Answered by:
NAP slow to validate XP Clients
Question
-
Hi,
NAP is taking 10-20 minutes to grant full access to client Laptops. The clients are running Windows XP (which were sys prepped) and have the latest version of Windows Update, etc.
On the server with the NAP setup, I see the following message coming up every few minutes:
Network Policy Server quarantined a user. Contact the Network Policy Server administrator for more information. User: Security ID: NULL SID Account Name: - Account Domain: - Fully Qualified Account Name: - Client Machine: Security ID: D\L040820$ Account Name: L040820.domain.* Fully Qualified Account Name: domain\L040820$ OS-Version: 5.1.2600 3.0 x86 Workstation Called Station Identifier: 10.160.75.0 Calling Station Identifier: 101F744B0F56 NAS: NAS IPv4 Address: xx.xx.xx.xx NAS IPv6 Address: - NAS Identifier: XXSERVERXX NAS Port-Type: Ethernet NAS Port: - RADIUS Client: Client Friendly Name: - Client IP Address: - Authentication Details: Connection Request Policy Name: NAP DHCP Network Policy Name: NAP DHCP Noncompliant Authentication Provider: Windows Authentication Server: Server.domain Authentication Type: Unauthenticated EAP Type: - Account Session Identifier: 313239333431393831 Quarantine Information: Result: Quarantined Extended-Result: - Session Identifier: {F637AB42-ABD9-4E8E-8B5F-3C9335C60262} - 2013-03-27 09:03:44.776Z Help URL: - System Health Validator Result(s): Windows Security Health Validator 0 NonCompliant No Data None[] (0x0 - ) (0x0 - ) (0x0 - ) (0x0 - ) (0xc0ff0007 - This computer will be automatically synchronized with the Windows Server Update Services server and new security updates must be installed...) (0x400 - )Now to me, that says it is waiting for Windows Update confirm there are no more updates to install. We only issue updates once a week, but the process is slow EVERY single day. Does the NAP service normally take this long to check clients?
I have checked the WindowsUpdate.log on the clients, and they all seem to have the same sort of errors:
27/03/2013 08:16:23:250 1492 ee8 Misc =========== Logging initialized (build: 7.6.7600.256, tz: -0000) =========== 27/03/2013 08:16:23:703 1492 ee8 Misc = Process: C:\WINDOWS\System32\svchost.exe 27/03/2013 08:16:23:703 1492 ee8 Misc = Module: C:\WINDOWS\system32\wuaueng.dll 27/03/2013 08:16:23:234 1492 ee8 Service ************* 27/03/2013 08:16:23:703 1492 ee8 Service ** START ** Service: Service startup 27/03/2013 08:16:23:703 1492 ee8 Service ********* 27/03/2013 08:16:24:031 1492 ee8 Agent * WU client version 7.6.7600.256 27/03/2013 08:16:24:031 1492 ee8 Agent * Base directory: C:\WINDOWS\SoftwareDistribution 27/03/2013 08:16:24:046 1492 ee8 Agent * Access type: No proxy 27/03/2013 08:16:24:046 1492 ee8 Agent * Network state: Connected 27/03/2013 08:16:26:734 1492 3c8 Agent *********** Agent: Initializing Windows Update Agent *********** 27/03/2013 08:16:26:734 1492 3c8 Agent *********** Agent: Initializing global settings cache *********** 27/03/2013 08:16:26:734 1492 3c8 Agent * WSUS server: http://hman46:8530 27/03/2013 08:16:26:734 1492 3c8 Agent * WSUS status server: