none
SFEP updates

    Question

  • sccm 2012 sp1 cu01

    Occassionally a client can not get definition updates, some of our locations block internet but the policie order is to pull from the secondary site server on the LAN first. Here is a log error.

    Event Type:        Error

    Event Source:    Microsoft Antimalware

    Event Category:                None

    Event ID:              2001

    Date:                     5/22/2013

    Time:                     9:57:56 AM

    User:                     N/A

    Computer:          computername

    Description:

    Microsoft Antimalware has encountered an error trying to update signatures.

                    New Signature Version:

                    Previous Signature Version: 0.0.0.0

                    Update Source: Microsoft Malware Protection Center

                    Update Stage: Search

                    Source Path: http://go.microsoft.com/fwlink/?LinkID=121721&clcid=0x409&arch=x86&eng=0.0.0.0&avdelta=0.0.0.0&asdelta=0.0.0.0&prod=DDEFDD14-250E-4DC8-A0B3-9D667EC5D8EB

                    Signature Type: AntiSpyware

                    Update Type: Full

                    User: domain\username

                    Current Engine Version:

                    Previous Engine Version: 0.0.0.0

                    Error code: 0x800704dc

                    Error description: The operation being requested was not performed because the user has not been authenticated.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

    What could cause this, thanks.

    Wednesday, May 22, 2013 3:40 PM

Answers

  • I believe so, manually kicking to start the scan or definition download immediately should be done by manually triggering a policy refresh

    Kevin Case | My blog www.sccmroad.wordpress.com/ Twitter: @casekev | | Please mark as helpful/answer if this resolved your issue

    • Marked as answer by jamicon Wednesday, May 29, 2013 11:45 AM
    Tuesday, May 28, 2013 9:25 PM

All replies

  • That's certainly trying to get that update from Microsoft without question.

    It would think it would only do this if the other sources were unavailable. Have you tried looking in the Updates*.log(s) on the client to see if you see any errors or made sure the client is reporting that the update is needed back to the SUP?

    If you verify this then you can try looking in the CAS.log to make sure the content is getting downloaded etc.


    Inframon Blogs | All Things ConfigMgr


    Thursday, May 23, 2013 12:38 AM
  • in the windowsupdate.log I do see the query against our SCCMWSUS server but I do not see the name of the secondary server which is where it should be getting the updates from. I see no errors.

    The CAS.log on the client, the primary or the secondary? I do not have a CAS server just a Primary and 50 secondary's.

    I think I have a real problem here, I thought I had this all setup correctly but I think all clients are trying to use the Internet for Definitions - HELP!

    SFEP gets installed with the SCCM client and I see that my default Antimalware is applied to these clients and you saw the update source order above, what could I be missing?

    Just found these errors on one client that does not have internet access, not sure it helps, found on windowsupdate.log

    2013-05-23 09:55:33:585  920 1798 AU WARNING: Failed to get Wu Exemption info from NLM, assuming not exempt, error = 0x80240037

    2013-05-23 09:55:33:554  920 1a0c Misc WARNING: Network Cost is assumed to be not supported as something failed with trying to get handles to wcmapi.dll

    2013-05-23 08:51:20:491  920 768 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80190191
    2013-05-23 08:51:21:210  920 768 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80190191
    2013-05-23 08:51:21:210  920 768 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80190191
    2013-05-23 08:51:21:850  920 768 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80190191
    2013-05-23 08:51:21:850  920 768 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80190191
    2013-05-23 08:51:21:850  920 768 Misc WARNING: DownloadFileInternal failed for http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab: error 0x80190191
    2013-05-23 08:51:22:459  920 768 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80190191
    2013-05-23 08:51:22:459  920 768 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80190191
    2013-05-23 08:51:23:100  920 768 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80190191

    I've already verified that the local polices is pointing to the sccm wsus server and verified the ports. The wsus query is successful its just not trying to find the secondary for the updates, not even when trying from a secondary site server.

    Note: Windows updates delivered via SCCM Software Center work fine, this is just the SCEP client that's the propblem





    • Edited by jamicon Thursday, May 23, 2013 3:14 PM
    Thursday, May 23, 2013 2:52 PM
  • CAS.log on the client, this will show if ConfigMgr is involved in downloading them. Can you untick the option to download from Windows Update and WSUS? I usually just have ConfigMgr ticked.

    Please don't forget to mark posts as helpful or answers.
    Inframon Blogs | All Things ConfigMgr

    Thursday, May 23, 2013 3:30 PM
  • I'll check the log thanks, I do need the other options for mobile users often out of the office for several weeks.

    update:

    Successfully raised Download Failed event.            ContentAccess   5/23/2013 2:35:49 AM    1896 (0x0768)

    Error: DeleteDirectory:- Failed to delete Directory  with Error 0x00000003.               ContentAccess               5/23/2013 2:35:49 AM    1896 (0x0768)

    Error: DeleteDirectory:- Failed to delete Directory C:\Windows\ccmcache\8h.BCWork with Error 0x00000002.       ContentAccess   5/23/2013 2:35:49 AM    1896 (0x0768)

    Releasing content request {8BCAF861-F239-4F21-A674-7FBCEED017BF}     ContentAccess               5/23/2013 2:35:49 AM    1896 (0x0768)

    Download failed for content d360f6fa-8f91-459e-8709-51620190d974.1 under context System, error 0x80070005             ContentAccess   5/23/2013 2:35:58 AM    3752 (0x0EA8)

    Download failed for download request {A5485BD2-F860-4440-A657-C0D600314E48}               ContentAccess   5/23/2013 2:35:58 AM    3752 (0x0EA8)

    Raising event:

    [SMS_CodePage(437), SMS_LocaleID(1033)]

    instance of SoftDistDownloadFailedEvent

    {

                   ClientID = "GUID:00CAB84F-4368-4840-A71C-9614C8470FF5";

                   DateTime = "20130523073558.453000+000";

                   MachineName = "SCCMSERVER";

                   PackageId = "d360f6fa-8f91-459e-8709-51620190d974";

                   PackageName = "d360f6fa-8f91-459e-8709-51620190d974";

                   PackageVersion = "1";

                   ProcessID = 1756;

                   SiteCode = "P01";

                   ThreadID = 3752;

    };

                   ContentAccess   5/23/2013 2:35:58 AM    3752 (0x0EA8)

    Successfully raised Download Failed event.            ContentAccess   5/23/2013 2:35:58 AM    3752 (0x0EA8)

    Error: DeleteDirectory:- Failed to delete Directory  with Error 0x00000003.               ContentAccess               5/23/2013 2:35:58 AM    3752 (0x0EA8)

    Error: DeleteDirectory:- Failed to delete Directory C:\Windows\ccmcache\8i.BCWork with Error 0x00000002.       ContentAccess   5/23/2013 2:35:58 AM    3752 (0x0EA8)

    Releasing content request {A5485BD2-F860-4440-A657-C0D600314E48}    ContentAccess               5/23/2013 2:35:58 AM    3752 (0x0EA8)

    Download failed for content 5a082024-1274-4eab-8e6d-b3a0cb961899.1 under context System, error 0x80070005             ContentAccess   5/23/2013 2:36:09 AM    3752 (0x0EA8)

    Download failed for download request {BEAB3825-B4CE-490F-9FCC-B123A8132695}               ContentAccess   5/23/2013 2:36:09 AM    3752 (0x0EA8)

    Raising event:

    [SMS_CodePage(437), SMS_LocaleID(1033)]

    instance of SoftDistDownloadFailedEvent

    {

                   ClientID = "GUID:00CAB84F-4368-4840-A71C-9614C8470FF5";

                   DateTime = "20130523073609.263000+000";

                   MachineName = "SCCMSERVER";

                   PackageId = "5a082024-1274-4eab-8e6d-b3a0cb961899";

                   PackageName = "5a082024-1274-4eab-8e6d-b3a0cb961899";

                   PackageVersion = "1";

                   ProcessID = 1756;

                   SiteCode = "P01";

                   ThreadID = 3752;

    };

                   ContentAccess   5/23/2013 2:36:09 AM    3752 (0x0EA8)

    Successfully raised Download Failed event.            ContentAccess   5/23/2013 2:36:09 AM    3752 (0x0EA8)

    Error: DeleteDirectory:- Failed to delete Directory  with Error 0x00000003.               ContentAccess               5/23/2013 2:36:09 AM    3752 (0x0EA8)

    Error: DeleteDirectory:- Failed to delete Directory C:\Windows\ccmcache\8j.BCWork with Error 0x00000002.       ContentAccess   5/23/2013 2:36:09 AM    3752 (0x0EA8)

    Releasing content request {BEAB3825-B4CE-490F-9FCC-B123A8132695}    ContentAccess               5/23/2013 2:36:09 AM    3752 (0x0EA8)

    Download failed for content b87e1f15-d8bb-4013-8440-799f3c4374f2.1 under context System, error 0x80070005             ContentAccess   5/23/2013 2:36:20 AM    1896 (0x0768)

    Download failed for download request {36A51F32-51C9-4414-BFBD-4E1E22A373D6}               ContentAccess   5/23/2013 2:36:20 AM    1896 (0x0768)

    Raising event:

