locked
KB4034374 and handling Dynamic Updates RRS feed

  • Question

  • I have a MS ticket open for an issue where Windows 10 1703 will not install updates from WSUS during or after an in-place upgrade from 1511 or 1607.

    Yesterday they told me that KB4034374 was available to solve this issue.  Reading the summary, it sounds promising.  But there is no description or details for this update.

    Compatibility update for upgrading to Windows 10 Version 1703: July 11, 2017

    I first tried to add it to Packages in MDT.  It failed:

    Scanning directories for the count of packages to import
    Performing the operation "import" on target "Packages".
    Skipping invalid CAB file c:\Packages\KB4034374x64\2017-07 Dynamic Update for Windows 10 Version 1703 for x64-based Systems (KB4034374)\windows10.0-kb4034374-x64_d3a152e9b04967413f9ece84aa87aea25de3a677.cab (probably not an update package)
    Import processing finished.


    I then tried to install it via an MDT Application with DISM. (Error: 2)


    Then I tried to install it in both 1511 and 1703, manually via DISM.

    C:\>"C:\Program Files (x86)\Windows Kits\10\Assessment and Deployment Kit\Deployment Tools\amd64\DISM\dism.exe" /online
    /Add-Package /PackagePath:C:\Temp\windows10.0-kb4034374-x64_d3a152e9b04967413f9ece84aa87aea25de3a677.cab
    
    Deployment Image Servicing and Management tool
    Version: 10.0.10240.16384
    
    Image Version: 10.0.15063.0
    
    An error occurred trying to open - C:\Temp\windows10.0-kb4034374-x64_d3a152e9b04967413f9ece84aa87aea25de3a677.cab Error:
    0x80070002
    
    Error: 2
    
    The system cannot find the file specified.
    
    The DISM log file can be found at C:\WINDOWS\Logs\DISM\dism.log
    
    C:\>c:\Windows\System32\dism.exe /online /Add-Package /PackagePath:C:\Temp\windows10.0-kb4034374-x64_d3a152e9b04967413f9ece84aa87aea25de3a67
    7.cab
    
    Deployment Image Servicing and Management tool
    Version: 10.0.15063.0
    
    Image Version: 10.0.15063.0
    
    An error occurred trying to open - C:\Temp\windows10.0-kb4034374-x64_d3a152e9b04967413f9ece84aa87aea25de3a677.cab Error:
    0x80070002
    
    Error: 2
    
    The system cannot find the file specified.
    
    The DISM log file can be found at C:\WINDOWS\Logs\DISM\dism.log


    DISM log


    CBS.log


    Then I tried using DISM to inject it into the 1703 Install.wim.  Same errors as above.

    It looks like these are ONLY meant to be fed to Windows during an upgrade, and only from WSUS or Windows Update.  It doesn't appear I can feed this to Windows in any other way that I know of.

    If that's the case, why is it up on the Windows Update Catalog to download?

    Am I missing some other way to inject this?  WSUtil maybe?

    Am I just supposed to wait until this shows up in CB ring / WSUS?


    There's no place like 127.0.0.1



    • Edited by Matt5150 Thursday, July 27, 2017 6:01 PM
    Thursday, July 27, 2017 5:45 PM

Answers

All replies

  • Hi ,

    Regarding windows 10 can not install updates from WSUS , have you tried to download a cumulative update from windows catalog and installed it manually ?

     

    Best Regards,

    Elton


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, July 28, 2017 9:32 AM
  • Windows 10 Upgrade cannot install updates from WSUS... Yup, each one since May.  No change.

    Fresh installs are fine.  Fresh 1511 or 1607 install from VLS ISO, followed by upgrade from 1703 VLS ISO... Windows Update no longer functions when Windows Update online is inaccessible. 


    There's no place like 127.0.0.1

    Friday, July 28, 2017 2:58 PM
  • Hi Sir,

    I tested an upgrade in my lab (1511 to 1703) .

    After the upgrade , the client can not install updates from WSUS .

    Now , I installed updates from "Microsoft Update" for client .

    I'm trying to set it back to "WSUS update" , I'll update this thread later .

     

    Best Regards,

    Elton


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, July 31, 2017 8:21 AM
  • Hi ,

    Sorry for the delay .

    After the client installed updates from windows update , then , I did an simple test (remove update from client) .

    Then , checking updates on client side , it works .

