locked
Windows SP3 not require admin rights to be installed RRS feed

  • Question

  • hi
    i had approved xp-SP3 to be installed to all workstations vai WSUS Server
    however it's not installed to xp machines !

    and When i logon as administrator is found the yellow tray icon of windows update contain sp3 need me to approve install (manual interaction)
    this mean that i have to logon as administrator to 1000 machines to install SP3

    Note:
    1- GPO are configured to download and install updates
    2- all other updates like critical and security are installed without user interaction which is normal

    Why service packs not auto installed ???
    and can i force installation even by script

    Sunday, June 28, 2009 7:30 AM

Answers

  • Just an observation.. not sure if it has any significance...

    You've changed the policy on this client since the update was originally detected/downloaded:

    On May 17th, installation ran at 2pm local time, and was scheduled for 2pm local time.

    2009-05-17 14:00:12:474  372 e6c AU Forced install timer expired for scheduled install
    2009-05-17 14:00:12:474  372 e6c AU UpdateDownloadProperties: 0 download(s) are still in progress.
    2009-05-17 14:00:12:474  372 e6c AU Setting AU scheduled install time to 2009-05-18 11:00:00



    On May 19th, installation was scheduled for 2pm local time, according to policy.


    2009-05-19        08:08:40:661     372       b38       AU          # Approval type: Scheduled (Policy)
    2009-05-19        08:08:40:661     372       b38       AU          # Scheduled install day/time: Every day at 14:00


    According to the current registry settings, installation is configured to run at 8am local time.

    "AUOptions"=dword:00000004
    "ScheduledInstallDay"=dword:00000000
    "ScheduledInstallTime"=dword:00000008

    So, what these observations lead me to is this question:
    What else might have been changed in this policy between 5/17 and today?


    But, ultimately, I think I might have found a clue to this issue, and it may be in the coincidental timing of the matter.

    The log entries you've provided are dated 5/17 thru 5/19. However, on 5/19/09, Microsoft released a REVISION to Windows XP Service Pack 3, which would have expired the old revision (the one shown here as downloaded on 5/17/09). Do you have the option "Auto-approve new revisions" enabled on your WSUS Server? Is the latest revision of Windows XP SP3, dated 5/19/09, actually the one that is approved on your WSUS Server.


    Lawrence Garvin, M.S., MCITP:EA, MCDBA
    Principal/CTO, Onsite Technology Solutions, Houston, Texas
    Microsoft MVP - Software Distribution (2005-2009)
    Thursday, July 2, 2009 1:49 PM

All replies

  • Please post the relevant portions of the WindowsUpdate.log showing:
    [1] The detection of Windows XP Service Pack 3 on this system.
    [2] The download of Windows XP Service Pack 3 on this system.
    [3] The scheduled installation event following the successful download of Windows XP Service Pack 3 on this system.
    Lawrence Garvin, M.S., MCITP:EA, MCDBA
    Principal/CTO, Onsite Technology Solutions, Houston, Texas
    Microsoft MVP - Software Distribution (2005-2009)
    Sunday, June 28, 2009 5:39 PM
  • Hi,

    Did this happen on all clients?


    Please post %windir%\windowsupdate.log on the problematic client
    • Proposed as answer by lea6hua6 Friday, September 25, 2009 9:27 AM
    Monday, June 29, 2009 10:56 AM
  • As long as your computers are logged off but still remain turned on they should install any updates without requiring admin permission from users.
    • Proposed as answer by lea6hua6 Friday, September 25, 2009 9:28 AM
    Monday, June 29, 2009 1:24 PM
  • Hi all
    thank you very much,

