Answered by:
WSUS Hosted on 2012R2 and Client Reporting Woes
Question
-
Greetings All,
I've been working on this for the last two weeks and am not getting anywhere. I'm hoping someone here might have some insight. I have a WSUS server running on 2012 R2, which has been working flawlessly until July. I suddenly find myself unable to many of my clients to update to the WSUS server. Many will update, and the ones who will work and won't remain consistent (except for one broken one I've managed to fix, but no idea how). There were no implemented configuration changes made to the WSUS server, or the clients, up to the point when I started having the issues.
The clients are combination of physical machines, virtual machines, DCs, member servers, and desktop machines, but all either 2012R2 or 8.1. One of the servers that will not report to the WSUS server is the WSUS server itself. :) These machines will still receive updates but they aren't reporting back. The issues appear to have started after the July Windows Update Client (KB3065988) went live.
I have tried to post my troubleshooting steps, but the forum keeps killing my message saying it is spam, so I'm trying a short-and-sweet post first. :)
Thanks!
JeffMonday, August 3, 2015 8:02 PM
Answers
-
Heya All,
I can now confirm that removing KB3065988 completely and leaving it off fixes the issue. All of my problem servers and desktops that I have done this on are, once again, reporting as expected. The control group I left it on still had the woes. I then removed it from the control group and they too are now reporting correctly also.
I'm interested to hear what MS has to say about your SR DarkHalf. :) Until then, I'm leaving it uninstalled.
This week I'll be installing our first Windows 10 box. We'll see if there are any issues, but I don't expect there will be as this update is a client-side and not a server side (WSUS side) update.
-Jeff
- Marked as answer by Fregi Ventum Sunday, August 9, 2015 8:34 PM
Sunday, August 9, 2015 8:34 PM
All replies
-
To correct the issues on each client I have tried the following:
- Reset WSUS authorization.
net stop wuauserv reg Delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v PingID /f reg Delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v AccountSid /f reg Delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v SusClientId /f reg Delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v SusClientIDValidation /f net start wuauserv wuauclt.exe /resetauthorization /detectnow
- Running the WindowsUpdateDiagnostics.diagcab
- Uninstalling and reinstalling KB3065988.
- Trying complete WSUS reset using this script:
:: Created by: Shawn Brink :: http://www.sevenforums.com :: Tutorial: http://www.sevenforums.com/tutorials/91738-windows-update-reset.html net stop bits net stop wuauserv net stop appidsvc net stop cryptsvc Ipconfig /flushdns Del "%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Downloader\qmgr*.dat" rmdir %windir%\softwaredistribution /s /q sc.exe sdset bits D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU) sc.exe sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU) cd /d %windir%\system32 Ren %systemroot%\system32\catroot2 catroot2.bak regsvr32.exe /s atl.dll regsvr32.exe /s urlmon.dll regsvr32.exe /s mshtml.dll regsvr32.exe /s shdocvw.dll regsvr32.exe /s browseui.dll regsvr32.exe /s jscript.dll regsvr32.exe /s vbscript.dll regsvr32.exe /s scrrun.dll regsvr32.exe /s msxml.dll regsvr32.exe /s msxml3.dll regsvr32.exe /s msxml6.dll regsvr32.exe /s actxprxy.dll regsvr32.exe /s softpub.dll regsvr32.exe /s wintrust.dll regsvr32.exe /s dssenh.dll regsvr32.exe /s rsaenh.dll regsvr32.exe /s gpkcsp.dll regsvr32.exe /s sccbase.dll regsvr32.exe /s slbcsp.dll regsvr32.exe /s cryptdlg.dll regsvr32.exe /s oleaut32.dll regsvr32.exe /s ole32.dll regsvr32.exe /s shell32.dll regsvr32.exe /s initpki.dll regsvr32.exe /s wuapi.dll regsvr32.exe /s wuaueng.dll regsvr32.exe /s wuaueng1.dll regsvr32.exe /s wucltui.dll regsvr32.exe /s wups.dll regsvr32.exe /s wups2.dll regsvr32.exe /s wuweb.dll regsvr32.exe /s qmgr.dll regsvr32.exe /s qmgrprxy.dll regsvr32.exe /s wucltux.dll regsvr32.exe /s muweb.dll regsvr32.exe /s wuwebv.dll regsvr32 /s wudriver.dll netsh winsock reset net start bits net start wuauserv net start appidsvc net start cryptsvc bitsadmin.exe /reset /allusers
- Performing steps with the SoftwareDistribution folder (also covered in the complete WSUS reset)net stop wuauserv net stop bits rd /s /q %windir%\softwaredistribution net start bits net start wuauserv wuauclt.exe /detectnow
- Completely removing the client from the WSUS computers list, then peforming a complete WSUS reset (above) and then a WSUS authorization (above).
When I run the WindowsUpdateDiagnostics.diagcab I am told that it found problems and fixed them each time. These problems have varied on each run...unfortunately I've not kept a log of what they are.
When I run the SolarWinds Diagnostic Tool for the WSUS Agent I receive the following two errors:
- Content: Error: Forbidden. Incorrect proxy client configuration - use settings tab to test proxy configuration settings; may also be caused by misconfigured SSL implementation or access rights on the WSUS server
- iuident.cab: Error: NotFound. Omitting required port suffix on URL to access WSUS installed to port 8530 or resource is unreachable
I am unable to download the iuident.cab file when I go to http://wsushost:8530/iuident.cab. If I simply open url:port to my WSUS server I get a blank page but no error. If I view the source there are no lines of code.
gpresult /v shows that WSUS settings are successfully applying via GPO. Going into the registry shows the correct URL, including the port of 8530.