    [SMS_CodePage(437), SMS_LocaleID(1033)]

    instance of SoftDistDownloadFailedEvent

    {

                   ClientID = "GUID:00CAB84F-4368-4840-A71C-9614C8470FF5";

                   DateTime = "20130523073620.261000+000";

                   MachineName = "SCCMSERVER";

                   PackageId = "b87e1f15-d8bb-4013-8440-799f3c4374f2";

                   PackageName = "b87e1f15-d8bb-4013-8440-799f3c4374f2";

                   PackageVersion = "1";

                   ProcessID = 1756;

                   SiteCode = "P01";

                   ThreadID = 1896;

    };

                   ContentAccess   5/23/2013 2:36:20 AM    1896 (0x0768)

    Successfully raised Download Failed event.            ContentAccess   5/23/2013 2:36:20 AM    1896 (0x0768)

    Error: DeleteDirectory:- Failed to delete Directory  with Error 0x00000003.               ContentAccess               5/23/2013 2:36:20 AM    1896 (0x0768)

    Error: DeleteDirectory:- Failed to delete Directory C:\Windows\ccmcache\8k.BCWork with Error 0x00000002.       ContentAccess   5/23/2013 2:36:20 AM    1896 (0x0768)

    Releasing content request {36A51F32-51C9-4414-BFBD-4E1E22A373D6}    ContentAccess               5/23/2013 2:36:20 AM    1896 (0x0768)

    Download failed for content b74ae674-3a6f-4a81-9a51-2f8c8ab6632c.1 under context System, error 0x80070005             ContentAccess   5/23/2013 2:36:31 AM    1896 (0x0768)

    Download failed for download request {8724337F-AF6F-42D7-A2A5-AED4B9B1F5F5}               ContentAccess   5/23/2013 2:36:31 AM    1896 (0x0768)

    Raising event:

    [SMS_CodePage(437), SMS_LocaleID(1033)]

    instance of SoftDistDownloadFailedEvent

    {

                   ClientID = "GUID:00CAB84F-4368-4840-A71C-9614C8470FF5";

                   DateTime = "20130523073631.211000+000";

                   MachineName = "SCCMSERVER";

                   PackageId = "b74ae674-3a6f-4a81-9a51-2f8c8ab6632c";

                   PackageName = "b74ae674-3a6f-4a81-9a51-2f8c8ab6632c";

                   PackageVersion = "1";

                   ProcessID = 1756;

                   SiteCode = "P01";

                   ThreadID = 1896;

    };

                   ContentAccess   5/23/2013 2:36:31 AM    1896 (0x0768)

    Successfully raised Download Failed event.            ContentAccess   5/23/2013 2:36:31 AM    1896 (0x0768)

    Error: DeleteDirectory:- Failed to delete Directory  with Error 0x00000003.               ContentAccess               5/23/2013 2:36:31 AM    1896 (0x0768)

    Error: DeleteDirectory:- Failed to delete Directory C:\Windows\ccmcache\8l.BCWork with Error 0x00000002.       ContentAccess   5/23/2013 2:36:31 AM    1896 (0x0768)

    Releasing content request {8724337F-AF6F-42D7-A2A5-AED4B9B1F5F5}    ContentAccess               5/23/2013 2:36:31 AM    1896 (0x0768)


    <![LOG[Error: DeleteDirectory:- Failed to delete Directory  with Error 0x00000003.]LOG]!><time="01:54:31.061+300" date="05-23-2013" component="ContentAccess" context="" type="3" thread="7736" file="delpath.cpp:22">
    <![LOG[Error: DeleteDirectory:- Failed to delete Directory C:\Windows\ccmcache\9q.BCWork with Error 0x00000002.]LOG]!><time="01:54:31.061+300" date="05-23-2013" component="ContentAccess" context="" type="3" thread="7736" file="delpath.cpp:22">
    <![LOG[Releasing content request {D1BF8BA0-0936-45BF-BD79-9F2952C22FE8}]LOG]!><time="01:54:31.092+300" date="05-23-2013" component="ContentAccess" context="" type="1" thread="7736" file="contentaccessservice.cpp:1861">
    <![LOG[All references to Content 7d37fdab-a04b-4f17-a853-c7d6cea91bc5.1 in cache have been removed.                   Content will be Tombstoned.]LOG]!><time="01:54:31.092+300" date="05-23-2013" component="ContentAccess" context="" type="1" thread="7736" file="cachemanager.cpp:766">
    <![LOG[Saved Content ID Mapping 7d37fdab-a04b-4f17-a853-c7d6cea91bc5.1, C:\Windows\ccmcache\9q]LOG]!><time="01:54:31.092+300" date="05-23-2013" component="ContentAccess" context="" type="1" thread="7736" file="cachedcontentinfo.cpp:188">

    • Edited by jamicon Thursday, May 23, 2013 6:02 PM
    Thursday, May 23, 2013 5:49 PM
  • It looks like some content errors here, what do you see in DataTransferManager.log?

    Please don't forget to mark posts as helpful or answers.
    Inframon Blogs | All Things ConfigMgr

    Thursday, May 23, 2013 6:03 PM
  • not seeing any red errors there

    UpdateURLWithTransportSettings(): NEW URL - http://wsus.ds.download.windowsupdate.com:80/msdownload/update/software/defu/2013/05/am_delta_abc7bb27f7a8f952224ffefca0bd766734d2115c.exe DataTransferService 5/23/2013 2:35:03 AM 6436 (0x1924)

    DTSJob {15841ECF-F191-4A40-A808-A254F83544F1} created to download from 'http://wsus.ds.download.windowsupdate.com:80/msdownload/update/software/defu/2013/05/am_delta_abc7bb27f7a8f952224ffefca0bd766734d2115c.exe' to 'C:\Windows\ccmcache\8h\am_delta_abc7bb27f7a8f952224ffefca0bd766734d2115c.exe'. DataTransferService 5/23/2013 2:35:03 AM 6436 (0x1924)

    DTSJob {15841ECF-F191-4A40-A808-A254F83544F1} in state 'PendingDownload'. DataTransferService 5/23/2013 2:35:03 AM 3752 (0x0EA8)

    DTSFlag is 0x0000030f DataTransferService 5/23/2013 2:35:03 AM 6892 (0x1AEC)

    Exclude file list: DataTransferService 5/23/2013 2:35:03 AM 6892 (0x1AEC)

    Not using branch cache option DataTransferService 5/23/2013 2:35:03 AM 6892 (0x1AEC)

    DTSFlag is 0x0000030f DataTransferService 5/23/2013 2:35:03 AM 3860 (0x0F14)

    Exclude file list: DataTransferService 5/23/2013 2:35:03 AM 3860 (0x0F14)

    Not using branch cache option DataTransferService 5/23/2013 2:35:03 AM 3860 (0x0F14)

    UpdateURLWithTransportSettings(): OLD URL - http://wsus.ds.download.windowsupdate.com/msdownload/update/software/defu/2013/05/am_delta_patch_1.151.444.0_3e572cc423f4068ceb772a36092576174b16856d.exe DataTransferService 5/23/2013 2:35:03 AM 1896 (0x0768)

    UpdateURLWithTransportSettings(): NEW URL - http://wsus.ds.download.windowsupdate.com:80/msdownload/update/software/defu/2013/05/am_delta_patch_1.151.444.0_3e572cc423f4068ceb772a36092576174b16856d.exe DataTransferService 5/23/2013 2:35:03 AM 1896 (0x0768)

    DTSJob {9490194C-781D-49F4-9AC8-73515AC50727} created to download from 'http://wsus.ds.download.windowsupdate.com:80/msdownload/update/software/defu/2013/05/am_delta_patch_1.151.444.0_3e572cc423f4068ceb772a36092576174b16856d.exe' to 'C:\Windows\ccmcache\8i\am_delta_patch_1.151.444.0_3e572cc423f4068ceb772a36092576174b16856d.exe'. DataTransferService 5/23/2013 2:35:03 AM 1896 (0x0768)

    DTSJob {9490194C-781D-49F4-9AC8-73515AC50727} in state 'PendingDownload'. DataTransferService 5/23/2013 2:35:03 AM 6436 (0x1924)

    DTSFlag is 0x0000030f DataTransferService 5/23/2013 2:35:03 AM 2120 (0x0848)

    Exclude file list: DataTransferService 5/23/2013 2:35:03 AM 2120 (0x0848)

    Not using branch cache option DataTransferService 5/23/2013 2:35:03 AM 2120 (0x0848)

    UpdateURLWithTransportSettings(): OLD URL - http://wsus.ds.download.windowsupdate.com/msdownload/update/software/defu/2013/05/am_delta_patch_1.151.444.0_36cd9df27cd28243443dac2dc9414d0d4482648b.exe DataTransferService 5/23/2013 2:35:03 AM 6436 (0x1924)

    UpdateURLWithTransportSettings(): NEW URL - http://wsus.ds.download.windowsupdate.com:80/msdownload/update/software/defu/2013/05/am_delta_patch_1.151.444.0_36cd9df27cd28243443dac2dc9414d0d4482648b.exe DataTransferService 5/23/2013 2:35:03 AM 6436 (0x1924)