    i found WindowsXP-KB936929 three time at windowsupdate.log

    2009-05-17 08:19:32:998  372 16c4 DnldMgr *************
    2009-05-17 08:19:32:998  372 16c4 DnldMgr ** START **  DnldMgr: Downloading updates [CallerId = AutomaticUpdates]
    2009-05-17 08:19:32:998  372 16c4 DnldMgr *********
    2009-05-17 08:19:32:998  372 16c4 DnldMgr   * Call ID = {7959C01D-EDD7-459C-8A25-6083C8A1109E}
    2009-05-17 08:19:32:998  372 16c4 DnldMgr   * Priority = 2, Interactive = 0, Owner is system = 1, Explicit proxy = 0, Proxy session id = -1, ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}
    2009-05-17 08:19:32:998  372 16c4 DnldMgr   * Updates to download = 1
    2009-05-17 08:19:32:998  372 16c4 Agent   *   Title = Windows XP Service Pack 3 (KB936929)
    2009-05-17 08:19:32:998  372 16c4 Agent   *   UpdateId = {60B990A0-6EFA-47BE-8F5A-7DF2C402583E}.111
    2009-05-17 08:19:32:998  372 16c4 Agent   *     Bundles 1 updates:
    2009-05-17 08:19:32:998  372 16c4 Agent   *       {A18CC936-DA41-421F-9AD9-303D806EC128}.112
    2009-05-17 08:19:32:998  372 cdc AU   # Pending download calls = 1
    2009-05-17 08:19:32:998  372 cdc AU <<## SUBMITTED ## AU: Download updates
    2009-05-17 08:19:33:015  372 16c4 PT +++++++++++  PT: Synchronizing file locations  +++++++++++
    2009-05-17 08:19:33:015  372 16c4 PT   + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://WSUS-Server/ClientWebService/client.asmx
    2009-05-17 08:19:33:213  372 16c4 DnldMgr ***********  DnldMgr: New download job [UpdateId = {A18CC936-DA41-421F-9AD9-303D806EC128}.112]  ***********
    2009-05-17 08:19:33:213  372 16c4 DnldMgr   * Queueing update for download handler request generation.
    2009-05-17 08:19:33:213  372 16c4 DnldMgr Generating download request for update {A18CC936-DA41-421F-9AD9-303D806EC128}.112
    2009-05-17 08:19:33:493  372 16c4 Handler Windows Patch download for UpdateId = {A18CC936-DA41-421F-9AD9-303D806EC128}: selected action is download full-file.
    2009-05-17 08:19:33:510  372 16c4 DnldMgr ***********  DnldMgr: New download job [UpdateId = {A18CC936-DA41-421F-9AD9-303D806EC128}.112]  ***********
    2009-05-17 08:19:33:625  372 16c4 DnldMgr   * BITS job initialized, JobId = {2A58FFB4-EBD7-4E90-A6B3-12F3569E3C0F}
    2009-05-17 08:19:33:658  372 16c4 DnldMgr   * Downloading from http://WSUS-Server/Content/E4/C81472F7EEEA2ECA421E116CD4C03E2300EBFDE4.exe to C:\WINDOWS\SoftwareDistribution\Download\be92b408668f46326b9d7da0edbb293c\WindowsXP-KB936929-SP3-x86-ENU.exe (full file).
    2009-05-17 08:19:33:972  372 16c4 Agent *********
    2009-05-17 08:19:33:972  372 16c4 Agent **  END  **  Agent: Downloading updates [CallerId = AutomaticUpdates]
    2009-05-17 08:19:33:972  372 16c4 Agent *************
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .

