locked
Clients not downloading updates RRS feed

  • Question

  • I had to move the WSUS database, content and UpdateServicesPackages to a different partition on the WSUS server. To be clear the files moved from D:\WSUS to E:\WSUS on the same physical server.  Now none of the clients are able to download updates.  Clients can successfully ping the wsus server, and can download the http://servernameorip:8530/selfupdate/wuident.cab file.  There are approved updates that need to be downloaded and installed.

    WSUS server version is: 3.2.7600.251

    In the WSUS console the status report shows the machines communicating with the WSUS server.

    Here is the windowsupdate.log on a 2008 server after running wuauclt.exe /resetauthorization /detectnow

    016-04-10 15:20:27:254 1272 18e0 AU ## START ##  AU: Search for updates
    2016-04-10 15:20:27:254 1272 18e0 AU #########
    2016-04-10 15:20:27:254 1272 18e0 AU <<## SUBMITTED ## AU: Search for updates [CallId = {B894F0BF-E503-4284-A594-654F57C07DD4}]
    2016-04-10 15:20:27:254 1272 1efc Agent *************
    2016-04-10 15:20:27:254 1272 1efc Agent ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2016-04-10 15:20:27:254 1272 1efc Agent *********
    2016-04-10 15:20:27:254 1272 1efc Agent  * Online = Yes; Ignore download priority = No
    2016-04-10 15:20:27:254 1272 1efc Agent  * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
    2016-04-10 15:20:27:254 1272 1efc Agent  * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2016-04-10 15:20:27:254 1272 1efc Agent  * Search Scope = {Machine}
    2016-04-10 15:20:27:254 1272 1efc Setup Checking for agent SelfUpdate
    2016-04-10 15:20:27:254 1272 1efc Setup Client version: Core: 7.6.7601.19116  Aux: 7.6.7601.19116
    2016-04-10 15:20:29:625 1272 1efc Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab with dwProvFlags 0x00000080:
    2016-04-10 15:20:29:625 1272 1efc Misc Microsoft signed: NA
    2016-04-10 15:20:29:625 1272 1efc Misc WARNING: Cab does not contain correct inner CAB file.
    2016-04-10 15:20:29:625 1272 1efc Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab with dwProvFlags 0x00000080:
    2016-04-10 15:20:29:641 1272 1efc Misc Microsoft signed: NA
    2016-04-10 15:20:29:641 1272 1efc Setup Wuident for the managed service is valid but not quorum-signed. Skipping selfupdate.
    2016-04-10 15:20:29:641 1272 1efc Setup Skipping SelfUpdate check based on the /SKIP directive in wuident
    2016-04-10 15:20:29:641 1272 1efc Setup SelfUpdate check completed.  SelfUpdate is NOT required.
    2016-04-10 15:20:30:249 1272 1efc PT +++++++++++  PT: Synchronizing server updates  +++++++++++
    2016-04-10 15:20:30:249 1272 1efc PT  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = https://mywsusserver.net:8531/ClientWebService/client.asmx
    2016-04-10 15:22:03:586 1272 1efc PT +++++++++++  PT: Synchronizing extended update info  +++++++++++
    2016-04-10 15:22:03:586 1272 1efc PT  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = https://mywsusserver.net:8531/ClientWebService/client.asmx
    2016-04-10 15:22:04:069 1272 1efc Agent  * Found 0 updates and 90 categories in search; evaluated appl. rules of 5630 out of 10168 deployed entities
    2016-04-10 15:22:04:069 1272 1efc Agent *********
    2016-04-10 15:22:04:069 1272 1efc Agent **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2016-04-10 15:22:04:069 1272 1efc Agent *************
    2016-04-10 15:22:04:069 1272 1c10 AU >>##  RESUMED  ## AU: Search for updates [CallId = {B894F0BF-E503-4284-A594-654F57C07DD4}]
    2016-04-10 15:22:04:069 1272 1c10 AU  # 0 updates detected
    2016-04-10 15:22:04:069 1272 1c10 AU #########
    2016-04-10 15:22:04:069 1272 1c10 AU ##  END  ##  AU: Search for updates [CallId = {B894F0BF-E503-4284-A594-654F57C07DD4}]
    2016-04-10 15:22:04:069 1272 1c10 AU #############
    2016-04-10 15:22:04:069 1272 1efc Inv #############
    2016-04-10 15:22:04:069 1272 1efc Inv ## START ##  Inv: Inventory Collection
    2016-04-10 15:22:04:069 1272 1efc Inv #########
    2016-04-10 15:22:04:069 1272 1efc Inv  # Talking to WSUS server = https://mywsusserver.net:8531
    2016-04-10 15:22:04:069 1272 1c10 AU Successfully wrote event for AU health state:0
    2016-04-10 15:22:04:069 1272 1c10 AU Featured notifications is disabled.
    2016-04-10 15:22:04:069 1272 1c10 AU AU setting next detection timeout to 2016-04-11 19:13:07
    2016-04-10 15:22:04:069 1272 1c10 AU Successfully wrote event for AU health state:0
    2016-04-10 15:22:04:069 1272 1c10 AU Successfully wrote event for AU health state:0
    2016-04-10 15:22:04:069 1272 1efc Inv  # Downloading Rule file from = https://mywsusserver.net:8531/Inventory/InventoryRules.cab
    2016-04-10 15:22:04:085 1272 1efc Misc WARNING: Send failed with hr = 80072f8f.