    DTSJob {A0B87167-CFFB-4EA9-9E43-2811501DC94E} created to download from 'http://wsus.ds.download.windowsupdate.com:80/msdownload/update/software/defu/2013/05/am_delta_patch_1.151.444.0_36cd9df27cd28243443dac2dc9414d0d4482648b.exe' to 'C:\Windows\ccmcache\8j\am_delta_patch_1.151.444.0_36cd9df27cd28243443dac2dc9414d0d4482648b.exe'. DataTransferService 5/23/2013 2:35:03 AM 6436 (0x1924)

    DTSJob {A0B87167-CFFB-4EA9-9E43-2811501DC94E} in state 'PendingDownload'. DataTransferService 5/23/2013 2:35:03 AM 3752 (0x0EA8)

    DTSFlag is 0x0000030f DataTransferService 5/23/2013 2:35:03 AM 3752 (0x0EA8)

    Exclude file list: DataTransferService 5/23/2013 2:35:03 AM 3752 (0x0EA8)

    Not using branch cache option DataTransferService 5/23/2013 2:35:03 AM 3752 (0x0EA8)

    UpdateURLWithTransportSettings(): OLD URL - http://wsus.ds.download.windowsupdate.com/msdownload/update/software/defu/2013/05/am_delta_patch_1.151.444.0_4b0d1eb3cb63f738dfa7e3dae3733421639f5422.exe DataTransferService 5/23/2013 2:35:03 AM 1896 (0x0768)

    UpdateURLWithTransportSettings(): NEW URL - http://wsus.ds.download.windowsupdate.com:80/msdownload/update/software/defu/2013/05/am_delta_patch_1.151.444.0_4b0d1eb3cb63f738dfa7e3dae3733421639f5422.exe DataTransferService 5/23/2013 2:35:03 AM 1896 (0x0768)

    DTSJob {AC2281FB-0A13-439F-9989-BC3AEB47AB4B} created to download from 'http://wsus.ds.download.windowsupdate.com:80/msdownload/update/software/defu/2013/05/am_delta_patch_1.151.444.0_4b0d1eb3cb63f738dfa7e3dae3733421639f5422.exe' to 'C:\Windows\ccmcache\8k\am_delta_patch_1.151.444.0_4b0d1eb3cb63f738dfa7e3dae3733421639f5422.exe'. DataTransferService 5/23/2013 2:35:03 AM 1896 (0x0768)

    DTSJob {AC2281FB-0A13-439F-9989-BC3AEB47AB4B} in state 'PendingDownload'. DataTransferService 5/23/2013 2:35:03 AM 5520 (0x1590)

    DTSFlag is 0x0000030f DataTransferService 5/23/2013 2:35:03 AM 5520 (0x1590)

    Exclude file list: DataTransferService 5/23/2013 2:35:03 AM 5520 (0x1590)

    Not using branch cache option DataTransferService 5/23/2013 2:35:03 AM 5520 (0x1590)

    UpdateURLWithTransportSettings(): OLD URL - http://wsus.ds.download.windowsupdate.com/msdownload/update/software/defu/2013/05/am_delta_a96d2c991213d255296a3197761676982eb3616f.exe DataTransferService 5/23/2013 2:35:03 AM 5112 (0x13F8)

    UpdateURLWithTransportSettings(): NEW URL - http://wsus.ds.download.windowsupdate.com:80/msdownload/update/software/defu/2013/05/am_delta_a96d2c991213d255296a3197761676982eb3616f.exe DataTransferService 5/23/2013 2:35:03 AM 5112 (0x13F8)

    DTSJob {B98BF7AA-FAB8-401A-BF90-49D749AEFDF5} created to download from 'http://wsus.ds.download.windowsupdate.com:80/msdownload/update/software/defu/2013/05/am_delta_a96d2c991213d255296a3197761676982eb3616f.exe' to 'C:\Windows\ccmcache\8l\am_delta_a96d2c991213d255296a3197761676982eb3616f.exe'. DataTransferService 5/23/2013 2:35:03 AM 5112 (0x13F8)

    DTSJob {B98BF7AA-FAB8-401A-BF90-49D749AEFDF5} in state 'PendingDownload'. DataTransferService 5/23/2013 2:35:03 AM 1896 (0x0768)

    DTSFlag is 0x0000030f DataTransferService 5/23/2013 2:35:03 AM 1896 (0x0768)

    Exclude file list: DataTransferService 5/23/2013 2:35:03 AM 1896 (0x0768)

    Not using branch cache option DataTransferService 5/23/2013 2:35:03 AM 1896 (0x0768)

    DTSJob {19B037F4-921C-4A2A-AC2D-745D6A88F702} in state 'DownloadingData'. DataTransferService 5/23/2013 2:35:04 AM 6892 (0x1AEC)

    DTSJob {15841ECF-F191-4A40-A808-A254F83544F1} in state 'DownloadingData'. DataTransferService 5/23/2013 2:35:04 AM 3860 (0x0F14)

    DTSJob {9490194C-781D-49F4-9AC8-73515AC50727} in state 'DownloadingData'. DataTransferService 5/23/2013 2:35:05 AM 2120 (0x0848)

    DTSJob {A0B87167-CFFB-4EA9-9E43-2811501DC94E} in state 'DownloadingData'. DataTransferService 5/23/2013 2:35:05 AM 3752 (0x0EA8)

    DTSJob {AC2281FB-0A13-439F-9989-BC3AEB47AB4B} in state 'DownloadingData'. DataTransferService 5/23/2013 2:35:05 AM 5520 (0x1590)

    DTSJob {B98BF7AA-FAB8-401A-BF90-49D749AEFDF5} in state 'DownloadingData'. DataTransferService 5/23/2013 2:35:05 AM 1896 (0x0768)

    CDTSJob::JobError: DTS Job ID='{19B037F4-921C-4A2A-AC2D-745D6A88F702}' BITS Job ID='{EDF59C9D-F7E1-439B-B35B-684300A48A35}' ErrorCode=0x80190191 DataTransferService 5/23/2013 2:35:09 AM 4208 (0x1070)

    CDTSJob::JobError: DTS Job ID='{19B037F4-921C-4A2A-AC2D-745D6A88F702}' URL='http://wsus.ds.download.windowsupdate.com:80/msdownload/update/software/defu/2013/05' ProtType=1 DataTransferService 5/23/2013 2:35:09 AM 4208 (0x1070)

    Authentication required by the proxy, DTS Job ID='{19B037F4-921C-4A2A-AC2D-745D6A88F702}' BITS Job ID='{EDF59C9D-F7E1-439B-B35B-684300A48A35}'. DataTransferService 5/23/2013 2:35:09 AM 4208 (0x1070)

    DTS job {19B037F4-921C-4A2A-AC2D-745D6A88F702} BITS job {EDF59C9D-F7E1-439B-B35B-684300A48A35} encountered Access Denied error during download.  Will retry using Network Access Account. DataTransferService 5/23/2013 2:35:09 AM 4208 (0x1070)

    DTSJob {19B037F4-921C-4A2A-AC2D-745D6A88F702} set BITS job to use Network Access Account. DataTransferService 5/23/2013 2:35:09 AM 4208 (0x1070)

    DTSFlag is 0x0000030f DataTransferService 5/23/2013 2:35:09 AM 4208 (0x1070)

    Exclude file list: DataTransferService 5/23/2013 2:35:09 AM 4208 (0x1070)

    Not using branch cache option DataTransferService 5/23/2013 2:35:09 AM 4208 (0x1070)

    Failed to set proxy to bits job for url 'http://wsus.ds.download.windowsupdate.com:80/msdownload/update/software/defu/2013/05'. Error 0x87d00215 DataTransferService 5/23/2013 2:35:09 AM 4208 (0x1070)

    All proxy types and no proxy have been tried but failed. Loop the types again for the 1 time DataTransferService 5/23/2013 2:35:09 AM 4208 (0x1070)

    DTSJob {19B037F4-921C-4A2A-AC2D-745D6A88F702} in state 'DownloadingData'. DataTransferService 5/23/2013 2:35:11 AM 4208 (0x1070)

    CDTSJob::JobError: DTS Job ID='{15841ECF-F191-4A40-A808-A254F83544F1}' BITS Job ID='{7F243F33-394A-4323-B83A-68CFB9E30974}' ErrorCode=0x80190191 DataTransferService 5/23/2013 2:35:14 AM 4208 (0x1070)

    CDTSJob::JobError: DTS Job ID='{15841ECF-F191-4A40-A808-A254F83544F1}' URL='http://wsus.ds.download.windowsupdate.com:80/msdownload/update/software/defu/2013/05' ProtType=1 DataTransferService 5/23/2013 2:35:14 AM 4208 (0x1070)

    Authentication required by the proxy, DTS Job ID='{15841ECF-F191-4A40-A808-A254F83544F1}' BITS Job ID='{7F243F33-394A-4323-B83A-68CFB9E30974}'. DataTransferService 5/23/2013 2:35:14 AM 4208 (0x1070)

    DTS job {15841ECF-F191-4A40-A808-A254F83544F1} BITS job {7F243F33-394A-4323-B83A-68CFB9E30974} encountered Access Denied error during download.  Will retry using Network Access Account. DataTransferService 5/23/2013 2:35:14 AM 4208 (0x1070)