http://hman46:8530 27/03/2013 08:16:26:734 1492 3c8 Agent * Target group: Workstations 27/03/2013 08:16:26:734 1492 3c8 Agent * Windows Update access disabled: No 27/03/2013 08:16:26:765 1492 3c8 DnldMgr Download manager restoring 0 downloads 27/03/2013 08:16:26:984 1492 3c8 Misc =========== Logging initialized (build: 7.6.7600.256, tz: -0000) =========== 27/03/2013 08:16:26:984 1492 3c8 Misc = Process: C:\WINDOWS\System32\svchost.exe 27/03/2013 08:16:26:984 1492 3c8 Misc = Module: C:\WINDOWS\system32\wuapi.dll 27/03/2013 08:16:26:984 1492 3c8 COMAPI ------------- 27/03/2013 08:16:26:984 1492 3c8 COMAPI -- START -- COMAPI: Search [ClientId = Windows System Health Agent Search] 27/03/2013 08:16:26:984 1492 3c8 COMAPI --------- 27/03/2013 08:16:27:015 1492 3c8 COMAPI <<-- SUBMITTED -- COMAPI: Search [ClientId = Windows System Health Agent Search] 27/03/2013 08:16:33:656 1492 ee8 Report *********** Report: Initializing static reporting data *********** 27/03/2013 08:16:33:656 1492 ee8 Report * OS Version = 5.1.2600.3.0.65792 27/03/2013 08:16:33:968 1492 ee8 Report * Computer Brand = Hewlett-Packard 27/03/2013 08:16:33:968 1492 ee8 Report * Computer Model = HP ProBook 6560b 27/03/2013 08:16:34:078 1492 ee8 Report * Bios Revision = 68SCE Ver. F.04 27/03/2013 08:16:34:078 1492 ee8 Report * Bios Name = Default System BIOS 27/03/2013 08:16:34:078 1492 ee8 Report * Bios Release Date = 2011-05-10T00:00:00 27/03/2013 08:16:34:078 1492 ee8 Report * Locale ID = 2057 27/03/2013 08:16:34:687 1492 e08 Agent ************* 27/03/2013 08:16:34:687 1492 e08 Agent ** START ** Agent: Finding updates [CallerId = Windows System Health Agent Search] 27/03/2013 08:16:34:687 1492 e08 Agent ********* 27/03/2013 08:16:34:687 1492 e08 Agent * Include potentially superseded updates 27/03/2013 08:16:34:687 1492 e08 Agent * Online = Yes; Ignore download priority = No 27/03/2013 08:16:34:687 1492 e08 Agent * Criteria = "IsInstalled=0 and CategoryIDs contains '0fa1201d-4330-4fa8-8ae9-b877473b6441'" 27/03/2013 08:16:34:687 1492 e08 Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed 27/03/2013 08:16:34:687 1492 e08 Agent * Search Scope = {Machine} 27/03/2013 08:16:35:750 1492 e08 PT WARNING: Cached cookie has expired or new PID is available 27/03/2013 08:16:35:750 1492 e08 PT Initializing simple targeting cookie, clientId = 627ee7a0-a58d-4bbe-9b3a-8153117b5c8c, target group = Workstations, DNS name = l040855.business.ukho.gov.uk 27/03/2013 08:16:35:750 1492 e08 PT Server URL = http://hman46:8530/SimpleAuthWebService/SimpleAuth.asmx 27/03/2013 08:16:35:843 1492 e08 PT WARNING: GetCookie failure, error = 0x8024400D, soap client error = 7, soap error code = 300, HTTP status code = 200 27/03/2013 08:16:35:843 1492 e08 PT WARNING: SOAP Fault: 0x00012c 27/03/2013 08:16:35:843 1492 e08 PT WARNING: faultstring:Fault occurred 27/03/2013 08:16:35:843 1492 e08 PT WARNING: ErrorCode:ConfigChanged(2) 27/03/2013 08:16:35:843 1492 e08 PT WARNING: Message:(null) 27/03/2013 08:16:35:843 1492 e08 PT WARNING: Method:"http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService/GetCookie" 27/03/2013 08:16:35:843 1492 e08 