locked
I keep getting an error with WSUS RRS feed

  • Question

  • Hello -  I am new to the position I am in and new to maintaining WSUS, I keep getting this error with WSUS, I have tried everything I could find with no luck.
    Any help would be appreciated.
    Thanks,

    Eric


    - System 

      - Provider 

       [ Name]  Windows Server Update Services 
     
      - EventID 7032 

       [ Qualifiers]  0 
     
       Level 3 
     
       Task 0 
     
       Keywords 0x80000000000000 
     
      - TimeCreated 

       [ SystemTime]  2015-10-13T09:12:34.000Z 
     
       EventRecordID 292258 
     
       Channel Application 
     
       Computer chn11001.myriad.int 
     
       Security 
     

    - EventData 

       The WSUS administration console was unable to connect to the WSUS Server via the remote API. Verify that the Update Services service, IIS and SQL are running on the server. If the problem persists, try restarting IIS, SQL, and the Update Services Service. System.Net.WebException -- The operation has timed out Source System.Web.Services Stack Trace: at System.Web.Services.Protocols.WebClientProtocol.GetWebResponse(WebRequest request) at System.Web.Services.Protocols.HttpWebClientProtocol.GetWebResponse(WebRequest request) at Microsoft.UpdateServices.Internal.DatabaseAccess.ApiRemotingCompressionProxy.GetWebResponse(WebRequest webRequest) at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters) at Microsoft.UpdateServices.Internal.ApiRemoting.ExecuteSPSearchUpdates(String updateScopeXml, String preferredCulture, Int32 publicationState) at Microsoft.UpdateServices.Internal.DatabaseAccess.AdminDataAccessProxy.ExecuteSPSearchUpdates(String updateScopeXml, String preferredCulture, ExtendedPublicationState publicationState) at Microsoft.UpdateServices.Internal.BaseApi.Update.SearchUpdates(UpdateScope searchScope, ExtendedPublicationState publicationState, UpdateServer updateServer) at Microsoft.UpdateServices.UI.AdminApiAccess.UpdateManager.GetUpdates(ExtendedUpdateScope filter) at Microsoft.UpdateServices.UI.AdminApiAccess.BulkUpdatePropertiesCache.GetAndCacheUpdates(ExtendedUpdateScope updateScope, ComputerTargetScope computerTargetScope) at Microsoft.UpdateServices.UI.SnapIn.Pages.UpdatesListPage.GetListRows() 


    • Edited by Eric1012 Tuesday, October 13, 2015 10:08 AM
    Tuesday, October 13, 2015 10:08 AM

Answers

  • Hi, Khalid&Don

    I followed your advice, tried the reindexing script Re-index the WSUS 3.0 Database  from(https://gallery.technet.microsoft.com/scriptcenter/6f8cde49-5c52-4abd-9820-f1d270ddea61/view/Discussions#content), everything seems to be working properly. This issue has been plaguing me a long time. I think it's true that this caused because of "too much data" is not maintained properly.


    Thanks, both of you.

    • Edited by Eric1012 Thursday, October 29, 2015 7:12 AM
    • Marked as answer by Steven_Lee0510 Monday, November 9, 2015 8:14 AM
    Thursday, October 29, 2015 7:09 AM

All replies

  • Check the permission on your C:\WINDOWS\TEMP folder.

    NETWORK SERVICE needs to have write access to that folder.


    -----------------------------------------------------------------

    Sincerely!

    Khalid Garayev

    * Please don't forget to mark as answer or Vote if it helps!

    Tuesday, October 13, 2015 10:17 AM
  • Hi Khild,

    Could tell me more detail about how to give NETWORK SERVICE write access to temp.

    This problem is not always occurs, only especially repeated when I use the WSUS console, click Updates, and then click All Updates to try to display updates.It takes a long time to loading, but finally shows Connection Error message.

    Tuesday, October 13, 2015 12:11 PM
  • HI.

    right click on temp folder goto properties.

    Goto Security tab.

    Click to EDIT button. On opened window click to Add button. In oject type NETWORK SERVICE and click to Check Names button ont the right side. And Save it.  


