locked
WSUS Hosted on 2012R2 and Client Reporting Woes RRS feed

  • Question

  • Greetings All,

    I've been working on this for the last two weeks and am not getting anywhere.  I'm hoping someone here might have some insight.  I have a WSUS server running on 2012 R2, which has been working flawlessly until July.  I suddenly find myself unable to many of my clients to update to the WSUS server.  Many will update, and the ones who will work and won't remain consistent (except for one broken one I've managed to fix, but no idea how).  There were no implemented configuration changes made to the WSUS server, or the clients, up to the point when I started having the issues.  

    The clients are combination of physical machines, virtual machines, DCs, member servers, and desktop machines, but all either 2012R2 or 8.1.  One of the servers that will not report to the WSUS server is the WSUS server itself. :)  These machines will still receive updates but they aren't reporting back.  The issues appear to have started after the July Windows Update Client (KB3065988) went live.

    I have tried to post my troubleshooting steps, but the forum keeps killing my message saying it is spam, so I'm trying a short-and-sweet post first. :)

    Thanks!
    Jeff

    Monday, August 3, 2015 8:02 PM

Answers

  • Heya All,

    I can now confirm that removing KB3065988 completely and leaving it off fixes the issue.  All of my problem servers and desktops that I have done this on are, once again, reporting as expected.  The control group I left it on still had the woes.  I then removed it from the control group and they too are now reporting correctly also.

    I'm interested to hear what MS has to say about your SR DarkHalf. :)  Until then, I'm leaving it uninstalled.

    This week I'll be installing our first Windows 10 box.  We'll see if there are any issues, but I don't expect there will be as this update is a client-side and not a server side (WSUS side) update.

    -Jeff

    • Marked as answer by Fregi Ventum Sunday, August 9, 2015 8:34 PM
    Sunday, August 9, 2015 8:34 PM

All replies

  • To correct the issues on each client I have tried the following:

     - Reset WSUS authorization.

    net stop wuauserv 
    reg Delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v PingID /f 
    reg Delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v AccountSid /f 
    reg Delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v SusClientId /f  
    reg Delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v SusClientIDValidation /f 
    net start wuauserv 
    wuauclt.exe /resetauthorization /detectnow

     - Running the WindowsUpdateDiagnostics.diagcab
     - Uninstalling and reinstalling KB3065988.
     - Trying complete WSUS reset using this script:

    :: Created by: Shawn Brink
    :: http://www.sevenforums.com
    :: Tutorial: http://www.sevenforums.com/tutorials/91738-windows-update-reset.html
    
    
    net stop bits
    net stop wuauserv
    net stop appidsvc
    net stop cryptsvc
    Ipconfig /flushdns
    Del "%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Downloader\qmgr*.dat"
    rmdir %windir%\softwaredistribution /s /q
    sc.exe sdset bits D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)
    sc.exe sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)
    cd /d %windir%\system32
    Ren %systemroot%\system32\catroot2 catroot2.bak
    regsvr32.exe /s atl.dll
    regsvr32.exe /s urlmon.dll
    regsvr32.exe /s mshtml.dll
    regsvr32.exe /s shdocvw.dll
    regsvr32.exe /s browseui.dll
    regsvr32.exe /s jscript.dll
    regsvr32.exe /s vbscript.dll
    regsvr32.exe /s scrrun.dll
    regsvr32.exe /s msxml.dll
    regsvr32.exe /s msxml3.dll
    regsvr32.exe /s msxml6.dll
    regsvr32.exe /s actxprxy.dll
    regsvr32.exe /s softpub.dll
    regsvr32.exe /s wintrust.dll
    regsvr32.exe /s dssenh.dll
    regsvr32.exe /s rsaenh.dll
    regsvr32.exe /s gpkcsp.dll
    regsvr32.exe /s sccbase.dll
    regsvr32.exe /s slbcsp.dll
    regsvr32.exe /s cryptdlg.dll
    regsvr32.exe /s oleaut32.dll
    regsvr32.exe /s ole32.dll
    regsvr32.exe /s shell32.dll
    regsvr32.exe /s initpki.dll
    regsvr32.exe /s wuapi.dll
    regsvr32.exe /s wuaueng.dll
    regsvr32.exe /s wuaueng1.dll
    regsvr32.exe /s wucltui.dll
    regsvr32.exe /s wups.dll
    regsvr32.exe /s wups2.dll
    regsvr32.exe /s wuweb.dll
    regsvr32.exe /s qmgr.dll
    regsvr32.exe /s qmgrprxy.dll
    regsvr32.exe /s wucltux.dll
    regsvr32.exe /s muweb.dll
    regsvr32.exe /s wuwebv.dll
    regsvr32 /s wudriver.dll
    netsh winsock reset
    net start bits
    net start wuauserv
    net start appidsvc
    net start cryptsvc
    bitsadmin.exe /reset /allusers
     - Performing steps with the SoftwareDistribution folder (also covered in the complete WSUS reset)
    net stop wuauserv
    net stop bits
    rd /s /q %windir%\softwaredistribution
    net start bits
    net start wuauserv
    wuauclt.exe /detectnow

    - Completely removing the client from the WSUS computers list, then peforming a complete WSUS reset (above) and then a WSUS authorization (above).

    When I run the WindowsUpdateDiagnostics.diagcab I am told that it found problems and fixed them each time. These problems have varied on each run...unfortunately I've not kept a log of what they are.

    When I run the SolarWinds Diagnostic Tool for the WSUS Agent I receive the following two errors:


     - Content:  Error: Forbidden.  Incorrect proxy client configuration - use settings tab to test proxy configuration settings; may also be caused by misconfigured SSL implementation or access rights on the WSUS server

     - iuident.cab:  Error:  NotFound.  Omitting required port suffix on URL to access WSUS installed to port 8530 or resource is unreachable

    I am unable to download the iuident.cab file when I go to http://wsushost:8530/iuident.cab.  If I simply open url:port to my WSUS server I get a blank page but no error.  If I view the source there are no lines of code.

    gpresult /v shows that WSUS settings are successfully applying via GPO.  Going into the registry shows the correct URL, including the port of 8530.

    Monday, August 3, 2015 8:16 PM
  • Logs from one of the clients as follows (server and client host names modified from their original names):