PT WARNING: ID:cb987c87-e31f-4bf9-9868-632b03b93d32 27/03/2013 08:16:35:906 1492 e08 PT WARNING: Cached cookie has expired or new PID is available 27/03/2013 08:16:35:906 1492 e08 PT Initializing simple targeting cookie, clientId = 627ee7a0-a58d-4bbe-9b3a-8153117b5c8c, target group = Workstations, DNS name = l040855.business.ukho.gov.uk 27/03/2013 08:16:35:906 1492 e08 PT Server URL = http://hman46:8530/SimpleAuthWebService/SimpleAuth.asmx 27/03/2013 08:16:35:937 1492 e08 PT +++++++++++ PT: Starting category scan +++++++++++ 27/03/2013 08:16:35:937 1492 e08 PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://hman46:8530/ClientWebService/client.asmx 27/03/2013 08:16:45:240 1492 e08 PT +++++++++++ PT: Synchronizing server updates +++++++++++ 27/03/2013 08:16:45:240 1492 e08 PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://hman46:8530/ClientWebService/client.asmx 27/03/2013 08:17:10:314 1492 ee8 AU ########### AU: Initializing Automatic Updates ########### 27/03/2013 08:17:10:314 1492 ee8 AU AU setting next detection timeout to 2013-03-27 08:17:10 27/03/2013 08:17:10:314 1492 ee8 AU AU setting next sqm report timeout to 2013-03-27 08:17:10 27/03/2013 08:17:10:314 1492 ee8 AU # WSUS server: http://hman46:8530 27/03/2013 08:17:10:314 1492 ee8 AU # Detection frequency: 22 27/03/2013 08:17:10:314 1492 ee8 AU # Target group: Workstations 27/03/2013 08:17:10:314 1492 ee8 AU # Approval type: Scheduled (User preference) 27/03/2013 08:17:10:314 1492 ee8 AU # Scheduled install day/time: Every day at 3:00 27/03/2013 08:17:10:314 1492 ee8 AU # Auto-install minor updates: Yes (Policy) 27/03/2013 08:17:10:314 1492 ee8 AU Initializing featured updates 27/03/2013 08:17:10:314 1492 ee8 AU Found 0 cached featured updates 27/03/2013 08:17:10:314 1492 ee8 AU AU finished delayed initialization 27/03/2013 08:17:10:314 1492 ee8 AU ############# 27/03/2013 08:17:10:314 1492 ee8 AU ## START ## AU: Search for updates 27/03/2013 08:17:10:314 1492 ee8 AU ######### 27/03/2013 08:17:10:314 1492 ee8 AU <<## SUBMITTED ## AU: Search for updates [CallId = {B84E4DB3-DFC0-4722-81F7-CA2C0F2F0C7C}] 27/03/2013 08:17:10:377 1660 988 Misc =========== Logging initialized (build: 7.6.7600.256, tz: -0000) =========== 27/03/2013 08:17:10:377 1660 988 Misc = Process: C:\Program Files\LogMeIn\x86\LogMeIn.exe 27/03/2013 08:17:10:377 1660 988 Misc = Module: C:\WINDOWS\system32\wuapi.dll 27/03/2013 08:17:10:377 1660 988 COMAPI ------------- 27/03/2013 08:17:10:377 1660 988 COMAPI -- START -- COMAPI: Search [ClientId = <NULL>] 27/03/2013 08:17:10:377 1660 988 COMAPI --------- 27/03/2013 08:17:10:377 1660 988 COMAPI <<-- SUBMITTED -- COMAPI: Search [ClientId = <NULL>] 27/03/2013 08:17:34:058 1492 ee8 AU Forced install timer expired for scheduled install 27/03/2013 08:17:34:058 1492 ee8 AU UpdateDownloadProperties: 0 download(s) are still in progress. 