- Edited by Fregi Ventum Monday, August 3, 2015 8:19 PM
Monday, August 3, 2015 8:16 PM -
Logs from one of the clients as follows (server and client host names modified from their original names):
2015-08-03 13:53:54:878 508 c08 Misc =========== Logging initialized (build: 7.9.9600.17930, tz: -0500) =========== 2015-08-03 13:53:54:878 508 c08 Misc = Process: C:\Windows\system32\svchost.exe 2015-08-03 13:53:54:878 508 c08 Misc = Module: c:\windows\system32\wuaueng.dll 2015-08-03 13:53:54:878 508 c08 Service ************* 2015-08-03 13:53:54:878 508 c08 Service ** START ** Service: Service startup 2015-08-03 13:53:54:878 508 c08 Service ********* 2015-08-03 13:53:54:878 508 c08 IdleTmr Non-AoAc machine. Aoac operations will be ignored. 2015-08-03 13:53:54:878 508 c08 Agent * WU client version 7.9.9600.17930 2015-08-03 13:53:54:878 508 c08 Agent WARNING: SleepStudyTracker: Machine is non-AOAC. Sleep study tracker disabled. 2015-08-03 13:53:54:878 508 c08 Agent * Base directory: C:\Windows\SoftwareDistribution 2015-08-03 13:53:54:878 508 c08 Agent * Access type: No proxy 2015-08-03 13:53:54:878 508 c08 Service UpdateNetworkState Ipv6, cNetworkInterfaces = 1. 2015-08-03 13:53:54:878 508 c08 Service UpdateNetworkState Ipv4, cNetworkInterfaces = 1. 2015-08-03 13:53:54:878 508 c08 Agent * Network state: Connected 2015-08-03 13:53:54:894 508 c08 Service UpdateNetworkState Ipv6, cNetworkInterfaces = 1. 2015-08-03 13:53:54:894 508 c08 Service UpdateNetworkState Ipv4, cNetworkInterfaces = 1. 2015-08-03 13:53:54:925 508 c08 Agent *********** Agent: Initializing global settings cache *********** 2015-08-03 13:53:54:925 508 c08 Agent * Endpoint Provider: 00000000-0000-0000-0000-000000000000 2015-08-03 13:53:54:925 508 1ac Misc WARNING: Network Cost is assumed to be not supported as something failed with trying to get handles to wcmapi.dll 2015-08-03 13:53:54:925 508 c08 Agent * WSUS server: http://wsushost:8530 2015-08-03 13:53:54:925 508 c08 Agent * WSUS status server: http://wsushost:8530 2015-08-03 13:53:54:925 508 c08 Agent * Target group: Servers;Virtual 2015-08-03 13:53:54:925 508 c08 Agent * Windows Update access disabled: No 2015-08-03 13:53:54:925 508 1ac WuTask WuTaskManager delay initialize completed successfully.. 2015-08-03 13:53:54:925 508 1ac AU Timer: 31DA7559-FE27-4810-8FF6-987195B1FD98, Expires 2015-08-04 12:11:53, not idle-only, not network-only 2015-08-03 13:53:54:925 508 1ac AU Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2015-08-04 04:39:55, not idle-only, not network-only 2015-08-03 13:53:54:925 508 1ac AU Timer: 29A863E7-8609-4D1E-B7CD-5668F857F1DB, Expires 2015-08-04 04:39:55, not idle-only, not network-only 2015-08-03 13:53:54:941 508 1ac Report CWERReporter::Init succeeded 2015-08-03 13:53:54:941 508 1ac Agent *********** Agent: Initializing Windows Update Agent *********** 2015-08-03 13:53:54:941 508 1ac DnldMgr Download manager restoring 0 downloads 2015-08-03 13:53:54:941 508 1ac AU ########### AU: Initializing Automatic Updates ########### 2015-08-03 13:53:54:941 508 1ac AU Additional Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} with Approval type {Pre-download notify} added to AU services list 2015-08-03 13:53:54:941 508 1ac AU AIR Mode is disabled 2015-08-03 13:53:54:941 508 7c DnldMgr Asking handlers to reconcile their sandboxes 2015-08-03 13:53:54:941 508 1ac AU # Policy Driven Provider: http://wsushost:8530 2015-08-03 13:53:54:972 508 1ac AU # Detection frequency: 22 2015-08-03 13:53:54:972 508 1ac AU # Target group: Servers;Virtual 2015-08-03 13:53:54:972 508 1ac AU # Approval type: Scheduled (Policy) 2015-08-03 13:53:54:972 508 1ac AU # Auto-install minor updates: Yes (Policy) 2015-08-03 13:53:54:972 508 1ac AU # ServiceTypeDefault: Service 117CAB2D-82B1-4B5A-A08C-4D62DBEE7782 Approval type: (Pre-download notify) 2015-08-03 13:53:54:972 508 1ac AU # Will interact with non-admins (Non-admins are elevated (Policy)) 2015-08-03 13:53:54:972 508 1ac AU WARNING: Failed to get Wu Exemption info from NLM, assuming not exempt, error = 0x80240037 2015-08-03 13:53:54:972 508 1ac AU WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037 2015-08-03 13:53:54:972 508 1ac AU AU finished delayed initialization 2015-08-03 13:53:54:972 508 1ac AU Currently AUX is enabled - so not show any WU Upgrade notifications. 2015-08-03 13:53:54:988 508 1ac AU WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037 2015-08-03 13:53:54:988 508 1ac AU WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037 2015-08-03 13:53:54:988 508 1ac AU Triggering AU detection through DetectNow API 2015-08-03 13:53:54:988 508 1ac AU Additional Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} with Approval type {Pre-download notify} added to AU services list 2015-08-03 13:53:54:988 508 1ac AU Triggering Online detection (non-interactive) 2015-08-03 13:53:54:988 508 1ac AU Adding timer: 2015-08-03 13:53:54:988 508 1ac AU Timer: 31DA7559-FE27-4810-8FF6-987195B1FD98, Expires 2015-08-03 18:53:54, not idle-only, not network-only 2015-08-03 13:53:54:988 508 c08 AU ############# 2015-08-03 13:53:54:988 508 c08 AU ## START ## AU: Search for updates 2015-08-03 13:53:54:988 508 c08 AU ######### 2015-08-03 13:53:55:003 508 c08 AU Additional Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} with Approval type {Pre-download