none
WSUS - SUP RRS feed

  • Question

  • Hi Guys

    I am looking your assistance to solve strange issue which I am facing in SCCM 2012 environment.

    This environment is isolated no connection to internet. I have installed the SCCM 2012 R2 on one box and configured the necessary settings (boundaries etc.) and roles.

    All clients are healthy and I am able to distribute application. So far no issue. All logs are not any major errors.

    Next, I have done following configuration.

    - I have installed the WSUS and SUP service. It is using port 8530 (common installation steps).

    - Import the metadata into WSUS and sync with SUP in SCCM. checked the log "wsyncmgr.log" and "WCM.log" to validate the sync is successful. I have not see any error except few updates failed to import.

    - Create software update group/package for selective bulletin

    - Then deployed the software update to one of the system collection.

    My problem:-

    - While initiating software related action in SCCM agent, The client is not getting updates from the server.

    - When I checked the "locationservice.log" file, I do not find entry that it is connecting to WSUS/SUP URL like https://WSUS:8530.

    - On client the local GP is also not point to "hxxp : // localserver:8530" under "Specify intranet Microsoft update service location"

    "Ideally when software update initiate, agent submit a request to the management point to find the WSUS server that the scan will use. After the management point provides the WSUS server location. the agent enable the above mentioned group policy" 

    Now in the above case, the local policy is not configuring the windows update GP settings. Also, In "WUAHandler.log" log no activity is happening or showing that it is connecting to SUP server through URL.

    Boundaries are configured correctly and all clients are 100% Active.

    I am not sure why this issue has occurred and how to solve this issue.

    WUAHandler.log

    <![LOG[CWuaHandler::SetCategoriesForStateReportingExclusion called with B1783324-2208-2237-5564-12456Fs43B;3459628-sd08-41237-3471-223842F43B,A32335C-2950-4187-823C-691235114A3; for leaves and E544428-2308-4635-SVCE74-sdsB8sd,A323235C-2120-4187-823CC-6sdA5134A3; for bundles]LOG]!><time="14:29:06.786-330" date="01-28-2016" component="WUAHandler" context="" type="1" thread="4568" file="cwuahandler.cpp:2527"

    UpdateDeployment.log

     <AssignmentID>{88944D5BC-bd04-4cF1-8190-FE203s1sss50}</AssignmentID>
    </CIAssignmentMessage>']LOG]!><time="12:02:15.233-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="10072" file="cdeploymentagent.cpp:189">
    <![LOG[Assignment {88944D5BC-bd04-4cF1-8190-FE203s1sss50} has total CI = 49]LOG]!><time="12:02:15.255-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="10072" file="updatesassignment.cpp:161">
    <![LOG[Deadline received for assignment ({88944D5BC-bd04-4cF1-8190-FE203s1sss50})]LOG]!><time="12:02:15.256-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="10072" file="updatesassignment.cpp:923">
    <![LOG[Detection job ({88944D5BC-bd04-4cF1-8190-FE203s1sss50}) started for assignment ({88944D5BC-bd04-4cF1-8190-FE203s1sss50})]LOG]!><time="12:02:15.353-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="10072" file="updatesassignment.cpp:1196">
    <![LOG[Message received: '<?xml version='1.0' ?><SoftwareUpdatesMessage MessageType='EvaluateAssignments'><UseCachedResults>False</UseCachedResults></SoftwareUpdatesMessage>']LOG]!><time="12:13:05.117-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="7732" file="cdeploymentagent.cpp:189">
    <![LOG[Removing scan history to force non cached results]LOG]!><time="12:13:05.117-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="7732" file="assignmentsmanager.cpp:1214">
    <![LOG[Assignment({88944D5BC-bd04-4cF1-8190-FE203s1sss50}) already in progress state (AssignmentStateDetecting). No need to evaluate]LOG]!><time="12:13:05.151-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="7732" file="updatesassignment.cpp:839">
    <![LOG[Evaluation initiated for (0) assignments.]LOG]!><time="12:13:05.151-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="7732" file="assignmentsmanager.cpp:1105">
    <![LOG[Message received: '<?xml version='1.0' ?>

    Can anyone share some light on this pls?

    Regards

    TechMan

     

    Wednesday, February 10, 2016 6:48 PM

Answers

All replies

  • IN the client settings did you enable the windows update ?

    https://technet.microsoft.com/en-ca/library/gg682067.aspx?f=255&MSPPError=-2147217396#BKMK_SoftwareUpdatesDeviceSetting

    This is the setting that tell client where to look for patch and so on.


    Wednesday, February 10, 2016 7:10 PM
  • Thanks for response.

    on client settings-software update is enabled.