    2015-08-03	13:53:54:878	 508	c08	Misc	===========  Logging initialized (build: 7.9.9600.17930, tz: -0500)  ===========
    2015-08-03	13:53:54:878	 508	c08	Misc	  = Process: C:\Windows\system32\svchost.exe
    2015-08-03	13:53:54:878	 508	c08	Misc	  = Module: c:\windows\system32\wuaueng.dll
    2015-08-03	13:53:54:878	 508	c08	Service	*************
    2015-08-03	13:53:54:878	 508	c08	Service	** START **  Service: Service startup
    2015-08-03	13:53:54:878	 508	c08	Service	*********
    2015-08-03	13:53:54:878	 508	c08	IdleTmr	Non-AoAc machine.  Aoac operations will be ignored.
    2015-08-03	13:53:54:878	 508	c08	Agent	  * WU client version 7.9.9600.17930
    2015-08-03	13:53:54:878	 508	c08	Agent	WARNING: SleepStudyTracker: Machine is non-AOAC. Sleep study tracker disabled.
    2015-08-03	13:53:54:878	 508	c08	Agent	  * Base directory: C:\Windows\SoftwareDistribution
    2015-08-03	13:53:54:878	 508	c08	Agent	  * Access type: No proxy
    2015-08-03	13:53:54:878	 508	c08	Service	UpdateNetworkState Ipv6, cNetworkInterfaces = 1.
    2015-08-03	13:53:54:878	 508	c08	Service	UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
    2015-08-03	13:53:54:878	 508	c08	Agent	  * Network state: Connected
    2015-08-03	13:53:54:894	 508	c08	Service	UpdateNetworkState Ipv6, cNetworkInterfaces = 1.
    2015-08-03	13:53:54:894	 508	c08	Service	UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
    2015-08-03	13:53:54:925	 508	c08	Agent	***********  Agent: Initializing global settings cache  ***********
    2015-08-03	13:53:54:925	 508	c08	Agent	  * Endpoint Provider: 00000000-0000-0000-0000-000000000000
    2015-08-03	13:53:54:925	 508	1ac	Misc	WARNING: Network Cost is assumed to be not supported as something failed with trying to get handles to wcmapi.dll
    2015-08-03	13:53:54:925	 508	c08	Agent	  * WSUS server: http://wsushost:8530
    2015-08-03	13:53:54:925	 508	c08	Agent	  * WSUS status server: http://wsushost:8530
    2015-08-03	13:53:54:925	 508	c08	Agent	  * Target group: Servers;Virtual
    2015-08-03	13:53:54:925	 508	c08	Agent	  * Windows Update access disabled: No
    2015-08-03	13:53:54:925	 508	1ac	WuTask	WuTaskManager delay initialize completed successfully..
    2015-08-03	13:53:54:925	 508	1ac	AU	    Timer: 31DA7559-FE27-4810-8FF6-987195B1FD98, Expires 2015-08-04 12:11:53, not idle-only, not network-only
    2015-08-03	13:53:54:925	 508	1ac	AU	    Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2015-08-04 04:39:55, not idle-only, not network-only
    2015-08-03	13:53:54:925	 508	1ac	AU	    Timer: 29A863E7-8609-4D1E-B7CD-5668F857F1DB, Expires 2015-08-04 04:39:55, not idle-only, not network-only
    2015-08-03	13:53:54:941	 508	1ac	Report	CWERReporter::Init succeeded
    2015-08-03	13:53:54:941	 508	1ac	Agent	***********  Agent: Initializing Windows Update Agent  ***********
    2015-08-03	13:53:54:941	 508	1ac	DnldMgr	Download manager restoring 0 downloads
    2015-08-03	13:53:54:941	 508	1ac	AU	###########  AU: Initializing Automatic Updates  ###########
    2015-08-03	13:53:54:941	 508	1ac	AU	Additional Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} with Approval type {Pre-download notify} added to AU services list
    2015-08-03	13:53:54:941	 508	1ac	AU	AIR Mode is disabled
    2015-08-03	13:53:54:941	 508	 7c	DnldMgr	Asking handlers to reconcile their sandboxes
    2015-08-03	13:53:54:941	 508	1ac	AU	  # Policy Driven Provider: http://wsushost:8530
    2015-08-03	13:53:54:972	 508	1ac	AU	  # Detection frequency: 22
    2015-08-03	13:53:54:972	 508	1ac	AU	  # Target group: Servers;Virtual
    2015-08-03	13:53:54:972	 508	1ac	AU	  # Approval type: Scheduled (Policy)
    2015-08-03	13:53:54:972	 508	1ac	AU	  # Auto-install minor updates: Yes (Policy)
    2015-08-03	13:53:54:972	 508	1ac	AU	  # ServiceTypeDefault: Service 117CAB2D-82B1-4B5A-A08C-4D62DBEE7782 Approval type: (Pre-download notify)
    2015-08-03	13:53:54:972	 508	1ac	AU	  # Will interact with non-admins (Non-admins are elevated (Policy))
    2015-08-03	13:53:54:972	 508	1ac	AU	WARNING: Failed to get Wu Exemption info from NLM, assuming not exempt, error = 0x80240037
    2015-08-03	13:53:54:972	 508	1ac	AU	WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037
    2015-08-03	13:53:54:972	 508	1ac	AU	AU finished delayed initialization
    2015-08-03	13:53:54:972	 508	1ac	AU	Currently AUX is enabled - so not show any WU Upgrade notifications.
    2015-08-03	13:53:54:988	 508	1ac	AU	WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037
    2015-08-03	13:53:54:988	 508	1ac	AU	WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037
    2015-08-03	13:53:54:988	 508	1ac	AU	Triggering AU detection through DetectNow API
    2015-08-03	13:53:54:988	 508	1ac	AU	Additional Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} with Approval type {Pre-download notify} added to AU services list
    2015-08-03	13:53:54:988	 508	1ac	AU	Triggering Online detection (non-interactive)
    2015-08-03	13:53:54:988	 508	1ac	AU	Adding timer: 
    2015-08-03	13:53:54:988	 508	1ac	AU	    Timer: 31DA7559-FE27-4810-8FF6-987195B1FD98, Expires 2015-08-03 18:53:54, not idle-only, not network-only
    2015-08-03	13:53:54:988	 508	c08	AU	#############
    2015-08-03	13:53:54:988	 508	c08	AU	## START ##  AU: Search for updates
    2015-08-03	13:53:54:988	 508	c08	AU	#########
    2015-08-03	13:53:55:003	 508	c08	AU	Additional Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} with Approval type {Pre-download notify} added to AU services list
    2015-08-03	13:53:55:003	 508	c08	IdleTmr	WU operation (CSearchCall::Init ID 1) started; operation # 8; does use network; is not at background priority
    2015-08-03	13:53:55:003	 508	c08	IdleTmr	Incremented idle timer priority operation counter to 1
    2015-08-03	13:53:55:175	 508	c08	Report	***********  Report: Initializing static reporting data  ***********
    2015-08-03	13:53:55:175	 508	c08	Report	  * OS Version = 6.3.9600.0.0.197008
    2015-08-03	13:53:55:175	 508	c08	Report	  * OS Product Type = 0x00000008
    2015-08-03	13:53:55:191	 508	c08	Report	  * Computer Brand = Microsoft Corporation
    2015-08-03	13:53:55:191	 508	c08	Report	  * Computer Model = Virtual Machine
    2015-08-03	13:53:55:191	 508	c08	Report	  * Platform Role = 1
    2015-08-03	13:53:55:191	 508	c08	Report	  * AlwaysOn/AlwaysConnected (AOAC) = 0
    2015-08-03	13:53:55:191	 508	c08	Report	  * Bios Revision = 090006 
    2015-08-03	13:53:55:191	 508	c08	Report	  * Bios Name = BIOS Date: 05/23/12 17:15:53  Ver: 09.00.06
    2015-08-03	13:53:55:191	 508	c08	Report	  * Bios Release Date = 2012-05-23T00:00:00
    2015-08-03	13:53:55:191	 508	c08	Report	  * Bios Sku Number unavailable.
    2015-08-03	13:53:55:191	 508	c08	Report	  * Bios Vendor = American Megatrends Inc.
    2015-08-03	13:53:55:191	 508	c08	Report	  * Bios Family unavailable.
    2015-08-03	13:53:55:191	 508	c08	Report	  * Bios Major Release unavailable.
    2015-08-03	13:53:55:191	 508	c08	Report	  * Bios Minor Release unavailable.
    2015-08-03	13:53:55:191	 508	c08	Report	  * Locale ID = 1033
    2015-08-03	13:53:55:191	 508	c08	Handler	Calculating current update level for this session
    2015-08-03	13:53:56:878	 508	c08	Handler	UH: Current cumulative update level calculated: package identity Package_for_KB3000850~31bf3856ad364e35~amd64~~6.3.1.8, display name KB3000850, support URL http://support.microsoft.com/?kbid=3000850, timestamp 01d006125230c6f7
    2015-08-03	13:53:56:878	 508	c08	Handler	Done calculating current update level for this session
    2015-08-03	13:53:57:238	 508	c08	Agent	*** START ***  Queueing Finding updates [CallerId = Windows Update Command Line  Id = 1]
    2015-08-03	13:53:57:253	 508	c08	AU	<<## SUBMITTED ## AU: Search for updates  [CallId = {1C0C259D-4A28-429C-92A3-754180A3D36E} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}]
    2015-08-03	13:53:57:253	 508	c08	Agent	SkipSelfUpdateCheck search flag set for serverId: 117CAB2D-82B1-4B5A-A08C-4D62DBEE7782
    2015-08-03	13:53:57:253	 508	c08	IdleTmr	WU operation (CSearchCall::Init ID 2) started; operation # 10; does use network; is not at background priority
    2015-08-03	13:53:57:253	 508	c08	IdleTmr	Incremented idle timer priority operation counter to 2
    2015-08-03	13:53:57:253	 508	c08	Agent	*** START ***  Queueing Finding updates [CallerId = Windows Update Command Line  Id = 2]
    2015-08-03	13:53:57:253	 508	c08	AU	<<## SUBMITTED ## AU: Search for updates  [CallId = {831E803D-D6FF-4A8B-994C-98A3CD0E04E7} ServiceId = {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}]
    2015-08-03	13:53:57:253	 508	6e4	Agent	***  END  ***  Queueing Finding updates [CallerId = Windows Update Command Line  Id = 1]
    2015-08-03	13:53:57:253	 508	6e4	Agent	*************