     

    Best Regards,

    Elton


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, August 3, 2017 9:12 AM
  • Hi Sir,

    I tested an upgrade in my lab (1511 to 1703) .

    After the upgrade , the client can not install updates from WSUS .

    Now , I installed updates from "Microsoft Update" for client .

    I'm trying to set it back to "WSUS update" , I'll update this thread later .

     

    Best Regards,

    Elton


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    That's great, but these machines do not have access to "*.microsoft.com".

    When they refuse to connect to WSUS, they simply timeout trying to update from Windows / Microsoft update.

    2017/08/01 09:43:04.5387284 360   1712  IdleTimer       [0]0168.06B0::08/01/2017-09:43:04.538 [agent]Non-AoAc machine.  Aoac operations will be ignored.
    2017/08/01 09:43:04.5396337 360   1712  Agent           [0]0168.06B0::08/01/2017-09:43:04.539 [agent]WU client version 10.0.15063.0
    2017/08/01 09:43:04.5398926 360   1712  Agent           [0]0168.06B0::08/01/2017-09:43:04.539 [susenginelib]SleepStudyTracker: Machine is non-AOAC. Sleep study tracker disabled.
    2017/08/01 09:43:04.5400596 360   1712  Agent           [0]0168.06B0::08/01/2017-09:43:04.540 [agent]Base directory: C:\WINDOWS\SoftwareDistribution
    2017/08/01 09:43:04.5417817 360   1712  Agent           [0]0168.06B0::08/01/2017-09:43:04.541 [store]Datastore directory: C:\WINDOWS\SoftwareDistribution\DataStore\DataStore.edb
    2017/08/01 09:43:04.5439762 360   1712  DataStore       [0]0168.06B0::08/01/2017-09:43:04.543 [store]ESE engine is already in multi-instance mode and no parameter conflicts were detected.
    2017/08/01 09:43:05.0858110 360   1712  DataStore       [0]0168.06B0::08/01/2017-09:43:05.085 [store]Service 3DA21691-E39D-4DA6-8A4B-B43877BCB1B7 added
    2017/08/01 09:43:05.1150194 360   1712  DataStore       [0]0168.06B0::08/01/2017-09:43:05.115 [store]Service 9482F4B4-E343-43B6-B170-9A65BC822C77 added
    2017/08/01 09:43:05.1178481 360   1712  DataStore       [0]0168.06B0::08/01/2017-09:43:05.117 [store]Data store successfully created
    2017/08/01 09:43:05.1200755 360   1712  Shared          [0]0168.06B0::08/01/2017-09:43:05.120 [susenginelib]UpdateNetworkState Ipv6, cNetworkInterfaces = 0.
    2017/08/01 09:43:05.1201023 360   1712  Shared          [0]0168.06B0::08/01/2017-09:43:05.120 [susenginelib]UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
    2017/08/01 09:43:05.1216090 360   1712  Shared          [0]0168.06B0::08/01/2017-09:43:05.121 [agent]Network state: Connected
    2017/08/01 09:43:05.1796899 360   1712  Misc            [0]0168.06B0::08/01/2017-09:43:05.179 [regutil]LoadHistoryEventFromRegistry completed, hr = 8024000C
    2017/08/01 09:43:05.1799654 360   1712  Shared          [0]0168.06B0::08/01/2017-09:43:05.179 [susenginelib]UpdateNetworkState Ipv6, cNetworkInterfaces = 0.
    2017/08/01 09:43:05.1799767 360   1712  Shared          [0]0168.06B0::08/01/2017-09:43:05.179 [susenginelib]UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
    2017/08/01 09:43:05.1799851 360   1712  Shared          [0]0168.06B0::08/01/2017-09:43:05.179 [agent]Power status changed
    2017/08/01 09:43:05.2467976 360   1712  Agent           [0]0168.06B0::08/01/2017-09:43:05.246 [agent]Initializing global settings cache
    2017/08/01 09:43:05.2467990 360   1712  Agent           [0]0168.06B0::08/01/2017-09:43:05.246 [agent]WSUS server: http://WSUS.DOMAIN.com:8530
    2017/08/01 09:43:05.2468001 360   1712  Agent           [0]0168.06B0::08/01/2017-09:43:05.246 [agent]WSUS status server: http://WSUS.DOMAIN.com:8530
    2017/08/01 09:43:05.2468004 360   1712  Agent           [0]0168.06B0::08/01/2017-09:43:05.246 [agent]Alternate Download Server: NULL
    2017/08/01 09:43:05.2468011 360   1712  Agent           [0]0168.06B0::08/01/2017-09:43:05.246 [agent]Fill Empty Content Urls: No