    DTSJob {15841ECF-F191-4A40-A808-A254F83544F1} set BITS job to use Network Access Account. DataTransferService 5/23/2013 2:35:14 AM 4208 (0x1070)

    DTSFlag is 0x0000030f DataTransferService 5/23/2013 2:35:14 AM 4208 (0x1070)

    Exclude file list: DataTransferService 5/23/2013 2:35:14 AM 4208 (0x1070)

    Not using branch cache option DataTransferService 5/23/2013 2:35:14 AM 4208 (0x1070)

    Failed to set proxy to bits job for url 'http://wsus.ds.download.windowsupdate.com:80/msdownload/update/software/defu/2013/05'. Error 0x87d00215 DataTransferService 5/23/2013 2:35:14 AM 4208 (0x1070)

    All proxy types and no proxy have been tried but failed. Loop the types again for the 1 time DataTransferService 5/23/2013 2:35:14 AM 4208 (0x1070)

    DTSJob {15841ECF-F191-4A40-A808-A254F83544F1} in state 'DownloadingData'. DataTransferService 5/23/2013 2:35:16 AM 4208 (0x1070)

    CDTSJob::JobError: DTS Job ID='{9490194C-781D-49F4-9AC8-73515AC50727}' BITS Job ID='{5BF3B5EA-41BE-4108-ABD6-7BEA8DD947B6}' ErrorCode=0x80190191 DataTransferService 5/23/2013 2:35:20 AM 2644 (0x0A54)

    CDTSJob::JobError: DTS Job ID='{9490194C-781D-49F4-9AC8-73515AC50727}' URL='http://wsus.ds.download.windowsupdate.com:80/msdownload/update/software/defu/2013/05' ProtType=1 DataTransferService 5/23/2013 2:35:20 AM 2644 (0x0A54)

    Authentication required by the proxy, DTS Job ID='{9490194C-781D-49F4-9AC8-73515AC50727}' BITS Job ID='{5BF3B5EA-41BE-4108-ABD6-7BEA8DD947B6}'. DataTransferService 5/23/2013 2:35:20 AM 2644 (0x0A54)

    DTS job {9490194C-781D-49F4-9AC8-73515AC50727} BITS job {5BF3B5EA-41BE-4108-ABD6-7BEA8DD947B6} encountered Access Denied error during download.  Will retry using Network Access Account. DataTransferService 5/23/2013 2:35:20 AM 2644 (0x0A54)

    DTSJob {9490194C-781D-49F4-9AC8-73515AC50727} set BITS job to use Network Access Account. DataTransferService 5/23/2013 2:35:20 AM 2644 (0x0A54)

    DTSFlag is 0x0000030f DataTransferService 5/23/2013 2:35:20 AM 2644 (0x0A54)

    Exclude file list: DataTransferService 5/23/2013 2:35:20 AM 2644 (0x0A54)

    Not using branch cache option DataTransferService 5/23/2013 2:35:20 AM 2644 (0x0A54)

    Failed to set proxy to bits job for url 'http://wsus.ds.download.windowsupdate.com:80/msdownload/update/software/defu/2013/05'. Error 0x87d00215 DataTransferService 5/23/2013 2:35:20 AM 2644 (0x0A54)

    All proxy types and no proxy have been tried but failed. Loop the types again for the 1 time DataTransferService 5/23/2013 2:35:20 AM 2644 (0x0A54)

    DTSJob {9490194C-781D-49F4-9AC8-73515AC50727} in state 'DownloadingData'. DataTransferService 5/23/2013 2:35:21 AM 2644 (0x0A54)

    CDTSJob::JobError: DTS Job ID='{A0B87167-CFFB-4EA9-9E43-2811501DC94E}' BITS Job ID='{BDB05EAD-0DC8-40A7-A5EA-1E14D5C888A1}' ErrorCode=0x80190191 DataTransferService 5/23/2013 2:35:25 AM 3900 (0x0F3C)

    CDTSJob::JobError: DTS Job ID='{A0B87167-CFFB-4EA9-9E43-2811501DC94E}' URL='http://wsus.ds.download.windowsupdate.com:80/msdownload/update/software/defu/2013/05' ProtType=1 DataTransferService 5/23/2013 2:35:25 AM 3900 (0x0F3C)

    Authentication required by the proxy, DTS Job ID='{A0B87167-CFFB-4EA9-9E43-2811501DC94E}' BITS Job ID='{BDB05EAD-0DC8-40A7-A5EA-1E14D5C888A1}'. DataTransferService 5/23/2013 2:35:25 AM 3900 (0x0F3C)

    DTS job {A0B87167-CFFB-4EA9-9E43-2811501DC94E} BITS job {BDB05EAD-0DC8-40A7-A5EA-1E14D5C888A1} encountered Access Denied error during download.  Will retry using Network Access Account. DataTransferService 5/23/2013 2:35:25 AM 3900 (0x0F3C)

    DTSJob {A0B87167-CFFB-4EA9-9E43-2811501DC94E} set BITS job to use Network Access Account. DataTransferService 5/23/2013 2:35:25 AM 3900 (0x0F3C)

    DTSFlag is 0x0000030f DataTransferService 5/23/2013 2:35:25 AM 3900 (0x0F3C)

    Exclude file list: DataTransferService 5/23/2013 2:35:25 AM 3900 (0x0F3C)

    Not using branch cache option DataTransferService 5/23/2013 2:35:25 AM 3900 (0x0F3C)

    Failed to set proxy to bits job for url 'http://wsus.ds.download.windowsupdate.com:80/msdownload/update/software/defu/2013/05'. Error 0x87d00215 DataTransferService 5/23/2013 2:35:25 AM 3900 (0x0F3C)

    All proxy types and no proxy have been tried but failed. Loop the types again for the 1 time DataTransferService 5/23/2013 2:35:25 AM 3900 (0x0F3C)

    DTSJob {A0B87167-CFFB-4EA9-9E43-2811501DC94E} in state 'DownloadingData'. DataTransferService 5/23/2013 2:35:27 AM 3900 (0x0F3C)

    CDTSJob::JobError: DTS Job ID='{AC2281FB-0A13-439F-9989-BC3AEB47AB4B}' BITS Job ID='{154A98C4-3B2F-49C9-8C6E-635A1378107E}' ErrorCode=0x80190191 DataTransferService 5/23/2013 2:35:31 AM 6804 (0x1A94)

    CDTSJob::JobError: DTS Job ID='{AC2281FB-0A13-439F-9989-BC3AEB47AB4B}' URL='http://wsus.ds.download.windowsupdate.com:80/msdownload/update/software/defu/2013/05' ProtType=1 DataTransferService 5/23/2013 2:35:31 AM 6804 (0x1A94)

    Authentication required by the proxy, DTS Job ID='{AC2281FB-0A13-439F-9989-BC3AEB47AB4B}' BITS Job ID='{154A98C4-3B2F-49C9-8C6E-635A1378107E}'. DataTransferService 5/23/2013 2:35:31 AM 6804 (0x1A94)

    DTS job {AC2281FB-0A13-439F-9989-BC3AEB47AB4B} BITS job {154A98C4-3B2F-49C9-8C6E-635A1378107E} encountered Access Denied error during download.  Will retry using Network Access Account. DataTransferService 5/23/2013 2:35:31 AM 6804 (0x1A94)

    DTSJob {AC2281FB-0A13-439F-9989-BC3AEB47AB4B} set BITS job to use Network Access Account. DataTransferService 5/23/2013 2:35:31 AM 6804 (0x1A94)

    DTSFlag is 0x0000030f DataTransferService 5/23/2013 2:35:31 AM 6804 (0x1A94)

    Exclude file list: DataTransferService 5/23/2013 2:35:31 AM 6804 (0x1A94)

    Not using branch cache option DataTransferService 5/23/2013 2:35:31 AM 6804 (0x1A94)

    Failed to set proxy to bits job for url 'http://wsus.ds.download.windowsupdate.com:80/msdownload/update/software/defu/2013/05'. Error 0x87d00215 DataTransferService 5/23/2013 2:35:31 AM 6804 (0x1A94)

    All proxy types and no proxy have been tried but failed. Loop the types again for the 1 time DataTransferService 5/23/2013 2:35:31 AM 6804 (0x1A94)

    DTSJob {AC2281FB-0A13-439F-9989-BC3AEB47AB4B} in state 'DownloadingData'. DataTransferService 5/23/2013 2:35:33 AM 6804 (0x1A94)

    CDTSJob::JobError: DTS Job ID='{B98BF7AA-FAB8-401A-BF90-49D749AEFDF5}' BITS Job ID='{EA707693-A182-4A7B-BF92-88DD5BF5C258}' ErrorCode=0x80190191 DataTransferService 5/23/2013 2:35:37 AM 2644 (0x0A54)

    CDTSJob::JobError: DTS Job ID='{B98BF7AA-FAB8-401A-BF90-49D749AEFDF5}' URL='http://wsus.ds.download.windowsupdate.com:80/msdownload/update/software/defu/2013/05' ProtType=1 DataTransferService 5/23/2013 2:35:37 AM 2644 (0x0A54)