27/03/2013 08:17:34:058 1492 ee8 AU Setting AU scheduled install time to 2013-03-28 03:00:00 27/03/2013 08:18:53:347 1492 e08 PT +++++++++++ PT: Synchronizing extended update info +++++++++++ 27/03/2013 08:18:53:347 1492 e08 PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://hman46:8530/ClientWebService/client.asmx 27/03/2013 08:19:03:154 1492 e08 Agent * Found 0 updates and 1 categories in search; evaluated appl. rules of 1070 out of 2319 deployed entities 27/03/2013 08:19:03:248 1492 e08 Agent ********* 27/03/2013 08:19:03:248 1492 e08 Agent ** END ** Agent: Finding updates [CallerId = Windows System Health Agent Search] 27/03/2013 08:19:03:248 1492 e08 Agent ************* 27/03/2013 08:19:03:264 1492 e08 Agent ************* 27/03/2013 08:19:03:264 1492 e08 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates] 27/03/2013 08:19:03:264 1492 e08 Agent ********* 27/03/2013 08:19:03:264 1492 e08 Agent * Online = Yes; Ignore download priority = No 27/03/2013 08:19:03:264 1492 e08 Agent * Criteria = "IsHidden=0 and IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and IsAssigned=1 or IsHidden=0 and IsInstalled=1 and DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and IsAssigned=1 and RebootRequired=1" 27/03/2013 08:19:03:264 1492 e08 Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed 27/03/2013 08:19:03:264 1492 e08 Agent * Search Scope = {Machine} 27/03/2013 08:19:03:279 1492 ec0 COMAPI >>-- RESUMED -- COMAPI: Search [ClientId = Windows System Health Agent Search] 27/03/2013 08:19:03:279 1492 ec0 COMAPI - Updates found = 0 27/03/2013 08:19:03:279 1492 ec0 COMAPI --------- 27/03/2013 08:19:03:279 1492 ec0 COMAPI -- END -- COMAPI: Search [ClientId = Windows System Health Agent Search] 27/03/2013 08:19:03:279 1492 ec0 COMAPI ------------- 27/03/2013 08:19:03:310 1492 e08 Misc Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab: 27/03/2013 08:19:03:436 1492 e08 Misc Microsoft signed: Yes 27/03/2013 08:19:03:436 1492 e08 Misc Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab: 27/03/2013 08:19:03:451 1492 e08 Misc Microsoft signed: Yes 27/03/2013 08:19:03:467 1492 e08 Misc Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wsus3setup.cab: 27/03/2013 08:19:03:482 1492 e08 Misc Microsoft signed: Yes 27/03/2013 08:19:03:482 1492 e08 Setup *********** Setup: Checking whether self-update is required *********** 27/03/2013 08:19:03:482 1492 e08 Setup * Inf file: C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wsus3setup.inf 27/03/2013 08:19:03:514 1492 e08 Setup Update NOT required for C:\WINDOWS\system32\cdm.dll: target version = 7.6.7600.256, required version = 7.6.7600.256 27/03/2013 08:19:03:514 1492 e08 Setup Update NOT required for C:\WINDOWS\system32\wuapi.dll: target version = 7.6.7600.256, required version = 7.6.7600.256 27/03/2013 08:19:03:529 1492 e08 Setup Update NOT required for C:\WINDOWS\system32\wuapi.dll.mui: target version = 7.6.7600.256, required version = 7.6.7600.256 27/03/2013 08:19:03:529 1492 e08 Setup Update NOT required for C:\WINDOWS\system32\wuauclt.exe: target version = 7.6.7600.256, required version = 7.6.7600.256 27/03/2013 08:19:03:529 1492 e08 Setup Update NOT required for C:\WINDOWS\system32\wuaucpl.cpl: target version = 7.6.7600.256, required version = 7.6.7600.256 27/03/2013 08:19:03:561 1492 e08 Setup Update NOT required for C:\WINDOWS\system32\wuaucpl.cpl.mui: target version = 7.6.7600.256, required version = 7.6.7600.256 27/03/2013 08:19:03:561 1492 e08 Setup Update NOT required for C:\WINDOWS\system32\wuaueng.dll: target version = 7.6.7600.256, required version = 7.6.7600.256 27/03/2013 08:19:03:576 1492 e08 Setup Update NOT required for C:\WINDOWS\system32\wuaueng.dll.mui: target version = 7.6.7600.256, required version = 7.6.7600.256 27/03/2013 08:19:03:576 1492 e08 Setup Update NOT required for C:\WINDOWS\system32\wucltui.dll: target version = 7.6.7600.256, required version = 7.6.7600.256 27/03/2013 08:19:03:592 1492 e08 Setup Update NOT required for C:\WINDOWS\system32\wucltui.dll.mui: target version = 7.6.7600.256, required version = 7.6.7600.256 27/03/2013 08:19:03:592 1492 e08 Setup Update NOT required for C:\WINDOWS\system32\wups.dll: target version = 7.6.7600.256, required version = 7.6.7600.256 27/03/2013 08:19:03:592 1492 e08 Setup Update NOT required for C:\WINDOWS\system32\wups2.dll: target version = 7.6.7600.256, required version = 7.6.7600.256 27/03/2013 08:19:03:623 1492 e08 Setup Update NOT required for C:\WINDOWS\system32\wuweb.dll: target version = 7.6.7600.256, required version = 7.6.7600.256 27/03/2013 08:19:03:623 1492 e08 Setup * IsUpdateRequired = No 27/03/2013 08:19:04:734 1492 e08 PT +++++++++++ PT: Synchronizing server updates +++++++++++ 27/03/2013 08:19:04:734 1492 e08 PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://hman46:8530/ClientWebService/client.asmx 27/03/2013 08:19:38:379 1492 3c8 COMAPI ------------- 27/03/2013 08:19:38:379 1492 3c8 COMAPI -- START -- COMAPI: Search [ClientId = Windows System Health Agent Search] 27/03/2013 08:19:38:379 1492 3c8 COMAPI --------- 27/03/2013 08:19:38:379 1492 3c8 COMAPI <<-- SUBMITTED -- COMAPI: Search [ClientId = Windows System Health Agent Search] 27/03/2013 08:20:32:750 1492 e08 PT +++++++++++ PT: Synchronizing extended update info +++++++++++ 27/03/2013 08:20:32:750 1492 e08 PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://hman46:8530/ClientWebService/client.asmx 27/03/2013 08:20:33:532 1492 e08 Agent * Found 0 updates and 67 categories in search; evaluated appl. rules of 1070 out of 2319 deployed entities 27/03/2013 08:20:33:532 1492 e08 Agent ********* 27/03/2013 08:20:33:532 1492 e08 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates] 27/03/2013 08:20:33:532 1492 e08 Agent ************* 27/03/2013 08:20:33:548 1492 e08 Agent ************* 27/03/2013 08:20:33:548 1492 e7c AU >>## RESUMED ## AU: Search for updates [CallId = {B84E4DB3-DFC0-4722-81F7-CA2C0F2F0C7C}] 27/03/2013 08:20:33:548 1492 e08 Agent ** START ** Agent: Finding updates [CallerId = ] 27/03/2013 08:20:33:548 1492 e7c AU # 0 updates detected 27/03/2013 08:20:33:548 1492 e08 Agent ********* 27/03/2013 08:20:33:548 1492 e08 Agent * Online = Yes; Ignore download priority = No 27/03/2013 08:20:33:548 1492 e08 Agent * Criteria = "IsInstalled = 0 AND IsHidden = 0" 27/03/2013 08:20:33:548 1492 e08 Agent * ServiceID = {00000000-0000-0000-0000-000000000000} Third party service 27/03/2013 08:20:33:548 1492 e08 Agent * Search Scope = {Machine} 27/03/2013 08:20:33:548 1492 e7c AU ######### 27/03/2013 08:20:33:548 1492 e7c AU ## END ## AU: Search for updates [CallId = {B84E4DB3-DFC0-4722-81F7-CA2C0F2F0C7C}] 27/03/2013 08:20:33:548 1492 e7c AU ############# 27/03/2013 08:20:33:548 1492 e7c AU Featured notifications is disabled. 