    2015-08-03	13:53:57:253	 508	1274	Agent	***  END  ***  Queueing Finding updates [CallerId = Windows Update Command Line  Id = 2]
    2015-08-03	13:53:57:253	 508	6e4	Agent	** START **  Agent: Finding updates [CallerId = Windows Update Command Line  Id = 1]
    2015-08-03	13:53:57:253	 508	6e4	Agent	*********
    2015-08-03	13:53:57:253	 508	1274	Agent	*************
    2015-08-03	13:53:57:253	 508	6e4	Agent	  * Online = Yes; Ignore download priority = No
    2015-08-03	13:53:57:253	 508	1274	Agent	** START **  Agent: Finding updates [CallerId = Windows Update Command Line  Id = 2]
    2015-08-03	13:53:57:253	 508	6e4	Agent	  * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
    2015-08-03	13:53:57:253	 508	1274	Agent	*********
    2015-08-03	13:53:57:253	 508	6e4	Agent	  * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2015-08-03	13:53:57:253	 508	1274	Agent	  * Online = Yes; Ignore download priority = No
    2015-08-03	13:53:57:253	 508	6e4	Agent	  * Search Scope = {Machine & All Users}
    2015-08-03	13:53:57:253	 508	1274	Agent	  * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
    2015-08-03	13:53:57:253	 508	6e4	Agent	  * Caller SID for Applicability: S-1-5-18
    2015-08-03	13:53:57:253	 508	1274	Agent	  * ServiceID = {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} Third party service
    2015-08-03	13:53:57:253	 508	6e4	Agent	  * RegisterService is set
    2015-08-03	13:53:57:253	 508	1274	Agent	  * Search Scope = {Machine & All Users}
    2015-08-03	13:53:57:253	 508	1274	Agent	  * Caller SID for Applicability: S-1-5-18
    2015-08-03	13:53:57:253	 508	1274	Agent	  * RegisterService is set
    2015-08-03	13:53:57:253	 508	6e4	EP	Got WSUS Client/Server URL: "http://wsushost:8530/ClientWebService/client.asmx"
    2015-08-03	13:53:57:253	 508	1274	EP	Got 9482F4B4-E343-43B6-B170-9A65BC822C77 redir SecondaryServiceAuth URL: "117cab2d-82b1-4b5a-a08c-4d62dbee7782"
    2015-08-03	13:53:57:269	 508	1274	EP	Got 117CAB2D-82B1-4B5A-A08C-4D62DBEE7782 redir Client/Server URL: "https://fe2.ws.microsoft.com/v6/ClientWebService/client.asmx"
    2015-08-03	13:53:57:285	 508	1274	PT	+++++++++++  PT: Synchronizing server updates  +++++++++++
    2015-08-03	13:53:57:285	 508	1274	PT	  + ServiceId = {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}, Server URL = https://fe2.ws.microsoft.com/v6/ClientWebService/client.asmx
    2015-08-03	13:53:57:285	 508	1274	Agent	Reading cached app categories using lifetime 604800 seconds
    2015-08-03	13:53:57:285	 508	1274	Agent	Read 1 cached app categories
    2015-08-03	13:53:57:285	 508	1274	Agent	SyncUpdates adding 1 visited app categories
    2015-08-03	13:53:57:488	 508	1274	PT	  + SyncUpdates round trips: 0
    2015-08-03	13:53:57:566	 508	1274	Agent	  * Added update {C21E26AB-BFEE-425B-BD0B-C0043B81B034}.1 to search result
    2015-08-03	13:53:57:566	 508	1274	Agent	  * Added update {F944750C-BED6-4116-BFC4-91361F87CE97}.1 to search result
    2015-08-03	13:53:57:566	 508	1274	Agent	  * Added update {AE53F50B-1F53-4E10-93A2-7005AD671608}.100 to search result
    2015-08-03	13:53:57:566	 508	1274	Agent	  * Added update {17A599BB-6485-4405-89C1-77A260C078D9}.100 to search result
    2015-08-03	13:53:57:566	 508	1274	Agent	  * Added update {1E536662-7256-42FA-9373-7A009A14400B}.100 to search result
    2015-08-03	13:53:57:566	 508	1274	Agent	  * Added update {DE323AF5-28CA-4BAB-A85B-B074001783BF}.1 to search result
    2015-08-03	13:53:57:566	 508	1274	Agent	  * Added update {D87FA2B6-A04D-4920-92AE-7C6586F98ED4}.1 to search result
    2015-08-03	13:53:57:566	 508	1274	Agent	  * Added update {00563009-B9BF-43A4-8B4E-5ACE3172912B}.2 to search result
    2015-08-03	13:53:57:566	 508	1274	Agent	  * Added update {BB8EED48-5EB9-481D-A043-D8BE51942055}.1 to search result
    2015-08-03	13:53:57:566	 508	1274	Agent	  * Added update {4849182B-70A4-4A3F-9FF9-054D8BCDCDDD}.1 to search result
    2015-08-03	13:53:57:566	 508	1274	Agent	  * Added update {A44878FB-450F-4C78-AC58-0F32712DDA1A}.1 to search result
    2015-08-03	13:53:57:566	 508	1274	Agent	  * Added update {5DBBEA84-90D6-42A4-B8EE-CA2BA1A42B1C}.1 to search result
    2015-08-03	13:53:57:566	 508	1274	Agent	  * Added update {2A4D62A5-450B-450C-A44E-65E9CC5DBD45}.1 to search result
    2015-08-03	13:53:57:566	 508	1274	Agent	  * Added update {A646B27E-937C-419F-B2A0-8817A4D1D5FD}.1 to search result
    2015-08-03	13:53:57:566	 508	1274	Agent	  * Found 14 updates and 25 categories in search; evaluated appl. rules of 74 out of 87 deployed entities
    2015-08-03	13:53:57:581	 508	1274	Agent	*********
    2015-08-03	13:53:57:581	 508	1274	Agent	**  END  **  Agent: Finding updates [CallerId = Windows Update Command Line  Id = 2]
    2015-08-03	13:53:57:581	 508	1274	Agent	*************
    2015-08-03	13:53:57:581	 508	 7c	Report	REPORT EVENT: {CE096FEC-3E1A-4755-BDBF-92739B81BF69}	2015-08-03 13:53:57:581-0500	1	147 [AGENT_DETECTION_FINISHED]	101	{00000000-0000-0000-0000-000000000000}	0	0	Windows Update Command Line	Success	Software Synchronization	Windows Update Client successfully detected 14 updates.
    2015-08-03	13:53:57:581	 508	 7c	Report	CWERReporter finished handling 10 events. (00000000)
    2015-08-03	13:53:57:597	 508	1274	Agent	Removing per user update {A646B27E-937C-419F-B2A0-8817A4D1D5FD} from search result since it applies to no users
    2015-08-03	13:53:57:597	 508	1274	Agent	Removing per user update {2A4D62A5-450B-450C-A44E-65E9CC5DBD45} from search result since it applies to no users
    2015-08-03	13:53:57:597	 508	1274	Agent	Removing per user update {5DBBEA84-90D6-42A4-B8EE-CA2BA1A42B1C} from search result since it applies to no users
    2015-08-03	13:53:57:597	 508	1274	Agent	Removing per user update {A44878FB-450F-4C78-AC58-0F32712DDA1A} from search result since it applies to no users
    2015-08-03	13:53:57:597	 508	1274	Agent	Removing per user update {4849182B-70A4-4A3F-9FF9-054D8BCDCDDD} from search result since it applies to no users
    2015-08-03	13:53:57:597	 508	1274	Agent	Removing per user update {BB8EED48-5EB9-481D-A043-D8BE51942055} from search result since it applies to no users
    2015-08-03	13:53:57:597	 508	1274	Agent	Removing per user update {00563009-B9BF-43A4-8B4E-5ACE3172912B} from search result since it applies to no users
    2015-08-03	13:53:57:597	 508	1274	Agent	Removing per user update {D87FA2B6-A04D-4920-92AE-7C6586F98ED4} from search result since it applies to no users
    2015-08-03	13:53:57:597	 508	1274	Agent	Removing per user update {DE323AF5-28CA-4BAB-A85B-B074001783BF} from search result since it applies to no users
    2015-08-03	13:53:57:597	 508	1274	Agent	Removing per user update {1E536662-7256-42FA-9373-7A009A14400B} from search result since it applies to no users
    2015-08-03	13:53:57:597	 508	1274	Agent	Removing per user update {17A599BB-6485-4405-89C1-77A260C078D9} from search result since it applies to no users
    2015-08-03	13:53:57:597	 508	1274	Agent	Removing per user update {AE53F50B-1F53-4E10-93A2-7005AD671608} from search result since it applies to no users
    2015-08-03	13:53:57:597	 508	1274	Agent	Removing per user update {F944750C-BED6-4116-BFC4-91361F87CE97} from search result since it applies to no users
    2015-08-03	13:53:57:597	 508	1274	Agent	Removing per user update {C21E26AB-BFEE-425B-BD0B-C0043B81B034} from search result since it applies to no users
    2015-08-03	13:53:57:597	 508	1274	IdleTmr	WU operation (CSearchCall::Init ID 2, operation # 10) stopped; does use network; is not at background priority
    2015-08-03	13:53:57:597	 508	1274	IdleTmr	Decremented idle timer priority operation counter to 1
    2015-08-03	13:53:57:597	 508	11ac	AU	>>##  RESUMED  ## AU: Search for updates [CallId = {831E803D-D6FF-4A8B-994C-98A3CD0E04E7} ServiceId = {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}]
    2015-08-03	13:53:57:597	 508	11ac	AU	  # 0 updates detected
    2015-08-03	13:53:57:597	 508	11ac	AU	#########
    2015-08-03	13:53:57:597	 508	11ac	AU	##  END  ##  AU: Search for updates  [CallId = {831E803D-D6FF-4A8B-994C-98A3CD0E04E7} ServiceId = {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}]
    2015-08-03	13:53:57:597	 508	11ac	AU	#############
    2015-08-03	13:53:57:785	 508	6e4	PT	+++++++++++  PT: Synchronizing server updates  +++++++++++
    2015-08-03	13:53:57:785	 508	6e4	PT	  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://wsushost:8530/ClientWebService/client.asmx
    2015-08-03	13:53:57:785	 508	6e4	PT	WARNING: Cached cookie has expired or new PID is available
    2015-08-03	13:53:57:785	 508	6e4	EP	Got WSUS SimpleTargeting URL: "http://wsushost:8530"
    2015-08-03	13:53:57:785	 508	6e4	IdleTmr	WU operation (CAuthorizationCookieWrapper::InitializeSimpleTargetingCookie) started; operation # 12; does use network; is at background priority