    Authentication required by the proxy, DTS Job ID='{B98BF7AA-FAB8-401A-BF90-49D749AEFDF5}' BITS Job ID='{EA707693-A182-4A7B-BF92-88DD5BF5C258}'. DataTransferService 5/23/2013 2:35:37 AM 2644 (0x0A54)

    DTS job {B98BF7AA-FAB8-401A-BF90-49D749AEFDF5} BITS job {EA707693-A182-4A7B-BF92-88

    correction, here is some red

    DTS job {C6D157AF-5E87-474D-BA9F-2619765C14BF} BITS job {3A6BE274-E279-4025-A0CE-8F001608370E} failed to download source file http://wsus.ds.download.windowsupdate.com:80/msdownload/update/software/defu/2013/05/am_delta_patch_1.151.444.0_3e572cc423f4068ceb772a36092576174b16856d.exe to destination C:\Windows\ccmcache\8c\am_delta_patch_1.151.444.0_3e572cc423f4068ceb772a36092576174b16856d.exe with error 0x80190191 DataTransferService 5/23/2013 1:45:23 AM 6664 (0x1A08)
    DTSJob {C6D157AF-5E87-474D-BA9F-2619765C14BF} in state 'Cancelled'. DataTransferService 5/23/2013 1:45:23 AM 5424 (0x1530)
    DTSJob {C6D157AF-5E87-474D-BA9F-2619765C14BF} cancelled by client. DataTransferService 5/23/2013 1:45:23 AM 5424 (0x1530)
    CDTSJob::JobError: DTS Job ID='{3A8D563D-FA57-4AB0-8F88-A5F60CA04A73}' BITS Job ID='{4ACB3434-3AEA-41A0-A5F0-CF703BBFA5BC}' ErrorCode=0x80190191 DataTransferService 5/23/2013 1:45:28 AM 6840 (0x1AB8)
    CDTSJob::JobError: DTS Job ID='{3A8D563D-FA57-4AB0-8F88-A5F60CA04A73}' URL='http://wsus.ds.download.windowsupdate.com:80/msdownload/update/software/defu/2013/05' ProtType=1 DataTransferService 5/23/2013 1:45:28 AM 6840 (0x1AB8)
    Authentication required by the proxy, DTS Job ID='{3A8D563D-FA57-4AB0-8F88-A5F60CA04A73}' BITS Job ID='{4ACB3434-3AEA-41A0-A5F0-CF703BBFA5BC}'. DataTransferService 5/23/2013 1:45:28 AM 6840 (0x1AB8)
    DTS job {3A8D563D-FA57-4AB0-8F88-A5F60CA04A73} BITS job {4ACB3434-3AEA-41A0-A5F0-CF703BBFA5BC} encountered Access Denied error while downloading as Network Access Account. DataTransferService 5/23/2013 1:45:28 AM 6840 (0x1AB8)
    DTS job {3A8D563D-FA57-4AB0-8F88-A5F60CA04A73} BITS job {4ACB3434-3AEA-41A0-A5F0-CF703BBFA5BC} failed to download source file http://wsus.ds.download.windowsupdate.com:80/msdownload/update/software/defu/2013/05/am_delta_patch_1.151.444.0_36cd9df27cd28243443dac2dc9414d0d4482648b.exe to destination C:\Windows\ccmcache\8d\am_delta_patch_1.151.444.0_36cd9df27cd28243443dac2dc9414d0d4482648b.exe with error 0x80190191 DataTransferService 5/23/2013 1:45:28 AM 6840 (0x1AB8)
    DTSJob {3A8D563D-FA57-4AB0-8F88-A5F60CA04A73} in state 'Cancelled'. DataTransferService 5/23/2013 1:45:28 AM 4844 (0x12EC)
    DTSJob {3A8D563D-FA57-4AB0-8F88-A5F60CA04A73} cancelled by client. DataTransferService 5/23/2013 1:45:28 AM 4844 (0x12EC)
    CDTSJob::JobError: DTS Job ID='{4A861547-59A0-4612-B973-8294720D86BB}' BITS Job ID='{CEA38C35-B57B-47F5-9711-69E28B98D3A1}' ErrorCode=0x80190191 DataTransferService 5/23/2013 1:45:33 AM 4368 (0x1110)
    CDTSJob::JobError: DTS Job ID='{4A861547-59A0-4612-B973-8294720D86BB}' URL='http://wsus.ds.download.windowsupdate.com:80/msdownload/update/software/defu/2013/05' ProtType=1 DataTransferService 5/23/2013 1:45:33 AM 4368 (0x1110)
    Authentication required by the proxy, DTS Job ID='{4A861547-59A0-4612-B973-8294720D86BB}' BITS Job ID='{CEA38C35-B57B-47F5-9711-69E28B98D3A1}'. DataTransferService 5/23/2013 1:45:33 AM 4368 (0x1110)
    DTS job {4A861547-59A0-4612-B973-8294720D86BB} BITS job {CEA38C35-B57B-47F5-9711-69E28B98D3A1} encountered Access Denied error while downloading as Network Access Account. DataTransferService 5/23/2013 1:45:33 AM 4368 (0x1110)
    DTS job {4A861547-59A0-4612-B973-8294720D86BB} BITS job {CEA38C35-B57B-47F5-9711-69E28B98D3A1} failed to download source file http://wsus.ds.download.windowsupdate.com:80/msdownload/update/software/defu/2013/05/am_delta_patch_1.151.444.0_4b0d1eb3cb63f738dfa7e3dae3733421639f5422.exe to destination C:\Windows\ccmcache\8e\am_delta_patch_1.151.444.0_4b0d1eb3cb63f738dfa7e3dae3733421639f5422.exe with error 0x80190191 DataTransferService 5/23/2013 1:45:33 AM 4368 (0x1110)

    • Edited by jamicon Thursday, May 23, 2013 6:44 PM
    Thursday, May 23, 2013 6:43 PM
  • This just proves that ConfigMgr is trying to download them from the Windows Update site. Do you have any other policies overriding to make download from Internet the first option.

    Please don't forget to mark posts as helpful or answers.
    Inframon Blogs | All Things ConfigMgr

    Thursday, May 23, 2013 6:53 PM
  • like what, I only know of the one.
    Thursday, May 23, 2013 7:12 PM
  • Well like Antimalware Policies??

    I would say it's trying WU because it either can't find a local DP with the content, can't find a DP at all or something else. Just want to make sure you don't have a higher priority policy applying different settings.


    Please don't forget to mark posts as helpful or answers.
    Inframon Blogs | All Things ConfigMgr


    Thursday, May 23, 2013 7:17 PM
  • yep I can tell which policy each client is getting and have checked them several times, they all look like the snapshot I already sent you.

    Why would they have problems with the DP, all my regular windows updates work, my OSD, applications. I'm going crazy on this. ugh :-(


    • Edited by jamicon Thursday, May 23, 2013 7:42 PM
    Thursday, May 23, 2013 7:42 PM
  • Ok, I didn't know everything else was working...

    Can you try disabling updating from the Internet just to see if it resolves it? It will help determine where the problem might be.


    Please don't forget to mark posts as helpful or answers.
    Inframon Blogs | All Things ConfigMgr

    Thursday, May 23, 2013 7:45 PM
  • Sure but one question. In the case where a client gets the default policy 10,000 and another policy, say SQL 10 I should only have to disable Windows update on the 10 right?
    ok, I set only a single resource for all my secondary's (controlled environment test) to use configmgr only, how long before they pick it up?
    scratch that, for the sake of this test I have everything set to configmgr only, 1 source. Need to get this fixed.

    it may not have been long enough but I just tried a client that was not updated (no internet access) and I cleared its cache, manually ran the update and get this:

    • Edited by jamicon Thursday, May 23, 2013 8:05 PM
    Thursday, May 23, 2013 7:50 PM
  • Yeah I would give it a while, policy will have to update.

    Yes that's correct as well, the lower the number the higher priority the policy has, any settings in that policy will override the ones in 10,000.


    Please don't forget to mark posts as helpful or answers.
    Inframon Blogs | All Things ConfigMgr

    Thursday, May 23, 2013 8:07 PM
  • I just saw the policy source change while viewing the datatransfermanager.log, then ran it and  got the same error. its a connection failure.
    Maybe folder permissions somewhere????
    • Edited by jamicon Thursday, May 23, 2013 8:26 PM
    Thursday, May 23, 2013 8:21 PM
  • Doubt it's permissions, it's not even downloading. Any change in the log files now you get this error?

    Please don't forget to mark posts as helpful or answers.
    Inframon Blogs | All Things ConfigMgr

    Thursday, May 23, 2013 8:32 PM
  • actually no the log CAS.log isn't showing any red anymore, this is crazy.
    Thursday, May 23, 2013 8:38 PM
  • Can you post it so I can have a look? Also UpdatesHander.log and UpdatesDeployment.log.