27/03/2013 08:20:33:548 1492 e7c AU AU setting next detection timeout to 2013-03-28 04:56:37 27/03/2013 08:20:33:548 1492 e7c AU Setting AU scheduled install time to 2013-03-28 03:00:00 27/03/2013 08:20:33:970 1492 e08 PT +++++++++++ PT: Synchronizing server updates +++++++++++ 27/03/2013 08:20:33:970 1492 e08 PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://hman46:8530/ClientWebService/client.asmx 27/03/2013 08:22:07:223 1492 e08 PT +++++++++++ PT: Synchronizing extended update info +++++++++++ 27/03/2013 08:22:07:223 1492 e08 PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://hman46:8530/ClientWebService/client.asmx 27/03/2013 08:22:08:333 1492 e08 Agent * Found 0 updates and 67 categories in search; evaluated appl. rules of 1070 out of 2319 deployed entities 27/03/2013 08:22:08:333 1492 e08 Agent ********* 27/03/2013 08:22:08:333 1492 e08 Agent ** END ** Agent: Finding updates [CallerId = ] 27/03/2013 08:22:08:333 1492 e08 Agent ************* 27/03/2013 08:22:08:349 1492 e08 Agent ************* 27/03/2013 08:22:08:349 1492 e08 Agent ** START ** Agent: Finding updates [CallerId = Windows System Health Agent Search] 27/03/2013 08:22:08:349 1492 e08 Agent ********* 27/03/2013 08:22:08:349 1492 e08 Agent * Include potentially superseded updates 27/03/2013 08:22:08:349 1492 e08 Agent * Online = No; Ignore download priority = No 27/03/2013 08:22:08:349 1492 e08 Agent * Criteria = "IsInstalled=0 and CategoryIDs contains '0fa1201d-4330-4fa8-8ae9-b877473b6441'" 27/03/2013 08:22:08:349 1492 e08 Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed 27/03/2013 08:22:08:349 1492 e08 Agent * Search Scope = {Machine} 27/03/2013 08:22:08:365 1660 b6c COMAPI >>-- RESUMED -- COMAPI: Search [ClientId = <NULL>] 27/03/2013 08:22:08:365 1660 b6c COMAPI - Updates found = 0 27/03/2013 08:22:08:365 1660 b6c COMAPI --------- 27/03/2013 08:22:08:365 1660 b6c COMAPI -- END -- COMAPI: Search [ClientId = <NULL>] 27/03/2013 08:22:08:365 1660 b6c COMAPI ------------- 27/03/2013 08:22:08:380 1660 988 COMAPI ------------- 27/03/2013 08:22:08:380 1660 988 COMAPI -- START -- COMAPI: Search [ClientId = <NULL>] 27/03/2013 08:22:08:380 1660 988 COMAPI --------- 27/03/2013 08:22:08:380 1660 988 COMAPI <<-- SUBMITTED -- COMAPI: Search [ClientId = <NULL>] 27/03/2013 08:23:47:606 1492 e08 Agent * Found 0 updates and 1 categories in search; evaluated appl. rules of 480 out of 1357 deployed entities 27/03/2013 08:23:47:606 1492 e08 Agent ********* 27/03/2013 08:23:47:606 1492 e08 Agent ** END ** Agent: Finding updates [CallerId = Windows System Health Agent Search] 27/03/2013 08:23:47:606 1492 e08 Agent ************* 27/03/2013 08:23:47:606 1492 e08 Agent ************* 27/03/2013 08:23:47:606 1492 e08 Agent ** START ** Agent: Finding updates [CallerId = ] 27/03/2013 08:23:47:606 1492 e08 Agent ********* 27/03/2013 08:23:47:606 1492 e08 Agent * Online = Yes; Ignore