    Under Device Settings

    ----------------------------

    Enable Software updates on Clients - YES

    Please suggest

    Thursday, February 11, 2016 6:44 AM
  • Dear Sir,

        Have you checked if the "Specify Intranet Microsoft Update Service Location"(local group policy->Administrative Templates->Windows components->Windows update) has been configured correctly? It should be enabled and configured like: http://server.domain.com:8530.

    Best regards,

    Jimmy


    Friday, February 12, 2016 4:32 AM
    Moderator
  • Try checking the locationservices.log on the client device to see if it knows which WSUS server to use.  Also check the windowsupdate.log in the Windows folder on the client device to see where it tries to scan from.

    JacquesB4

    Friday, February 12, 2016 5:32 AM
  • Thanks Jimmy and JacquesB4 for your response. I am still searching the solution and therefore, I have created a test lab few min back. I am checking if I can replicate the same problem.

    Hi Jimmy - I am quoting below lines from MCT book 10747D:

    " When the initial scan begins on a client, the software update agent submit a request to the management point to find the WSUS server that the scan will use. After the management point provides the WSUS location, the agent enables the "specify intranet Microsoft update service location" local group policy settings and then configure the policy setting with URL of the server that is running the software update point"

    so as far above point, it should be automatically configured. As I have not find the solution. Therefore, I have  take 2 desktop on which SCCM agent is healthy and one of them, I have manually configured the local group policy settings like ( hxxp : // SCCM server:8530) but it is still not working. No activity logged under WUhandler.log.

    Hi JacquesB4

    I have checked the locationservices.log, this log is still not showing WSUS server location.

    as per my above response to jimmy when I have configured GP policy manually for one system, it is connecting the SUP on URL like "hxxp : // servername:8530" but again no activity.

    As per below, the updatesdeployment log is showing CI=29 updates but no updates are coming and Yes no activity under WUhandler.log except below lines.

    WUhandler.log

    <![LOG[Assignment {C111111-AA24-4b23-8119-AC2211BF251} has total CI = 29]LOG]!><time="12:02:15.255-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="10072" file="updatesassignment.cpp:161">
    <![LOG[Deadline received for assignment ({C11111-AA24-4b23-8119-AC2211BF251})]LOG]!><time="12:02:15.256-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="10072" file="updatesassignment.cpp:923">
    <![LOG[Detection job ({48A00179-7427-4462-B45F-0617AE40D3D6}) started for assignment ({C111111-AA24-4b23-8119-AC2211BF251})]LOG]!><time="12:02:15.353-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="10072" file="updatesassignment.cpp:1196">
    <![LOG[Message received: '<?xml version='1.0' ?><SoftwareUpdatesMessage MessageType='EvaluateAssignments'><UseCachedResults>False</UseCachedResults></SoftwareUpdatesMessage>']LOG]!><time="12:13:05.117-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="7732" file="cdeploymentagent.cpp:189">
    <![LOG[Removing scan history to force non cached results]LOG]!><time="12:13:05.117-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="7732" file="assignmentsmanager.cpp:1214">
    <![LOG[Assignment({C111111-AA24-4b23-8119-AC2211BF251}) already in progress state (AssignmentStateDetecting). No need to evaluate]LOG]!><time="12:13:05.151-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="7732" file="updatesassignment.cpp:839">
    <![LOG[Evaluation initiated for (0) assignments.]LOG]!><time="12:13:05.151-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="7732" file="assignmentsmanager.cpp:1105">
    <![LOG[Message received: '<?xml version='1.0' ?>
     <CIAssignmentMessage MessageType='Activation'>
         <AssignmentID>{C111111-AA24-4b23-8119-AC2211BF251}</AssignmentID>
     </CIAssignmentMessage>']LOG]!><time="12:34:00.046-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="9252" file="cdeploymentagent.cpp:189">
    <![LOG[Assignment ({C111111-AA24-4b23-8119-AC2211BF251}) received activation trigger]LOG]!><time="12:34:00.080-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="9252" file="updatesassignment.cpp:729">
    <![LOG[Operation (TriggerEnforce) already in progress. No need to activate.]LOG]!><time="12:34:00.423-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="2" thread="9252" file="updatesassignment.cpp:735">
    <![LOG[EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 0]LOG]!><time="12:57:24.903-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="9604" file="updatesmanager.cpp:945">
    <![LOG[EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 0]LOG]!><time="12:57:24.934-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="9604" file="updatesmanager.cpp:945">