notify} added to AU services list 2015-08-03 13:53:55:003 508 c08 IdleTmr WU operation (CSearchCall::Init ID 1) started; operation # 8; does use network; is not at background priority 2015-08-03 13:53:55:003 508 c08 IdleTmr Incremented idle timer priority operation counter to 1 2015-08-03 13:53:55:175 508 c08 Report *********** Report: Initializing static reporting data *********** 2015-08-03 13:53:55:175 508 c08 Report * OS Version = 6.3.9600.0.0.197008 2015-08-03 13:53:55:175 508 c08 Report * OS Product Type = 0x00000008 2015-08-03 13:53:55:191 508 c08 Report * Computer Brand = Microsoft Corporation 2015-08-03 13:53:55:191 508 c08 Report * Computer Model = Virtual Machine 2015-08-03 13:53:55:191 508 c08 Report * Platform Role = 1 2015-08-03 13:53:55:191 508 c08 Report * AlwaysOn/AlwaysConnected (AOAC) = 0 2015-08-03 13:53:55:191 508 c08 Report * Bios Revision = 090006 2015-08-03 13:53:55:191 508 c08 Report * Bios Name = BIOS Date: 05/23/12 17:15:53 Ver: 09.00.06 2015-08-03 13:53:55:191 508 c08 Report * Bios Release Date = 2012-05-23T00:00:00 2015-08-03 13:53:55:191 508 c08 Report * Bios Sku Number unavailable. 2015-08-03 13:53:55:191 508 c08 Report * Bios Vendor = American Megatrends Inc. 2015-08-03 13:53:55:191 508 c08 Report * Bios Family unavailable. 2015-08-03 13:53:55:191 508 c08 Report * Bios Major Release unavailable. 2015-08-03 13:53:55:191 508 c08 Report * Bios Minor Release unavailable. 2015-08-03 13:53:55:191 508 c08 Report * Locale ID = 1033 2015-08-03 13:53:55:191 508 c08 Handler Calculating current update level for this session 2015-08-03 13:53:56:878 508 c08 Handler UH: Current cumulative update level calculated: package identity Package_for_KB3000850~31bf3856ad364e35~amd64~~6.3.1.8, display name KB3000850, support URL http://support.microsoft.com/?kbid=3000850, timestamp 01d006125230c6f7 2015-08-03 13:53:56:878 508 c08 Handler Done calculating current update level for this session 2015-08-03 13:53:57:238 508 c08 Agent *** START *** Queueing Finding updates [CallerId = Windows Update Command Line Id = 1] 2015-08-03 13:53:57:253 508 c08 AU <<## SUBMITTED ## AU: Search for updates [CallId = {1C0C259D-4A28-429C-92A3-754180A3D36E} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}] 2015-08-03 13:53:57:253 508 c08 Agent SkipSelfUpdateCheck search flag set for serverId: 117CAB2D-82B1-4B5A-A08C-4D62DBEE7782 2015-08-03 13:53:57:253 508 c08 IdleTmr WU operation (CSearchCall::Init ID 2) started; operation # 10; does use network; is not at background priority 2015-08-03 13:53:57:253 508 c08 IdleTmr Incremented idle timer priority operation counter to 2 2015-08-03 13:53:57:253 508 c08 Agent *** START *** Queueing Finding updates [CallerId = Windows Update Command Line Id = 2] 2015-08-03 13:53:57:253 508 c08 AU <<## SUBMITTED ## AU: Search for updates [CallId = {831E803D-D6FF-4A8B-994C-98A3CD0E04E7} ServiceId = {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}] 2015-08-03 13:53:57:253 508 6e4 Agent *** END *** Queueing Finding updates [CallerId = Windows Update Command Line Id = 1] 2015-08-03 13:53:57:253 508 6e4 Agent ************* 2015-08-03 13:53:57:253 508 1274 Agent *** END *** Queueing Finding updates [CallerId = Windows Update Command Line Id = 2] 2015-08-03 13:53:57:253 508 6e4 Agent ** START ** Agent: Finding updates [CallerId = Windows Update Command Line Id = 1] 2015-08-03 13:53:57:253 508 6e4 Agent ********* 2015-08-03 13:53:57:253 508 1274 Agent ************* 2015-08-03 13:53:57:253 508 6e4 Agent * Online = Yes; Ignore download priority = No 2015-08-03 13:53:57:253 508 1274 Agent ** START ** Agent: Finding updates [CallerId = Windows Update Command Line Id = 2] 2015-08-03 13:53:57:253 508 6e4 Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1" 2015-08-03 13:53:57:253 508 1274 Agent ********* 2015-08-03 13:53:57:253 508 6e4 Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed 2015-08-03 13:53:57:253 508 1274 Agent * Online = Yes; Ignore download priority = No 2015-08-03 13:53:57:253 508 6e4 Agent * Search Scope = {Machine & All Users} 2015-08-03 13:53:57:253 508 1274 Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1" 2015-08-03 13:53:57:253 508 6e4 Agent * Caller SID for Applicability: S-1-5-18 2015-08-03 13:53:57:253 508 1274 Agent * ServiceID = {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} Third party service 2015-08-03 13:53:57:253 508 6e4 Agent * RegisterService is set 2015-08-03 13:53:57:253 508 1274 Agent * Search Scope = {Machine & All Users} 2015-08-03 13:53:57:253 508 1274 Agent * Caller SID for Applicability: S-1-5-18 2015-08-03 13:53:57:253 508 1274 Agent * RegisterService is set 2015-08-03 13:53:57:253 508 6e4 EP Got WSUS Client/Server URL: "http://wsushost:8530/ClientWebService/client.asmx" 2015-08-03 13:53:57:253 508 1274 EP Got 9482F4B4-E343-43B6-B170-9A65BC822C77 redir SecondaryServiceAuth URL: "117cab2d-82b1-4b5a-a08c-4d62dbee7782" 2015-08-03 13:53:57:269 508 1274 EP Got 117CAB2D-82B1-4B5A-A08C-4D62DBEE7782 redir Client/Server URL: "https://fe2.ws.microsoft.com/v6/ClientWebService/client.asmx" 2015-08-03 13:53:57:285 508 1274 PT +++++++++++ PT: Synchronizing server updates +++++++++++ 2015-08-03 13:53:57:285 508 1274 PT + ServiceId = {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}, Server URL = https://fe2.ws.microsoft.com/v6/ClientWebService/client.asmx 2015-08-03 