    009-05-17 08:19:33:015  372 16c4 PT +++++++++++  PT: Synchronizing file locations  +++++++++++
    2009-05-17 08:19:33:015  372 16c4 PT   + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://WSUS-Server/ClientWebService/client.asmx
    2009-05-17 08:19:33:213  372 16c4 DnldMgr ***********  DnldMgr: New download job [UpdateId = {A18CC936-DA41-421F-9AD9-303D806EC128}.112]  ***********
    2009-05-17 08:19:33:213  372 16c4 DnldMgr   * Queueing update for download handler request generation.
    2009-05-17 08:19:33:213  372 16c4 DnldMgr Generating download request for update {A18CC936-DA41-421F-9AD9-303D806EC128}.112
    2009-05-17 08:19:33:493  372 16c4 Handler Windows Patch download for UpdateId = {A18CC936-DA41-421F-9AD9-303D806EC128}: selected action is download full-file.
    2009-05-17 08:19:33:510  372 16c4 DnldMgr ***********  DnldMgr: New download job [UpdateId = {A18CC936-DA41-421F-9AD9-303D806EC128}.112]  ***********
    2009-05-17 08:19:33:625  372 16c4 DnldMgr   * BITS job initialized, JobId = {2A58FFB4-EBD7-4E90-A6B3-12F3569E3C0F}
    2009-05-17 08:19:33:658  372 16c4 DnldMgr   * Downloading from http://WSUS-Server/Content/E4/C81472F7EEEA2ECA421E116CD4C03E2300EBFDE4.exe to C:\WINDOWS\SoftwareDistribution\Download\be92b408668f46326b9d7da0edbb293c\WindowsXP-KB936929-SP3-x86-ENU.exe (full file).
    2009-05-17 08:19:33:972  372 16c4 Agent *********
    2009-05-17 08:19:33:972  372 16c4 Agent **  END  **  Agent: Downloading updates [CallerId = AutomaticUpdates]
    2009-05-17 08:19:33:972  372 16c4 Agent *************
    2009-05-17 08:19:38:213  372 16c4 Report REPORT EVENT: {F25FFD27-578A-4403-B7C8-D83408A74859} 2009-05-17 08:19:32:982+0300 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Software Synchronization Windows Update Client successfully detected 1 updates.
    2009-05-17 08:19:38:213  372 16c4 Report REPORT EVENT: {69E3B46E-6D89-4D27-9094-F653972A6821} 2009-05-17 08:19:32:982+0300 1 156 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Pre-Deployment Check Reporting client status.
    2009-05-17 08:19:48:017  372 e6c AU WARNING: AU found no suitable session to launch client in
    2009-05-17 08:20:36:814  372 384 DnldMgr BITS job {2A58FFB4-EBD7-4E90-A6B3-12F3569E3C0F} completed successfully
    2009-05-17 08:20:38:297  372 384 Misc Validating signature for C:\WINDOWS\SoftwareDistribution\Download\be92b408668f46326b9d7da0edbb293c\WindowsXP-KB936929-SP3-x86-ENU.exe:
    2009-05-17 08:20:39:780  372 384 Misc  Microsoft signed: Yes
    2009-05-17 08:20:39:795  372 384 DnldMgr   Download job bytes total = 0, bytes transferred = 331805736
    2009-05-17 08:20:39:795  372 384 DnldMgr ***********  DnldMgr: New download job [UpdateId = {A18CC936-DA41-421F-9AD9-303D806EC128}.112]  ***********
    2009-05-17 08:20:39:795  372 384 DnldMgr   * Queueing update for download handler request generation.
    2009-05-17 08:20:39:795  372 384 DnldMgr Generating download request for update {A18CC936-DA41-421F-9AD9-303D806EC128}.112
    2009-05-17 08:20:49:137  372 384 Handler Windows Patch download for UpdateId = {A18CC936-DA41-421F-9AD9-303D806EC128}: selected action is download full-file.
    2009-05-17 08:21:38:619  372 384 DnldMgr ***********  DnldMgr: New download job [UpdateId = {A18CC936-DA41-421F-9AD9-303D806EC128}.112]  ***********
    2009-05-17 08:21:38:619  372 384 DnldMgr   * All files for update were already downloaded and are valid.
    2009-05-17 08:21:38:635  372 cdc AU >>##  RESUMED  ## AU: Download update [UpdateId = {60B990A0-6EFA-47BE-8F5A-7DF2C402583E}, succeeded]
    2009-05-17 08:21:38:635  372 cdc AU #########
    2009-05-17 08:21:38:635  372 cdc AU ##  END  ##  AU: Download updates
    2009-05-17 08:21:38:635  372 cdc AU #############
    2009-05-17 08:21:38:635  372 cdc AU Setting AU scheduled install time to 2009-05-17 11:00:00
    2009-05-17 08:21:38:635  372 cdc AU AU setting pending client directive to 'Install Approval'
    2009-05-17 08:21:43:736  372 16c4 Report REPORT EVENT: {4797A214-39E0-4F47-BD61-CB80144AFDA2} 2009-05-17 08:21:38:635+0300 1 162 101 {60B990A0-6EFA-47BE-8F5A-7DF2C402583E} 111 0 AutomaticUpdates Success Content Download Download succeeded.
    2009-05-17 08:21:53:843  372 e6c AU WARNING: AU found no suitable session to launch client in
    2009-05-17 08:31:18:019  372 16c4 Report Uploading 3 events using cached cookie, reporting URL = http://WSUS-Server/ReportingWebService/ReportingWebService.asmx
    2009-05-17 08:31:18:050  372 16c4 Report Reporter successfully uploaded 3 events.
    2009-05-17 14:00:12:474  372 e6c AU Forced install timer expired for scheduled install
    2009-05-17 14:00:12:474  372 e6c AU UpdateDownloadProperties: 0 download(s) are still in progress.
    2009-05-17 14:00:12:474  372 e6c AU Setting AU scheduled install time to 2009-05-18 11:00:00
    2009-05-17 16:59:31:190  372 e6c AU ###########  AU: Uninitializing Automatic Updates  ###########
    2009-05-17 16:59:33:783  372 e6c Service *********
    2009-05-17 16:59:33:783  372 e6c Service **  END  **  Service: Service exit [Exit code = 0x240001]
    2009-05-17 16:59:33:783  372 e6c Service *************
    .
    .
    .
    .
    .
    .

    376       f20        AU        #############

    2009-05-18        08:05:20:555     376      f20        AU        ## START ##  AU: Search for updates

    2009-05-18        08:05:20:555     376      f20        AU        #########

    2009-05-18        08:05:20:555     376      f20        AU        <<## SUBMITTED ## AU: Search for updates [CallId = {9E722008-BE0E-482C-96A5-0A81DAF1EB52}]

    2009-05-18        08:05:23:001     376      f20        AU        WARNING: AU found no suitable session to launch client in

    2009-05-18        08:05:26:174     376      dc4       Agent    *************

    2009-05-18        08:05:26:174     376      dc4       Agent    ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]

    2009-05-18        08:05:26:174     376      dc4       Agent    *********

    2009-05-18        08:05:26:174     376      dc4       Agent      * Online = Yes; Ignore download priority = No

    2009-05-18        08:05:26:174     376      dc4       Agent      * Criteria = "IsHidden=0 and IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and IsAssigned=1 or IsHidden=0 and IsInstalled=1 and DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and IsAssigned=1 and RebootRequired=1"

    2009-05-18        08:05:26:174     376      dc4       Agent      * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}

    2009-05-18        08:05:26:257     376      dc4       Misc      Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab:

    2009-05-18        08:05:26:818     376      dc4       Misc      Microsoft signed: Yes

    2009-05-18        08:05:42:733     376      dc4       Misc      Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab:

    2009-05-18        08:05:43:245     376      dc4       Misc      Microsoft signed: Yes

    2009-05-18        08:05:44:981     376      dc4       Misc      Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wsus3setup.cab:

    2009-05-18        08:05:45:708     376      dc4       Misc      Microsoft signed: Yes

    2009-05-18        08:05:45:741     376      dc4       Setup    ***********  Setup: Checking whether self-update is required  ***********

