Remove From My Forums

Error 0x8024201C on WSUS clients trying to upgrade from Windows 10 1607 to 1703

Question

Hi,

We recently approved Dynamic Upgrade to Windows 10 1703 on our fully-patched (including KB3095113 and KB3159706) WSUS server running Windows Server 2012 R2. The update files were downloaded, and several computers on our network tried to install the update, without success. Our WSUS servers seem to be healthy (no error logged).

Since we got issues with KB3159706 some months ago, I checked encryption status in the SUS DB, and it seems to be OK:

USE SUSDB
SELECT *
FROM tbFile
WHERE (FileName LIKE '%15063%' AND (IsEncrypted = 0 OR IsSecure = 0 OR DecryptionKey IS NULL))

The query returns nothing, which is fine.

Here is the end of the WindowsUpdate.log of one of the failing machines. The last line shows the only error I could find.

2017/04/25 10:17:53.3410467 1476  12220 ProtocolTalker  ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = https://wsus.ass.intranet.pep06.fr:8531/ClientWebService/client.asmx
2017/04/25 10:17:53.3410480 1476  12220 ProtocolTalker  OK to reuse existing configuration
2017/04/25 10:17:53.3410611 1476  12220 ProtocolTalker  Existing cookie is valid, just use it
2017/04/25 10:17:53.3410621 1476  12220 ProtocolTalker  PTInfo: Server requested registration
2017/04/25 10:17:53.4696888 1476  12220 Agent           Added update A349769B-B14C-4A79-B722-1EA1B253DFA7.202 to search result
2017/04/25 10:17:53.4696965 1476  12220 Agent           Found 1 updates and 94 categories in search; evaluated appl. rules of 2193 out of 3608 deployed entities
2017/04/25 10:17:53.4905058 1476  12220 Agent           * END * Finding updates CallerId = UpdateOrchestrator  Id = 5
2017/04/25 10:17:53.5063032 1476  2268  ComApi          *RESUMED* Search ClientId = UpdateOrchestrator
2017/04/25 10:17:53.5075029 1476  2268  ComApi          Updates found = 1
2017/04/25 10:17:53.5075035 1476  2268  ComApi          * END *   Search ClientId = UpdateOrchestrator
2017/04/25 10:17:53.5145656 1476  2020  ComApi          ISusInternal:: DisconnectCall failed, hr=8024000C
2017/04/25 10:17:53.6529984 1476  2020  ComApi          * START *   Download ClientId = UpdateOrchestrator
2017/04/25 10:17:53.6529990 1476  2020  ComApi          Flags: 0; Download priority: 2; Network Cost Policy: 0
2017/04/25 10:17:53.6529994 1476  2020  ComApi          Updates in request: 1
2017/04/25 10:17:53.6530109 1476  2020  ComApi          ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
2017/04/25 10:17:53.6536208 1476  2020  ComApi          *QUEUED* Download ClientId = UpdateOrchestrator
2017/04/25 10:17:53.6537018 1476  3116  Shared          Effective power state: AC
2017/04/25 10:17:53.6537098 1476  3116  Agent           Obtained a network PDC reference for callID {737DA7BA-1CAF-4EE5-8A6F-C9098327F288} with No-Progress-Timeout set to 4294967295; ActivationID: 70.
2017/04/25 10:17:53.6556829 1476  3116  DownloadManager * START * Begin Downloading Updates [CallerId = UpdateOrchestrator] [Call ID = 737DA7BA-1CAF-4EE5-8A6F-C9098327F288]
2017/04/25 10:17:53.6556851 1476  3116  DownloadManager Priority = 2, NetworkCostPolicy = 0, Interactive = 0, Download on Battery = 0, Bypass Regulation = 0, Owner is system = 1, Proxy session id = 1, ServiceId = 3DA21691-E39D-4DA6-8A4B-B43877BCB1B7
2017/04/25 10:17:53.6556854 1476  3116  DownloadManager Updates to download = 1
2017/04/25 10:17:53.6556858 1476  3116  Agent             Title = Mise ?? jour des fonctionnalit??s de Windows??10 Professionnel, version 1703, fr-fr, Vente au d??tail
2017/04/25 10:17:53.6556880 1476  3116  Agent             UpdateId = A349769B-B14C-4A79-B722-1EA1B253DFA7.202
2017/04/25 10:17:53.6556880 1476  3116  Agent               Bundles 1 updates:
