **  Service: Service startup
    2014-11-24    07:53:12:314    1048    1f8    Service    *********
    2014-11-24    07:53:12:330    1048    1f8    Agent      * WU client version 7.6.7600.320
    2014-11-24    07:53:12:377    1048    1f8    Agent      * Base directory: C:\Windows\SoftwareDistribution
    2014-11-24    07:53:12:439    1048    1f8    Agent      * Access type: No proxy
    2014-11-24    07:53:12:439    1048    1f8    Agent      * Network state: Connected
    2014-11-24    07:53:58:819    1048    1f8    Report    CWERReporter::Init succeeded
    2014-11-24    07:53:58:819    1048    1f8    Agent    ***********  Agent: Initializing Windows Update Agent  ***********
    2014-11-24    07:53:58:819    1048    1f8    Agent      * Prerequisite roots succeeded.
    2014-11-24    07:53:58:819    1048    1f8    Agent    ***********  Agent: Initializing global settings cache  ***********
    2014-11-24    07:53:58:819    1048    1f8    Agent      * WSUS server: http://SRV3
    2014-11-24    07:53:58:819    1048    1f8    Agent      * WSUS status server: http://SRV3
    2014-11-24    07:53:58:819    1048    1f8    Agent      * Target group: Win7
    2014-11-24    07:53:58:819    1048    1f8    Agent      * Windows Update access disabled: No
    2014-11-24    07:53:58:834    1048    1f8    DnldMgr    Download manager restoring 0 downloads
    2014-11-24    07:53:58:834    1048    1f8    AU    ###########  AU: Initializing Automatic Updates  ###########
    2014-11-24    07:53:58:834    1048    1f8    AU    AU setting next detection timeout to 2014-11-23 20:53:58
    2014-11-24    07:53:58:834    1048    1f8    AU    AU setting next sqm report timeout to 2014-11-23 20:53:58
    2014-11-24    07:53:58:834    1048    1f8    AU      # WSUS server: http://SRV3
    2014-11-24    07:53:58:834    1048    1f8    AU      # Detection frequency: 22
    2014-11-24    07:53:58:834    1048    1f8    AU      # Target group: Win7
    2014-11-24    07:53:58:834    1048    1f8    AU      # Approval type: Scheduled (Policy)
    2014-11-24    07:53:58:834    1048    1f8    AU      # Scheduled install day/time: Every day at 3:00
    2014-11-24    07:53:58:834    1048    1f8    AU      # Auto-install minor updates: Yes (User preference)
    2014-11-24    07:53:58:943    1048    1f8    AU    Initializing featured updates
    2014-11-24    07:53:58:943    1048    1f8    AU    Found 0 cached featured updates
    2014-11-24    07:53:59:521    1048    1f8    Report    ***********  Report: Initializing static reporting data  ***********
    2014-11-24    07:53:59:521    1048    1f8    Report      * OS Version = 6.1.7601.1.0.65792
    2014-11-24    07:53:59:521    1048    1f8    Report      * OS Product Type = 0x00000030
    2014-11-24    07:53:59:583    1048    1f8    Report      * Computer Brand = LENOVO
    2014-11-24    07:53:59:583    1048    1f8    Report      * Computer Model = 3392K2M
    2014-11-24    07:53:59:599    1048    1f8    Report      * Bios Revision = 9SKT61AUS
    2014-11-24    07:53:59:599    1048    1f8    Report      * Bios Name = LENOVO BIOS Rev: 9SKT61A 0.0
    2014-11-24    07:53:59:599    1048    1f8    Report      * Bios Release Date = 2013-02-27T00:00:00
    2014-11-24    07:53:59:599    1048    1f8    Report      * Locale ID = 3081
    2014-11-24    07:53:59:614    1048    1f8    AU    Successfully wrote event for AU health state:0
    2014-11-24    07:53:59:614    1048    1f8    AU    Successfully wrote event for AU health state:0
    2014-11-24    07:53:59:614    1048    1f8    AU    AU finished delayed initialization
    2014-11-24    07:53:59:614    1048    1f8    AU    AU setting next sqm report timeout to 2014-11-24 20:53:59
    2014-11-24    07:53:59:614    1048    1f8    AU    #############
    2014-11-24    07:53:59:614    1048    1f8    AU    ## START ##  AU: Search for updates
    2014-11-24    07:53:59:614    1048    1f8    AU    #########
    2014-11-24    07:53:59:692    1048    1f8    AU    <<## SUBMITTED ## AU: Search for updates [CallId = {1A5DDC52-123F-41C6-876F-D4058893BCCA}]
    2014-11-24    07:53:59:864    1048    518    Agent    *************
    2014-11-24    07:53:59:864    1048    518    Agent    ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2014-11-24    07:53:59:864    1048    518    Agent    *********
    2014-11-24    07:53:59:864    1048    518    Agent      * Online = Yes; Ignore download priority = No
    2014-11-24    07:53:59:864    1048    518    Agent      * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