    2009-05-18        08:05:45:741     376      dc4       Setup      * Inf file: C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wsus3setup.inf

    2009-05-18        08:05:46:666     376      dc4       Setup    Update NOT required for C:\WINDOWS\system32\cdm.dll: target version = 7.0.6000.374, required version = 7.0.6000.374

    2009-05-18        08:05:47:410     376      dc4       Setup    Update NOT required for C:\WINDOWS\system32\wuapi.dll: target version = 7.0.6000.374, required version = 7.0.6000.374

    2009-05-18        08:05:47:608     376      dc4       Setup    Update NOT required for C:\WINDOWS\system32\wuapi.dll.mui: target version = 7.0.6000.374, required version = 7.0.6000.374

    2009-05-18        08:05:47:641     376      dc4       Setup    Update NOT required for C:\WINDOWS\system32\wuauclt.exe: target version = 7.0.6000.374, required version = 7.0.6000.374

    2009-05-18        08:05:47:724     376      dc4       Setup    Update NOT required for C:\WINDOWS\system32\wuaucpl.cpl: target version = 7.0.6000.374, required version = 7.0.6000.374

    2009-05-18        08:05:48:121     376      dc4       Setup    Update NOT required for C:\WINDOWS\system32\wuaucpl.cpl.mui: target version = 7.0.6000.374, required version = 7.0.6000.374

    2009-05-18        08:05:48:253     376      dc4       Setup    Update NOT required for C:\WINDOWS\system32\wuaueng.dll: target version = 7.0.6000.374, required version = 7.0.6000.374

    2009-05-18        08:05:48:517     376      dc4       Setup    Update NOT required for C:\WINDOWS\system32\wuaueng.dll.mui: target version = 7.0.6000.374, required version = 7.0.6000.374

    2009-05-18        08:05:48:980     376      dc4       Setup    Update NOT required for C:\WINDOWS\system32\wucltui.dll: target version = 7.0.6000.374, required version = 7.0.6000.374

    2009-05-18        08:05:49:476     376      dc4       Setup    Update NOT required for C:\WINDOWS\system32\wucltui.dll.mui: target version = 7.0.6000.374, required version = 7.0.6000.374

    2009-05-18        08:05:49:773     376      dc4       Setup    Update NOT required for C:\WINDOWS\system32\wups.dll: target version = 7.0.6000.374, required version = 7.0.6000.374

    2009-05-18        08:05:49:790     376      dc4       Setup    Update NOT required for C:\WINDOWS\system32\wups2.dll: target version = 7.0.6000.374, required version = 7.0.6000.374

    2009-05-18        08:05:50:252     376      dc4       Setup    Update NOT required for C:\WINDOWS\system32\wuweb.dll: target version = 7.0.6000.374, required version = 7.0.6000.374

    2009-05-18        08:05:50:269     376      dc4       Setup      * IsUpdateRequired = No

    2009-05-18        08:06:28:775     376      dc4       PT         +++++++++++  PT: Synchronizing server updates  +++++++++++

    2009-05-18        08:06:28:775     376      dc4       PT           + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://WSUS-Server/ClientWebService/client.asmx

    2009-05-18        08:06:28:857     376      dc4       PT         WARNING: Cached cookie has expired or new PID is available

    2009-05-18        08:06:28:857     376      dc4       PT         Initializing simple targeting cookie, clientId = cfd2f854-c446-417e-b9ec-9126f65a3524, target group = TGroup, DNS name = TGroup-itxx08.ourdomain.com

    2009-05-18        08:06:28:857     376      dc4       PT           Server URL = http://WSUS-Server/SimpleAuthWebService/SimpleAuth.asmx

    2009-05-18        08:07:02:240     376      f20        AU        AU received policy change subscription event

    2009-05-18        08:09:01:168     376      dc4       PT         +++++++++++  PT: Synchronizing extended update info  +++++++++++

    2009-05-18        08:09:01:168     376      dc4       PT           + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://WSUS-Server/ClientWebService/client.asmx

    2009-05-18        08:09:09:398     376      dc4       Agent      * Added update {60B990A0-6EFA-47BE-8F5A-7DF2C402583E}.111 to search result

    2009-05-18        08:09:09:398     376      dc4       Agent      * Found 1 updates and 45 categories in search; evaluated appl. rules of 806 out of 1245 deployed entities

    2009-05-18        08:09:09:446     376      dc4       Agent    *********

    2009-05-18        08:09:09:446     376      dc4       Agent    **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]

    2009-05-18        08:09:09:446     376      dc4       Agent    *************

    2009-05-18        08:09:09:462     376      11e4     AU        >>##  RESUMED  ## AU: Search for updates [CallId = {9E722008-BE0E-482C-96A5-0A81DAF1EB52}]

    2009-05-18        08:09:09:462     376      11e4     AU          # 1 updates detected

    2009-05-18        08:09:09:462     376      11e4     AU        #########

    2009-05-18        08:09:09:462     376      11e4     AU        ##  END  ##  AU: Search for updates [CallId = {9E722008-BE0E-482C-96A5-0A81DAF1EB52}]

    2009-05-18        08:09:09:462     376      11e4     AU        #############

    2009-05-18        08:09:09:462     376      11e4     AU        AU setting next detection timeout to 2009-05-19 02:44:01

    2009-05-18        08:09:09:462     376      11e4     AU        Setting AU scheduled install time to 2009-05-18 11:00:00

    2009-05-18        08:09:14:550     376      dc4       Report   REPORT EVENT: {3016BDB7-F4A8-43D6-8161-23924A4656C1}            2009-05-18 08:09:09:446+0300  1          147       101       {00000000-0000-0000-0000-000000000000}        0          0            AutomaticUpdates          Success Software Synchronization            Windows Update Client successfully detected 1 updates.