    Updatesdeployment.log

    <![LOG[Assignment {C111111-AA24-4b23-8119-AC2211BF251} has total CI = 29]LOG]!><time="12:02:15.255-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="10072" file="updatesassignment.cpp:161">
    <![LOG[Deadline received for assignment ({C11111-AA24-4b23-8119-AC2211BF251})]LOG]!><time="12:02:15.256-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="10072" file="updatesassignment.cpp:923">
    <![LOG[Detection job ({48A00179-7427-4462-B45F-0617AE40D3D6}) started for assignment ({C111111-AA24-4b23-8119-AC2211BF251})]LOG]!><time="12:02:15.353-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="10072" file="updatesassignment.cpp:1196">
    <![LOG[Message received: '<?xml version='1.0' ?><SoftwareUpdatesMessage MessageType='EvaluateAssignments'><UseCachedResults>False</UseCachedResults></SoftwareUpdatesMessage>']LOG]!><time="12:13:05.117-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="7732" file="cdeploymentagent.cpp:189">
    <![LOG[Removing scan history to force non cached results]LOG]!><time="12:13:05.117-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="7732" file="assignmentsmanager.cpp:1214">
    <![LOG[Assignment({C111111-AA24-4b23-8119-AC2211BF251}) already in progress state (AssignmentStateDetecting). No need to evaluate]LOG]!><time="12:13:05.151-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="7732" file="updatesassignment.cpp:839">
    <![LOG[Evaluation initiated for (0) assignments.]LOG]!><time="12:13:05.151-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="7732" file="assignmentsmanager.cpp:1105">
    <![LOG[Message received: '<?xml version='1.0' ?>
     <CIAssignmentMessage MessageType='Activation'>
         <AssignmentID>{C111111-AA24-4b23-8119-AC2211BF251}</AssignmentID>
     </CIAssignmentMessage>']LOG]!><time="12:34:00.046-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="9252" file="cdeploymentagent.cpp:189">
    <![LOG[Assignment ({C111111-AA24-4b23-8119-AC2211BF251}) received activation trigger]LOG]!><time="12:34:00.080-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="9252" file="updatesassignment.cpp:729">
    <![LOG[Operation (TriggerEnforce) already in progress. No need to activate.]LOG]!><time="12:34:00.423-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="2" thread="9252" file="updatesassignment.cpp:735">
    <![LOG[EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 0]LOG]!><time="12:57:24.903-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="9604" file="updatesmanager.cpp:945">
    <![LOG[EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 0]LOG]!><time="12:57:24.934-330" date="02-09-2016" component="UpdatesDeploymentAgent" context="" type="1" thread="9604" file="updatesmanager.cpp:945">

    Regards

    TechMan

    Friday, February 12, 2016 8:57 PM
  • Guys - Can anyone of you please help me on this weird issue? I am stuck on this.

    I am not able to see WSUS site (like hxxx: //SUPServer:8530) pointing either in WUhandler.log or locationservice.log yet on client side. Ideally, once WSUS and SUP enabled, the client get these changes from Management point and then it shows WSUS site info in the above mentioned logs. Also, client get the local group policy settings which point to WSUS site. 

    The software update point is set to "YES" in client settings. I do not find any error under the component.

    Client is healthy and I am able to telnet SUP on port 8530. Therefore no network/firewall issue.

    Not sure why client is still not able to find WSUS or give any sort of error related to WSUS site.

    Client is Windows 7 with server pack1 and SCCM is running on windows server 2012 R2. The SCCM version is R2.

    I have searched a lot on internet but not see any one facing such issue.

    Looking fwd some help on this.

    Regards

    TechMan

    Sunday, February 14, 2016 5:00 PM
  • can you look at the windowsupdate.log in c:\windows
    Monday, February 15, 2016 12:39 PM
  • did you look at windowsupdate.log to see which WSUS Server is your client talking to ? and whether the WSUS settings applied correctly ?

    Eswar Koneti | Configmgr Blog: www.eskonr.com | Linkedin: Eswar Koneti | Twitter: eskonr

    Tuesday, February 16, 2016 7:01 AM
  • Hi Eswar

    Because system is not getting software update policy, the registry settings for windows update is not creating. In this case, it is connecting to window update server in windowsupdate.log.

    When I configured WSUS/Windows Update setting through group policy, the windowsupdate.log is showing WSUS site. However, the important point is here the locationservice.log or WUhandler are still not showing any entry about WSUS site location. therefore, it is still not detecting the WSUS site.

    In Site all sites components are green and software update point is enabled. Also, I have also followed your guide while enabling the WSUS/SUP service.

    This is very strange issue.

    Regards

    TechMan

    Wednesday, February 17, 2016 11:57 AM
  • you don't need to configure any GPO to point to specific WSUS ,it will be created automatically when you Install Configmgr client (assuming wsus+SUP settings enabled ). you only need to create GPO to disable automatic updates and rest will be taken care by Configmgr. you need to look at windowsupdate.log and wuahanlder.log to see what's happening on the client.

    Eswar Koneti | Configmgr Blog: www.eskonr.com | Linkedin: Eswar Koneti | Twitter: eskonr

    Thursday, February 18, 2016 8:24 AM