Answered by:
Windows 10 1607 Suddenly can't update

Question
-
Hi All,
An odd one I'm really pulling my hair out with now.
We have a 2012 R2 WSUS box based on our site. We use it to update our Win7 and Win10 clients.
Week before last I came to generate new reference build images for Win7 and Win10 with the latest updates inthem(we use ZTI_WindowsUpdate.wsf in MDT) and noticed Win10 was installing between 0 and 20 patches, and the patches it was installing were office ones. The last image I'd done in July installed ~120. Win7 was fine.
I am usually seening error 0x8024401C in eventviewer and in WindowsUpdate.log (when the powershell script generates readable data!) which I believe is due to not being able to communicate with the WSUS box. Except I can ping the server, connect to IS on it from the clients, and the clients are registering with WSUSs, but then never reporting in a status update.
I've tried the build multiple times, and have tried installing the September rollup beforehand as a package to see if it helped, but it changed nothing.
In the end I built a PC from the 1607 DVD and that does the exact same thing.
Windows 7 can update fine and some other windows 10 kit can also update fine too. Example my laptop can't, but my colleagues can and did just last week.
I'm seeing a lot of this in the logs -
2017/10/13 09:59:28.3159176 424 2192 WebServices WS error: There was an error communicating with the endpoint at 'http://WSUSSVR:8530/ClientWebService/client.asmx'.
2017/10/13 09:59:28.3159184 424 2192 WebServices WS error: There was an error receiving the HTTP reply.
2017/10/13 09:59:28.3159189 424 2192 WebServices WS error: The operation did not complete within the time allotted.
2017/10/13 09:59:28.3159201 424 2192 WebServices WS error: There was an error communicating with the endpoint at 'http://WSUSSVR:8530/ClientWebService/client.asmx'.
2017/10/13 09:59:28.3159206 424 2192 WebServices WS error: There was an error receiving the HTTP reply.
2017/10/13 09:59:28.3159218 424 2192 WebServices WS error: The operation did not complete within the time allotted.
2017/10/13 09:59:28.3159227 424 2192 WebServices WS error: The operation timed out
2017/10/13 09:59:28.3159244 424 2192 WebServices Web service call failed with hr = 8024401c.But also it seems to be able to query what's available -
2017/10/13 15:05:20.2255157 636 7392 Misc Got WSUS Client/Server URL: http://WSUSSVR:8530/ClientWebService/client.asmx""
2017/10/13 15:05:20.2256582 636 7392 ProtocolTalker OK to reuse existing configuration
2017/10/13 15:05:20.2256697 636 7392 ProtocolTalker Existing cookie is valid, just use it
2017/10/13 15:05:20.2256727 636 7392 ProtocolTalker PTInfo: Server requested registration
2017/10/13 15:05:20.2974478 636 7392 Misc Got WSUS Reporting URL: http://WSUSSVR:8530/ReportingWebService/ReportingWebService.asmx""
2017/10/13 15:05:20.2974811 636 7392 WebServices Auto proxy settings for this web service call.
2017/10/13 15:12:01.8762894 636 1636 Shared UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
2017/10/13 15:12:04.8194553 636 1636 Shared UpdateNetworkState Ipv6, cNetworkInterfaces = 2.
2017/10/13 15:12:04.9353533 636 1636 Shared UpdateNetworkState Ipv6, cNetworkInterfaces = 3.
2017/10/13 15:12:10.4332588 636 1636 Shared UpdateNetworkState Ipv6, cNetworkInterfaces = 2.
2017/10/13 15:12:10.5628268 636 1636 Shared UpdateNetworkState Ipv6, cNetworkInterfaces = 1.
2017/10/16 07:58:35.9491927 636 1636 Shared UpdateNetworkState Ipv4, cNetworkInterfaces = 0.
2017/10/16 07:58:36.2790640 636 1636 Agent Adding timer:
2017/10/16 07:58:36.2790756 636 1636 Agent Timer: 29A863E7-8609-4D1E-B7CD-5668F857F1DB, Expires 2017-10-17 06:58:34, not idle-only, not network-only
2017/10/16 07:58:37.5292004 636 7392 DownloadManager PurgeExpiredFiles::Found 0 expired files to delete.
2017/10/16 07:58:37.5587837 636 1636 Shared UpdateNetworkState Ipv6, cNetworkInterfaces = 0.
2017/10/16 07:58:38.0936514 636 7392 DownloadManager PurgeExpiredUpdates::Found 328 non expired updates.