    2009-05-18        08:09:14:550     376      dc4       Report   REPORT EVENT: {0F659CE9-58EF-45A0-A678-48A8CC8E254C}            2009-05-18 08:09:09:446+0300  1          156       101       {00000000-0000-0000-0000-000000000000}        0          0            AutomaticUpdates          Success Pre-Deployment Check   Reporting client status.

    2009-05-18        08:23:29:073     376      dc4       Report   Uploading 2 events using cached cookie, reporting URL = http://WSUS-Server/ReportingWebService/ReportingWebService.asmx

    2009-05-18        08:23:29:104     376      dc4       Report   Reporter successfully uploaded 2 events.

    2009-05-18        14:00:09:927     376      f20        AU        Forced install timer expired for scheduled install

    • Edited by Don Tan Thursday, July 9, 2009 9:22 PM Fixing HTML
    Wednesday, July 1, 2009 10:45 PM
  • 2009-05-17 08:21:43:736  372 16c4 Report REPORT EVENT: {4797A214-39E0-4F47-BD61-CB80144AFDA2} 2009-05-17 08:21:38:635+0300 1 162 101 {60B990A0-6EFA-47BE-8F5A-7DF2C402583E} 111 0 AutomaticUpdates Success Content Download Download succeeded.
    2009-05-17 08:21:53:843  372 e6c AU WARNING: AU found no suitable session to launch client in
    2009-05-17 08:31:18:019  372 16c4 Report Uploading 3 events using cached cookie, reporting URL =
    http://WSUS-Server/ReportingWebService/ReportingWebService.asmx
    2009-05-17 08:31:18:050  372 16c4 Report Reporter successfully uploaded 3 events.
    2009-05-17 14:00:12:474  372 e6c AU Forced install timer expired for scheduled install
    2009-05-17 14:00:12:474  372 e6c AU UpdateDownloadProperties: 0 download(s) are still in progress.
    2009-05-17 14:00:12:474  372 e6c AU Setting AU scheduled install time to 2009-05-18 11:00:00

    Well, that pretty much tells us what's happening. The update was downloaded successfully, but there's no evidence that this update has been scheduled for installation, and in fact, nothing happened at the scheduled installation event at 2pm.

    Please export the registry key at HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate and post here for analysis.

    Thursday, July 2, 2009 1:47 AM
  • Hi Lawrence , and thank you for fast respond
    again tis is the second part of windowsupdate.log file as i can't post all due to char limit, any way  it may help

    2009-05-18        14:00:09:927     376       f20        AU        UpdateDownloadProperties: 0 download(s) are still in progress.

    2009-05-18        14:00:09:927     376       f20        AU        Setting AU scheduled install time to 2009-05-19 11:00:00

    2009-05-18        17:04:05:110     376       f20        AU        ###########  AU: Uninitializing Automatic Updates  ###########

    2009-05-18        17:04:07:657     376       f20        Service *********

    2009-05-18        17:04:07:657     376       f20        Service **  END  **  Service: Service exit [Exit code = 0x240001]

    2009-05-18        17:04:07:657     376       f20        Service *************

    2009-05-19        08:07:40:687     372       b38       Misc      ===========  Logging initialized (build: 7.0.6000.374, tz: +0300)  ===========

    2009-05-19        08:07:40:687     372       b38       Misc        = Process: C:\WINDOWS\System32\svchost.exe

    2009-05-19        08:07:40:687     372       b38       Misc        = Module: C:\WINDOWS\system32\wuaueng.dll

    2009-05-19        08:07:40:687     372       b38       Service *************

    2009-05-19        08:07:40:687     372       b38       Service ** START **  Service: Service startup

    2009-05-19        08:07:40:687     372       b38       Service *********

    2009-05-19        08:07:41:406     372       b38       Agent      * WU client version 7.0.6000.374

    2009-05-19        08:07:41:406     372       b38       Agent      * Base directory: C:\WINDOWS\SoftwareDistribution

    2009-05-19        08:07:41:656     372       b38       Agent      * Access type: No proxy

    2009-05-19        08:07:41:656     372       b38       Agent      * Network state: Connected

    2009-05-19        08:08:31:800     372       b38       Agent    ***********  Agent: Initializing Windows Update Agent  ***********

    2009-05-19        08:08:32:364     372       b38       Agent    ***********  Agent: Initializing global settings cache  ***********

    2009-05-19        08:08:32:364     372       b38       Agent      * WSUS server: http://WSUS-Server