    2016-04-10 15:22:04:085 1272 1efc Misc WARNING: SendRequest failed with hr = 80072f8f. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
    2016-04-10 15:22:04:085 1272 1efc Misc WARNING: WinHttp: SendRequestUsingProxy failed for <https://mywsusserver.net:8531/Inventory/InventoryRules.cab>. error 0x80072f8f
    2016-04-10 15:22:04:085 1272 1efc Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f8f
    2016-04-10 15:22:04:085 1272 1efc Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072f8f
    2016-04-10 15:22:04:085 1272 1efc Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072f8f
    2016-04-10 15:22:04:085 1272 1efc Misc WARNING: Library download error. Error 0x80072f8f. Will retry. Retry Counter:0
    2016-04-10 15:22:04:100 1272 1efc Misc WARNING: Send failed with hr = 80072f8f.
    2016-04-10 15:22:04:100 1272 1efc Misc WARNING: SendRequest failed with hr = 80072f8f. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
    2016-04-10 15:22:04:100 1272 1efc Misc WARNING: WinHttp: SendRequestUsingProxy failed for <https://mywsusserver.net:8531/Inventory/InventoryRules.cab>. error 0x80072f8f
    2016-04-10 15:22:04:100 1272 1efc Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f8f
    2016-04-10 15:22:04:100 1272 1efc Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072f8f
    2016-04-10 15:22:04:100 1272 1efc Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072f8f
    2016-04-10 15:22:04:100 1272 1efc Misc WARNING: Library download error. Error 0x80072f8f. Will retry. Retry Counter:1
    2016-04-10 15:22:04:100 1272 1efc Misc WARNING: Send failed with hr = 80072f8f.
    2016-04-10 15:22:04:100 1272 1efc Misc WARNING: SendRequest failed with hr = 80072f8f. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
    2016-04-10 15:22:04:100 1272 1efc Misc WARNING: WinHttp: SendRequestUsingProxy failed for <https://mywsusserver.net:8531/Inventory/InventoryRules.cab>. error 0x80072f8f
    2016-04-10 15:22:04:100 1272 1efc Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f8f
    2016-04-10 15:22:04:100 1272 1efc Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072f8f
    2016-04-10 15:22:04:100 1272 1efc Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072f8f
    2016-04-10 15:22:04:100 1272 1efc Misc WARNING: Library download error. Error 0x80072f8f. Will retry. Retry Counter:2
    2016-04-10 15:22:04:116 1272 1efc Misc WARNING: Send failed with hr = 80072f8f.
    2016-04-10 15:22:04:116 1272 1efc Misc WARNING: SendRequest failed with hr = 80072f8f. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
    2016-04-10 15:22:04:116 1272 1efc Misc WARNING: WinHttp: SendRequestUsingProxy failed for <https://mywsusserver.net:8531/Inventory/InventoryRules.cab>. error 0x80072f8f
    2016-04-10 15:22:04:116 1272 1efc Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f8f
    2016-04-10 15:22:04:116 1272 1efc Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072f8f
    2016-04-10 15:22:04:116 1272 1efc Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072f8f
    2016-04-10 15:22:04:116 1272 1efc Inv WARNING: Inventory: Failed to download rule file with error 0x80072f8f
    2016-04-10 15:22:04:116 1272 1efc Inv  # WARNING: Exit code = 0x80072F8F
    2016-04-10 15:22:04:116 1272 1efc Inv #########
    2016-04-10 15:22:04:116 1272 1efc Inv ##  END  ##  Inv: Inventory Collection
    2016-04-10 15:22:04:116 1272 1efc Inv #############
    2016-04-10 15:22:04:116 1272 1efc Inv WARNING: Inventory: Failed to process work item 0x80072f8f
    2016-04-10 15:22:09:077 1272 1efc Report REPORT EVENT: {3BBC7BCB-50F3-4F44-8C33-58196B135D7C} 2016-04-10 15:22:04:069-0600 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Software Synchronization Windows Update Client successfully detected 0 updates.
    2016-04-10 15:22:09:077 1272 1efc Report REPORT EVENT: {B4047EFE-2C1C-4FD6-94DE-A11B9E5163A8} 2016-04-10 15:22:04:069-0600 1 156 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Pre-Deployment Check Reporting client status.
    2016-04-10 15:22:09:077 1272 1efc Report REPORT EVENT: {EF75B0C9-AA4F-44A1-9D73-1584B188F5F3} 2016-04-10 15:22:04:116-0600 1 121 104 {00000000-0000-0000-0000-000000000000} 0 80072f8f InventoryEngine Failure Inventory Rules Download Inventory: Faied to download rule file
    2016-04-10 15:22:09:685 1272 1efc Report CWERReporter::HandleEvents - WER report upload completed with status 0x8
    2016-04-10 15:22:09:685 1272 1efc Report WER Report sent: 7.6.7601.19116 0x80072f8f(0) 0000000-0000-0000-0000-000000000000 Other 0 0 InventoryEngine {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} 0
    2016-04-10 15:23:28:436 1272 1efc Report Uploading 7 events using cached cookie, reporting URL = https://mywsusserver.net:8531/ReportingWebService/ReportingWebService.asmx
    2016-04-10 15:23:28:467 1272 1efc Report Reporter successfully uploaded 7 events.