2017/04/25 10:17:53.6556896 1476  3116  Agent                 A09D0F81-B9B4-4C08-9E8D-B4B1D5AC1176.202
2017/04/25 10:17:53.6786499 1476  3116  Handler         Loaded state. m_dwState now: <invalid>(0)
2017/04/25 10:17:53.6788397 1476  3116  DownloadManager Update A09D0F81-B9B4-4C08-9E8D-B4B1D5AC1176.202 is missing decryption information
2017/04/25 10:17:53.6791059 1476  3116  DownloadManager DynamicDownloadDataFetcher: {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} - added new entry for Update {A09D0F81-B9B4-4C08-9E8D-B4B1D5AC1176}.202
2017/04/25 10:17:53.6844995 1476  3116  DownloadManager Queueing update {A09D0F81-B9B4-4C08-9E8D-B4B1D5AC1176}.202 for download handler request generation.
2017/04/25 10:17:53.6849197 1476  3116  Handler         Loaded state. m_dwState now: <invalid>(0)
2017/04/25 10:17:53.7019159 1476  3116  Shared          Effective power state: AC
2017/04/25 10:17:53.7019280 1476  3116  Agent           Released network PDC reference for callId {737DA7BA-1CAF-4EE5-8A6F-C9098327F288}; ActivationID: 70
2017/04/25 10:17:53.7019322 1476  3116  Agent           Obtained a network PDC reference for callID {737DA7BA-1CAF-4EE5-8A6F-C9098327F288} with No-Progress-Timeout set to 4294967295; ActivationID: 71.
2017/04/25 10:17:53.7020436 1476  6984  Agent           WU client calls back to download call {737DA7BA-1CAF-4EE5-8A6F-C9098327F288} with code Call progress and error 0
2017/04/25 10:17:53.7021706 1476  3120  Handler         Loaded state. m_dwState now: <invalid>(0)
2017/04/25 10:17:53.7022868 1476  3120  DownloadManager Generating download request for update {A09D0F81-B9B4-4C08-9E8D-B4B1D5AC1176}.202
2017/04/25 10:17:53.7023824 1476  3120  DownloadManager Calling into handler 0xa to generate download request for update A09D0F81-B9B4-4C08-9E8D-B4B1D5AC1176.202
2017/04/25 10:17:53.7025552 1476  3120  Handler         Loaded state. m_dwState now: <invalid>(0)
2017/04/25 10:17:53.7061050 1476  3116  DownloadManager * END * Begin Downloading Updates CallerId = UpdateOrchestrator
2017/04/25 10:17:53.7063815 1476  3116  DownloadManager DynamicDownloadDataFetcher Refresh Svc: {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}
2017/04/25 10:17:53.7063997 1476  3116  DownloadManager Fetching dynamic data from service 3DA21691-E39D-4DA6-8A4B-B43877BCB1B7 for 1 updates.
2017/04/25 10:17:53.7064116 1476  3116  Misc            Got WSUS SecuredClient/Server URL: https://wsus.ass.intranet.pep06.fr:8531/ClientWebService/client.asmx/secured""
2017/04/25 10:17:53.7065933 1476  3116  WebServices     Auto proxy settings for this web service call.
2017/04/25 10:17:53.7271261 1476  3116  DownloadManager GetExtendedUpdateInfo2 returned, hr=0x00000000, FileLocations=2, FileDecryptionData=2
2017/04/25 10:17:53.7286634 1476  3116  DownloadManager DynamicDownloadDataFetcher Refresh complete. 0x00000000
2017/04/25 10:17:53.7286714 1476  3116  DownloadManager DynamicDownloadDataFetcher Refreshed Update {A09D0F81-B9B4-4C08-9E8D-B4B1D5AC1176} SetDynamicResult: 0
2017/04/25 10:17:53.7286717 1476  3116  DownloadManager DynamicDownloadDataFetcher HandleDynamicDataRefreshResult HR(0x00000000)
2017/04/25 10:17:53.7327639 1476  3116  DownloadManager The update's sandbox is in use.  Will download when it is no longer busy.
2017/04/25 10:17:54.0311360 1476  3120  Misc            Validating signature for C:\Windows\SoftwareDistribution\Download\414dd706f8eb99790a8843ec496fd5ae\WindowsUpdateBox.exe with dwProvFlags 0x00000080:
2017/04/25 10:17:54.1395627 1476  3120  Misc             Microsoft signed: Yes
1601/01/01 01:00:00.0000000 1476  3120                  Unknown( 29): GUID=fcbe2391-c27e-34dd-3da4-e58427d40b90 (No Format Information found).
2017/04/25 10:17:54.1395992 1476  3120  Handler         State changed. was: <invalid>(0), now: Setup360_CompatToolPhase1(5)