2017/10/16 07:58:38.1463366 636 7392 DownloadManager PurgeExpiredUpdates::Found 0 expired updates.Am really scratching my head with this one as it's started so suddenly and even affects a DVD build.
The WSUS server itself has been fully updated.
We also built a temp box to host WSUS to rule in/out the server and found that was hit an miss too. That was a build including July's updates.
Any ideas or guidance would really be appreciated!
Thanks
Monday, October 16, 2017 11:57 AM
Answers
-
Hi,
Looks like this is now sorted - https://community.spiceworks.com/topic/1970827-wsus-on-server-2016-windows-10-1607-client-0x8024401c-error
Queue Length: 25000 from 10000 (i had to change this 3 time for it to stick)
Limit Interval (minutes): 15 from 5
"Service Unavailable" Response: TcpLevel from HttpLevel
Private Memory Limit (KB): 0 from 18342456 (ours was already 0)And finally (which was the extra step for us) "In addition, you can edit the web.config ( C:\Program Files\Update Services\WebServices\ClientWebService\web.config ) for WSUS
Stop the IIS and do following changes:replace <httpRuntime maxRequestLength="4096" /> with <httpRuntime maxRequestLength="204800" executionTimeout="7200"/> "
This seems to have sorted it for us.
I'm intrigued tho and a somewhat baffled. This WSUS box has been in operation for a long time, patching our windows 10 1607 clients and I can't get my head round why it would suddenly and so consistently stop serving them.
- Marked as answer by warden976 Thursday, October 19, 2017 8:56 AM
Thursday, October 19, 2017 8:56 AM
All replies
-
Hi Sir,
Please check the following article regarding the similar error which caused by the reg/GPO settings:
http://www.ericcsinger.com/problem-solving-wsus-failing-for-windows-10-with-error-8024401c/
Also please try to change these IIS application pool settings for 2012 R2 WSUS server:
Private Memory Limit (KB) Service Unavailable Response Limit Interval (minutes) Queue Length
https://gal.vin/2017/04/29/wsus-config-tweaks/
Hope it is useful to you .
Best Regards,
Elton
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.Tuesday, October 17, 2017 7:07 AM -
Hi Elton,
Thanks for replying.
We don't have any of the reg settings or GPOs set as mentioned in the article.
I change the IIS settings and restarted the services but am still getting the error -
2017/10/17 09:34:33.5540304 656 168 Agent WU client version 10.0.14393.1358
2017/10/17 09:34:33.5542971 656 168 Agent SleepStudyTracker: Machine is non-AOAC. Sleep study tracker disabled.
2017/10/17 09:34:33.5544281 656 168 Agent Base directory: C:\windows\SoftwareDistribution
2017/10/17 09:34:33.5548957 656 168 Agent Datastore directory: C:\windows\SoftwareDistribution\DataStore\DataStore.edb
2017/10/17 09:34:33.5737117 656 168 Shared UpdateNetworkState Ipv6, cNetworkInterfaces = 1.
2017/10/17 09:34:33.5737292 656 168 Shared UpdateNetworkState Ipv4, cNetworkInterfaces = 2.
2017/10/17 09:34:33.5742121 656 168 Shared Network state: Connected
2017/10/17 09:34:33.5777718 656 168 Misc LoadHistoryEventFromRegistry completed, hr = 8024000C
2017/10/17 09:34:33.5784703 656 168 Shared UpdateNetworkState Ipv6, cNetworkInterfaces = 1.
2017/10/17 09:34:33.5784758 656 168 Shared UpdateNetworkState Ipv4, cNetworkInterfaces = 2.
2017/10/17 09:34:33.5784814 656 168 Shared Power status changed
2017/10/17 09:34:33.5793774 656 168 Agent Initializing global settings cache
2017/10/17 09:34:33.5793778 656 168 Agent WSUS server: http://WSUSSVR:8530
2017/10/17 09:34:33.5793782 656 168 Agent WSUS status server: http://WSUSSVR:8530
2017/10/17 09:34:33.5793782 656 168 Agent Alternate Download Server: NULL
2017/10/17 09:34:33.5793786 656 168 Agent Fill Empty Content Urls: No
2017/10/17 09:34:33.5793786 656 168 Agent Target group: Patch Testing Clients
2017/10/17 09:34:33.5793791 656 168 Agent Windows Update access disabled: No
2017/10/17 09:34:33.5796453 656 8372 Agent Timer: 29A863E7-8609-4D1E-B7CD-5668F857F1DB, Expires 2017-10-18 06:58:34, not idle-only, not network-only
2017/10/17 09:34:33.5859032 656 168 Agent Initializing Windows Update Agent
2017/10/17 09:34:33.5859847 656 168 DownloadManager Download manager restoring 0 downloads
2017/10/17 09:34:33.5860291 656 168 Agent CPersistentTimeoutScheduler | GetTimer, returned hr = 0x00000000
2017/10/17 09:34:33.6041675 656 8008 DownloadManager PurgeExpiredFiles::Found 0 expired files to delete.