    -----------------------------------------------------------------

    Sincerely!

    Khalid Garayev

    * Please don't forget to mark as answer or Vote if it helps!

    Tuesday, October 13, 2015 5:05 PM
  • Hi Khalid,

    After I type NETWORK SERVICE, the notification is An object named "NETWORK SERVICE " cannot be found. Check the selected object types and location for accuracy and ensure that you typed the object name correctly, or remove this object from the selection.Could you give me more help, thanks.

    Wednesday, October 14, 2015 2:55 AM
  • Hi. If not found by typing then pls. Open same way and below you will find ADVANCED button. Click on it and on opened window you will see FIND NOW button. From the list find the network service account and select it. Also be sure that you didn't select DOMAIN only select your computer name from the location. 

    -----------------------------------------------------------------

    Sincerely!

    Khalid Garayev

    * Please don't forget to mark as answer or Vote if it helps!


    Wednesday, October 14, 2015 4:46 AM
  • Hi Khalid

    I have do the same operation you told me, but the connection error(event ID 7032) is  still occurs.

    Wednesday, October 14, 2015 6:18 AM
  • Then delete WSUS applciation cache from the location below:

    C:\Documents and Settings\<user profile>\application data\microsoft\mmc

    <user profile> is the username which you logged in


    -----------------------------------------------------------------

    Sincerely!

    Khalid Garayev

    * Please don't forget to mark as answer or Vote if it helps!

    Wednesday, October 14, 2015 7:23 AM
  • Hi Khalid

    I can't open the “documents and settings” folder, it says I don't have permission.  I've tried to change the security settings to allow me full control, but despite being an administrator I still don't have permission.


    Thursday, October 15, 2015 2:04 AM
  • The folder itself is shaded out with a shortcut overlay.
    Thursday, October 15, 2015 2:07 AM
  • I try to open C:\Users\<user profile>\Application Data, it says I don't have permission. and The folder(Application Data) itself is shaded out with a shortcut overlay.
    Thursday, October 15, 2015 2:16 AM
  • Get ownership of folder as shown below:

    Then you can do anything with this folder. 


    -----------------------------------------------------------------

    Sincerely!

    Khalid Garayev

    * Please don't forget to mark as answer or Vote if it helps!

    Thursday, October 15, 2015 4:28 AM
  • hi Khalid,

    Thank you for your guide, I have open the folder and deleted the WSUS application cache, but when clicking Updates->All updates in the WSUS Administration console, loading updates time is long and There is no progress in the progress bar under the console window, about few minutes later shows Connection Error message.

    The overview of Server Statistics

    Unapproved updates:19813
    approved updates:13017
    Declined updates:15565
    Computers:418
    Computer groups:1

    The summary of the status of updates

    All Updates
    Updates with errors:432
    Updates needed by computer:1303
    Updates installed/not applicable:0
    Updates with no status:31095

    Security Updates
    Updates with errors:255
    Updates needed by computer:713
    Updates installed/not applicable:0
    Updates with no status:8166

    Critical Updates
    Updates with errors:38
    Updates needed by computer:424
    Updates installed/not applicable:0
    Updates with no status:1729

    WSUS Updates
    Updates with errors:0
    Updates needed by computer:1
    Updates installed/not applicable:0
    Updates with no status:11

    • Edited by Eric1012 Thursday, October 15, 2015 8:33 AM
    Thursday, October 15, 2015 8:31 AM
  • Don you have proxy server in the network which can block updates?

    Also check the internet connection for your WSUS server.

    Goto WSUS Configuration and goto Specify Proxy Server tab and click to Start Connecting. Check it if it's not working then it means Updates from Microsoft servers cannot download or you cannot reach them. If everything is ok. Then inform us for next steps.


    -----------------------------------------------------------------

    Sincerely!

    Khalid Garayev

    * Please don't forget to mark as answer or Vote if it helps!



    Thursday, October 15, 2015 9:48 AM
  • Hi Khalid 

    We don't use a  proxy server when synchronizing.