    Sunday, April 10, 2016 9:47 PM

Answers

  • 2016-04-10 15:22:04:069 1272 1efc Agent  * Found 0 updates and 90 categories in search; evaluated appl. rules of 5630 out of 10168 deployed entities
    2016-04-10 15:22:04:069 1272 1efc Agent ********* 
    2016-04-10 15:22:04:069 1272 1efc Agent **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2016-04-10 15:22:04:069 1272 1efc Agent *************
    2016-04-10 15:22:04:069 1272 1c10 AU >>##  RESUMED  ## AU: Search for updates [CallId = {B894F0BF-E503-4284-A594-654F57C07DD4}]
    2016-04-10 15:22:04:069 1272 1c10 AU  # 0 updates detected
    2016-04-10 15:22:04:069 1272 1c10 AU #########
    2016-04-10 15:22:04:069 1272 1c10 AU ##  END  ##  AU: Search for updates [CallId = {B894F0BF-E503-4284-A594-654F57C07DD4}]
    2016-04-10 15:22:04:069 1272 1c10 AU #############
    2016-04-10 15:22:04:069 1272 1efc Inv #############
    2016-04-10 15:22:04:069 1272 1efc Inv ## START ##  Inv: Inventory Collection
    2016-04-10 15:22:04:069 1272 1efc Inv #########
    2016-04-10 15:22:04:069 1272 1efc Inv  # Talking to WSUS server = https://mywsusserver.net:8531
    2016-04-10 15:22:04:069 1272 1c10 AU Successfully wrote event for AU health state:0
    2016-04-10 15:22:04:069 1272 1c10 AU Featured notifications is disabled.
    2016-04-10 15:22:04:069 1272 1c10 AU AU setting next detection timeout to 2016-04-11 19:13:07
    2016-04-10 15:22:04:069 1272 1c10 AU Successfully wrote event for AU health state:0
    2016-04-10 15:22:04:069 1272 1c10 AU Successfully wrote event for AU health state:0
    2016-04-10 15:22:04:069 1272 1efc Inv  # Downloading Rule file from = https://mywsusserver.net:8531/Inventory/InventoryRules.cab
    2016-04-10 15:22:04:085 1272 1efc Misc WARNING: Send failed with hr = 80072f8f.
    No updates were detected. So either this machine needs no updates, or, detection is failing. (but no detection errors were logged).
    Also, the SCE Inventory extension is failing (WSUS does a little inventory by default, but from memory SCE extends that).
    Inventory failure *might* cause broader problems in WSUS, I'm not sure, I've not seen Inventory errors before.
    I suspect the Inventory failure is due to your relocation of things, and you should check if SCE can resolve that for you (or you may need to perform manual corrections on the v-dir, it's probably a permissions problem on the new location, since the 80072f8f error code = "winhttp security error"

    Don [doesn't work for MSFT, and they're probably glad about that ;]

    Monday, April 11, 2016 9:46 PM

All replies

  • Hi FordRacer,

    1. Check the following articles to verify if you move the WSUS folders using the correct steps:

    Manage WSUS 3.0 SP2 Storage:

    https://technet.microsoft.com/en-us/library/hh328578(WS.10).aspx

    Move the Local Update Storage Location

    https://technet.microsoft.com/en-us/library/dd939905(v=ws.10).aspx

    2. Please post a screenshot of your WSUS server overview.

    Best Regards,

    Anne


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Monday, April 11, 2016 3:18 AM
  • I used the wsusutil utility to move the update files.  The database is running on SQL 2008 Standard, I detached and attached the database using the SQL tools.  Hopefully this is the overview screenshot you requested.