    2017/08/01 09:43:05.2468015 360   1712  Agent           [0]0168.06B0::08/01/2017-09:43:05.246 [agent]Target group: Group Policy WSUS Group
    2017/08/01 09:43:05.2468018 360   1712  Agent           [0]0168.06B0::08/01/2017-09:43:05.246 [agent]Windows Update access disabled: No
    2017/08/01 09:43:05.2665142 360   1712  Reporter        [0]0168.06B0::08/01/2017-09:43:05.266 [reporting]CWERReporter::Init succeeded
    2017/08/01 09:43:05.2665248 360   1712  Agent           [0]0168.06B0::08/01/2017-09:43:05.266 [agent]Initializing Windows Update Agent
    2017/08/01 09:43:05.2666805 360   1712  DownloadManager [0]0168.06B0::08/01/2017-09:43:05.266 [agent]Download manager restoring 0 downloads
    2017/08/01 09:43:05.2667967 360   1712  Agent           [0]0168.06B0::08/01/2017-09:43:05.266 [agent]CPersistentTimeoutScheduler | GetTimer, returned hr = 0x80248007
    2017/08/01 09:43:05.2668069 360   1712  Agent           [0]0168.06B0::08/01/2017-09:43:05.266 [susenginelib]CPersistentTimeoutEvent | Resubscribe, no existing/cached timer for Id=29A863E7-8609-4D1E-B7CD-5668F857F1DB.
    2017/08/01 09:43:05.2671099 360   1712  Agent           [0]0168.06B0::08/01/2017-09:43:05.267 [agent]Adding timer:
    2017/08/01 09:43:05.2671194 360   1712  Agent           [0]0168.06B0::08/01/2017-09:43:05.267 [agent]    Timer: 29A863E7-8609-4D1E-B7CD-5668F857F1DB, Expires 2017-08-02 14:43:05, not idle-only, not network-only
    2017/08/01 09:43:05.2747373 360   1972  DownloadManager [0]0168.07B4::08/01/2017-09:43:05.274 [agent]PurgeExpiredFiles::Found 0 expired files to delete.
    2017/08/01 09:43:05.2747648 360   1972  DownloadManager [0]0168.07B4::08/01/2017-09:43:05.274 [agent]PurgeExpiredUpdates::Found 0 non expired updates.
    2017/08/01 09:43:05.2747758 360   1972  DownloadManager [0]0168.07B4::08/01/2017-09:43:05.274 [agent]PurgeExpiredUpdates::Found 0 expired updates.
    2017/08/01 09:43:05.2758859 360   1972  DownloadManager [0]0168.07B4::08/01/2017-09:43:05.275 [agent]Received power state change notification: Old: <unknown>; New: AC.
    2017/08/01 09:43:05.2758870 360   1972  DownloadManager [0]0168.07B4::08/01/2017-09:43:05.275 [agent]Power state changed from <unknown> to AC.
    2017/08/01 09:47:57.9012089 360   1712  Misc            [0]0168.06B0::08/01/2017-09:47:57.901 [agent]CSusClientGlobal::DoServicePreShutdown
    2017/08/01 09:47:57.9024394 360   1712  IdleTimer       [0]0168.06B0::08/01/2017-09:47:57.902 [agent]Idle timer disabled in preparation for service shutdown
    2017/08/01 09:47:57.9031919 360   1712  Misc            [0]0168.06B0::08/01/2017-09:47:57.903 [agent]WUTaskManager uninit
    2017/08/01 09:47:57.9032385 360   1712  Agent           [0]0168.06B0::08/01/2017-09:47:57.903 [agent]Earliest future timer found:
    2017/08/01 09:47:57.9032819 360   1712  Agent           [0]0168.06B0::08/01/2017-09:47:57.903 [agent]    Timer: 29A863E7-8609-4D1E-B7CD-5668F857F1DB, Expires 2017-08-02 14:43:05, not idle-only, not network-only
    2017/08/01 09:47:57.9152221 360   1712  Misc            [0]0168.06B0::08/01/2017-09:47:57.915 [susenginelib]CreateSessionStateChangeTrigger, TYPE:2, Enable:No
    2017/08/01 09:47:57.9152310 360   1712  Misc            [0]0168.06B0::08/01/2017-09:47:57.915 [susenginelib]CreateSessionStateChangeTrigger, TYPE:4, Enable:No
    2017/08/01 09:47:57.9529230 360   1712  Misc            [0]0168.06B0::08/01/2017-09:47:57.952 [agent]Agent uninit
    2017/08/01 09:47:57.9581574 360   1712  Handler         [0]0168.06B0::08/01/2017-09:47:57.958 [lib]CUHCbsHandler::CancelDownloadRequest called
    2017/08/01 09:47:57.9751081 360   1712  Misc            [0]0168.06B0::08/01/2017-09:47:57.975 [agent]Reporter uninit
    2017/08/01 09:47:57.9753938 360   1712  Misc            [0]0168.06B0::08/01/2017-09:47:57.975 [agent]network cost manager uninit
    2017/08/01 09:47:57.9755033 360   1712  Misc            [0]0168.06B0::08/01/2017-09:47:57.975 [agent]Eventer uninit