    2015-08-03	13:53:57:785	 508	6e4	PT	Initializing simple targeting cookie, clientId = 0541dbc0-02f5-426f-bb05-5f19bfa9b3b2, target group = Servers;Virtual, DNS name = clienthostname
    2015-08-03	13:53:57:785	 508	6e4	PT	  Server URL = http://wsushost:8530/SimpleAuthWebService/SimpleAuth.asmx
    2015-08-03	13:53:57:800	 508	6e4	IdleTmr	WU operation (CAuthorizationCookieWrapper::InitializeSimpleTargetingCookie, operation # 12) stopped; does use network; is at background priority
    2015-08-03	13:53:57:800	 508	6e4	IdleTmr	WU operation (CAgentProtocolTalker::GetCookie_WithRecovery) started; operation # 13; does use network; is at background priority
    2015-08-03	13:53:57:816	 508	6e4	IdleTmr	WU operation (CAgentProtocolTalker::GetCookie_WithRecovery, operation # 13) stopped; does use network; is at background priority
    2015-08-03	13:53:57:831	 508	6e4	Agent	Reading cached app categories using lifetime 604800 seconds
    2015-08-03	13:53:57:831	 508	6e4	Agent	Read 0 cached app categories
    2015-08-03	13:53:57:831	 508	6e4	Agent	SyncUpdates adding 0 visited app categories
    2015-08-03	13:54:00:457	 508	6e4	IdleTmr	WU operation (CAgentProtocolTalker::SyncUpdates_WithRecover) started; operation # 14; does use network; is at background priority
    2015-08-03	13:54:00:628	 508	6e4	IdleTmr	WU operation (CAgentProtocolTalker::SyncUpdates_WithRecover, operation # 14) stopped; does use network; is at background priority
    2015-08-03	13:54:00:628	 508	6e4	Agent	Reading cached app categories using lifetime 604800 seconds
    2015-08-03	13:54:00:628	 508	6e4	Agent	Read 0 cached app categories
    2015-08-03	13:54:00:628	 508	6e4	Agent	SyncUpdates adding 0 visited app categories
    2015-08-03	13:54:00:644	 508	6e4	IdleTmr	WU operation (CAgentProtocolTalker::SyncUpdates_WithRecover) started; operation # 15; does use network; is at background priority
    2015-08-03	13:54:00:722	 508	6e4	IdleTmr	WU operation (CAgentProtocolTalker::SyncUpdates_WithRecover, operation # 15) stopped; does use network; is at background priority
    2015-08-03	13:54:00:722	 508	6e4	PT	  + SyncUpdates round trips: 2
    2015-08-03	13:54:02:582	 508	 7c	Report	CWERReporter finished handling 5 events. (00000000)
    2015-08-03	13:54:02:894	 508	6e4	Agent	WARNING: Failed to evaluate Installed rule, updateId = {{22FFD207-0EB5-4FCF-9F6A-67078327D7A3}.200}, hr = 80070057
    2015-08-03	13:54:02:910	 508	6e4	Agent	WARNING: Failed to evaluate Installable rule, updateId = {{22FFD207-0EB5-4FCF-9F6A-67078327D7A3}.200}, hr = 80070057
    2015-08-03	13:54:03:550	 508	6e4	PT	+++++++++++  PT: Synchronizing extended update info  +++++++++++
    2015-08-03	13:54:03:550	 508	6e4	PT	  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://wsushost:8530/ClientWebService/client.asmx
    2015-08-03	13:54:03:582	 508	6e4	IdleTmr	WU operation (CAgentProtocolTalker::GetExtendedUpdateInfo_WithRecovery) started; operation # 16; does use network; is at background priority
    2015-08-03	13:54:04:597	 508	6e4	IdleTmr	WU operation (CAgentProtocolTalker::GetExtendedUpdateInfo_WithRecovery, operation # 16) stopped; does use network; is at background priority
    2015-08-03	13:54:04:817	 508	6e4	Agent	  * Found 0 updates and 76 categories in search; evaluated appl. rules of 629 out of 978 deployed entities
    2015-08-03	13:54:04:817	 508	6e4	Agent	Reporting status event with 0 installable, 129 installed,  0 installed pending, 0 failed and 0 downloaded updates
    2015-08-03	13:54:04:817	 508	6e4	Agent	*********
    2015-08-03	13:54:04:817	 508	6e4	Agent	**  END  **  Agent: Finding updates [CallerId = Windows Update Command Line  Id = 1]
    2015-08-03	13:54:04:817	 508	6e4	Agent	*************
    2015-08-03	13:54:04:832	 508	6e4	IdleTmr	WU operation (CSearchCall::Init ID 1, operation # 8) stopped; does use network; is not at background priority
    2015-08-03	13:54:04:832	 508	6e4	IdleTmr	Decremented idle timer priority operation counter to 0
    2015-08-03	13:54:04:832	 508	11ac	AU	>>##  RESUMED  ## AU: Search for updates [CallId = {1C0C259D-4A28-429C-92A3-754180A3D36E} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}]
    2015-08-03	13:54:04:832	 508	11ac	AU	  # 0 updates detected
    2015-08-03	13:54:04:832	 508	11ac	AU	#########
    2015-08-03	13:54:04:879	 508	11ac	AU	##  END  ##  AU: Search for updates  [CallId = {1C0C259D-4A28-429C-92A3-754180A3D36E} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}]
    2015-08-03	13:54:04:879	 508	11ac	AU	#############
    2015-08-03	13:54:04:879	 508	11ac	AU	All AU searches complete.
    2015-08-03	13:54:04:879	 508	11ac	AU	AU setting next detection timeout to 2015-08-04 16:25:56
    2015-08-03	13:54:04:879	 508	11ac	AU	Adding timer: 
    2015-08-03	13:54:04:879	 508	11ac	AU	    Timer: 31DA7559-FE27-4810-8FF6-987195B1FD98, Expires 2015-08-04 16:25:56, not idle-only, not network-only
    2015-08-03	13:54:04:879	 508	11ac	AU	  # Publishing WNF Per user update count event Count: 0 SID {S-1-5-21-394886948-3945694780-3723845208-500} Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}
    2015-08-03	13:54:04:942	 508	11ac	AU	Currently AUX is enabled - so not show any WU Upgrade notifications.
    2015-08-03	13:54:04:942	 508	11ac	AU	WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037
    2015-08-03	13:54:04:942	 508	11ac	AU	WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037
    2015-08-03	13:54:09:818	 508	 7c	Report	REPORT EVENT: {6DC58D22-3B79-4175-8239-93A9ED28D7F6}	2015-08-03 13:54:04:817-0500	1	147 [AGENT_DETECTION_FINISHED]	101	{00000000-0000-0000-0000-000000000000}	0	0	Windows Update Command Line	Success	Software Synchronization	Windows Update Client successfully detected 0 updates.
    2015-08-03	13:54:09:818	 508	 7c	Report	REPORT EVENT: {CCC24F18-B11C-4D58-8AB0-C09762EEA715}	2015-08-03 13:54:04:817-0500	1	156 [AGENT_STATUS_30]	101	{00000000-0000-0000-0000-000000000000}	0	0	Windows Update Command Line	Success	Pre-Deployment Check	Reporting client status.
    2015-08-03	13:54:09:943	 508	 7c	Report	CWERReporter finished handling 2 events. (00000000)
    2015-08-03	14:02:04:988	 508	 7c	EP	Got 117CAB2D-82B1-4B5A-A08C-4D62DBEE7782 redir Client/Server URL: "https://fe2.ws.microsoft.com/v6/ClientWebService/client.asmx"
    2015-08-03	14:02:05:082	 508	 7c	EP	Got 117CAB2D-82B1-4B5A-A08C-4D62DBEE7782 redir Reporting URL: "http://statsfe2.ws.microsoft.com/ReportingWebService/ReportingWebService.asmx"
    2015-08-03	14:02:05:082	 508	 7c	Report	OpenReportingWebServiceConnection, reporting URL = http://statsfe2.ws.microsoft.com/ReportingWebService/ReportingWebService.asmx
    2015-08-03	14:02:05:082	 508	 7c	IdleTmr	WU operation (CLegacyEventUploader::HandleEvents) started; operation # 21; does use network; is at background priority
    2015-08-03	14:02:05:082	 508	 7c	Report	Uploading 1 events using cached cookie.
    2015-08-03	14:02:05:459	 508	 7c	Report	Reporter successfully uploaded 1 events.
    2015-08-03	14:02:05:459	 508	 7c	IdleTmr	WU operation (CLegacyEventUploader::HandleEvents, operation # 21) stopped; does use network; is at background priority
    2015-08-03	14:02:05:459	 508	 7c	EP	Got WSUS Client/Server URL: "http://wsushost:8530/ClientWebService/client.asmx"
    2015-08-03	14:02:05:504	 508	 7c	EP	Got WSUS Reporting URL: "http://wsushost:8530/ReportingWebService/ReportingWebService.asmx"
    2015-08-03	14:02:05:504	 508	 7c	Report	OpenReportingWebServiceConnection, reporting URL = http://wsushost:8530/ReportingWebService/ReportingWebService.asmx
    2015-08-03	14:02:05:504	 508	 7c	IdleTmr	WU operation (CLegacyEventUploader::HandleEvents) started; operation # 22; does use network; is at background priority
    2015-08-03	14:02:05:504	 508	 7c	Report	Uploading 2 events using cached cookie.
    2015-08-03	14:02:05:519	 508	 7c	Report	Reporter successfully uploaded 2 events.
    2015-08-03	14:02:05:519	 508	 7c	IdleTmr	WU operation (CLegacyEventUploader::HandleEvents, operation # 22) stopped; does use network; is at background priority
    2015-08-03	14:02:56:598	 508	c08	Report	WARNING: CSerializationHelper:: InitSerialize failed : 0x80070002
    2015-08-03	14:08:21:698	 508	c08	AU	Currently AUX is enabled - so not show any WU Upgrade notifications.
    2015-08-03	14:08:21:729	 508	c08	AU	WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037
    2015-08-03	14:08:21:729	 508	c08	AU	WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037
    2015-08-03	14:08:46:154	 508	c08	AU	###########  AU: Uninitializing Automatic Updates  ###########
    2015-08-03	14:08:46:154	 508	c08	WuTask	Uninit WU Task Manager
    2015-08-03	14:08:46:201	 508	c08	AU	Earliest future timer found: 
    2015-08-03	14:08:46:201	 508	c08	AU	    Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2015-08-04 04:39:55, not idle-only, not network-only