2017/04/25 10:17:54.1397864 1476  3120  Handler         Saved state. m_dwState: Setup360_CompatToolPhase1(5)
2017/04/25 10:17:54.1405022 1476  3116  DownloadManager Update A09D0F81-B9B4-4C08-9E8D-B4B1D5AC1176.202 is missing decryption information
2017/04/25 10:17:54.1406968 1476  3116  DownloadManager DynamicDownloadDataFetcher: {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} - added new entry for Update {A09D0F81-B9B4-4C08-9E8D-B4B1D5AC1176}.202
2017/04/25 10:17:54.1448257 1476  3116  DownloadManager Queueing update {A09D0F81-B9B4-4C08-9E8D-B4B1D5AC1176}.202 for download handler request generation.
2017/04/25 10:17:54.1452005 1476  3120  Handler         Loaded state. m_dwState now: Setup360_CompatToolPhase1(5)
2017/04/25 10:17:54.1452187 1476  3120  DownloadManager Generating download request for update {A09D0F81-B9B4-4C08-9E8D-B4B1D5AC1176}.202
2017/04/25 10:17:54.1452856 1476  3120  DownloadManager Calling into handler 0xa to generate download request for update A09D0F81-B9B4-4C08-9E8D-B4B1D5AC1176.202
2017/04/25 10:17:54.1454283 1476  3120  Handler         Loaded state. m_dwState now: Setup360_CompatToolPhase1(5)
1601/01/01 01:00:00.0000000 1476  3120                  Unknown( 31): GUID=fcbe2391-c27e-34dd-3da4-e58427d40b90 (No Format Information found).
2017/04/25 10:17:54.1488747 1476  3116  DownloadManager DynamicDownloadDataFetcher Refresh Svc: {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}
2017/04/25 10:17:54.1488814 1476  3116  DownloadManager Fetching dynamic data from service 3DA21691-E39D-4DA6-8A4B-B43877BCB1B7 for 1 updates.
2017/04/25 10:17:54.1488926 1476  3116  Misc            Got WSUS SecuredClient/Server URL: https://wsus.ass.intranet.pep06.fr:8531/ClientWebService/client.asmx/secured""
2017/04/25 10:17:54.1490626 1476  3116  WebServices     Auto proxy settings for this web service call.
2017/04/25 10:17:54.1683522 1476  3116  DownloadManager GetExtendedUpdateInfo2 returned, hr=0x00000000, FileLocations=2, FileDecryptionData=2
2017/04/25 10:17:54.1695000 1476  3116  DownloadManager DynamicDownloadDataFetcher Refresh complete. 0x00000000
2017/04/25 10:17:54.1695090 1476  3116  DownloadManager DynamicDownloadDataFetcher Refreshed Update {A09D0F81-B9B4-4C08-9E8D-B4B1D5AC1176} SetDynamicResult: 0
2017/04/25 10:17:54.1695093 1476  3116  DownloadManager DynamicDownloadDataFetcher HandleDynamicDataRefreshResult HR(0x00000000)
2017/04/25 10:17:54.1775941 1476  3116  DownloadManager All files for update {A09D0F81-B9B4-4C08-9E8D-B4B1D5AC1176}.202 were already downloaded and are valid.
2017/04/25 10:17:54.1784322 1476  3116  Handler         Loaded state. m_dwState now: Setup360_CompatToolPhase1(5)
2017/04/25 10:17:54.1942197 1476  3116  DownloadManager * END * Download Call Complete Call 6 for caller UpdateOrchestrator has completed; signaling completion.
2017/04/25 10:17:54.1954789 1476  3116  Shared          Effective power state: AC
2017/04/25 10:17:54.1954818 1476  3116  Agent           Released network PDC reference for callId {737DA7BA-1CAF-4EE5-8A6F-C9098327F288}; ActivationID: 71
2017/04/25 10:17:54.1955842 1476  6984  ComApi          *RESUMED* Download ClientId = UpdateOrchestrator
2017/04/25 10:17:54.1955848 1476  6984  ComApi          Download call complete (succeeded = 1, succeeded with errors = 0, failed = 0, unaccounted = 0)
2017/04/25 10:17:54.1955861 1476  6984  ComApi          * END *   Download ClientId = UpdateOrchestrator
2017/04/25 10:17:54.1955871 1476  6984  Agent           WU client calls back to download call {737DA7BA-1CAF-4EE5-8A6F-C9098327F288} with code Call complete and error 0
2017/04/25 10:17:54.1958453 1476  2020  ComApi          ISusInternal:: DisconnectCall failed, hr=8024000C