2017/10/17 09:34:33.6156214 656 8008 DownloadManager PurgeExpiredUpdates::Found 326 non expired updates.
2017/10/17 09:34:33.6705018 656 8372 Agent * START * Queueing Finding updates [CallerId = UpdateOrchestrator Id = 1]
2017/10/17 09:34:33.6705090 656 8372 Agent Added service 00000000-0000-0000-0000-000000000000 to sequential scan list
2017/10/17 09:34:33.6705555 656 8372 ComApi Search ClientId = UpdateOrchestrator
2017/10/17 09:34:33.6733109 656 1988 Agent * END * Queueing Finding updates [CallerId = UpdateOrchestrator Id = 1]
2017/10/17 09:34:33.6752476 656 1988 Agent * START * Finding updates CallerId = UpdateOrchestrator Id = 1
2017/10/17 09:34:33.6752484 656 1988 Agent Online = Yes; AllowCachedResults = No; Ignore download priority = No
2017/10/17 09:34:33.6752489 656 1988 Agent Criteria = IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1""
2017/10/17 09:34:33.6752510 656 1988 Agent ServiceID = {00000000-0000-0000-0000-000000000000} Third party service
2017/10/17 09:34:33.6752514 656 1988 Agent Search Scope = {Machine}
2017/10/17 09:34:33.6752544 656 1988 Agent Caller SID for Applicability: S-1-5-21-3039031127-931851717-1852445250-1411
2017/10/17 09:34:33.6752548 656 1988 Agent ProcessDriverDeferrals is set
2017/10/17 09:34:33.6752553 656 1988 Agent RegisterService is set
2017/10/17 09:34:33.6779855 656 8008 DownloadManager PurgeExpiredUpdates::Found 0 expired updates.
2017/10/17 09:34:33.6785214 656 1988 Misc Got WSUS Client/Server URL: http://WSUSSVR:8530/ClientWebService/client.asmx""
2017/10/17 09:34:33.6853992 656 8008 Shared Effective power state: AC
2017/10/17 09:34:33.6854010 656 8008 DownloadManager Power state change detected. Source now: AC
2017/10/17 09:34:34.0246416 656 1988 ProtocolTalker ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://WSUSSVR:8530/ClientWebService/client.asmx
2017/10/17 09:34:34.0248426 656 1988 ProtocolTalker OK to reuse existing configuration
2017/10/17 09:34:34.0248515 656 1988 ProtocolTalker Cached cookie has expired or new PID is available
2017/10/17 09:34:34.0248656 656 1988 Misc Got WSUS SimpleTargeting URL: http://WSUSSVR:8530""
2017/10/17 09:34:34.0251122 656 1988 ProtocolTalker Initializing simple targeting cookie, clientId = eebe37ab-78f6-4755-b41b-2ebd8294d1d6, target group = Patch Testing Clients, DNS name = hcukmc024481a00.zzmentor.eis.hpcds.com
2017/10/17 09:34:34.0251131 656 1988 ProtocolTalker Server URL = http://WSUSSVR:8530/SimpleAuthWebService/SimpleAuth.asmx
2017/10/17 09:34:34.0251873 656 1988 WebServices Auto proxy settings for this web service call.
2017/10/17 09:34:34.1180713 656 1988 WebServices Auto proxy settings for this web service call.
2017/10/17 09:34:34.1850152 656 1988 ProtocolTalker PTInfo: Server requested registration
2017/10/17 09:35:36.9944861 656 1988 WebServices WS error: There was an error communicating with the endpoint at 'http://WSUSSVR:8530/ClientWebService/client.asmx'.
2017/10/17 09:35:36.9944870 656 1988 WebServices WS error: There was an error receiving the HTTP reply.
2017/10/17 09:35:36.9944874 656 1988 WebServices WS error: The operation did not complete within the time allotted.