    Please don't forget to mark posts as helpful or answers.
    Inframon Blogs | All Things ConfigMgr

    Thursday, May 23, 2013 8:41 PM
  • CAS.log

    Saved Content ID Mapping d1bd04c9-e57c-4807-a9f0-858b92696d5e.1, C:\Windows\ccmcache\t ContentAccess 5/23/2013 3:02:58 PM 4032 (0x0FC0)
    Removed Content ID Mapping for d1bd04c9-e57c-4807-a9f0-858b92696d5e.1 ContentAccess 5/23/2013 3:02:58 PM 4032 (0x0FC0)
    Raising event:
    [SMS_CodePage(437), SMS_LocaleID(1033)]
    instance of SoftDistContentRemovedEvent
    {
     CacheFreeSize = "5063";
     CacheTotalSize = "5120";
     ClientID = "GUID:00CAB84F-4368-4840-A71C-9614C8470FF5";
     DateTime = "20130523200258.716000+000";
     MachineName = "DRFGSC12";
     PackageId = "d1bd04c9-e57c-4807-a9f0-858b92696d5e";
     PackageName = "d1bd04c9-e57c-4807-a9f0-858b92696d5e";
     PackageVersion = "1";
     ProcessID = 1756;
     SiteCode = "P01";
     ThreadID = 4032;
    };
     ContentAccess 5/23/2013 3:02:58 PM 4032 (0x0FC0)
    Saved Content ID Mapping 52f12710-6564-4422-9f0d-c945378a14a1.1, C:\Windows\ccmcache\1u ContentAccess 5/23/2013 3:02:58 PM 4032 (0x0FC0)
    Removed Content ID Mapping for 52f12710-6564-4422-9f0d-c945378a14a1.1 ContentAccess 5/23/2013 3:02:58 PM 4032 (0x0FC0)
    Raising event:
    [SMS_CodePage(437), SMS_LocaleID(1033)]
    instance of SoftDistContentRemovedEvent
    {
     CacheFreeSize = "5068";
     CacheTotalSize = "5120";
     ClientID = "GUID:00CAB84F-4368-4840-A71C-9614C8470FF5";
     DateTime = "20130523200258.810000+000";
     MachineName = "DRFGSC12";
     PackageId = "52f12710-6564-4422-9f0d-c945378a14a1";
     PackageName = "52f12710-6564-4422-9f0d-c945378a14a1";
     PackageVersion = "1";
     ProcessID = 1756;
     SiteCode = "P01";
     ThreadID = 4032;
    };
     ContentAccess 5/23/2013 3:02:58 PM 4032 (0x0FC0)
    Saved Content ID Mapping af97398c-efbf-4fb9-bef0-ea9b6e949870.1, C:\Windows\ccmcache\z ContentAccess 5/23/2013 3:02:58 PM 5896 (0x1708)
    Removed Content ID Mapping for af97398c-efbf-4fb9-bef0-ea9b6e949870.1 ContentAccess 5/23/2013 3:02:58 PM 5896 (0x1708)
    Raising event:
    [SMS_CodePage(437), SMS_LocaleID(1033)]
    instance of SoftDistContentRemovedEvent
    {
     CacheFreeSize = "5070";
     CacheTotalSize = "5120";
     ClientID = "GUID:00CAB84F-4368-4840-A71C-9614C8470FF5";
     DateTime = "20130523200258.826000+000";
     MachineName = "DRFGSC12";
     PackageId = "af97398c-efbf-4fb9-bef0-ea9b6e949870";
     PackageName = "af97398c-efbf-4fb9-bef0-ea9b6e949870";
     PackageVersion = "1";
     ProcessID = 1756;
     SiteCode = "P01";
     ThreadID = 5896;
    };
     ContentAccess 5/23/2013 3:02:58 PM 5896 (0x1708)
    Saved Content ID Mapping 9160dd78-2003-44ea-9cd7-77a4578036e1.1, C:\Windows\ccmcache\1v ContentAccess 5/23/2013 3:02:59 PM 1888 (0x0760)
    Removed Content ID Mapping for 9160dd78-2003-44ea-9cd7-77a4578036e1.1 ContentAccess 5/23/2013 3:02:59 PM 1888 (0x0760)
    Raising event:
    [SMS_CodePage(437), SMS_LocaleID(1033)]
    instance of SoftDistContentRemovedEvent
    {
     CacheFreeSize = "5070";
     CacheTotalSize = "5120";
     ClientID = "GUID:00CAB84F-4368-4840-A71C-9614C8470FF5";
     DateTime = "20130523200259.169000+000";
     MachineName = "DRFGSC12";
     PackageId = "9160dd78-2003-44ea-9cd7-77a4578036e1";
     PackageName = "9160dd78-2003-44ea-9cd7-77a4578036e1";
     PackageVersion = "1";
     ProcessID = 1756;
     SiteCode = "P01";
     ThreadID = 1888;
    };
     ContentAccess 5/23/2013 3:02:59 PM 1888 (0x0760)
    Saved Content ID Mapping 8b643e13-db55-4aa4-859b-f93e835e74fb.1, C:\Windows\ccmcache\s ContentAccess 5/23/2013 3:02:59 PM 4032 (0x0FC0)
    Removed Content ID Mapping for 8b643e13-db55-4aa4-859b-f93e835e74fb.1 ContentAccess 5/23/2013 3:02:59 PM 4032 (0x0FC0)
    Raising event:
    [SMS_CodePage(437), SMS_LocaleID(1033)]
    instance of SoftDistContentRemovedEvent
    {
     CacheFreeSize = "5074";
     CacheTotalSize = "5120";
     ClientID = "GUID:00CAB84F-4368-4840-A71C-9614C8470FF5";
     DateTime = "20130523200259.185000+000";
     MachineName = "DRFGSC12";
     PackageId = "8b643e13-db55-4aa4-859b-f93e835e74fb";
     PackageName = "8b643e13-db55-4aa4-859b-f93e835e74fb";
     PackageVersion = "1";
     ProcessID = 1756;
     SiteCode = "P01";
     ThreadID = 4032;
    };
     ContentAccess 5/23/2013 3:02:59 PM 4032 (0x0FC0)
    Saved Content ID Mapping 542f36e8-38e5-49ae-9aee-f35c6ff7107d.1, C:\Windows\ccmcache\1w ContentAccess 5/23/2013 3:02:59 PM 4032 (0x0FC0)
    Removed Content ID Mapping for 542f36e8-38e5-49ae-9aee-f35c6ff7107d.1 ContentAccess 5/23/2013 3:02:59 PM 4032 (0x0FC0)
    Raising event:
    [SMS_CodePage(437), SMS_LocaleID(1033)]
    instance of SoftDistContentRemovedEvent
    {
     CacheFreeSize = "5078";
     CacheTotalSize = "5120";
     ClientID = "GUID:00CAB84F-4368-4840-A71C-9614C8470FF5";
     DateTime = "20130523200259.201000+000";
     MachineName = "DRFGSC12";
     PackageId = "542f36e8-38e5-49ae-9aee-f35c6ff7107d";
     PackageName = "542f36e8-38e5-49ae-9aee-f35c6ff7107d";
     PackageVersion = "1";
     ProcessID = 1756;
     SiteCode = "P01";
     ThreadID = 4032;
    };
     ContentAccess 5/23/2013 3:02:59 PM 4032 (0x0FC0)
    Saved Content ID Mapping b8f5186c-d68e-4c3f-a059-e55aadf6ebd2.1, C:\Windows\ccmcache\w ContentAccess 5/23/2013 3:02:59 PM 1888 (0x0760)
    Removed Content ID Mapping for b8f5186c-d68e-4c3f-a059-e55aadf6ebd2.1 ContentAccess 5/23/2013 3:02:59 PM 1888 (0x0760)
    Raising event:
    [SMS_CodePage(437), SMS_LocaleID(1033)]
    instance of SoftDistContentRemovedEvent
    {
     CacheFreeSize = "5081";
     CacheTotalSize = "5120";
     ClientID = "GUID:00CAB84F-4368-4840-A71C-9614C8470FF5";
     DateTime = "20130523200259.294000+000";
     MachineName = "DRFGSC12";
     PackageId = "b8f5186c-d68e-4c3f-a059-e55aadf6ebd2";
     PackageName = "b8f5186c-d68e-4c3f-a059-e55aadf6ebd2";
     PackageVersion = "1";
     ProcessID = 1756;
     SiteCode = "P01";
     ThreadID = 1888;
    };
     ContentAccess 5/23/2013 3:02:59 PM 1888 (0x0760)
    Saved Content ID Mapping eb2f84e1-adcf-42ee-9b7b-e235334269b1.1, C:\Windows\ccmcache\2t ContentAccess 5/23/2013 3:02:59 PM 5896 (0x1708)
    Removed Content ID Mapping for eb2f84e1-adcf-42ee-9b7b-e235334269b1.1 ContentAccess 5/23/2013 3:02:59 PM 5896 (0x1708)
    Raising event:
    [SMS_CodePage(437), SMS_LocaleID(1033)]