    2009-05-19        08:08:32:364     372       b38       Agent      * WSUS status server: http://WSUS-Server

    2009-05-19        08:08:32:364     372       b38       Agent      * Target group: TGroup

    2009-05-19        08:08:32:364     372       b38       Agent      * Windows Update access disabled: No

    2009-05-19        08:08:40:528     372       b38       DnldMgr            Download manager restoring 0 downloads

    2009-05-19        08:08:40:661     372       b38       AU        ###########  AU: Initializing Automatic Updates  ###########

    2009-05-19        08:08:40:661     372       b38       AU        AU setting next detection timeout to 2009-05-19 05:08:40

    2009-05-19        08:08:40:661     372       b38       AU          # WSUS server: http://WSUS-Server

    2009-05-19        08:08:40:661     372       b38       AU          # Detection frequency: 22

    2009-05-19        08:08:40:661     372       b38       AU          # Target group: TGroup

    2009-05-19        08:08:40:661     372       b38       AU          # Approval type: Scheduled (Policy)

    2009-05-19        08:08:40:661     372       b38       AU          # Scheduled install day/time: Every day at 14:00

    2009-05-19        08:08:40:661     372       b38       AU          # Auto-install minor updates: Yes (Policy)

    2009-05-19        08:08:40:976     372       b38       AU        Setting AU scheduled install time to 2009-05-19 11:00:00

    2009-05-19        08:08:40:976     372       b38       AU        AU setting pending client directive to 'Install Approval'

    2009-05-19        08:08:40:993     372       b38       AU        AU finished delayed initialization

    2009-05-19        08:08:43:548     372       b38       Report   ***********  Report: Initializing static reporting data  ***********

    2009-05-19        08:08:43:548     372       b38       Report     * OS Version = 5.1.2600.2.0.65792

    2009-05-19        08:08:44:063     372       b38       Report     * Computer Brand = NEC COMPUTERS SAS

    2009-05-19        08:08:44:063     372       b38       Report     * Computer Model = POWERMATE ML450

    2009-05-19        08:08:44:096     372       b38       Report     * Bios Revision = 080013

    2009-05-19        08:08:44:096     372       b38       Report     * Bios Name = BIOS Date: 11/08/06 13:45:17 Ver: 0.69

    2009-05-19        08:08:44:096     372       b38       Report     * Bios Release Date = 2006-11-08T00:00:00

    2009-05-19        08:08:44:096     372       b38       Report     * Locale ID = 3073

    2009-05-19        08:08:44:693     372       b38       AU        #############

    2009-05-19        08:08:44:693     372       b38       AU        ## START ##  AU: Search for updates

    2009-05-19        08:08:44:693     372       b38       AU        #########

    2009-05-19        08:08:44:693     372       b38       AU        <<## SUBMITTED ## AU: Search for updates [CallId = {ABBD3240-4B04-41A6-BA55-C69857370540}]

    2009-05-19        08:08:47:166     372       df4        Agent    *************

    2009-05-19        08:08:47:166     372       df4        Agent    ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]

    2009-05-19        08:08:47:166     372       df4        Agent    *********

    2009-05-19        08:08:47:166     372       df4        Agent      * Online = Yes; Ignore download priority = No

    2009-05-19        08:08:47:166     372       df4        Agent      * Criteria = "IsHidden=0 and IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and IsAssigned=1 or IsHidden=0 and IsInstalled=1 and DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and IsAssigned=1 and RebootRequired=1"

    2009-05-19        08:08:47:166     372       df4        Agent      * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}

    2009-05-19        08:08:47:249     372       df4        Misc      Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab:

    2009-05-19        08:08:47:697     372       df4        Misc      Microsoft signed: Yes

    2009-05-19        08:08:50:120     372       df4        Misc      Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab:

    2009-05-19        08:08:50:120     372       df4        Misc      Microsoft signed: Yes

    2009-05-19        08:08:50:551     372       df4        Misc      Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wsus3setup.cab:

    2009-05-19        08:08:50:551     372       df4        Misc      Microsoft signed: Yes

    2009-05-19        08:08:50:568     372       df4        Setup    ***********  Setup: Checking whether self-update is required  ***********

    2009-05-19        08:08:50:568     372       df4        Setup      * Inf file: C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wsus3setup.inf

    2009-05-19        08:08:50:883     372       df4        Setup    Update NOT required for C:\WINDOWS\system32\cdm.dll: target version = 7.0.6000.374, required version = 7.0.6000.374

    2009-05-19        08:08:50:883     372       df4        Setup    Update NOT required for C:\WINDOWS\system32\wuapi.dll: target version = 7.0.6000.374, required version = 7.0.6000.374

    2009-05-19        08:08:50:949     372       df4        Setup    Update NOT required for C:\WINDOWS\system32\wuapi.dll.mui: target version = 7.0.6000.374, required version = 7.0.6000.374

    2009-05-19        08:08:50:949     372       df4        Setup    Update NOT required for C:\WINDOWS\system32\wuauclt.exe: target version = 7.0.6000.374, required version = 7.0.6000.374

    2009-05-19        08:08:50:949     372       df4        Setup    Update NOT required for C:\WINDOWS\system32\wuaucpl.cpl: target version = 7.0.6000.374, required version = 7.0.6000.374