13:53:57:285 508 1274 Agent Reading cached app categories using lifetime 604800 seconds 2015-08-03 13:53:57:285 508 1274 Agent Read 1 cached app categories 2015-08-03 13:53:57:285 508 1274 Agent SyncUpdates adding 1 visited app categories 2015-08-03 13:53:57:488 508 1274 PT + SyncUpdates round trips: 0 2015-08-03 13:53:57:566 508 1274 Agent * Added update {C21E26AB-BFEE-425B-BD0B-C0043B81B034}.1 to search result 2015-08-03 13:53:57:566 508 1274 Agent * Added update {F944750C-BED6-4116-BFC4-91361F87CE97}.1 to search result 2015-08-03 13:53:57:566 508 1274 Agent * Added update {AE53F50B-1F53-4E10-93A2-7005AD671608}.100 to search result 2015-08-03 13:53:57:566 508 1274 Agent * Added update {17A599BB-6485-4405-89C1-77A260C078D9}.100 to search result 2015-08-03 13:53:57:566 508 1274 Agent * Added update {1E536662-7256-42FA-9373-7A009A14400B}.100 to search result 2015-08-03 13:53:57:566 508 1274 Agent * Added update {DE323AF5-28CA-4BAB-A85B-B074001783BF}.1 to search result 2015-08-03 13:53:57:566 508 1274 Agent * Added update {D87FA2B6-A04D-4920-92AE-7C6586F98ED4}.1 to search result 2015-08-03 13:53:57:566 508 1274 Agent * Added update {00563009-B9BF-43A4-8B4E-5ACE3172912B}.2 to search result 2015-08-03 13:53:57:566 508 1274 Agent * Added update {BB8EED48-5EB9-481D-A043-D8BE51942055}.1 to search result 2015-08-03 13:53:57:566 508 1274 Agent * Added update {4849182B-70A4-4A3F-9FF9-054D8BCDCDDD}.1 to search result 2015-08-03 13:53:57:566 508 1274 Agent * Added update {A44878FB-450F-4C78-AC58-0F32712DDA1A}.1 to search result 2015-08-03 13:53:57:566 508 1274 Agent * Added update {5DBBEA84-90D6-42A4-B8EE-CA2BA1A42B1C}.1 to search result 2015-08-03 13:53:57:566 508 1274 Agent * Added update {2A4D62A5-450B-450C-A44E-65E9CC5DBD45}.1 to search result 2015-08-03 13:53:57:566 508 1274 Agent * Added update {A646B27E-937C-419F-B2A0-8817A4D1D5FD}.1 to search result 2015-08-03 13:53:57:566 508 1274 Agent * Found 14 updates and 25 categories in search; evaluated appl. rules of 74 out of 87 deployed entities 2015-08-03 13:53:57:581 508 1274 Agent ********* 2015-08-03 13:53:57:581 508 1274 Agent ** END ** Agent: Finding updates [CallerId = Windows Update Command Line Id = 2] 2015-08-03 13:53:57:581 508 1274 Agent ************* 2015-08-03 13:53:57:581 508 7c Report REPORT EVENT: {CE096FEC-3E1A-4755-BDBF-92739B81BF69} 2015-08-03 13:53:57:581-0500 1 147 [AGENT_DETECTION_FINISHED] 101 {00000000-0000-0000-0000-000000000000} 0 0 Windows Update Command Line Success Software Synchronization Windows Update Client successfully detected 14 updates. 2015-08-03 13:53:57:581 508 7c Report CWERReporter finished handling 10 events. (00000000) 2015-08-03 13:53:57:597 508 1274 Agent Removing per user update {A646B27E-937C-419F-B2A0-8817A4D1D5FD} from search result since it applies to no users 2015-08-03 13:53:57:597 508 1274 Agent Removing per user update {2A4D62A5-450B-450C-A44E-65E9CC5DBD45} from search result since it applies to no users 2015-08-03 13:53:57:597 508 1274 Agent Removing per user update {5DBBEA84-90D6-42A4-B8EE-CA2BA1A42B1C} from search result since it applies to no users 2015-08-03 13:53:57:597 508 1274 Agent Removing per user update {A44878FB-450F-4C78-AC58-0F32712DDA1A} from search result since it applies to no users 2015-08-03 13:53:57:597 508 1274 Agent Removing per user update {4849182B-70A4-4A3F-9FF9-054D8BCDCDDD} from search result since it applies to no users 2015-08-03 13:53:57:597 508 1274 Agent Removing per user update {BB8EED48-5EB9-481D-A043-D8BE51942055} from search result since it applies to no users 2015-08-03 13:53:57:597 508 1274 Agent Removing per user update {00563009-B9BF-43A4-8B4E-5ACE3172912B} from search result since it applies to no users 2015-08-03 13:53:57:597 508 1274 Agent Removing per user update {D87FA2B6-A04D-4920-92AE-7C6586F98ED4} from search result since it applies to no users 2015-08-03 13:53:57:597 508 1274 Agent Removing per user update {DE323AF5-28CA-4BAB-A85B-B074001783BF} from search result since it applies to no users 2015-08-03 13:53:57:597 508 1274 Agent Removing per user update {1E536662-7256-42FA-9373-7A009A14400B} from search result since it applies to no users 2015-08-03 13:53:57:597 508 1274 Agent Removing per user update {17A599BB-6485-4405-89C1-77A260C078D9} from search result since it applies to no users 2015-08-03 13:53:57:597 508 1274 Agent Removing per user update {AE53F50B-1F53-4E10-93A2-7005AD671608} from search result since it applies to no users 2015-08-03 13:53:57:597 508 1274 Agent Removing per user update {F944750C-BED6-4116-BFC4-91361F87CE97} from search result since it applies to no users 2015-08-03 13:53:57:597 508 1274 Agent Removing per user update {C21E26AB-BFEE-425B-BD0B-C0043B81B034} from search result since it applies to no users 2015-08-03 13:53:57:597 508 1274 IdleTmr WU operation (CSearchCall::Init ID 2, operation # 10) stopped; does use network; is not at background priority 2015-08-03 13:53:57:597 508 1274 IdleTmr Decremented idle timer priority operation counter to 1 2015-08-03 13:53:57:597 508 11ac AU >>## RESUMED ## AU: Search for updates [CallId = {831E803D-D6FF-4A8B-994C-98A3CD0E04E7} ServiceId = {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}] 2015-08-03 13:53:57:597 508 11ac AU # 0 updates detected 2015-08-03 13:53:57:597 508 11ac AU ######### 2015-08-03 