I've been looking for a fix for two days and now I'm stuck. Does anyone have any clue about how to fix this ?

Tuesday, April 25, 2017 2:39 PM

All replies

0

Sign in to vote
Hi Marin Bernard,

1. Do you install KB3095113 and KB3159706(with manual step) before syncing and downloading win10 1703 upgrade? If not, we need to re-download the upgrade;

2. Please check if the .esd is added to the WSUS site MIME type;

3. According to your windows update log, you are using SSL for the WSUS server, please check the "Content" in WSUS site, ensure the Content not requires SSL;

4. Right click the upgrade file> File Information, check the location of the upgrade file, then check Content folder, ensure the files are actually exits.

Best Regards,

Anne
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.
- Proposed as answer by Anne HeMicrosoft contingent staff Wednesday, May 3, 2017 5:58 AM
Thursday, April 27, 2017 7:25 AM
0

Sign in to vote

Hi Marin Bernard,

Just to check if the above reply could be of help? If yes, you may mark useful reply as answer, if not, welcome to feedback.

Best Regards,

Anne
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

Wednesday, May 3, 2017 5:59 AM
0

Sign in to vote
Hi Anne,

Sorry for the late answer.

Yes, both updates were installed with all manual steps.
The .esd MIME type is present in IIS for the WSUS website.
The "Content" folder does not require SSL. Updates are downloaded correctly by all computers.
The upgrade file is present in the content store.

Since my post, I noticed that the update was progressively being deployed on several computers. Some days later, I discovered that Microsoft decided to deploy the update in several waves to cope with hardware compatibility issues.

A couple of weeks later, most computers applied the update properly, including several of those which previously failed to do so. As of now, the update is still failing on a bunch of computers, but they are rather special machines: mine, for example, embeds a Supermicro server board.

I've came to the conclusion that the error code is related to some kind of installation restriction managed by Microsoft, to stagger the update process. Could you confirm this?

Thanks,

Marin.
- Edited by Marin Bernard (PEP06) Tuesday, May 23, 2017 1:49 PM Syntax.
Tuesday, May 23, 2017 1:48 PM
0

Sign in to vote

Hi Marin Bernard,

>As of now, the update is still failing on a bunch of computers, but they are rather special machines: mine, for example, embeds a Supermicro server board.

What is the error message on the computers failed to upgrade?

Best Regards,

Anne
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

Monday, May 29, 2017 5:22 AM
0

Sign in to vote

Hi Marin Bernard,

>As of now, the update is still failing on a bunch of computers, but they are rather special machines: mine, for example, embeds a Supermicro server board.

What is the error message on the computers failed to upgrade?

In French: Mise à jour des fonctionnalités de Windows 10 Professionnel, version 1703, fr-fr, Vente au détail - Erreur 0x8024201c

Thanks,

Marin

Friday, June 2, 2017 7:04 AM
0

Sign in to vote

Hi Marin Bernard,

Do you running any third-party software, if yes, please turn off them. If the Windows Defender is on, also turn it off temporarily.

Best Regards,

Anne
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

Wednesday, June 7, 2017 7:05 AM

Products

Resources

Solutions

Updates

Trials

Related Sites

Training

Certifications

Other resources

Support options

More support

Not an IT pro?

Asked by:

Error 0x8024201C on WSUS clients trying to upgrade from Windows 10 1607 to 1703

Question

All replies