    2014-11-24    07:53:59:864    1048    518    Agent      * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2014-11-24    07:53:59:864    1048    518    Agent      * Search Scope = {Machine}
    2014-11-24    07:53:59:864    1048    518    Setup    Checking for agent SelfUpdate
    2014-11-24    07:53:59:864    1048    518    Setup    Client version: Core: 7.6.7600.320  Aux: 7.6.7600.320
    2014-11-24    07:54:02:173    1048    518    Misc    Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab with dwProvFlags 0x00000080:
    2014-11-24    07:54:07:102    1048    518    Misc     Microsoft signed: NA
    2014-11-24    07:54:07:102    1048    518    Misc    WARNING: Cab does not contain correct inner CAB file.
    2014-11-24    07:54:07:102    1048    518    Misc    Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab with dwProvFlags 0x00000080:
    2014-11-24    07:54:07:102    1048    518    Misc     Microsoft signed: NA
    2014-11-24    07:54:07:118    1048    518    Setup    Wuident for the managed service is valid but not quorum-signed. Skipping selfupdate.
    2014-11-24    07:54:07:118    1048    518    Setup    Skipping SelfUpdate check based on the /SKIP directive in wuident
    2014-11-24    07:54:07:118    1048    518    Setup    SelfUpdate check completed.  SelfUpdate is NOT required.
    2014-11-24    07:54:09:864    1048    518    PT    +++++++++++  PT: Synchronizing server updates  +++++++++++
    2014-11-24    07:54:09:864    1048    518    PT      + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://SRV3/ClientWebService/client.asmx
    2014-11-24    07:54:09:879    1048    518    PT    WARNING: Cached cookie has expired or new PID is available
    2014-11-24    07:54:09:879    1048    518    PT    Initializing simple targeting cookie, clientId = 6436bd46-4f21-4f42-b7c4-37da65874a43, target group = Win7, DNS name = wks01-win7.poathrdclinic.net.au
    2014-11-24    07:54:09:879    1048    518    PT      Server URL = http://SRV3/SimpleAuthWebService/SimpleAuth.asmx
    2014-11-24    07:54:22:344    1048    1f8    AU    Forced install timer expired for scheduled install
    2014-11-24    07:54:22:344    1048    1f8    AU    UpdateDownloadProperties: 0 download(s) are still in progress.
    2014-11-24    07:54:22:344    1048    1f8    AU    Setting AU scheduled install time to 2014-11-24 16:00:00
    2014-11-24    07:54:22:344    1048    1f8    AU    Successfully wrote event for AU health state:0
    2014-11-24    07:54:22:484    1048    518    Agent      * Added update {425542E2-E1AE-458E-AB32-C2CF98038AB3}.102 to search result
    2014-11-24    07:54:22:484    1048    518    Agent      * Added update {687892D3-DB53-4CA2-A750-7F35A73C192A}.202 to search result
    2014-11-24    07:54:22:484    1048    518    Agent      * Added update {AEF6280F-8C4D-4804-9913-407582227E75}.202 to search result
    2014-11-24    07:54:22:484    1048    518    Agent      * Found 3 updates and 77 categories in search; evaluated appl. rules of 582 out of 1171 deployed entities
    2014-11-24    07:54:22:484    1048    518    Agent    *********
    2014-11-24    07:54:22:484    1048    518    Agent    **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2014-11-24    07:54:22:484    1048    518    Agent    *************
    2014-11-24    07:54:22:500    1048    9a8    AU    >>##  RESUMED  ## AU: Search for updates [CallId = {1A5DDC52-123F-41C6-876F-D4058893BCCA}]
    2014-11-24    07:54:22:500    1048    9a8    AU      # 3 updates detected
    2014-11-24    07:54:22:500    1048    9a8    AU    #########
    2014-11-24    07:54:22:500    1048    9a8    AU    ##  END  ##  AU: Search for updates [CallId = {1A5DDC52-123F-41C6-876F-D4058893BCCA}]
    2014-11-24    07:54:22:500    1048    9a8    AU    #############
    2014-11-24    07:54:22:500    1048    9a8    AU    Successfully wrote event for AU health state:0
    2014-11-24    07:54:22:500    1048    9a8    AU    Featured notifications is disabled.
    2014-11-24    07:54:22:500    1048    9a8    AU    AU setting next detection timeout to 2014-11-24 16:00:24
    2014-11-24    07:54:22:500    1048    9a8    AU    Setting AU scheduled install time to 2014-11-24 16:00:00
    2014-11-24    07:54:22:500    1048    9a8    AU    Successfully wrote event for AU health state:0
    2014-11-24    07:54:22:500    1048    9a8    AU    Successfully wrote event for AU health state:0