    2009-05-19        08:08:51:032     372       df4        Setup    Update NOT required for C:\WINDOWS\system32\wuaucpl.cpl.mui: target version = 7.0.6000.374, required version = 7.0.6000.374

    2009-05-19        08:08:51:032     372       df4        Setup    Update NOT required for C:\WINDOWS\system32\wuaueng.dll: target version = 7.0.6000.374, required version = 7.0.6000.374

    2009-05-19        08:08:51:049     372       df4        Setup    Update NOT required for C:\WINDOWS\system32\wuaueng.dll.mui: target version = 7.0.6000.374, required version = 7.0.6000.374

    2009-05-19        08:08:51:049     372       df4        Setup    Update NOT required for C:\WINDOWS\system32\wucltui.dll: target version = 7.0.6000.374, required version = 7.0.6000.374

    2009-05-19        08:08:51:115     372       df4        Setup    Update NOT required for C:\WINDOWS\system32\wucltui.dll.mui: target version = 7.0.6000.374, required version = 7.0.6000.374

    2009-05-19        08:08:51:381     372       df4        Setup    Update NOT required for C:\WINDOWS\system32\wups.dll: target version = 7.0.6000.374, required version = 7.0.6000.374

    2009-05-19        08:08:51:381     372       df4        Setup    Update NOT required for C:\WINDOWS\system32\wups2.dll: target version = 7.0.6000.374, required version = 7.0.6000.374

    2009-05-19        08:08:51:630     372       df4        Setup    Update NOT required for C:\WINDOWS\system32\wuweb.dll: target version = 7.0.6000.374, required version = 7.0.6000.374

    2009-05-19        08:08:51:630     372       df4        Setup      * IsUpdateRequired = No

    2009-05-19        08:08:56:359     372       b38       AU        WARNING: AU found no suitable session to launch client in

    2009-05-19        08:09:15:343     372       df4        PT         +++++++++++  PT: Synchronizing server updates  +++++++++++

    2009-05-19        08:09:15:343     372       df4        PT           + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://WSUS-Server/ClientWebService/client.asmx

    2009-05-19        08:09:15:475     372       df4        PT         WARNING: Cached cookie has expired or new PID is available

    2009-05-19        08:09:15:492     372       df4        PT         Initializing simple targeting cookie, clientId = cfd2f854-c446-417e-b9ec-9126f65a3524, target group = TGroup, DNS name = TGroup-itxx08.ourdomain.com

    2009-05-19        08:09:15:492     372       df4        PT           Server URL = http://WSUS-Server/SimpleAuthWebService/SimpleAuth.asmx

    2009-05-19        08:09:40:018     372       b38       AU        AU received policy change subscription event

    2009-05-19        08:10:10:435     372       b38       AU        WARNING: AU found no suitable session to launch client in

    2009-05-19        08:11:58:580     372       df4        PT         +++++++++++  PT: Synchronizing extended update info  +++++++++++

    2009-05-19        08:11:58:580     372       df4        PT           + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://WSUS-Server/ClientWebService/client.asmx

    2009-05-19        08:12:07:491     372       df4        Agent      * Added update {60B990A0-6EFA-47BE-8F5A-7DF2C402583E}.111 to search result

    2009-05-19        08:12:07:491     372       df4        Agent      * Found 1 updates and 45 categories in search; evaluated appl. rules of 806 out of 1245 deployed entities

    2009-05-19        08:12:07:557     372       df4        Agent    *********

    2009-05-19        08:12:07:557     372       df4        Agent    **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]

    2009-05-19        08:12:07:557     372       df4        Agent    *************






    MY Q:


    1- is WindowsXP-KB936929 the final release of SP3.

    2- is decline an update, what is happen at client machine
        I have 2 cases:
        if update are installed, will it uninstall??
        if update wait approval, will it delete from client WSUS downloaded files.

    3- At log I see the statement “Setup: Checking whether self-update is required”, is it mean update the Update agent UA of client?

    4- I notice that machine that don’t receive update report error say
    “{4457BECF-B493-4ABE-925A-618378415A6C}     2009-07-01 13:48:07:589+0300  1          148       101       {00000000-0000-0000-0000-000000000000}         0          8024400e          AutomaticUpdates          Failure   Software Synchronization            Windows Update Client failed to detect with error 0x8024400e.”
    this happen when I had stop update service and delete softwaredistribution contents and then restart update service.

    5- Server version WSUS ver3.0, shall I update to version 3.0 SP1 ?
    http://www.microsoft.com/technet/security/advisory/954960.mspx

    Thursday, July 2, 2009 7:19 AM
  • Hi All,

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
    "WUServer"="http://WSUS-server"
    "WUStatusServer"="http://WSUS-server"
    "TargetGroupEnabled"=dword:00000001
    "TargetGroup"="TGroup"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
    "NoAutoRebootWithLoggedOnUsers"=dword:00000001
    "NoAUShutdownOption"=dword:00000001
    "AutoInstallMinorUpdates"=dword:00000001
    "UseWUServer"=dword:00000001
    "DetectionFrequencyEnabled"=dword:00000001
    "DetectionFrequency"=dword:0000000c
    "NoAutoUpdate"=dword:00000000
    "AUOptions"=dword:00000004
    "ScheduledInstallDay"=dword:00000000
    "ScheduledInstallTime"=dword:00000008

     

    Thursday, July 2, 2009 7:32 AM
  • 1- is WindowsXP-KB936929 the final release of SP3.