13:53:57:597 508 11ac AU ## END ## AU: Search for updates [CallId = {831E803D-D6FF-4A8B-994C-98A3CD0E04E7} ServiceId = {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}] 2015-08-03 13:53:57:597 508 11ac AU ############# 2015-08-03 13:53:57:785 508 6e4 PT +++++++++++ PT: Synchronizing server updates +++++++++++ 2015-08-03 13:53:57:785 508 6e4 PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://wsushost:8530/ClientWebService/client.asmx 2015-08-03 13:53:57:785 508 6e4 PT WARNING: Cached cookie has expired or new PID is available 2015-08-03 13:53:57:785 508 6e4 EP Got WSUS SimpleTargeting URL: "http://wsushost:8530" 2015-08-03 13:53:57:785 508 6e4 IdleTmr WU operation (CAuthorizationCookieWrapper::InitializeSimpleTargetingCookie) started; operation # 12; does use network; is at background priority 2015-08-03 13:53:57:785 508 6e4 PT Initializing simple targeting cookie, clientId = 0541dbc0-02f5-426f-bb05-5f19bfa9b3b2, target group = Servers;Virtual, DNS name = clienthostname 2015-08-03 13:53:57:785 508 6e4 PT Server URL = http://wsushost:8530/SimpleAuthWebService/SimpleAuth.asmx 2015-08-03 13:53:57:800 508 6e4 IdleTmr WU operation (CAuthorizationCookieWrapper::InitializeSimpleTargetingCookie, operation # 12) stopped; does use network; is at background priority 2015-08-03 13:53:57:800 508 6e4 IdleTmr WU operation (CAgentProtocolTalker::GetCookie_WithRecovery) started; operation # 13; does use network; is at background priority 2015-08-03 13:53:57:816 508 6e4 IdleTmr WU operation (CAgentProtocolTalker::GetCookie_WithRecovery, operation # 13) stopped; does use network; is at background priority 2015-08-03 13:53:57:831 508 6e4 Agent Reading cached app categories using lifetime 604800 seconds 2015-08-03 13:53:57:831 508 6e4 Agent Read 0 cached app categories 2015-08-03 13:53:57:831 508 6e4 Agent SyncUpdates adding 0 visited app categories 2015-08-03 13:54:00:457 508 6e4 IdleTmr WU operation (CAgentProtocolTalker::SyncUpdates_WithRecover) started; operation # 14; does use network; is at background priority 2015-08-03 13:54:00:628 508 6e4 IdleTmr WU operation (CAgentProtocolTalker::SyncUpdates_WithRecover, operation # 14) stopped; does use network; is at background priority 2015-08-03 13:54:00:628 508 6e4 Agent Reading cached app categories using lifetime 604800 seconds 2015-08-03 13:54:00:628 508 6e4 Agent Read 0 cached app categories 2015-08-03 13:54:00:628 508 6e4 Agent SyncUpdates adding 0 visited app categories 2015-08-03 13:54:00:644 508 6e4 IdleTmr WU operation (CAgentProtocolTalker::SyncUpdates_WithRecover) started; operation # 15; does use network; is at background priority 2015-08-03 13:54:00:722 508 6e4 IdleTmr WU operation (CAgentProtocolTalker::SyncUpdates_WithRecover, operation # 15) stopped; does use network; is at background priority 2015-08-03 13:54:00:722 508 6e4 PT + SyncUpdates round trips: 2 2015-08-03 13:54:02:582 508 7c Report CWERReporter finished handling 5 events. (00000000) 2015-08-03 13:54:02:894 508 6e4 Agent WARNING: Failed to evaluate Installed rule, updateId = {{22FFD207-0EB5-4FCF-9F6A-67078327D7A3}.200}, hr = 80070057 2015-08-03 13:54:02:910 508 6e4 Agent WARNING: Failed to evaluate Installable rule, updateId = {{22FFD207-0EB5-4FCF-9F6A-67078327D7A3}.200}, hr = 80070057 2015-08-03 13:54:03:550 508 6e4 PT +++++++++++ PT: Synchronizing extended update info +++++++++++ 2015-08-03 13:54:03:550 508 6e4 PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://wsushost:8530/ClientWebService/client.asmx 2015-08-03 13:54:03:582 508 6e4 IdleTmr WU operation (CAgentProtocolTalker::GetExtendedUpdateInfo_WithRecovery) started; operation # 16; does use network; is at background priority 2015-08-03 13:54:04:597 508 6e4 IdleTmr WU operation (CAgentProtocolTalker::GetExtendedUpdateInfo_WithRecovery, operation # 16) stopped; does use network; is at background priority 2015-08-03 13:54:04:817 508 6e4 Agent * Found 0 updates and 76 categories in search; evaluated appl. rules of 629 out of 978 deployed entities 2015-08-03 13:54:04:817 508 6e4 Agent Reporting status event with 0 installable, 129 installed, 0 installed pending, 0 failed and 0 downloaded updates 2015-08-03 13:54:04:817 508 6e4 Agent ********* 2015-08-03 13:54:04:817 508 6e4 Agent ** END ** Agent: Finding updates [CallerId = Windows Update Command Line Id = 1] 2015-08-03 13:54:04:817 508 6e4 Agent ************* 2015-08-03 13:54:04:832 508 6e4 IdleTmr WU operation (CSearchCall::Init ID 1, operation # 8) stopped; does use network; is not at background priority 2015-08-03 13:54:04:832 508 6e4 IdleTmr Decremented idle timer priority operation counter to 0 2015-08-03 13:54:04:832 508 11ac AU >>## RESUMED ## AU: Search for updates [CallId = {1C0C259D-4A28-429C-92A3-754180A3D36E} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}] 2015-08-03 13:54:04:832 508 11ac AU # 0 updates detected 2015-08-03 13:54:04:832 508 11ac AU ######### 2015-08-03 13:54:04:879 508 11ac AU ## END ## AU: Search for updates [CallId = {1C0C259D-4A28-429C-92A3-754180A3D36E} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}] 2015-08-03 13:54:04:879 508 11ac AU ############# 2015-08-03 13:54:04:879 508 11ac AU All AU searches complete. 