    2017/08/01 09:47:57.9757127 360   1712  Misc            [0]0168.06B0::08/01/2017-09:47:57.975 [agent]ServiceManager uninit
    2017/08/01 09:47:57.9757388 360   1712  Misc            [0]0168.06B0::08/01/2017-09:47:57.975 [agent]PersistentTimeoutScheduler uninit
    2017/08/01 09:47:57.9757416 360   1712  Misc            [0]0168.06B0::08/01/2017-09:47:57.975 [agent]datastore uninit
    2017/08/01 09:47:58.0611768 360   1712  Misc            [0]0168.06B0::08/01/2017-09:47:58.061 [agent]setting cache uninit
    2017/08/01 09:47:58.0611785 360   1712  Misc            [0]0168.06B0::08/01/2017-09:47:58.061 [agent]security checker uninit
    2017/08/01 09:47:58.0611817 360   1712  Misc            [0]0168.06B0::08/01/2017-09:47:58.061 [agent]Test Hook uninit
    2017/08/01 09:47:58.0611821 360   1712  Misc            [0]0168.06B0::08/01/2017-09:47:58.061 [agent]IdleTimer uninit
    2017/08/01 09:47:58.0617961 360   1712  Shared          [0]0168.06B0::08/01/2017-09:47:58.061 [agent]* END * Service exit Exit code = 0x240001
    2017/08/01 09:48:00.6774016 360   3928  IdleTimer       [0]0168.0F58::08/01/2017-09:48:00.677 [agent]Non-AoAc machine.  Aoac operations will be ignored.
    2017/08/01 09:48:00.6775951 360   3928  Agent           [0]0168.0F58::08/01/2017-09:48:00.677 [agent]WU client version 10.0.15063.0
    2017/08/01 09:48:00.6778380 360   3928  Agent           [0]0168.0F58::08/01/2017-09:48:00.677 [susenginelib]SleepStudyTracker: Machine is non-AOAC. Sleep study tracker disabled.
    2017/08/01 09:48:00.6779912 360   3928  Agent           [0]0168.0F58::08/01/2017-09:48:00.677 [agent]Base directory: C:\WINDOWS\SoftwareDistribution
    2017/08/01 09:48:00.6788295 360   3928  Agent           [0]0168.0F58::08/01/2017-09:48:00.678 [store]Datastore directory: C:\WINDOWS\SoftwareDistribution\DataStore\DataStore.edb
    2017/08/01 09:48:00.6790724 360   3928  DataStore       [0]0168.0F58::08/01/2017-09:48:00.679 [store]ESE engine is already in multi-instance mode and no parameter conflicts were detected.
    2017/08/01 09:48:00.7064072 360   3928  Shared          [0]0168.0F58::08/01/2017-09:48:00.706 [susenginelib]UpdateNetworkState Ipv6, cNetworkInterfaces = 0.
    2017/08/01 09:48:00.7064373 360   3928  Shared          [0]0168.0F58::08/01/2017-09:48:00.706 [susenginelib]UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
    2017/08/01 09:48:00.7072346 360   3928  Shared          [0]0168.0F58::08/01/2017-09:48:00.707 [agent]Network state: Connected
    2017/08/01 09:48:00.7162503 360   3928  Misc            [0]0168.0F58::08/01/2017-09:48:00.716 [regutil]LoadHistoryEventFromRegistry completed, hr = 8024000C
    2017/08/01 09:48:00.7164396 360   3928  Shared          [0]0168.0F58::08/01/2017-09:48:00.716 [susenginelib]UpdateNetworkState Ipv6, cNetworkInterfaces = 0.
    2017/08/01 09:48:00.7164456 360   3928  Shared          [0]0168.0F58::08/01/2017-09:48:00.716 [susenginelib]UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
    2017/08/01 09:48:00.7164520 360   3928  Shared          [0]0168.0F58::08/01/2017-09:48:00.716 [agent]Power status changed
    2017/08/01 09:48:00.7189025 360   3928  Agent           [0]0168.0F58::08/01/2017-09:48:00.718 [agent]Initializing global settings cache
    2017/08/01 09:48:00.7189036 360   3928  Agent           [0]0168.0F58::08/01/2017-09:48:00.718 [agent]WSUS server: http://WSUS.DOMAIN.com:8530
    2017/08/01 09:48:00.7189039 360   3928  Agent           [0]0168.0F58::08/01/2017-09:48:00.718 [agent]WSUS status server: http://WSUS.DOMAIN.com:8530
    2017/08/01 09:48:00.7189043 360   3928  Agent           [0]0168.0F58::08/01/2017-09:48:00.718 [agent]Alternate Download Server: NULL
    2017/08/01 09:48:00.7189043 360   3928  Agent           [0]0168.0F58::08/01/2017-09:48:00.718 [agent]Fill Empty Content Urls: No