    Yes.


    2- is decline an update, what is happen at client machine
        I have 2 cases:
        if update are installed, will it uninstall??

    No.

       
    if update wait approval, will it delete from client WSUS downloaded files.

    If the update is not yet installed, and the client performs another detection after the update is declined (or marked Not Approved), the WUAgent will remove the update from the installation schedule. The content will be removed from the Download folder as part of normal WUAgent housecleaning.


    3- At log I see the statement “Setup: Checking whether self-update is required”, is it mean update the Update agent UA of client?

    Yes.


    4- I notice that machine that don’t receive update report error say
    “{4457BECF-B493-4ABE-925A-618378415A6C}     2009-07-01 13:48:07:589+0300  1          148       101       {00000000-0000-0000-0000-000000000000}         0          8024400e          AutomaticUpdates          Failure   Software Synchronization            Windows Update Client failed to detect with error 0x8024400e.”
    this happen when I had stop update service and delete softwaredistribution contents and then restart update service.

    This is possible.

    5- Server version WSUS ver3.0, shall I update to version 3.0 SP1 ?
    http://www.microsoft.com/technet/security/advisory/954960.mspx

    ABSOLUTELY!!!
    Lawrence Garvin, M.S., MCITP:EA, MCDBA
    Principal/CTO, Onsite Technology Solutions, Houston, Texas
    Microsoft MVP - Software Distribution (2005-2009)
    Thursday, July 2, 2009 1:32 PM
  • Just an observation.. not sure if it has any significance...

    You've changed the policy on this client since the update was originally detected/downloaded:

    On May 17th, installation ran at 2pm local time, and was scheduled for 2pm local time.

    2009-05-17 14:00:12:474  372 e6c AU Forced install timer expired for scheduled install
    2009-05-17 14:00:12:474  372 e6c AU UpdateDownloadProperties: 0 download(s) are still in progress.
    2009-05-17 14:00:12:474  372 e6c AU Setting AU scheduled install time to 2009-05-18 11:00:00



    On May 19th, installation was scheduled for 2pm local time, according to policy.


    2009-05-19        08:08:40:661     372       b38       AU          # Approval type: Scheduled (Policy)
    2009-05-19        08:08:40:661     372       b38       AU          # Scheduled install day/time: Every day at 14:00


    According to the current registry settings, installation is configured to run at 8am local time.

    "AUOptions"=dword:00000004
    "ScheduledInstallDay"=dword:00000000
    "ScheduledInstallTime"=dword:00000008

    So, what these observations lead me to is this question:
    What else might have been changed in this policy between 5/17 and today?


    But, ultimately, I think I might have found a clue to this issue, and it may be in the coincidental timing of the matter.

    The log entries you've provided are dated 5/17 thru 5/19. However, on 5/19/09, Microsoft released a REVISION to Windows XP Service Pack 3, which would have expired the old revision (the one shown here as downloaded on 5/17/09). Do you have the option "Auto-approve new revisions" enabled on your WSUS Server? Is the latest revision of Windows XP SP3, dated 5/19/09, actually the one that is approved on your WSUS Server.


    Lawrence Garvin, M.S., MCITP:EA, MCDBA
    Principal/CTO, Onsite Technology Solutions, Houston, Texas
    Microsoft MVP - Software Distribution (2005-2009)
    Thursday, July 2, 2009 1:49 PM
  • On May 19th, installation was scheduled for 2pm local time, according to policy.


    2009-05-19        08:08:40:661     372       b38       AU          # Approval type: Scheduled (Policy)
    2009-05-19        08:08:40:661     372       b38       AU          # Scheduled install day/time: Every day at 14:00


    According to the current registry settings, installation is configured to run at 8am local time.

    "AUOptions"=dword:00000004
    "ScheduledInstallDay"=dword:00000000
    "ScheduledInstallTime"=dword:00000008

    So, what these observations lead me to is this question:
    What else might have been changed in this policy between 5/17 and today?


    But, ultimately, I think I might have found a clue to this issue, and it may be in the coincidental timing of the matter.

    The log entries you've provided are dated 5/17 thru 5/19. However, on 5/19/09, Microsoft released a REVISION to Windows XP Service Pack 3, which would have expired the old revision (the one shown here as downloaded on 5/17/09). Do you have the option "Auto-approve new revisions" enabled on your WSUS Server? Is the latest revision of Windows XP SP3, dated 5/19/09, actually the one that is approved on your WSUS Server.

    Yes Lawrence, i had change installation time during that period.
    Why i did like that, because i was thinking that machines shutdown at schedule installation time.
    This is plus "Auto approves new revision" are enabled.

    Anyway i declined xp-sp3, plan to approve it later

    Thursday, July 9, 2009 6:56 AM