2015-08-03 13:54:04:879 508 11ac AU AU setting next detection timeout to 2015-08-04 16:25:56 2015-08-03 13:54:04:879 508 11ac AU Adding timer: 2015-08-03 13:54:04:879 508 11ac AU Timer: 31DA7559-FE27-4810-8FF6-987195B1FD98, Expires 2015-08-04 16:25:56, not idle-only, not network-only 2015-08-03 13:54:04:879 508 11ac AU # Publishing WNF Per user update count event Count: 0 SID {S-1-5-21-394886948-3945694780-3723845208-500} Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} 2015-08-03 13:54:04:942 508 11ac AU Currently AUX is enabled - so not show any WU Upgrade notifications. 2015-08-03 13:54:04:942 508 11ac AU WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037 2015-08-03 13:54:04:942 508 11ac AU WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037 2015-08-03 13:54:09:818 508 7c Report REPORT EVENT: {6DC58D22-3B79-4175-8239-93A9ED28D7F6} 2015-08-03 13:54:04:817-0500 1 147 [AGENT_DETECTION_FINISHED] 101 {00000000-0000-0000-0000-000000000000} 0 0 Windows Update Command Line Success Software Synchronization Windows Update Client successfully detected 0 updates. 2015-08-03 13:54:09:818 508 7c Report REPORT EVENT: {CCC24F18-B11C-4D58-8AB0-C09762EEA715} 2015-08-03 13:54:04:817-0500 1 156 [AGENT_STATUS_30] 101 {00000000-0000-0000-0000-000000000000} 0 0 Windows Update Command Line Success Pre-Deployment Check Reporting client status. 2015-08-03 13:54:09:943 508 7c Report CWERReporter finished handling 2 events. (00000000) 2015-08-03 14:02:04:988 508 7c EP Got 117CAB2D-82B1-4B5A-A08C-4D62DBEE7782 redir Client/Server URL: "https://fe2.ws.microsoft.com/v6/ClientWebService/client.asmx" 2015-08-03 14:02:05:082 508 7c EP Got 117CAB2D-82B1-4B5A-A08C-4D62DBEE7782 redir Reporting URL: "http://statsfe2.ws.microsoft.com/ReportingWebService/ReportingWebService.asmx" 2015-08-03 14:02:05:082 508 7c Report OpenReportingWebServiceConnection, reporting URL = http://statsfe2.ws.microsoft.com/ReportingWebService/ReportingWebService.asmx 2015-08-03 14:02:05:082 508 7c IdleTmr WU operation (CLegacyEventUploader::HandleEvents) started; operation # 21; does use network; is at background priority 2015-08-03 14:02:05:082 508 7c Report Uploading 1 events using cached cookie. 2015-08-03 14:02:05:459 508 7c Report Reporter successfully uploaded 1 events. 2015-08-03 14:02:05:459 508 7c IdleTmr WU operation (CLegacyEventUploader::HandleEvents, operation # 21) stopped; does use network; is at background priority 2015-08-03 14:02:05:459 508 7c EP Got WSUS Client/Server URL: "http://wsushost:8530/ClientWebService/client.asmx" 2015-08-03 14:02:05:504 508 7c EP Got WSUS Reporting URL: "http://wsushost:8530/ReportingWebService/ReportingWebService.asmx" 2015-08-03 14:02:05:504 508 7c Report OpenReportingWebServiceConnection, reporting URL = http://wsushost:8530/ReportingWebService/ReportingWebService.asmx 2015-08-03 14:02:05:504 508 7c IdleTmr WU operation (CLegacyEventUploader::HandleEvents) started; operation # 22; does use network; is at background priority 2015-08-03 14:02:05:504 508 7c Report Uploading 2 events using cached cookie. 2015-08-03 14:02:05:519 508 7c Report Reporter successfully uploaded 2 events. 2015-08-03 14:02:05:519 508 7c IdleTmr WU operation (CLegacyEventUploader::HandleEvents, operation # 22) stopped; does use network; is at background priority 2015-08-03 14:02:56:598 508 c08 Report WARNING: CSerializationHelper:: InitSerialize failed : 0x80070002 2015-08-03 14:08:21:698 508 c08 AU Currently AUX is enabled - so not show any WU Upgrade notifications. 2015-08-03 14:08:21:729 508 c08 AU WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037 2015-08-03 14:08:21:729 508 c08 AU WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037 2015-08-03 14:08:46:154 508 c08 AU ########### AU: Uninitializing Automatic Updates ########### 2015-08-03 14:08:46:154 508 c08 WuTask Uninit WU Task Manager 2015-08-03 14:08:46:201 508 c08 AU Earliest future timer found: 2015-08-03 14:08:46:201 508 c08 AU Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2015-08-04 04:39:55, not idle-only, not network-only 2015-08-03 14:08:46:216 508 c08 AU Earliest future timer found: 2015-08-03 14:08:46:216 508 c08 AU Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2015-08-04 04:39:55, not idle-only, not network-only 2015-08-03 14:08:46:294 508 c08 Service ********* 2015-08-03 14:08:46:294 508 c08 Service ** END ** Service: Service exit [Exit code = 0x240001] 2015-08-03 14:08:46:294 508 c08 Service ************* 2015-08-03 14:08:50:341 508 1308 Misc =========== Logging initialized (build: 7.9.9600.17930, tz: -0500) =========== 2015-08-03 14:08:50:341 508 1308 Misc = Process: C:\Windows\system32\svchost.exe 2015-08-03 14:08:50:341 508 1308 Misc = Module: c:\windows\system32\wuaueng.dll 2015-08-03 14:08:50:341 508 1308 Service ************* 2015-08-03 14:08:50:341 508 1308 Service ** START ** Service: Service startup 2015-08-03 14:08:50:341 508 1308 Service ********* 2015-08-03 14:08:50:373 508 1308 IdleTmr Non-AoAc machine. Aoac operations will be ignored. 2015-08-03 14:08:50:373 508 1308 Agent * WU client version 7.9.9600.17930 2015-08-03 14:08:50:373 508 1308 Agent WARNING: SleepStudyTracker: Machine is non-AOAC. Sleep study tracker disabled. 2015-08-03 14:08:50:373 508 1308 Agent * Base directory: C:\Windows\SoftwareDistribution 2015-08-03 14:08:50:373 508 1308 Agent * Access type: No proxy 2015-08-03 14:08:50:373 508 1308 Service UpdateNetworkState Ipv6, cNetworkInterfaces = 1. 