    Friday, October 16, 2015 1:42 AM
  • OK Good. Did you check the connection as shown in picture before?

    -----------------------------------------------------------------

    Sincerely!

    Khalid Garayev

    * Please don't forget to mark as answer or Vote if it helps!

    Friday, October 16, 2015 3:22 AM
  • Hi Khalid

    Yes, I do the check. The connection is ok.

    Friday, October 16, 2015 8:33 AM
  • Did it synchronized with the Microsoft Update servers? 


    -----------------------------------------------------------------

    Sincerely!

    Khalid Garayev

    * Please don't forget to mark as answer or Vote if it helps!

    Friday, October 16, 2015 9:02 AM
  • Hi Khalid

    Yes, it's synchronized with the Microsoft Update servers on the daily automatic schedule. 


    • Edited by Eric1012 Monday, October 19, 2015 1:46 AM
    Monday, October 19, 2015 1:27 AM
  • As I see your WSUS server has downloaded updates and kept all them in folder. But your user computers are not applied any update. 

    I have solved same condition with Group Policy. There were problems with firewalls. 

    After configuration everything was OK. Here is the my configuration for WSUS.

    wsus


    -----------------------------------------------------------------

    Sincerely!

    Khalid Garayev

    * Please don't forget to mark as answer or Vote if it helps!

    Monday, October 19, 2015 4:03 AM
  • Hi  Khalid

    I have typed wsus server name in the text, so I think there is no error in my configuration. My problem is  WSUS administration console was unable to connect and display the Updates, I want to see the items in Updates, but it shows Error: Connection Error.





    • Edited by Eric1012 Monday, October 19, 2015 8:05 AM
    Monday, October 19, 2015 7:19 AM
  • Check it please:

    https://support.microsoft.com/en-us/kb/2737219


    -----------------------------------------------------------------

    Sincerely!

    Khalid Garayev

    * Please don't forget to mark as answer or Vote if it helps!

    Monday, October 19, 2015 10:46 AM
  • Thanks, Khalid, It seems not the reason of having "ASP.NET Impersonation" Enabled for any of the WSUS Administration Websites. I have try to restart IIS, SQL, and the Update Services Service, but it still show the same error.

    Errors in Application Logs

    Log Name:      Application
    Source:        Windows Server Update Services
    Date:          2015/10/19 15:22:56
    Event ID:      7032
    Task Category: None
    Level:         Warning
    Keywords:      Classic
    User:          N/A
    Computer:      ServerName.domain.local
    Description:
    The WSUS administration console was unable to connect to the WSUS Server via the remote API. 

    Verify that the Update Services service, IIS and SQL are running on the server. If the problem persists, try restarting IIS, SQL, and the Update Services Service.

    System.Net.WebException -- The operation has timed out

    Source
    System.Web.Services

    Stack Trace:
       at System.Web.Services.Protocols.WebClientProtocol.GetWebResponse(WebRequest request)
       at System.Web.Services.Protocols.HttpWebClientProtocol.GetWebResponse(WebRequest request)
       at Microsoft.UpdateServices.Internal.DatabaseAccess.ApiRemotingCompressionProxy.GetWebResponse(WebRequest webRequest)
       at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
       at Microsoft.UpdateServices.Internal.ApiRemoting.ExecuteSPSearchUpdates(String updateScopeXml, String preferredCulture, Int32 publicationState)
       at Microsoft.UpdateServices.Internal.DatabaseAccess.AdminDataAccessProxy.ExecuteSPSearchUpdates(String updateScopeXml, String preferredCulture, ExtendedPublicationState publicationState)
       at Microsoft.UpdateServices.Internal.BaseApi.Update.SearchUpdates(UpdateScope searchScope, ExtendedPublicationState publicationState, UpdateServer updateServer)
       at Microsoft.UpdateServices.UI.AdminApiAccess.UpdateManager.GetUpdates(ExtendedUpdateScope filter)
       at Microsoft.UpdateServices.UI.AdminApiAccess.BulkUpdatePropertiesCache.GetAndCacheUpdates(ExtendedUpdateScope updateScope, ComputerTargetScope computerTargetScope)
       at Microsoft.UpdateServices.UI.SnapIn.Pages.UpdatesListPage.GetListRows()




    • Edited by Eric1012 Monday, October 19, 2015 11:21 AM
    Monday, October 19, 2015 11:20 AM
  • Follow these steps:

    1. Open the Services snap-in (click Start, click Run, and then type services.msc).
    2. Right-click the World Wide Web Publishing service and select Properties.
    3. On the LogOn tab, clear the Allow service to interact with desktop check box.
    4. Click OK, and then dismiss the Services snap-in.
    5. From a command shell, type iisreset.