    2014-11-24    07:54:22:531    1048    518    Report    CWERReporter finishing event handling. (00000000)
    2014-11-24    07:54:27:351    1048    518    Report    REPORT EVENT: {5D137162-D051-494D-9AAB-590E136D400B}    2014-11-24 07:54:22:484+1100    1    147    101    {00000000-0000-0000-0000-000000000000}    0    0    AutomaticUpdates    Success    Software Synchronization    Windows Update Client successfully detected 3 updates.
    2014-11-24    07:54:27:351    1048    518    Report    REPORT EVENT: {9DC7B343-98C6-4375-9600-686E2631EA62}    2014-11-24 07:54:22:484+1100    1    156    101    {00000000-0000-0000-0000-000000000000}    0    0    AutomaticUpdates    Success    Pre-Deployment Check    Reporting client status.
    2014-11-24    07:54:27:367    1048    518    Report    CWERReporter finishing event handling. (00000000)
    2014-11-24    08:08:28:399    1048    518    Report    Uploading 2 events using cached cookie, reporting URL = http://SRV3/ReportingWebService/ReportingWebService.asmx
    2014-11-24    08:08:28:399    1048    518    Report    Reporter successfully uploaded 2 events.
    2014-11-24    13:03:24:970    1048    1f8    AU    Successfully wrote event for AU health state:0
    2014-11-24    13:03:29:979    1048    f8c    Report    CWERReporter finishing event handling. (00000000)
    2014-11-25    03:00:09:424    1048    1f8    AU    Forced install timer expired for scheduled install
    2014-11-25    03:00:09:424    1048    1f8    AU    UpdateDownloadProperties: 0 download(s) are still in progress.
    2014-11-25    03:00:09:424    1048    1f8    AU    Setting AU scheduled install time to 2014-11-25 16:00:00
    2014-11-25    03:00:09:424    1048    1f8    AU    Successfully wrote event for AU health state:0
    2014-11-25    03:00:14:432    1048    1790    Report    CWERReporter finishing event handling. (00000000)
    2014-11-25    03:00:24:509    1048    1f8    AU    #############
    2014-11-25    03:00:24:509    1048    1f8    AU    ## START ##  AU: Search for updates
    2014-11-25    03:00:24:509    1048    1f8    AU    #########
    2014-11-25    03:00:24:509    1048    1f8    AU    <<## SUBMITTED ## AU: Search for updates [CallId = {ADFEF23B-815D-4D6D-8E14-EB52BA013776}]
    2014-11-25    03:00:24:509    1048    1790    Agent    *************
    2014-11-25    03:00:24:509    1048    1790    Agent    ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2014-11-25    03:00:24:509    1048    1790    Agent    *********
    2014-11-25    03:00:24:509    1048    1790    Agent      * Online = Yes; Ignore download priority = No
    2014-11-25    03:00:24:509    1048    1790    Agent      * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
    2014-11-25    03:00:24:509    1048    1790    Agent      * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2014-11-25    03:00:24:509    1048    1790    Agent      * Search Scope = {Machine}
    2014-11-25    03:00:24:525    1048    1790    Setup    Checking for agent SelfUpdate
    2014-11-25    03:00:24:541    1048    1790    Setup    Client version: Core: 7.6.7600.320  Aux: 7.6.7600.320
    2014-11-25    03:00:27:146    1048    1790    Misc    Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab with dwProvFlags 0x00000080:
    2014-11-25    03:00:27:161    1048    1790    Misc     Microsoft signed: NA
    2014-11-25    03:00:27:161    1048    1790    Misc    WARNING: Cab does not contain correct inner CAB file.
    2014-11-25    03:00:27:161    1048    1790    Misc    Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab with dwProvFlags 0x00000080:
    2014-11-25    03:00:27:161    1048    1790    Misc     Microsoft signed: NA
    2014-11-25    03:00:27:161    1048    1790    Setup    Wuident for the managed service is valid but not quorum-signed. Skipping selfupdate.
    2014-11-25    03:00:27:161    1048    1790    Setup    Skipping SelfUpdate check based on the /SKIP directive in wuident
    2014-11-25    03:00:27:161    1048    1790    Setup    SelfUpdate check completed.  SelfUpdate is NOT required.
    2014-11-25    03:00:27:692    1048    1790    PT    +++++++++++  PT: Synchronizing server updates  +++++++++++
    2014-11-25    03:00:27:692    1048    1790    PT      + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://SRV3/ClientWebService/client.asmx
    2014-11-25    03:00:27:739    1048    1790    PT    WARNING: Cached cookie has expired or new PID is available