    2017/08/01 09:48:00.7189046 360   3928  Agent           [0]0168.0F58::08/01/2017-09:48:00.718 [agent]Target group: Group Policy WSUS Group
    2017/08/01 09:48:00.7189050 360   3928  Agent           [0]0168.0F58::08/01/2017-09:48:00.718 [agent]Windows Update access disabled: No
    2017/08/01 09:48:00.7197941 360   3928  Agent           [0]0168.0F58::08/01/2017-09:48:00.719 [agent]    Timer: 29A863E7-8609-4D1E-B7CD-5668F857F1DB, Expires 2017-08-02 14:43:05, not idle-only, not network-only
    2017/08/01 09:48:00.7252305 360   3928  Reporter        [0]0168.0F58::08/01/2017-09:48:00.725 [reporting]CWERReporter::Init succeeded
    2017/08/01 09:48:00.7252379 360   3928  Agent           [0]0168.0F58::08/01/2017-09:48:00.725 [agent]Initializing Windows Update Agent
    2017/08/01 09:48:00.7252940 360   3928  DownloadManager [0]0168.0F58::08/01/2017-09:48:00.725 [agent]Download manager restoring 0 downloads
    2017/08/01 09:48:00.7253378 360   3928  Agent           [0]0168.0F58::08/01/2017-09:48:00.725 [agent]CPersistentTimeoutScheduler | GetTimer, returned hr = 0x00000000
    2017/08/01 09:48:00.7282661 360   400   DownloadManager [0]0168.0190::08/01/2017-09:48:00.728 [agent]PurgeExpiredFiles::Found 0 expired files to delete.
    2017/08/01 09:48:00.7282795 360   400   DownloadManager [0]0168.0190::08/01/2017-09:48:00.728 [agent]PurgeExpiredUpdates::Found 0 non expired updates.
    2017/08/01 09:48:00.7282827 360   400   DownloadManager [0]0168.0190::08/01/2017-09:48:00.728 [agent]PurgeExpiredUpdates::Found 0 expired updates.
    2017/08/01 09:48:00.7292110 360   400   DownloadManager [0]0168.0190::08/01/2017-09:48:00.729 [agent]Received power state change notification: Old: <unknown>; New: AC.
    2017/08/01 09:48:00.7292117 360   400   DownloadManager [0]0168.0190::08/01/2017-09:48:00.729 [agent]Power state changed from <unknown> to AC.
    2017/08/01 09:48:02.7613632 4720  6064  ComApi          [0]1270.17B0::08/01/2017-09:48:02.761 [comapi]* START *   Federated Search ClientId = ZTIWindowsUpdate 6.3.8443.1000 (cV: a1pQbMAeIkywTdZ6.1.0)
    2017/08/01 09:48:02.7627541 360   1928  IdleTimer       [0]0168.0788::08/01/2017-09:48:02.762 [agent]WU operation (SR.ZTIWindowsUpdate 6.3.8443.1000 ID 1) started; operation # 5; does<NULL> use network; is not at background priority<NULL>
    2017/08/01 09:48:02.7647572 360   4356  Agent           [0]0168.1104::08/01/2017-09:48:02.764 [agent]Processing auto/pending service registrations and recovery.
    2017/08/01 09:48:02.7897527 360   4356  SLS             [0]0168.1104::08/01/2017-09:48:02.789 [sls]SLS DatastoreLookup: 0x80248007
    2017/08/01 09:48:02.7897573 360   4356  SLS             [0]0168.1104::08/01/2017-09:48:02.789 [sls]Retrieving SLS response from server...
    2017/08/01 09:48:02.7933816 360   4356  SLS             [0]0168.1104::08/01/2017-09:48:02.793 [sls]Making request with URL HTTPS://sls.update.microsoft.com/SLS/{9482F4B4-E343-43B6-B170-9A65BC822C77}/x64/10.0.15063.0/0?CH=278&L=en-US&P=&PT=0x30&WUA=10.0.15063.0&MK=VMware%2C+Inc.&MD=VMware+Virtual+Platform
    2017/08/01 09:48:23.8190119 360   4356  Misc            [0]0168.1104::08/01/2017-09:48:23.819 [susenginelib]Send request failed, hr:0x80072ee2
    2017/08/01 09:48:23.8190144 360   4356  Misc            [0]0168.1104::08/01/2017-09:48:23.819 [downloadfile]WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2; retrying with default proxy.
    2017/08/01 09:48:44.8342473 360   4356  Misc            [0]0168.1104::08/01/2017-09:48:44.834 [susenginelib]Send request failed, hr:0x80072ee2
    2017/08/01 09:48:44.8342512 360   4356  Misc            [0]0168.1104::08/01/2017-09:48:44.834 [downloadfile]Library download error. Error 0x80072ee2. Will retry. Retry Counter:0
    2017/08/01 09:49:05.8819307 360   4356  Misc            [0]0168.1104::08/01/2017-09:49:05.881 [susenginelib]Send request failed, hr:0x80072ee2