2017/10/17 09:35:36.9944994 656 1988 WebServices WS error: The operation timed out
2017/10/17 09:35:36.9945002 656 1988 WebServices Web service call failed with hr = 8024401c.
2017/10/17 09:35:36.9945006 656 1988 WebServices Current service auth scheme=0.
2017/10/17 09:35:36.9945011 656 1988 WebServices Current Proxy auth scheme=0.
2017/10/17 09:35:38.9993898 656 1988 WebServices Auto proxy settings for this web service call.
2017/10/17 09:36:40.9626103 656 1988 WebServices WS error: There was an error communicating with the endpoint at 'http://WSUSSVR:8530/ClientWebService/client.asmx'.
2017/10/17 09:36:40.9626133 656 1988 WebServices WS error: There was an error receiving the HTTP reply.
2017/10/17 09:36:40.9626150 656 1988 WebServices WS error: The operation did not complete within the time allotted.
2017/10/17 09:36:40.9626180 656 1988 WebServices WS error: There was an error communicating with the endpoint at 'http://WSUSSVR:8530/ClientWebService/client.asmx'.
2017/10/17 09:36:40.9626201 656 1988 WebServices WS error: There was an error receiving the HTTP reply.
2017/10/17 09:36:40.9626227 656 1988 WebServices WS error: The operation did not complete within the time allotted.
2017/10/17 09:36:40.9626244 656 1988 WebServices WS error: The operation timed out
2017/10/17 09:36:40.9626287 656 1988 WebServices Web service call failed with hr = 8024401c.
2017/10/17 09:36:40.9626304 656 1988 WebServices Current service auth scheme=0.
2017/10/17 09:36:40.9626312 656 1988 WebServices Current Proxy auth scheme=0.
2017/10/17 09:36:42.9707801 656 1988 WebServices Auto proxy settings for this web service call.
2017/10/17 09:37:44.9666419 656 1988 WebServices WS error: There was an error communicating with the endpoint at 'http://WSUSSVR:8530/ClientWebService/client.asmx'.
2017/10/17 09:37:44.9666449 656 1988 WebServices WS error: There was an error receiving the HTTP reply.
2017/10/17 09:37:44.9666470 656 1988 WebServices WS error: The operation did not complete within the time allotted.
2017/10/17 09:37:44.9666500 656 1988 WebServices WS error: There was an error communicating with the endpoint at 'http://WSUSSVR:8530/ClientWebService/client.asmx'.
2017/10/17 09:37:44.9666521 656 1988 WebServices WS error: There was an error receiving the HTTP reply.
2017/10/17 09:37:44.9666543 656 1988 WebServices WS error: The operation did not complete within the time allotted.
2017/10/17 09:37:44.9666649 656 1988 WebServices WS error: There was an error communicating with the endpoint at 'http://WSUSSVR:8530/ClientWebService/client.asmx'.
2017/10/17 09:37:44.9666688 656 1988 WebServices WS error: There was an error receiving the HTTP reply.
2017/10/17 09:37:44.9666718 656 1988 WebServices WS error: The operation did not complete within the time allotted.
2017/10/17 09:37:44.9666739 656 1988 WebServices WS error: The operation timed out
2017/10/17 09:37:44.9666777 656 1988 WebServices Web service call failed with hr = 8024401c.
2017/10/17 09:37:44.9666794 656 1988 WebServices Current service auth scheme=0.
2017/10/17 09:37:44.9666807 656 1988 WebServices Current Proxy auth scheme=0.
2017/10/17 09:37:44.9667016 656 1988 ProtocolTalker PTError: 0x8024401c
2017/10/17 09:37:44.9667046 656 1988 ProtocolTalker SyncUpdates_WithRecovery failed. 0x8024401c
2017/10/17 09:37:44.9667306 656 1988 ProtocolTalker SyncUpdates round trips: 1
2017/10/17 09:37:44.9667323 656 1988 ProtocolTalker Sync of Updates 0x8024401c
2017/10/17 09:37:44.9667844 656 1988 ProtocolTalker SyncServerUpdatesInternal failed 0x8024401c
2017/10/17 09:37:44.9742502 656 1988 Agent Failed to synchronize, error = 0x8024401C
2017/10/17 09:37:44.9862656 656 1988 Agent Exit code = 0x8024401C
2017/10/17 09:37:44.9862660 656 1988 Agent * END * Finding updates CallerId = UpdateOrchestrator Id = 1
2017/10/17 09:37:44.9953582 656 632 ComApi *RESUMED* Search ClientId = UpdateOrchestrator
2017/10/17 09:37:44.9960098 656 632 ComApi Updates found = 0
2017/10/17 09:37:44.9960102 656 632 ComApi Exit code = 0x00000000, Result code = 0x8024401C
2017/10/17 09:37:44.9960106 656 632 ComApi * END * Search ClientId = UpdateOrchestrator
2017/10/17 09:37:44.9964181 656 8372 ComApi ISusInternal:: DisconnectCall failed, hr=8024000CThanks
Tuesday, October 17, 2017 8:50 AM -
Hi,
According to the first log , it seems that you have more than one NICs in that computer , and , configured IPv6 , right ?