    2014-11-25    03:00:27:739    1048    1790    PT    Initializing simple targeting cookie, clientId = 6436bd46-4f21-4f42-b7c4-37da65874a43, target group = Win7, DNS name = wks01-win7.poathrdclinic.net.au
    2014-11-25    03:00:27:739    1048    1790    PT      Server URL = http://SRV3/SimpleAuthWebService/SimpleAuth.asmx
    2014-11-25    03:00:31:467    1048    1790    Agent      * Added update {425542E2-E1AE-458E-AB32-C2CF98038AB3}.102 to search result
    2014-11-25    03:00:31:467    1048    1790    Agent      * Added update {687892D3-DB53-4CA2-A750-7F35A73C192A}.202 to search result
    2014-11-25    03:00:31:467    1048    1790    Agent      * Added update {AEF6280F-8C4D-4804-9913-407582227E75}.202 to search result
    2014-11-25    03:00:31:467    1048    1790    Agent      * Found 3 updates and 77 categories in search; evaluated appl. rules of 582 out of 1171 deployed entities
    2014-11-25    03:00:31:467    1048    1790    Agent    *********
    2014-11-25    03:00:31:467    1048    1790    Agent    **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2014-11-25    03:00:31:467    1048    1790    Agent    *************
    2014-11-25    03:00:31:483    1048    1ab8    AU    >>##  RESUMED  ## AU: Search for updates [CallId = {ADFEF23B-815D-4D6D-8E14-EB52BA013776}]
    2014-11-25    03:00:31:483    1048    1ab8    AU      # 3 updates detected
    2014-11-25    03:00:31:483    1048    1ab8    AU    #########
    2014-11-25    03:00:31:483    1048    1ab8    AU    ##  END  ##  AU: Search for updates [CallId = {ADFEF23B-815D-4D6D-8E14-EB52BA013776}]
    2014-11-25    03:00:31:483    1048    1ab8    AU    #############
    2014-11-25    03:00:31:483    1048    1ab8    AU    Successfully wrote event for AU health state:0
    2014-11-25    03:00:31:483    1048    1ab8    AU    Featured notifications is disabled.
    2014-11-25    03:00:31:483    1048    1ab8    AU    AU setting next detection timeout to 2014-11-25 12:34:44
    2014-11-25    03:00:31:483    1048    1ab8    AU    Setting AU scheduled install time to 2014-11-25 16:00:00
    2014-11-25    03:00:31:483    1048    1ab8    AU    Successfully wrote event for AU health state:0
    2014-11-25    03:00:31:483    1048    1ab8    AU    Successfully wrote event for AU health state:0
    2014-11-25    03:00:36:475    1048    1790    Report    REPORT EVENT: {20BE2C5F-EADA-4D80-B015-B4A04472E296}    2014-11-25 03:00:31:467+1100    1    147    101    {00000000-0000-0000-0000-000000000000}    0    0    AutomaticUpdates    Success    Software Synchronization    Windows Update Client successfully detected 3 updates.
    2014-11-25    03:00:36:475    1048    1790    Report    REPORT EVENT: {9425E0C3-56DC-4DD6-9780-213FE982C497}    2014-11-25 03:00:31:467+1100    1    156    101    {00000000-0000-0000-0000-000000000000}    0    0    AutomaticUpdates    Success    Pre-Deployment Check    Reporting client status.
    2014-11-25    03:00:36:475    1048    1790    Report    CWERReporter finishing event handling. (00000000)
    2014-11-25    03:14:37:533    1048    1790    Report    Uploading 2 events using cached cookie, reporting URL = http://SRV3/ReportingWebService/ReportingWebService.asmx
    2014-11-25    03:14:37:549    1048    1790    Report    Reporter successfully uploaded 2 events.
    Thursday, December 4, 2014 11:05 PM
  • Question
    Sign in to vote
    2
    Sign in to vote

    2014-11-24    07:53:12:330    1048    1f8    Agent      * WU client version 7.6.7600.320
    2014-11-24    07:54:07:102    1048    518    Misc    WARNING: Cab does not contain correct inner CAB file.

    Looks to me like the WUAgent is updated on this PC but the latest update is not applied to the WSUS server. Install KB2938066.

    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    • Marked as answer by paddy28 Monday, December 8, 2014 10:13 PM
    Friday, December 5, 2014 1:04 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    number 5 resolved my issue

    http://blogs.technet.com/b/sus/archive/2009/11/17/tips-for-troubleshooting-wsus-agents-that-are-not-reporting-to-the-wsus-server.aspx

    Thanks for your help Lawrence!

    Monday, December 8, 2014 10:13 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    number 5 resolved my issue

    http://blogs.technet.com/b/sus/archive/2009/11/17/tips-for-troubleshooting-wsus-agents-that-are-not-reporting-to-the-wsus-server.aspx

    Most interesting.

    Thanks for the followup!

    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Tuesday, December 9, 2014 3:29 PM