download priority = No 27/03/2013 08:23:47:606 1492 e08 Agent * Criteria = "IsInstalled = 0 AND IsHidden = 0" 27/03/2013 08:23:47:606 1492 e08 Agent * ServiceID = {00000000-0000-0000-0000-000000000000} Third party service 27/03/2013 08:23:47:606 1492 e08 Agent * Search Scope = {Machine} 27/03/2013 08:23:47:622 1492 ec0 COMAPI >>-- RESUMED -- COMAPI: Search [ClientId = Windows System Health Agent Search] 27/03/2013 08:23:47:622 1492 ec0 COMAPI - Updates found = 0 27/03/2013 08:23:47:622 1492 ec0 COMAPI --------- 27/03/2013 08:23:47:622 1492 ec0 COMAPI -- END -- COMAPI: Search [ClientId = Windows System Health Agent Search] 27/03/2013 08:23:47:622 1492 ec0 COMAPI ------------- 27/03/2013 08:23:48:044 1492 e08 PT +++++++++++ PT: Synchronizing server updates +++++++++++ 27/03/2013 08:23:48:044 1492 e08 PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://hman46:8530/ClientWebService/client.asmx 27/03/2013 08:23:49:028 1492 e08 Misc WARNING: Send failed with hr = 80072ee7. 27/03/2013 08:23:49:028 1492 e08 Misc WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <> 27/03/2013 08:23:49:028 1492 e08 PT + Last proxy send request failed with hr = 0x80072EE7, HTTP status code = 0 27/03/2013 08:23:49:028 1492 e08 PT + Caller provided credentials = No 27/03/2013 08:23:49:028 1492 e08 PT + Impersonate flags = 0 27/03/2013 08:23:49:028 1492 e08 PT + Possible authorization schemes used = 27/03/2013 08:23:49:028 1492 e08 PT WARNING: SyncUpdates failure, error = 0x8024402C, soap client error = 5, soap error code = 0, HTTP status code = 200 27/03/2013 08:23:49:028 1492 e08 PT WARNING: PTError: 0x8024402c 27/03/2013 08:23:49:028 1492 e08 PT WARNING: SyncUpdates_WithRecovery failed.: 0x8024402c 27/03/2013 08:23:49:028 1492 e08 PT WARNING: Sync of Updates: 0x8024402c 27/03/2013 08:23:49:028 1492 e08 PT WARNING: SyncServerUpdatesInternal failed: 0x8024402c 27/03/2013 08:23:49:028 1492 e08 Agent * WARNING: Failed to synchronize, error = 0x8024402C 27/03/2013 08:23:49:028 1492 e08 Agent x 27/03/2013 08:23:49:028 1492 e08 Agent ********* 27/03/2013 08:23:49:028 1492 e08 Agent ** END ** Agent: Finding updates [CallerId = ] 27/03/2013 08:23:49:028 1492 e08 Agent ************* 27/03/2013 08:23:49:028 1492 e08 Agent WARNING: WU client failed Searching for update with error 0x8024402c 27/03/2013 08:23:49:044 1660 9.00E+08 COMAPI >>-- RESUMED -- COMAPI: Search [ClientId = <NULL>] 27/03/2013 08:23:49:044 1660 9.00E+08 COMAPI - Updates found = 0 27/03/2013 08:23:49:044 1660 9.00E+08 COMAPI - WARNING: Exit code = 0x00000000, Result code = 0x8024402C 27/03/2013 08:23:49:044 1660 9.00E+08 COMAPI --------- 27/03/2013 08:23:49:044 1660 9.00E+08 COMAPI -- END -- COMAPI: Search [ClientId = <NULL>] 27/03/2013 08:23:49:044 1660 9.00E+08 COMAPI ------------- 27/03/2013 08:23:49:044 1660 988 COMAPI WARNING: Operation failed due to earlier error, hr=8024402C 27/03/2013 08:23:49:044 1660 988 COMAPI FATAL: Unable to complete asynchronous search. (hr=8024402C) 27/03/2013 08:23:49:200 1492 e08 Report REPORT EVENT: {F092AE8D-4114-44C2-B593-C5AED23E8B5F} 2013-03-27 08:19:03:248-0000 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 Windows System Health Agent Sea Success Software Synchronization Windows Update Client successfully detected 0 updates. 