    -----------------------------------------------------------------

    Sincerely!

    Khalid Garayev

    * Please don't forget to mark as answer or Vote if it helps!

    Monday, October 19, 2015 11:47 AM
  • System.Net.WebException -- The operation has timed out


    Based on this original symptom above, and, this:

    The overview of Server Statistics

    Unapproved updates:19813
    approved updates:13017
    Declined updates:15565
    Computers:418
    Computer groups:1

    The summary of the status of updates

    All Updates
    Updates with errors:432
    Updates needed by computer:1303
    Updates installed/not applicable:0
    Updates with no status:31095

    I suspect that a lack of regular maintenance of your SUSDB is the cause (you have too much junk in your DB).

    This series of articles may help you to cleanup your DB.

    https://thwack.solarwinds.com/community/application-and-server_tht/patchzone/blog/2013/01/14/wsus-timeout-errors--when-and-why-eliminating-and-avoiding


    Don

    Monday, October 19, 2015 8:16 PM
  • Hi Don

    the URL can not open

    Forbidden
    You don't have permission to access /community/application-and-server_tht/patchzone/blog/2013/01/14/wsus-timeout-errors--when-and-why-eliminating-and-avoiding on this server.


    • Edited by Eric1012 Tuesday, October 20, 2015 9:49 AM
    Tuesday, October 20, 2015 9:46 AM
  • hi Khalid

    Thank you for your patience and detailed reply, I am still paused by the problem.


    Tuesday, October 20, 2015 10:02 AM
  • Hi Don

    the URL can not open

    Forbidden
    You don't have permission to access /community/application-and-server_tht/patchzone/blog/2013/01/14/wsus-timeout-errors--when-and-why-eliminating-and-avoiding on this server.


    That's odd, I can access the website without any permission issues.. :S

    Don

    Tuesday, October 20, 2015 8:27 PM
  • Hi, Khalid&Don

    I followed your advice, tried the reindexing script Re-index the WSUS 3.0 Database  from(https://gallery.technet.microsoft.com/scriptcenter/6f8cde49-5c52-4abd-9820-f1d270ddea61/view/Discussions#content), everything seems to be working properly. This issue has been plaguing me a long time. I think it's true that this caused because of "too much data" is not maintained properly.


    Thanks, both of you.

    • Edited by Eric1012 Thursday, October 29, 2015 7:12 AM
    • Marked as answer by Steven_Lee0510 Monday, November 9, 2015 8:14 AM
    Thursday, October 29, 2015 7:09 AM
  • But I get another question. If I have cleaned up the unused updates, how can the newly joined PC gets that updates from WSUS server.
    Thursday, October 29, 2015 7:33 AM
  • But I get another question. If I have cleaned up the unused updates, how can the newly joined PC gets that updates from WSUS server.

    If you Decline an update, client computers will not scan for that update.
    Don't Decline updates if you might need them. It's ok to decline an update, if you use a computer imaging method and the necessary updates are included in your master image, and, assuming that nobody will ever uninstall any updates.

    Don

    Thursday, October 29, 2015 8:48 AM
  • Hi. 

    How will you know that which update is unused. Just you need to select exact updates which you need from WSUS option. then all necessary updates has applied to related OS or software.

    You don't need to decline any update if you need it to be applied to all computers.


    -----------------------------------------------------------------

    Sincerely!

    Khalid Garayev

    * Please don't forget to mark as answer or Vote if it helps!

    Thursday, October 29, 2015 9:28 AM