    2015-08-03	14:08:46:216	 508	c08	AU	Earliest future timer found: 
    2015-08-03	14:08:46:216	 508	c08	AU	    Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2015-08-04 04:39:55, not idle-only, not network-only
    2015-08-03	14:08:46:294	 508	c08	Service	*********
    2015-08-03	14:08:46:294	 508	c08	Service	**  END  **  Service: Service exit [Exit code = 0x240001]
    2015-08-03	14:08:46:294	 508	c08	Service	*************
    2015-08-03	14:08:50:341	 508	1308	Misc	===========  Logging initialized (build: 7.9.9600.17930, tz: -0500)  ===========
    2015-08-03	14:08:50:341	 508	1308	Misc	  = Process: C:\Windows\system32\svchost.exe
    2015-08-03	14:08:50:341	 508	1308	Misc	  = Module: c:\windows\system32\wuaueng.dll
    2015-08-03	14:08:50:341	 508	1308	Service	*************
    2015-08-03	14:08:50:341	 508	1308	Service	** START **  Service: Service startup
    2015-08-03	14:08:50:341	 508	1308	Service	*********
    2015-08-03	14:08:50:373	 508	1308	IdleTmr	Non-AoAc machine.  Aoac operations will be ignored.
    2015-08-03	14:08:50:373	 508	1308	Agent	  * WU client version 7.9.9600.17930
    2015-08-03	14:08:50:373	 508	1308	Agent	WARNING: SleepStudyTracker: Machine is non-AOAC. Sleep study tracker disabled.
    2015-08-03	14:08:50:373	 508	1308	Agent	  * Base directory: C:\Windows\SoftwareDistribution
    2015-08-03	14:08:50:373	 508	1308	Agent	  * Access type: No proxy
    2015-08-03	14:08:50:373	 508	1308	Service	UpdateNetworkState Ipv6, cNetworkInterfaces = 1.
    2015-08-03	14:08:50:373	 508	1308	Service	UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
    2015-08-03	14:08:50:373	 508	1308	Agent	  * Network state: Connected
    2015-08-03	14:08:50:373	 508	1308	Service	UpdateNetworkState Ipv6, cNetworkInterfaces = 1.
    2015-08-03	14:08:50:373	 508	1308	Service	UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
    2015-08-03	14:08:50:404	 508	1308	Agent	***********  Agent: Initializing global settings cache  ***********
    2015-08-03	14:08:50:404	 508	1308	Agent	  * Endpoint Provider: 00000000-0000-0000-0000-000000000000
    2015-08-03	14:08:50:404	 508	1308	Agent	  * WSUS server: http://wsushost:8530
    2015-08-03	14:08:50:404	 508	1308	Agent	  * WSUS status server: http://wsushost:8530
    2015-08-03	14:08:50:404	 508	1308	Agent	  * Target group: Servers;Virtual
    2015-08-03	14:08:50:404	 508	1308	Agent	  * Windows Update access disabled: No
    2015-08-03	14:08:50:419	 508	1308	Misc	WARNING: Network Cost is assumed to be not supported as something failed with trying to get handles to wcmapi.dll
    2015-08-03	14:08:50:419	 508	1308	WuTask	WuTaskManager delay initialize completed successfully..
    2015-08-03	14:08:50:419	 508	1308	AU	    Timer: 31DA7559-FE27-4810-8FF6-987195B1FD98, Expires 2015-08-04 16:25:56, not idle-only, not network-only
    2015-08-03	14:08:50:419	 508	1308	AU	    Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2015-08-04 04:39:55, not idle-only, not network-only
    2015-08-03	14:08:50:419	 508	1308	AU	    Timer: 29A863E7-8609-4D1E-B7CD-5668F857F1DB, Expires 2015-08-04 04:39:55, not idle-only, not network-only
    2015-08-03	14:08:50:435	 508	1308	Report	WARNING: CSerializationHelper:: InitSerialize failed : 0x80070002
    2015-08-03	14:08:50:435	 508	1308	Report	CWERReporter::Init succeeded
    2015-08-03	14:08:50:435	 508	1308	Agent	***********  Agent: Initializing Windows Update Agent  ***********
    2015-08-03	14:08:50:435	 508	1308	DnldMgr	Download manager restoring 0 downloads
    2015-08-03	14:08:50:435	 508	1308	AU	###########  AU: Initializing Automatic Updates  ###########
    2015-08-03	14:08:50:435	 508	1308	AU	Additional Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} with Approval type {Pre-download notify} added to AU services list
    2015-08-03	14:08:50:435	 508	1308	AU	AIR Mode is disabled
    2015-08-03	14:08:50:435	 508	1308	AU	  # Policy Driven Provider: http://wsushost:8530
    2015-08-03	14:08:50:435	 508	1308	AU	  # Detection frequency: 22
    2015-08-03	14:08:50:435	 508	1308	AU	  # Target group: Servers;Virtual
    2015-08-03	14:08:50:435	 508	1308	AU	  # Approval type: Scheduled (Policy)
    2015-08-03	14:08:50:435	 508	1308	AU	  # Auto-install minor updates: Yes (Policy)
    2015-08-03	14:08:50:435	 508	1308	AU	  # ServiceTypeDefault: Service 117CAB2D-82B1-4B5A-A08C-4D62DBEE7782 Approval type: (Pre-download notify)
    2015-08-03	14:08:50:435	 508	1308	AU	  # Will interact with non-admins (Non-admins are elevated (Policy))
    2015-08-03	14:08:50:435	 508	1308	AU	WARNING: Failed to get Wu Exemption info from NLM, assuming not exempt, error = 0x80240037
    2015-08-03	14:08:50:435	 508	1308	AU	WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037
    2015-08-03	14:08:50:451	 508	1308	AU	AU finished delayed initialization
    2015-08-03	14:08:50:451	 508	1308	AU	Currently AUX is enabled - so not show any WU Upgrade notifications.
    2015-08-03	14:08:50:451	 508	1308	AU	WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037
    2015-08-03	14:08:50:451	 508	1308	AU	WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037
    2015-08-03	14:08:50:451	 508	1308	AU	Adding timer: 
    2015-08-03	14:08:50:451	 508	1308	AU	    Timer: 31DA7559-FE27-4810-8FF6-987195B1FD98, Expires 2015-08-04 16:25:56, not idle-only, not network-only
    2015-08-03	14:08:50:451	 508	1348	DnldMgr	Asking handlers to reconcile their sandboxes
    2015-08-03	14:09:33:092	 508	1308	AU	###########  AU: Uninitializing Automatic Updates  ###########
    2015-08-03	14:09:33:092	 508	1308	WuTask	Uninit WU Task Manager
    2015-08-03	14:09:33:124	 508	1308	AU	Earliest future timer found: 
    2015-08-03	14:09:33:124	 508	1308	AU	    Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2015-08-04 04:39:55, not idle-only, not network-only
    2015-08-03	14:09:33:139	 508	1308	AU	Earliest future timer found: 
    2015-08-03	14:09:33:139	 508	1308	AU	    Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2015-08-04 04:39:55, not idle-only, not network-only
    2015-08-03	14:09:33:186	 508	1308	Service	*********
    2015-08-03	14:09:33:186	 508	1308	Service	**  END  **  Service: Service exit [Exit code = 0x240001]
    2015-08-03	14:09:33:186	 508	1308	Service	*************
    2015-08-03	14:09:37:061	 508	1284	Misc	===========  Logging initialized (build: 7.9.9600.17930, tz: -0500)  ===========
    2015-08-03	14:09:37:061	 508	1284	Misc	  = Process: C:\Windows\system32\svchost.exe
    2015-08-03	14:09:37:061	 508	1284	Misc	  = Module: c:\windows\system32\wuaueng.dll
    2015-08-03	14:09:37:061	 508	1284	Service	*************
    2015-08-03	14:09:37:061	 508	1284	Service	** START **  Service: Service startup
    2015-08-03	14:09:37:061	 508	1284	Service	*********
    2015-08-03	14:09:37:077	 508	1284	IdleTmr	Non-AoAc machine.  Aoac operations will be ignored.
    2015-08-03	14:09:37:077	 508	1284	Agent	  * WU client version 7.9.9600.17930
    2015-08-03	14:09:37:077	 508	1284	Agent	WARNING: SleepStudyTracker: Machine is non-AOAC. Sleep study tracker disabled.
    2015-08-03	14:09:37:077	 508	1284	Agent	  * Base directory: C:\Windows\SoftwareDistribution
    2015-08-03	14:09:37:077	 508	1284	Agent	  * Access type: No proxy
    2015-08-03	14:09:37:077	 508	1284	Service	UpdateNetworkState Ipv6, cNetworkInterfaces = 1.
    2015-08-03	14:09:37:077	 508	1284	Service	UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
    2015-08-03	14:09:37:077	 508	1284	Agent	  * Network state: Connected
    2015-08-03	14:09:37:077	 508	1284	Service	UpdateNetworkState Ipv6, cNetworkInterfaces = 1.
    2015-08-03	14:09:37:077	 508	1284	Service	UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
    2015-08-03	14:09:37:108	 508	1284	Agent	***********  Agent: Initializing global settings cache  ***********
    2015-08-03	14:09:37:108	 508	1284	Agent	  * Endpoint Provider: 00000000-0000-0000-0000-000000000000
    2015-08-03	14:09:37:108	 508	1284	Agent	  * WSUS server: http://wsushost:8530
    2015-08-03	14:09:37:108	 508	1284	Agent	  * WSUS status server: http://wsushost:8530
    2015-08-03	14:09:37:108	 508	1284	Agent	  * Target group: Servers;Virtual
    2015-08-03	14:09:37:108	 508	1284	Agent	  * Windows Update access disabled: No
    2015-08-03	14:09:37:108	 508	1284	Misc	WARNING: Network Cost is assumed to be not supported as something failed with trying to get handles to wcmapi.dll
    2015-08-03	14:09:37:124	 508	1284	WuTask	WuTaskManager delay initialize completed successfully..
    2015-08-03	14:09:37:124	 508	1284	AU	    Timer: 31DA7559-FE27-4810-8FF6-987195B1FD98, Expires 2015-08-04 16:25:56, not idle-only, not network-only
    2015-08-03	14:09:37:124	 508	1284	AU	    Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2015-08-04 04:39:55, not idle-only, not network-only