    2017/08/01 09:49:05.8819336 360   4356  Misc            [0]0168.1104::08/01/2017-09:49:05.881 [downloadfile]WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2; retrying with default proxy.
    2017/08/01 09:49:26.9124399 360   4356  Misc            [0]0168.1104::08/01/2017-09:49:26.912 [susenginelib]Send request failed, hr:0x80072ee2
    2017/08/01 09:49:26.9124474 360   4356  Misc            [0]0168.1104::08/01/2017-09:49:26.912 [downloadfile]Library download error. Error 0x80072ee2. Will retry. Retry Counter:1
    2017/08/01 09:49:47.9126094 360   4356  Misc            [0]0168.1104::08/01/2017-09:49:47.912 [susenginelib]Send request failed, hr:0x80072ee2
    2017/08/01 09:49:47.9126123 360   4356  Misc            [0]0168.1104::08/01/2017-09:49:47.912 [downloadfile]WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2; retrying with default proxy.
    2017/08/01 09:50:08.9594437 360   4356  Misc            [0]0168.1104::08/01/2017-09:50:08.959 [susenginelib]Send request failed, hr:0x80072ee2
    2017/08/01 09:50:08.9594479 360   4356  Misc            [0]0168.1104::08/01/2017-09:50:08.959 [downloadfile]Library download error. Error 0x80072ee2. Will retry. Retry Counter:2
    2017/08/01 09:50:29.9751320 360   4356  Misc            [0]0168.1104::08/01/2017-09:50:29.975 [susenginelib]Send request failed, hr:0x80072ee2
    2017/08/01 09:50:29.9751349 360   4356  Misc            [0]0168.1104::08/01/2017-09:50:29.975 [downloadfile]WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2; retrying with default proxy.
    2017/08/01 09:50:51.0064234 360   4356  Misc            [0]0168.1104::08/01/2017-09:50:51.006 [susenginelib]Send request failed, hr:0x80072ee2
    2017/08/01 09:50:51.0064290 360   4356  SLS             [0]0168.1104::08/01/2017-09:50:51.006 [sls]GetDownloadedOnWeakSSLCert Failed: hr = 0x80072EE2
    2017/08/01 09:50:51.0064481 360   4356  SLS             [0]0168.1104::08/01/2017-09:50:51.006 [sls]GetResponse failed with hresult 0x80072ee2...
    2017/08/01 09:50:51.0064530 360   4356  Misc            [0]0168.1104::08/01/2017-09:50:51.006 [endpointproviders]EP: error: 0x80072EE2 : - failed to get SLS data
    2017/08/01 09:50:51.0064537 360   4356  Misc            [0]0168.1104::08/01/2017-09:50:51.006 [endpointproviders]EP: error: 0x80072EE2: GetSecondaryServicesEnabledState failed
    2017/08/01 09:50:51.0064665 360   4356  Agent           [0]0168.1104::08/01/2017-09:50:51.006 [agent]AutoRecovery: DetectAndToggleServiceState failed 0x80072ee2
    2017/08/01 09:50:51.0064732 360   4356  Agent           [0]0168.1104::08/01/2017-09:50:51.006 [agent]Failed to resolve federated serviceId 00000000-0000-0000-0000-000000000000, hr=80072ee2
    2017/08/01 09:50:51.0091006 360   4356  Agent           [0]0168.1104::08/01/2017-09:50:51.009 [agent]Failed to execute service registration call {BCA7EFEC-B849-40CC-BB60-A705E6E7947C}, hr=80072ee2 (cV: a1pQbMAeIkywTdZ6.1.0.1)
    2017/08/01 09:50:51.0917469 360   4356  IdleTimer       [0]0168.1104::08/01/2017-09:50:51.091 [agent]WU operation (SR.ZTIWindowsUpdate 6.3.8443.1000 ID 1, operation # 5) stopped; does<NULL> use network; is not at background priority<NULL>
    2017/08/01 09:50:51.1001314 4720  5848  ComApi          [0]1270.16D8::08/01/2017-09:50:51.100 [comapi]* END *   Federated Search failed to process service registration, hr=0x80072EE2 (cV = a1pQbMAeIkywTdZ6.1.0)
    2017/08/01 09:50:51.1094742 4720  6064  ComApi          [0]1270.17B0::08/01/2017-09:50:51.109 [comapi]ISusInternal:: DisconnectCall failed, hr=8024000C
    2017/08/01 09:50:54.8121374 360   3928  Misc            [0]0168.0F58::08/01/2017-09:50:54.812 [agent]CSusClientGlobal::DoServicePreShutdown
    2017/08/01 09:50:54.8121402 360   3928  IdleTimer       [0]0168.0F58::08/01/2017-09:50:54.812 [agent]Idle timer disabled in preparation for service shutdown
    2017/08/01 09:50:54.8121504 360   3928  Misc            [0]0168.0F58::08/01/2017-09:50:54.812 [agent]WUTaskManager uninit