To get the clear log , please try to disable other useless NICs and IPv6 address .
Also please try to open URLs (to see if you can open that website successfully) :
http://WSUSSVR:8530/SimpleAuthWebService/SimpleAuth.asmx
http://WSUSSVR:8530/ClientWebService/client.asmx
Any further information please feel free to let us know .
(In addition , If it is possible , please try to manually download and install a monthly CU such as august CU , then try to get updates from WSUS again)
Best Regards,
Elton
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.- Edited by Elton_Ji Wednesday, October 18, 2017 5:22 AM
Wednesday, October 18, 2017 5:18 AM -
Hi Elton,
The PC I got the logs from that time was my own laptop which does have 2 nics, but was only connected with the wireless adapter. The other affected machines have 1 or 2 nics.
I can get to both sites from the PCs.
Unfortunately now on the 1607 disc built PC I'm now getting "no format information found" :( when I run get-windowsupdatelog. On this machine yesterday (and the WSUS server) I disabled IPv6 and also killed the firewall on both. Neither change helped.
1601/01/01 00:00:00.0000000 708 3996 Unknown( 14): GUID=3905367d-5739-34f2-739b-cf9a482c3e56 (No Format Information found).
1601/01/01 00:00:00.0000000 708 3996 Unknown( 187): GUID=2fc03aa6-a1fa-3d0c-ba09-b8539ec28a26 (No Format Information found).
1601/01/01 00:00:00.0000000 708 3996 Unknown( 188): GUID=2fc03aa6-a1fa-3d0c-ba09-b8539ec28a26 (No Format Information found).
1601/01/01 00:00:00.0000000 708 3996 Unknown( 16): GUID=bc21bb5e-eb28-3f99-1073-acecfea6cb82 (No Format Information found).
1601/01/01 00:00:00.0000000 708 3996 Unknown( 16): GUID=bc21bb5e-eb28-3f99-1073-acecfea6cb82 (No Format Information found).
1601/01/01 00:00:00.0000000 708 3996 Unknown( 119): GUID=2fc03aa6-a1fa-3d0c-ba09-b8539ec28a26 (No Format Information found).WRT installing an update, I did that and went for the September one, but it made no difference. I even tried adding it to the MDT build too, but that didn't help. I will manually install it tho on this 1607 box.
We are currently on for the time being 1607, but I installed a fresh 1703 build this morning from disc and that updates with the same reg settings and from the same WSUS box? (disc built 1607 left, disc built 1703 right)
- Edited by warden976 Wednesday, October 18, 2017 10:28 AM
Wednesday, October 18, 2017 10:24 AM -
Hi,
Looks like this is now sorted - https://community.spiceworks.com/topic/1970827-wsus-on-server-2016-windows-10-1607-client-0x8024401c-error
Queue Length: 25000 from 10000 (i had to change this 3 time for it to stick)
Limit Interval (minutes): 15 from 5
"Service Unavailable" Response: TcpLevel from HttpLevel
Private Memory Limit (KB): 0 from 18342456 (ours was already 0)And finally (which was the extra step for us) "In addition, you can edit the web.config ( C:\Program Files\Update Services\WebServices\ClientWebService\web.config ) for WSUS
Stop the IIS and do following changes:replace <httpRuntime maxRequestLength="4096" /> with <httpRuntime maxRequestLength="204800" executionTimeout="7200"/> "
This seems to have sorted it for us.
I'm intrigued tho and a somewhat baffled. This WSUS box has been in operation for a long time, patching our windows 10 1607 clients and I can't get my head round why it would suddenly and so consistently stop serving them.
- Marked as answer by warden976 Thursday, October 19, 2017 8:56 AM
Thursday, October 19, 2017 8:56 AM