    2015-08-03	14:09:37:124	 508	1284	AU	    Timer: 29A863E7-8609-4D1E-B7CD-5668F857F1DB, Expires 2015-08-04 04:39:55, not idle-only, not network-only
    2015-08-03	14:09:37:124	 508	1284	Report	WARNING: CSerializationHelper:: InitSerialize failed : 0x80070002
    2015-08-03	14:09:37:139	 508	1284	Report	CWERReporter::Init succeeded
    2015-08-03	14:09:37:139	 508	1284	Agent	***********  Agent: Initializing Windows Update Agent  ***********
    2015-08-03	14:09:37:139	 508	1284	DnldMgr	Download manager restoring 0 downloads
    2015-08-03	14:09:37:139	 508	1284	AU	###########  AU: Initializing Automatic Updates  ###########
    2015-08-03	14:09:37:139	 508	1284	AU	Additional Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} with Approval type {Pre-download notify} added to AU services list
    2015-08-03	14:09:37:139	 508	1284	AU	AIR Mode is disabled
    2015-08-03	14:09:37:139	 508	1284	AU	  # Policy Driven Provider: http://wsushost:8530
    2015-08-03	14:09:37:139	 508	1284	AU	  # Detection frequency: 22
    2015-08-03	14:09:37:139	 508	1284	AU	  # Target group: Servers;Virtual
    2015-08-03	14:09:37:139	 508	1284	AU	  # Approval type: Scheduled (Policy)
    2015-08-03	14:09:37:139	 508	1284	AU	  # Auto-install minor updates: Yes (Policy)
    2015-08-03	14:09:37:139	 508	1284	AU	  # ServiceTypeDefault: Service 117CAB2D-82B1-4B5A-A08C-4D62DBEE7782 Approval type: (Pre-download notify)
    2015-08-03	14:09:37:139	 508	1284	AU	  # Will interact with non-admins (Non-admins are elevated (Policy))
    2015-08-03	14:09:37:139	 508	1284	AU	WARNING: Failed to get Wu Exemption info from NLM, assuming not exempt, error = 0x80240037
    2015-08-03	14:09:37:139	 508	1284	AU	WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037
    2015-08-03	14:09:37:139	 508	1284	AU	AU finished delayed initialization
    2015-08-03	14:09:37:139	 508	1284	AU	Currently AUX is enabled - so not show any WU Upgrade notifications.
    2015-08-03	14:09:37:139	 508	1284	AU	WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037
    2015-08-03	14:09:37:155	 508	1284	AU	WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037
    2015-08-03	14:09:37:155	 508	15ac	DnldMgr	Asking handlers to reconcile their sandboxes
    2015-08-03	14:10:00:001	 508	1284	AU	###########  AU: Uninitializing Automatic Updates  ###########
    2015-08-03	14:10:00:001	 508	1284	WuTask	Uninit WU Task Manager
    2015-08-03	14:10:00:032	 508	1284	AU	Earliest future timer found: 
    2015-08-03	14:10:00:032	 508	1284	AU	    Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2015-08-04 04:39:55, not idle-only, not network-only
    2015-08-03	14:10:00:048	 508	1284	AU	Earliest future timer found: 
    2015-08-03	14:10:00:048	 508	1284	AU	    Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2015-08-04 04:39:55, not idle-only, not network-only
    2015-08-03	14:10:00:110	 508	1284	Service	*********
    2015-08-03	14:10:00:110	 508	1284	Service	**  END  **  Service: Service exit [Exit code = 0x240001]
    2015-08-03	14:10:00:110	 508	1284	Service	*************
    2015-08-03	14:10:03:939	 508	17a0	Misc	===========  Logging initialized (build: 7.9.9600.17930, tz: -0500)  ===========
    2015-08-03	14:10:03:939	 508	17a0	Misc	  = Process: C:\Windows\system32\svchost.exe
    2015-08-03	14:10:03:939	 508	17a0	Misc	  = Module: c:\windows\system32\wuaueng.dll
    2015-08-03	14:10:03:939	 508	17a0	Service	*************
    2015-08-03	14:10:03:939	 508	17a0	Service	** START **  Service: Service startup
    2015-08-03	14:10:03:939	 508	17a0	Service	*********
    2015-08-03	14:10:03:955	 508	17a0	IdleTmr	Non-AoAc machine.  Aoac operations will be ignored.
    2015-08-03	14:10:03:955	 508	17a0	Agent	  * WU client version 7.9.9600.17930
    2015-08-03	14:10:03:955	 508	17a0	Agent	WARNING: SleepStudyTracker: Machine is non-AOAC. Sleep study tracker disabled.
    2015-08-03	14:10:03:955	 508	17a0	Agent	  * Base directory: C:\Windows\SoftwareDistribution
    2015-08-03	14:10:03:955	 508	17a0	Agent	  * Access type: No proxy
    2015-08-03	14:10:03:955	 508	17a0	Service	UpdateNetworkState Ipv6, cNetworkInterfaces = 1.
    2015-08-03	14:10:03:955	 508	17a0	Service	UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
    2015-08-03	14:10:03:955	 508	17a0	Agent	  * Network state: Connected
    2015-08-03	14:10:03:970	 508	17a0	Service	UpdateNetworkState Ipv6, cNetworkInterfaces = 1.
    2015-08-03	14:10:03:970	 508	17a0	Service	UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
    2015-08-03	14:10:03:986	 508	17a0	Agent	***********  Agent: Initializing global settings cache  ***********
    2015-08-03	14:10:03:986	 508	17a0	Agent	  * Endpoint Provider: 00000000-0000-0000-0000-000000000000
    2015-08-03	14:10:03:986	 508	17a0	Agent	  * WSUS server: http://wsushost:8530
    2015-08-03	14:10:03:986	 508	17a0	Agent	  * WSUS status server: http://wsushost:8530
    2015-08-03	14:10:03:986	 508	17a0	Agent	  * Target group: Servers;Virtual
    2015-08-03	14:10:03:986	 508	17a0	Agent	  * Windows Update access disabled: No
    2015-08-03	14:10:04:001	 508	17a0	Misc	WARNING: Network Cost is assumed to be not supported as something failed with trying to get handles to wcmapi.dll
    2015-08-03	14:10:04:001	 508	17a0	WuTask	WuTaskManager delay initialize completed successfully..
    2015-08-03	14:10:04:001	 508	17a0	AU	    Timer: 31DA7559-FE27-4810-8FF6-987195B1FD98, Expires 2015-08-04 16:25:56, not idle-only, not network-only
    2015-08-03	14:10:04:001	 508	17a0	AU	    Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2015-08-04 04:39:55, not idle-only, not network-only
    2015-08-03	14:10:04:001	 508	17a0	AU	    Timer: 29A863E7-8609-4D1E-B7CD-5668F857F1DB, Expires 2015-08-04 04:39:55, not idle-only, not network-only
    2015-08-03	14:10:04:017	 508	17a0	Report	CWERReporter::Init succeeded
    2015-08-03	14:10:04:017	 508	17a0	Agent	***********  Agent: Initializing Windows Update Agent  ***********
    2015-08-03	14:10:04:017	 508	17a0	DnldMgr	Download manager restoring 0 downloads
    2015-08-03	14:10:04:017	 508	17a0	AU	###########  AU: Initializing Automatic Updates  ###########
    2015-08-03	14:10:04:017	 508	17a0	AU	Additional Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} with Approval type {Pre-download notify} added to AU services list
    2015-08-03	14:10:04:017	 508	17a0	AU	AIR Mode is disabled
    2015-08-03	14:10:04:017	 508	17a0	AU	  # Policy Driven Provider: http://wsushost:8530
    2015-08-03	14:10:04:017	 508	17a0	AU	  # Detection frequency: 22
    2015-08-03	14:10:04:017	 508	17a0	AU	  # Target group: Servers;Virtual
    2015-08-03	14:10:04:017	 508	17a0	AU	  # Approval type: Scheduled (Policy)
    2015-08-03	14:10:04:017	 508	17a0	AU	  # Auto-install minor updates: Yes (Policy)
    2015-08-03	14:10:04:017	 508	17a0	AU	  # ServiceTypeDefault: Service 117CAB2D-82B1-4B5A-A08C-4D62DBEE7782 Approval type: (Pre-download notify)
    2015-08-03	14:10:04:017	 508	17a0	AU	  # Will interact with non-admins (Non-admins are elevated (Policy))
    2015-08-03	14:10:04:017	 508	17a0	AU	WARNING: Failed to get Wu Exemption info from NLM, assuming not exempt, error = 0x80240037
    2015-08-03	14:10:04:017	 508	17a0	AU	WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037
    2015-08-03	14:10:04:033	 508	17a0	AU	AU finished delayed initialization
    2015-08-03	14:10:04:033	 508	17a0	AU	Currently AUX is enabled - so not show any WU Upgrade notifications.
    2015-08-03	14:10:04:033	 508	17a0	AU	WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037
    2015-08-03	14:10:04:033	 508	17a0	AU	WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037
    2015-08-03	14:10:04:033	 508	10f8	DnldMgr	Asking handlers to reconcile their sandboxes
    2015-08-03	14:20:04:045	 508	166c	AU	Earliest future timer found: 
    2015-08-03	14:20:04:045	 508	166c	AU	    Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2015-08-04 04:39:55, not idle-only, not network-only
    2015-08-03	14:20:05:051	 508	17a0	AU	###########  AU: Uninitializing Automatic Updates  ###########
    2015-08-03	14:20:05:088	 508	17a0	WuTask	Uninit WU Task Manager
    2015-08-03	14:20:05:132	 508	17a0	AU	Earliest future timer found: 
    2015-08-03	14:20:05:132	 508	17a0	AU	    Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2015-08-04 04:39:55, not idle-only, not network-only
    2015-08-03	14:20:05:149	 508	17a0	AU	Earliest future timer found: 
    2015-08-03	14:20:05:149	 508	17a0	AU	    Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2015-08-04 04:39:55, not idle-only, not network-only
    2015-08-03	14:20:05:211	 508	17a0	Service	*********
    2015-08-03	14:20:05:211	 508	17a0	Service	**  END  **  Service: Service exit [Exit code = 0x240001]
    2015-08-03	14:20:05:211	 508	17a0	Service	*************