    instance of SoftDistContentRemovedEvent
    {
     CacheFreeSize = "5084";
     CacheTotalSize = "5120";
     ClientID = "GUID:00CAB84F-4368-4840-A71C-9614C8470FF5";
     DateTime = "20130523200259.310000+000";
     MachineName = "DRFGSC12";
     PackageId = "eb2f84e1-adcf-42ee-9b7b-e235334269b1";
     PackageName = "eb2f84e1-adcf-42ee-9b7b-e235334269b1";
     PackageVersion = "1";
     ProcessID = 1756;
     SiteCode = "P01";
     ThreadID = 5896;
    };
     ContentAccess 5/23/2013 3:02:59 PM 5896 (0x1708)
    Saved Content ID Mapping 70ad12d6-4f24-4662-922c-c32529b35551.1, C:\Windows\ccmcache\2u ContentAccess 5/23/2013 3:02:59 PM 5896 (0x1708)
    Removed Content ID Mapping for 70ad12d6-4f24-4662-922c-c32529b35551.1 ContentAccess 5/23/2013 3:02:59 PM 5896 (0x1708)
    Raising event:
    [SMS_CodePage(437), SMS_LocaleID(1033)]
    instance of SoftDistContentRemovedEvent
    {
     CacheFreeSize = "5088";
     CacheTotalSize = "5120";
     ClientID = "GUID:00CAB84F-4368-4840-A71C-9614C8470FF5";
     DateTime = "20130523200259.404000+000";
     MachineName = "DRFGSC12";
     PackageId = "70ad12d6-4f24-4662-922c-c32529b35551";
     PackageName = "70ad12d6-4f24-4662-922c-c32529b35551";
     PackageVersion = "1";
     ProcessID = 1756;
     SiteCode = "P01";
     ThreadID = 5896;
    };
     ContentAccess 5/23/2013 3:02:59 PM 5896 (0x1708)
    Saved Content ID Mapping 2999554b-eb2a-4dbd-88d3-d1426d824532.1, C:\Windows\ccmcache\2v ContentAccess 5/23/2013 3:02:59 PM 4032 (0x0FC0)
    Removed Content ID Mapping for 2999554b-eb2a-4dbd-88d3-d1426d824532.1 ContentAccess 5/23/2013 3:02:59 PM 4032 (0x0FC0)
    Raising event:
    [SMS_CodePage(437), SMS_LocaleID(1033)]
    instance of SoftDistContentRemovedEvent
    {
     CacheFreeSize = "5091";
     CacheTotalSize = "5120";
     ClientID = "GUID:00CAB84F-4368-4840-A71C-9614C8470FF5";
     DateTime = "20130523200259.419000+000";
     MachineName = "DRFGSC12";
     PackageId = "2999554b-eb2a-4dbd-88d3-d1426d824532";
     PackageName = "2999554b-eb2a-4dbd-88d3-d1426d824532";
     PackageVersion = "1";
     ProcessID = 1756;
     SiteCode = "P01";
     ThreadID = 4032;
    };
     ContentAccess 5/23/2013 3:02:59 PM 4032 (0x0FC0)
    Saved Content ID Mapping 49d90563-6c9f-4d43-ae4f-70c41c9d046b.1, C:\Windows\ccmcache\2w ContentAccess 5/23/2013 3:02:59 PM 4032 (0x0FC0)
    Removed Content ID Mapping for 49d90563-6c9f-4d43-ae4f-70c41c9d046b.1 ContentAccess 5/23/2013 3:02:59 PM 4032 (0x0FC0)
    Raising event:
    [SMS_CodePage(437), SMS_LocaleID(1033)]
    instance of SoftDistContentRemovedEvent
    {
     CacheFreeSize = "5094";
     CacheTotalSize = "5120";
     ClientID = "GUID:00CAB84F-4368-4840-A71C-9614C8470FF5";
     DateTime = "20130523200259.969000+000";
     MachineName = "DRFGSC12";
     PackageId = "49d90563-6c9f-4d43-ae4f-70c41c9d046b";
     PackageName = "49d90563-6c9f-4d43-ae4f-70c41c9d046b";
     PackageVersion = "1";
     ProcessID = 1756;
     SiteCode = "P01";
     ThreadID = 4032;
    };
     ContentAccess 5/23/2013 3:03:00 PM 4032 (0x0FC0)
    Saved Content ID Mapping fa7c9ee0-d555-4b79-a333-2a251573fc4c.1, C:\Windows\ccmcache\2x ContentAccess 5/23/2013 3:03:00 PM 1888 (0x0760)
    Removed Content ID Mapping for fa7c9ee0-d555-4b79-a333-2a251573fc4c.1 ContentAccess 5/23/2013 3:03:00 PM 1888 (0x0760)
    Raising event:
    [SMS_CodePage(437), SMS_LocaleID(1033)]
    instance of SoftDistContentRemovedEvent
    {
     CacheFreeSize = "5098";
     CacheTotalSize = "5120";
     ClientID = "GUID:00CAB84F-4368-4840-A71C-9614C8470FF5";
     DateTime = "20130523200300.044000+000";
     MachineName = "DRFGSC12";
     PackageId = "fa7c9ee0-d555-4b79-a333-2a251573fc4c";
     PackageName = "fa7c9ee0-d555-4b79-a333-2a251573fc4c";
     PackageVersion = "1";
     ProcessID = 1756;
     SiteCode = "P01";
     ThreadID = 1888;
    };
     ContentAccess 5/23/2013 3:03:00 PM 1888 (0x0760)
    Saved Content ID Mapping d6970724-7df6-43b7-ac40-4c604bcbee89.1, C:\Windows\ccmcache\2s ContentAccess 5/23/2013 3:03:00 PM 3792 (0x0ED0)
    Removed Content ID Mapping for d6970724-7df6-43b7-ac40-4c604bcbee89.1 ContentAccess 5/23/2013 3:03:00 PM 3792 (0x0ED0)
    Raising event:
    [SMS_CodePage(437), SMS_LocaleID(1033)]
    instance of SoftDistContentRemovedEvent
    {
     CacheFreeSize = "5101";
     CacheTotalSize = "5120";
     ClientID = "GUID:00CAB84F-4368-4840-A71C-9614C8470FF5";
     DateTime = "20130523200300.138000+000";
     MachineName = "DRFGSC12";
     PackageId = "d6970724-7df6-43b7-ac40-4c604bcbee89";
     PackageName = "d6970724-7df6-43b7-ac40-4c604bcbee89";
     PackageVersion = "1";
     ProcessID = 1756;
     SiteCode = "P01";
     ThreadID = 3792;
    };
     ContentAccess 5/23/2013 3:03:00 PM 3792 (0x0ED0)
    Saved Content ID Mapping 36d75bab-f0e3-4b09-ab9b-84f0d25a9c63.1, C:\Windows\ccmcache\2y ContentAccess 5/23/2013 3:03:00 PM 4032 (0x0FC0)
    Removed Content ID Mapping for 36d75bab-f0e3-4b09-ab9b-84f0d25a9c63.1 ContentAccess 5/23/2013 3:03:00 PM 4032 (0x0FC0)
    Raising event:
    [SMS_CodePage(437), SMS_LocaleID(1033)]
    instance of SoftDistContentRemovedEvent
    {
     CacheFreeSize = "5102";
     CacheTotalSize = "5120";
     ClientID = "GUID:00CAB84F-4368-4840-A71C-9614C8470FF5";
     DateTime = "20130523200300.153000+000";
     MachineName = "DRFGSC12";
     PackageId = "36d75bab-f0e3-4b09-ab9b-84f0d25a9c63";
     PackageName = "36d75bab-f0e3-4b09-ab9b-84f0d25a9c63";
     PackageVersion = "1";
     ProcessID = 1756;
     SiteCode = "P01";
     ThreadID = 4032;
    };
     ContentAccess 5/23/2013 3:03:00 PM 4032 (0x0FC0)
    Saved Content ID Mapping 959e7b8d-d5ee-4990-94f6-792b17c73698.1, C:\Windows\ccmcache\2z ContentAccess 5/23/2013 3:03:00 PM 4032 (0x0FC0)
    Removed Content ID Mapping for 959e7b8d-d5ee-4990-94f6-792b17c73698.1 ContentAccess 5/23/2013 3:03:00 PM 4032 (0x0FC0)
    Raising event:
    [SMS_CodePage(437), SMS_LocaleID(1033)]
    instance of SoftDistContentRemovedEvent
    {
     CacheFreeSize = "5102";
     CacheTotalSize = "5120";
     ClientID = "GUID:00CAB84F-4368-4840-A71C-9614C8470FF5";
     DateTime = "20130523200300.184000+000";
     MachineName = "DRFGSC12";
     PackageId = "959e7b8d-d5ee-4990-94f6-792b17c73698";
     PackageName = "959e7b8d-d5ee-4990-94f6-792b17c73698";
     PackageVersion = "1";
     ProcessID = 1756;
     SiteCode = "P01";
     ThreadID = 4032;