    Monday, April 11, 2016 3:28 PM
  • I am also running SCE 2010 on this server, those databases were moved also.  Should I have moved the WSUS content and databases prior to moving the SCE databases?
    Monday, April 11, 2016 8:47 PM
  • 2016-04-10 15:22:04:069 1272 1efc Agent  * Found 0 updates and 90 categories in search; evaluated appl. rules of 5630 out of 10168 deployed entities
    2016-04-10 15:22:04:069 1272 1efc Agent ********* 
    2016-04-10 15:22:04:069 1272 1efc Agent **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2016-04-10 15:22:04:069 1272 1efc Agent *************
    2016-04-10 15:22:04:069 1272 1c10 AU >>##  RESUMED  ## AU: Search for updates [CallId = {B894F0BF-E503-4284-A594-654F57C07DD4}]
    2016-04-10 15:22:04:069 1272 1c10 AU  # 0 updates detected
    2016-04-10 15:22:04:069 1272 1c10 AU #########
    2016-04-10 15:22:04:069 1272 1c10 AU ##  END  ##  AU: Search for updates [CallId = {B894F0BF-E503-4284-A594-654F57C07DD4}]
    2016-04-10 15:22:04:069 1272 1c10 AU #############
    2016-04-10 15:22:04:069 1272 1efc Inv #############
    2016-04-10 15:22:04:069 1272 1efc Inv ## START ##  Inv: Inventory Collection
    2016-04-10 15:22:04:069 1272 1efc Inv #########
    2016-04-10 15:22:04:069 1272 1efc Inv  # Talking to WSUS server = https://mywsusserver.net:8531
    2016-04-10 15:22:04:069 1272 1c10 AU Successfully wrote event for AU health state:0
    2016-04-10 15:22:04:069 1272 1c10 AU Featured notifications is disabled.
    2016-04-10 15:22:04:069 1272 1c10 AU AU setting next detection timeout to 2016-04-11 19:13:07
    2016-04-10 15:22:04:069 1272 1c10 AU Successfully wrote event for AU health state:0
    2016-04-10 15:22:04:069 1272 1c10 AU Successfully wrote event for AU health state:0
    2016-04-10 15:22:04:069 1272 1efc Inv  # Downloading Rule file from = https://mywsusserver.net:8531/Inventory/InventoryRules.cab
    2016-04-10 15:22:04:085 1272 1efc Misc WARNING: Send failed with hr = 80072f8f.
    No updates were detected. So either this machine needs no updates, or, detection is failing. (but no detection errors were logged).
    Also, the SCE Inventory extension is failing (WSUS does a little inventory by default, but from memory SCE extends that).
    Inventory failure *might* cause broader problems in WSUS, I'm not sure, I've not seen Inventory errors before.
    I suspect the Inventory failure is due to your relocation of things, and you should check if SCE can resolve that for you (or you may need to perform manual corrections on the v-dir, it's probably a permissions problem on the new location, since the 80072f8f error code = "winhttp security error"

    Don [doesn't work for MSFT, and they're probably glad about that ;]

    Monday, April 11, 2016 9:46 PM
  • The machine I am testing with needs updates, they had been approved for the group it resides in.  Permissions on the new location match those on the old.  The whole thing is quite perplexing.  I have moved WSUS previously, to a new server at that time, without any issues.  I thought this would be a slam dunk, just a quick move to new location on the same server.  Unfortunately every server, or workstation I run an update on generates a different error, so it's hard to pinpoint the exact issue.  This is a vm, I took a snapshot prior to moving things.  Going back to that snapshot is no good either, nothing will get updates from it now.  After moving the SCE databases, discovery won't run, I verified the broker is enabled. The whole thing is just broken.
    Monday, April 11, 2016 10:21 PM
  • Hi FordRacer,

    What's going on now, have you got any progress?

    Or maybe we need to deploy WSUS from scratch according to the current situation.

    Best Regards,

    Anne


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Thursday, April 14, 2016 9:42 AM