27/03/2013 08:23:49:200 1492 e08 Report REPORT EVENT: {3903F1A9-D5FC-42DA-A76C-EE465170DD2E} 2013-03-27 08:20:33:532-0000 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Software Synchronization Windows Update Client successfully detected 0 updates. 27/03/2013 08:23:49:200 1492 e08 Report REPORT EVENT: {C9386E86-99D9-49DC-9C7A-C6B8968AD09A} 2013-03-27 08:20:33:532-0000 1 156 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Pre-Deployment Check Reporting client status. 27/03/2013 08:23:49:200 1492 e08 Report REPORT EVENT: {12E9E744-836A-40E6-BEC6-C0FB82C21A50} 2013-03-27 08:22:08:333-0000 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 Success Software Synchronization Windows Update Client successfully detected 0 updates. 27/03/2013 08:23:49:200 1492 e08 Report REPORT EVENT: {74A569CE-1F73-4774-A905-291EAF1440AD} 2013-03-27 08:22:08:333-0000 1 156 101 {00000000-0000-0000-0000-000000000000} 0 0 Success Pre-Deployment Check Reporting client status. 27/03/2013 08:34:59:397 1492 e08 Report Uploading 5 events using cached cookie, reporting URL = http://hman46:8530/ReportingWebService/ReportingWebService.asmx 27/03/2013 08:34:59:413 1492 e08 Report Reporter successfully uploaded 5 events.
In particular, I think this is where the fault could lie...
Server URL = http://hman46:8530/SimpleAuthWebService/SimpleAuth.asmx WARNING: GetCookie failure, error = 0x8024400D, soap client error = 7, soap error code = 300, HTTP status code = 200 WARNING: SOAP Fault: 0x00012c WARNING: faultstring:Fault occurred WARNING: ErrorCode:ConfigChanged(2) WARNING: Message:(null) WARNING: Method:"http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService/GetCookie" WARNING: ID:cb987c87-e31f-4bf9-9868-632b03b93d32 WARNING: Cached cookie has expired or new PID is available
Do I perhaps need to add the http://hman46...... full address to the allowed services on the NAP policy? The server itself is allowed, but I wonder if the port it is affecting it. OR do I need to add the internal proxy address to the allowed NAP services?
Does it need to be an address in the proxy exceptions?
Thursday, March 28, 2013 4:30 PM
Answers
-
Hi Pagey,
Firstly, please refer to the following documents to verify the configuration:
Implementing DHCP NAP to Enforce WSUS Updateshttp://technet.microsoft.com/en-us/magazine/2009.05.goat.aspx#id0170016
NAP FAQ: Enforcing Security Updates (out-of-the-box)
Windows Security Health Validatorhttp://technet.microsoft.com/en-us/library/cc731260(WS.10).aspx
Also, it seems that the issue is more related to WSUS, and I did some research about the error, GetCookie failure, error = 0x8024400D. Generally, it is related to duplicated SusClientID values.
If so, you can try the steps in this article and see how it works:http://support.microsoft.com/kb/903262
However, if issue persists, I would suggest to address the issue in our WSUS forum for further assistance.
Hope this helps.
Jeremy Wu
TechNet Community Support
Friday, March 29, 2013 9:03 AM