    Updatehandler.log (see some red here)

    Update (2a916a0f-fe7f-492e-9d82-171e4d55e0df) not required. No need to download. UpdatesHandler 5/23/2013 2:35:03 AM 3860 (0x0F14)
    Starting download on action (INSTALL) for Update (b74ae674-3a6f-4a81-9a51-2f8c8ab6632c) UpdatesHandler 5/23/2013 2:35:03 AM 3860 (0x0F14)
    Ignoring update state (DOWNLOAD_READY) change in job state (2) UpdatesHandler 5/23/2013 2:35:03 AM 6436 (0x1924)
    ContentAvailable notification received from CAS. UpdatesHandler 5/23/2013 2:35:42 AM 3752 (0x0EA8)
    CAS failed to download update (9cbea7d2-55e3-4b44-a343-9c03f0a872db). Error = 0x80070005. Releasing content request. UpdatesHandler 5/23/2013 2:35:42 AM 3752 (0x0EA8)
    ContentAvailable notification received from CAS. UpdatesHandler 5/23/2013 2:35:49 AM 1896 (0x0768)
    CAS failed to download update (7d37fdab-a04b-4f17-a853-c7d6cea91bc5). Error = 0x80070005. Releasing content request. UpdatesHandler 5/23/2013 2:35:49 AM 1896 (0x0768)
    ContentAvailable notification received from CAS. UpdatesHandler 5/23/2013 2:35:58 AM 3752 (0x0EA8)
    CAS failed to download update (d360f6fa-8f91-459e-8709-51620190d974). Error = 0x80070005. Releasing content request. UpdatesHandler 5/23/2013 2:35:58 AM 3752 (0x0EA8)
    ContentAvailable notification received from CAS. UpdatesHandler 5/23/2013 2:36:09 AM 3752 (0x0EA8)
    CAS failed to download update (5a082024-1274-4eab-8e6d-b3a0cb961899). Error = 0x80070005. Releasing content request. UpdatesHandler 5/23/2013 2:36:09 AM 3752 (0x0EA8)
    ContentAvailable notification received from CAS. UpdatesHandler 5/23/2013 2:36:20 AM 1896 (0x0768)
    CAS failed to download update (b87e1f15-d8bb-4013-8440-799f3c4374f2). Error = 0x80070005. Releasing content request. UpdatesHandler 5/23/2013 2:36:20 AM 1896 (0x0768)
    ContentAvailable notification received from CAS. UpdatesHandler 5/23/2013 2:36:31 AM 1896 (0x0768)
    CAS failed to download update (b74ae674-3a6f-4a81-9a51-2f8c8ab6632c). Error = 0x80070005. Releasing content request. UpdatesHandler 5/23/2013 2:36:31 AM 1896 (0x0768)
    Download completed for the job ({D1F29100-A6DA-4792-A2CE-8687C91B3777}). UpdatesHandler 5/23/2013 2:36:31 AM 1896 (0x0768)
    Successfully sent job ({D1F29100-A6DA-4792-A2CE-8687C91B3777}) success completion to the SdmAgent UpdatesHandler 5/23/2013 2:36:31 AM 3860 (0x0F14)
    CompleteJob received from SDM. UpdatesHandler 5/23/2013 2:36:31 AM 5520 (0x1590)
    Complete - Job ({D1F29100-A6DA-4792-A2CE-8687C91B3777}) Cleanup. UpdatesHandler 5/23/2013 2:36:31 AM 5520 (0x1590)
    CompleteJob - Job ({D1F29100-A6DA-4792-A2CE-8687C91B3777}) removed from job manager list. UpdatesHandler 5/23/2013 2:36:31 AM 5520 (0x1590)
    Initiating updates scan for checking applicability. UpdatesHandler 5/23/2013 2:45:07 AM 5112 (0x13F8)
    Successfully initiated scan. UpdatesHandler 5/23/2013 2:45:08 AM 5112 (0x13F8)
    Initiating updates scan for checking applicability. UpdatesHandler 5/23/2013 2:45:09 AM 4124 (0x101C)
    Successfully initiated scan. UpdatesHandler 5/23/2013 2:45:09 AM 4124 (0x101C)
    Updates scan completion received, result = 0x0. UpdatesHandler 5/23/2013 2:45:17 AM 3752 (0x0EA8)
    Updates scan completion received, result = 0x0. UpdatesHandler 5/23/2013 2:45:17 AM 3752 (0x0EA8)
    Method (Discover) called from SDM. UpdatesHandler 5/23/2013 2:45:29 AM 4124 (0x101C)
    Starting job with id = {A6B9F153-4F39-4C41-B378-11CD49FF9203} UpdatesHandler 5/23/2013 2:45:29 AM 4124 (0x101C)
    Initiating Scan. Forced = (0) UpdatesHandler 5/23/2013 2:45:29 AM 4124 (0x101C)
    Successfully initiated scan for job ({A6B9F153-4F39-4C41-B378-11CD49FF9203}). UpdatesHandler 5/23/2013 2:45:29 AM 4124 (0x101C)
    Scan completion received for job ({A6B9F153-4F39-4C41-B378-11CD49FF9203}). UpdatesHandler 5/23/2013 2:45:29 AM 6980 (0x1B44)
    Evaluating status of the updates for the job ({A6B9F153-4F39-4C41-B378-11CD49FF9203}). UpdatesHandler 5/23/2013 2:45:29 AM 6980 (0x1B44)
    Successfully sent job ({A6B9F153-4F39-4C41-B378-11CD49FF9203}) success completion to the SdmAgent UpdatesHandler 5/23/2013 2:45:29 AM 5112 (0x13F8)
    CompleteJob received from SDM. UpdatesHandler 5/23/2013 2:45:30 AM 6980 (0x1B44)
    Complete - Job ({A6B9F153-4F39-4C41-B378-11CD49FF9203}) Cleanup. UpdatesHandler 5/23/2013 2:45:30 AM 6980 (0x1B44)
    CompleteJob - Job ({A6B9F153-4F39-4C41-B378-11CD49FF9203}) removed from job manager list. UpdatesHandler 5/23/2013 2:45:30 AM 6980 (0x1B44)

    Pulled this out of the event viewer

    Log Name:      System
    Source:        Microsoft Antimalware
    Date:          5/23/2013 5:43:10 PM
    Event ID:      2001
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      sccm.domain.local
    Description:
    Microsoft Antimalware has encountered an error trying to update signatures.
      New Signature Version:
      Previous Signature Version: 1.151.697.0
      Update Source: Microsoft Update Server
      Update Stage: Search
      Source Path: http://www.microsoft.com
      Signature Type: AntiVirus
      Update Type: Full
      User: NT AUTHORITY\SYSTEM
      Current Engine Version:
      Previous Engine Version: 1.1.9506.0
      Error code: 0x80248014
      Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft Antimalware" />
        <EventID Qualifiers="0">2001</EventID>
        <Level>2</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2013-05-23T22:43:10.000000000Z" />
        <EventRecordID>35155</EventRecordID>
        <Channel>System</Channel>
        <Computer>CGD2SC12.cgi.int</Computer>
        <Security />
      </System>
      <EventData>
        <Data>%%860</Data>
        <Data>4.2.0223.0</Data>
        <Data>
        </Data>
        <Data>1.151.697.0</Data>
        <Data>7</Data>
        <Data>%%859</Data>
        <Data>
        </Data>
        <Data>NT AUTHORITY</Data>
        <Data>SYSTEM</Data>
        <Data>S-1-5-18</Data>
        <Data>1</Data>
        <Data>%%800</Data>
        <Data>1</Data>
        <Data>%%803</Data>
        <Data>
        </Data>
        <Data>1.1.9506.0</Data>
        <Data>0x80248014</Data>
        <Data>An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. </Data>
        <Data>1</Data>
        <Data>%%852</Data>
        <Data>http://www.microsoft.com</Data>
      </EventData>
    </Event>



    • Edited by jamicon Thursday, May 23, 2013 10:47 PM
    Thursday, May 23, 2013 10:26 PM
  • Strange question but do you have the Windows Search Indexer (Indexing Service) turned on? If you do can you try disabling it?

    Please don't forget to mark posts as helpful or answers.
    Inframon Blogs | All Things ConfigMgr

    Friday, May 24, 2013 1:05 AM
  • On the secondary that is failing there is no service by that name, Windows Server 2012, however when I go to the S drive where SCCM is installed general properties the allow index option is checked. I will disable it there and see what happens but I would think this would affect all packages and not just SCEP?

    update - disabled indexing on the S drive, ran SCEP update against DP and failed with the same error.

    Whats the point of all these logs when they don't tell you anything, I've check 20 logs and no red anywhere.





    • Edited by jamicon Friday, May 24, 2013 2:04 AM
    Friday, May 24, 2013 1:49 AM
  • Hi,

    Total shot in the dark, but try deleting the contents of SoftwareDistribution\Download on the client that can't update and see if that helps.

    Friday, May 24, 2013 2:30 PM
  • deleted contents, no change, same error no connection

    Note- I went back to my off site remote test environment (which has Internet) and set to configmgr only as source and having exact same problem there as well.

    Friday, May 24, 2013 5:14 PM
  • The root of my problem was solved with Andrews help http://social.technet.microsoft.com/Forums/en-US/FCSNext/thread/01169e7c-2421-4f35-9662-6e9e202df75c

    Last question though - when running the update button manually does that always default to the inernet?

    Tuesday, May 28, 2013 4:22 PM
  • I believe so, manually kicking to start the scan or definition download immediately should be done by manually triggering a policy refresh

    Kevin Case | My blog www.sccmroad.wordpress.com/ Twitter: @casekev | | Please mark as helpful/answer if this resolved your issue

    • Marked as answer by jamicon Wednesday, May 29, 2013 11:45 AM
    Tuesday, May 28, 2013 9:25 PM