    There's no place like 127.0.0.1

    Thursday, August 3, 2017 10:31 PM
  • Hi Sir,

    [sls]Making request with URL HTTPS://sls.update.microsoft.com/SLS/
    ...
    
    [sls]GetDownloadedOnWeakSSLCert Failed: hr = 0x80072EE2
     

    >>but these machines do not have access to "*.microsoft.com".

    According to that log , I'd suggest you try to enable GP "DoNotConnectToWindowsUpdateInternetLocations" under "windows update" .

    Also GP entry "turn off access to all windows update features" .

    Try again .

    Best Regards,

    Elton


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, August 4, 2017 2:05 AM
  • That was Microsoft's first solution when we were trying to get WSUS updates to work with fresh installs of 1703.  The problem with that was that it disabled access to Windows Store, the Symbol server, and other MS services.  But it didn't do anything for upgrades from 1511 or 1607 to 1703.

    Eventually I discovered blogs on WUfB, and got all the "Defer Updates" GPO settings and registry entries removed from our environment, and WSUS resumed normal functionality in 1703, for fresh installs.

    But as of yet nothing has made any difference in 1703 upgrades.


    There's no place like 127.0.0.1

    Friday, August 4, 2017 4:37 AM
    • Marked as answer by Matt5150 Tuesday, August 8, 2017 4:07 PM
    Tuesday, August 8, 2017 4:07 PM