    Monday, August 3, 2015 8:21 PM
  • I have the same issue. many Windows 2012 R2 stopping reporting since later July.  I suspected that some windows update broken this.  It had been working flawlessly before. 
    Monday, August 3, 2015 8:44 PM
  • On two of the affected servers I did the following:

    • stopped WUAUSERV and BITS
    • deleted the SoftwareDistribution folder
    • uninstalled KB3065988 and rebooted
    • removed the client from WSUS
    • rebooted client
    • upon reboot and login, installed a fresh copy of KB3065988 directly downloaded from MS and not from the WSUS server
    • rebooted
    • upon reboot and login, ran wuauclt /detectnow and noted the client appeared back in WSUS as "Not yet reported"
    • ran a check for windows updates and noted client listed as newly reported in WSUS
    • installed any updates that were waiting and rebooted

    Based on these, it is clearly not a server, GPO or client configuration issue.  Now I'll wait for 24 - 48 hours and make sure that the clients continue to report.  Historically I've been able to get them to report using a similar method, but only the once.  This is the first time I've used a different copy of the KB.  Perhaps the one on the WSUS server is corrupt.

    Monday, August 3, 2015 9:17 PM
  • What is the Version Number for WSUS that's displayed in the main page of the WSUS Console? Maybe you missed an Update for your WSUS and that's why you got the problems with your clients.
    Tuesday, August 4, 2015 6:26 AM
  • That's a very good question Michael.  I was scouring the web just yesterday for an update to the 2012R2 role which would match the new client version, but I have failed to find anything as of yet.