2015-08-03 14:08:50:373 508 1308 Service UpdateNetworkState Ipv4, cNetworkInterfaces = 1. 2015-08-03 14:08:50:373 508 1308 Agent * Network state: Connected 2015-08-03 14:08:50:373 508 1308 Service UpdateNetworkState Ipv6, cNetworkInterfaces = 1. 2015-08-03 14:08:50:373 508 1308 Service UpdateNetworkState Ipv4, cNetworkInterfaces = 1. 2015-08-03 14:08:50:404 508 1308 Agent *********** Agent: Initializing global settings cache *********** 2015-08-03 14:08:50:404 508 1308 Agent * Endpoint Provider: 00000000-0000-0000-0000-000000000000 2015-08-03 14:08:50:404 508 1308 Agent * WSUS server: http://wsushost:8530 2015-08-03 14:08:50:404 508 1308 Agent * WSUS status server: http://wsushost:8530 2015-08-03 14:08:50:404 508 1308 Agent * Target group: Servers;Virtual 2015-08-03 14:08:50:404 508 1308 Agent * Windows Update access disabled: No 2015-08-03 14:08:50:419 508 1308 Misc WARNING: Network Cost is assumed to be not supported as something failed with trying to get handles to wcmapi.dll 2015-08-03 14:08:50:419 508 1308 WuTask WuTaskManager delay initialize completed successfully.. 2015-08-03 14:08:50:419 508 1308 AU Timer: 31DA7559-FE27-4810-8FF6-987195B1FD98, Expires 2015-08-04 16:25:56, not idle-only, not network-only 2015-08-03 14:08:50:419 508 1308 AU Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2015-08-04 04:39:55, not idle-only, not network-only 2015-08-03 14:08:50:419 508 1308 AU Timer: 29A863E7-8609-4D1E-B7CD-5668F857F1DB, Expires 2015-08-04 04:39:55, not idle-only, not network-only 2015-08-03 14:08:50:435 508 1308 Report WARNING: CSerializationHelper:: InitSerialize failed : 0x80070002 2015-08-03 14:08:50:435 508 1308 Report CWERReporter::Init succeeded 2015-08-03 14:08:50:435 508 1308 Agent *********** Agent: Initializing Windows Update Agent *********** 2015-08-03 14:08:50:435 508 1308 DnldMgr Download manager restoring 0 downloads 2015-08-03 14:08:50:435 508 1308 AU ########### AU: Initializing Automatic Updates ########### 2015-08-03 14:08:50:435 508 1308 AU Additional Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} with Approval type {Pre-download notify} added to AU services list 2015-08-03 14:08:50:435 508 1308 AU AIR Mode is disabled 2015-08-03 14:08:50:435 508 1308 AU # Policy Driven Provider: http://wsushost:8530 2015-08-03 14:08:50:435 508 1308 AU # Detection frequency: 22 2015-08-03 14:08:50:435 508 1308 AU # Target group: Servers;Virtual 2015-08-03 14:08:50:435 508 1308 AU # Approval type: Scheduled (Policy) 2015-08-03 14:08:50:435 508 1308 AU # Auto-install minor updates: Yes (Policy) 2015-08-03 14:08:50:435 508 1308 AU # ServiceTypeDefault: Service 117CAB2D-82B1-4B5A-A08C-4D62DBEE7782 Approval type: (Pre-download notify) 2015-08-03 14:08:50:435 508 1308 AU # Will interact with non-admins (Non-admins are elevated (Policy)) 2015-08-03 14:08:50:435 508 1308 AU WARNING: Failed to get Wu Exemption info from NLM, assuming not exempt, error = 0x80240037 2015-08-03 14:08:50:435 508 1308 AU WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037 2015-08-03 14:08:50:451 508 1308 AU AU finished delayed initialization 2015-08-03 14:08:50:451 508 1308 AU Currently AUX is enabled - so not show any WU Upgrade notifications. 2015-08-03 14:08:50:451 508 1308 AU WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037 2015-08-03 14:08:50:451 508 1308 AU WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037 2015-08-03 14:08:50:451 508 1308 AU Adding timer: 2015-08-03 14:08:50:451 508 1308 AU Timer: 31DA7559-FE27-4810-8FF6-987195B1FD98, Expires 2015-08-04 16:25:56, not idle-only, not network-only 2015-08-03 14:08:50:451 508 1348 DnldMgr Asking handlers to reconcile their sandboxes 2015-08-03 14:09:33:092 508 1308 AU ########### AU: Uninitializing Automatic Updates ########### 2015-08-03 14:09:33:092 508 1308 WuTask Uninit WU Task Manager 2015-08-03 14:09:33:124 508 1308 AU Earliest future timer found: 2015-08-03 14:09:33:124 508 1308 AU Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2015-08-04 04:39:55, not idle-only, not network-only 2015-08-03 14:09:33:139 508 1308 AU Earliest future timer found: 2015-08-03 14:09:33:139 508 1308 AU Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2015-08-04 04:39:55, not idle-only, not network-only 2015-08-03 14:09:33:186 508 1308 Service ********* 2015-08-03 14:09:33:186 508 1308 Service ** END ** Service: Service exit [Exit code = 0x240001] 2015-08-03 14:09:33:186 508 1308 Service ************* 2015-08-03 14:09:37:061 508 1284 Misc =========== Logging initialized (build: 7.9.9600.17930, tz: -0500) =========== 2015-08-03 14:09:37:061 508 1284 Misc = Process: C:\Windows\system32\svchost.exe 2015-08-03 14:09:37:061 508 1284 Misc = Module: c:\windows\system32\wuaueng.dll 2015-08-03 14:09:37:061 508 1284 Service ************* 2015-08-03 14:09:37:061 508 1284 Service ** START ** Service: Service startup 2015-08-03 14:09:37:061 508 1284 Service ********* 2015-08-03 14:09:37:077 508 1284 IdleTmr Non-AoAc machine. Aoac operations will be ignored. 2015-08-03 14:09:37:077 508 1284 Agent * WU client version 7.9.9600.17930 2015-08-03 14:09:37:077 508 1284 Agent WARNING: SleepStudyTracker: Machine is non-AOAC. Sleep study tracker disabled. 2015-08-03 14:09:37:077 508 1284 Agent * Base directory: C:\Windows\SoftwareDistribution 2015-08-03 14:09:37:077 508 1284 Agent * Access type: No proxy 2015-08-03 14:09:37:077 508 1284 Service UpdateNetworkState Ipv6, cNetworkInterfaces = 1. 