    The server version is 6.3.9600.16384.
    The client version is now 7.9.9600.17930

    The client was 7.9.9600.16384 prior to KB3065988. :)  I'd love to see a server version of 6.3.9600.17930 too.

    Tuesday, August 4, 2015 2:22 PM
  • uninstalling the update KB3065988

    and running wuauclt /reportnow corrected it for my windows 2012R2 servers will see if reinstalling breaks it again.

    Wednesday, August 5, 2015 8:14 PM
  • I'm having the same problem description. I will be trying to uninstall KB 3065988 as well to see if it corrects the issue.
    Wednesday, August 5, 2015 9:52 PM
  • With the described method of remediation above I am down only a few problem machines, which isn't too bad.  I'm going to give them a full week of monitoring before I bounce the update again on those devices.
    Thursday, August 6, 2015 4:34 PM
  • uninstalling the update KB3065988

    and running wuauclt /reportnow corrected it for my windows 2012R2 servers will see if reinstalling breaks it again.

    Heya DarkHalf,

    Definitely let me know how you make out with the re-install.  I'm considering uninstalling the KB and declining it on my WSUS server so it doesn't re-apply if re-installing the KB breaks it again.


    Thursday, August 6, 2015 4:39 PM
  • i have since set the update to uninstall on my WSUS and opened a SR with Microsoft on this.  unfortunately reinstalling did not work and the uninstall forces a reboot, so on the next update cycle everything should be back to normal.

    Thursday, August 6, 2015 6:29 PM
  • i have since set the update to uninstall on my WSUS and opened a SR with Microsoft on this.  unfortunately reinstalling did not work and the uninstall forces a reboot, so on the next update cycle everything should be back to normal.

    Thanks for posting back DarkHalf.  So that I am clear, if you uninstall things seem to work fine, but once you re-install they fail once more?  As a result you are declining the update in WSUS on your end?
    Thursday, August 6, 2015 7:46 PM
  • correct.

    uninstall KB3065988, reboot, wuauclt /reportnow

    i have since tagged the update for uninstall so it will be removed from the hosts that have it already (several dozen)

    Friday, August 7, 2015 3:24 PM
  • correct.

    uninstall KB3065988, reboot, wuauclt /reportnow

    i have since tagged the update for uninstall so it will be removed from the hosts that have it already (several dozen)

    Awesome DarkHalf.  I have approved KB3065988 for uninstall in my environment as well.  Let us know how you get on with your SR with MS please. :D
    Friday, August 7, 2015 6:17 PM
  • I had a bit of an issue with a few of my clients even after the removal of the KB failing to report.  I ran the WindowsUpdateDiagnostics.diagcab tool on them and it reported it corrected a problem with a recently installed update.  I then checked for updates again and once more KB3065988 was available for uninstall.  I ran that uninstall again (which did not prompt for a reboot this time) and then a wuauclt /reportnow /detectnow.  After that the remaining nodes reported in.

    I'll watch them again and see if they fail to report in 48 hours. :D

    -Jeff

    Friday, August 7, 2015 7:08 PM
  • Heya All,

    I can now confirm that removing KB3065988 completely and leaving it off fixes the issue.  All of my problem servers and desktops that I have done this on are, once again, reporting as expected.  The control group I left it on still had the woes.  I then removed it from the control group and they too are now reporting correctly also.

    I'm interested to hear what MS has to say about your SR DarkHalf. :)  Until then, I'm leaving it uninstalled.

    This week I'll be installing our first Windows 10 box.  We'll see if there are any issues, but I don't expect there will be as this update is a client-side and not a server side (WSUS side) update.

    -Jeff

    • Marked as answer by Fregi Ventum Sunday, August 9, 2015 8:34 PM
    Sunday, August 9, 2015 8:34 PM