2015-08-03 14:09:37:077 508 1284 Service UpdateNetworkState Ipv4, cNetworkInterfaces = 1. 2015-08-03 14:09:37:077 508 1284 Agent * Network state: Connected 2015-08-03 14:09:37:077 508 1284 Service UpdateNetworkState Ipv6, cNetworkInterfaces = 1. 2015-08-03 14:09:37:077 508 1284 Service UpdateNetworkState Ipv4, cNetworkInterfaces = 1. 2015-08-03 14:09:37:108 508 1284 Agent *********** Agent: Initializing global settings cache *********** 2015-08-03 14:09:37:108 508 1284 Agent * Endpoint Provider: 00000000-0000-0000-0000-000000000000 2015-08-03 14:09:37:108 508 1284 Agent * WSUS server: http://wsushost:8530 2015-08-03 14:09:37:108 508 1284 Agent * WSUS status server: http://wsushost:8530 2015-08-03 14:09:37:108 508 1284 Agent * Target group: Servers;Virtual 2015-08-03 14:09:37:108 508 1284 Agent * Windows Update access disabled: No 2015-08-03 14:09:37:108 508 1284 Misc WARNING: Network Cost is assumed to be not supported as something failed with trying to get handles to wcmapi.dll 2015-08-03 14:09:37:124 508 1284 WuTask WuTaskManager delay initialize completed successfully.. 2015-08-03 14:09:37:124 508 1284 AU Timer: 31DA7559-FE27-4810-8FF6-987195B1FD98, Expires 2015-08-04 16:25:56, not idle-only, not network-only 2015-08-03 14:09:37:124 508 1284 AU Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2015-08-04 04:39:55, not idle-only, not network-only 2015-08-03 14:09:37:124 508 1284 AU Timer: 29A863E7-8609-4D1E-B7CD-5668F857F1DB, Expires 2015-08-04 04:39:55, not idle-only, not network-only 2015-08-03 14:09:37:124 508 1284 Report WARNING: CSerializationHelper:: InitSerialize failed : 0x80070002 2015-08-03 14:09:37:139 508 1284 Report CWERReporter::Init succeeded 2015-08-03 14:09:37:139 508 1284 Agent *********** Agent: Initializing Windows Update Agent *********** 2015-08-03 14:09:37:139 508 1284 DnldMgr Download manager restoring 0 downloads 2015-08-03 14:09:37:139 508 1284 AU ########### AU: Initializing Automatic Updates ########### 2015-08-03 14:09:37:139 508 1284 AU Additional Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} with Approval type {Pre-download notify} added to AU services list 2015-08-03 14:09:37:139 508 1284 AU AIR Mode is disabled 2015-08-03 14:09:37:139 508 1284 AU # Policy Driven Provider: http://wsushost:8530 2015-08-03 14:09:37:139 508 1284 AU # Detection frequency: 22 2015-08-03 14:09:37:139 508 1284 AU # Target group: Servers;Virtual 2015-08-03 14:09:37:139 508 1284 AU # Approval type: Scheduled (Policy) 2015-08-03 14:09:37:139 508 1284 AU # Auto-install minor updates: Yes (Policy) 2015-08-03 14:09:37:139 508 1284 AU # ServiceTypeDefault: Service 117CAB2D-82B1-4B5A-A08C-4D62DBEE7782 Approval type: (Pre-download notify) 2015-08-03 14:09:37:139 508 1284 AU # Will interact with non-admins (Non-admins are elevated (Policy)) 2015-08-03 14:09:37:139 508 1284 AU WARNING: Failed to get Wu Exemption info from NLM, assuming not exempt, error = 0x80240037 2015-08-03 14:09:37:139 508 1284 AU WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037 2015-08-03 14:09:37:139 508 1284 AU AU finished delayed initialization 2015-08-03 14:09:37:139 508 1284 AU Currently AUX is enabled - so not show any WU Upgrade notifications. 2015-08-03 14:09:37:139 508 1284 AU WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037 2015-08-03 14:09:37:155 508 1284 AU WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037 2015-08-03 14:09:37:155 508 15ac DnldMgr Asking handlers to reconcile their sandboxes 2015-08-03 14:10:00:001 508 1284 AU ########### AU: Uninitializing Automatic Updates ########### 2015-08-03 14:10:00:001 508 1284 WuTask Uninit WU Task Manager 2015-08-03 14:10:00:032 508 1284 AU Earliest future timer found: 2015-08-03 14:10:00:032 508 1284 AU Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2015-08-04 04:39:55, not idle-only, not network-only 2015-08-03 14:10:00:048 508 1284 AU Earliest future timer found: 2015-08-03 14:10:00:048 508 1284 AU Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2015-08-04 04:39:55, not idle-only, not network-only 2015-08-03 14:10:00:110 508 1284 Service ********* 2015-08-03 14:10:00:110 508 1284 Service ** END ** Service: Service exit [Exit code = 0x240001] 2015-08-03 14:10:00:110 508 1284 Service ************* 2015-08-03 14:10:03:939 508 17a0 Misc =========== Logging initialized (build: 7.9.9600.17930, tz: -0500) =========== 2015-08-03 14:10:03:939 508 17a0 Misc = Process: C:\Windows\system32\svchost.exe 2015-08-03 14:10:03:939 508 17a0 Misc = Module: c:\windows\system32\wuaueng.dll 2015-08-03 14:10:03:939 508 17a0 Service ************* 2015-08-03 14:10:03:939 508 17a0 Service ** START ** Service: Service startup 2015-08-03 14:10:03:939 508 17a0 Service ********* 2015-08-03 14:10:03:955 508 17a0 IdleTmr Non-AoAc machine. Aoac operations will be ignored. 2015-08-03 14:10:03:955 508 17a0 Agent * WU client version 7.9.9600.17930 2015-08-03 14:10:03:955 508 17a0 Agent WARNING: SleepStudyTracker: Machine is non-AOAC. Sleep study tracker disabled. 2015-08-03 14:10:03:955 508 17a0 Agent * Base directory: C:\Windows\SoftwareDistribution 2015-08-03 14:10:03:955 508 17a0 Agent * Access type: No proxy 2015-08-03 14:10:03:955 508 17a0 Service UpdateNetworkState Ipv6, cNetworkInterfaces = 1. 2015-08-03 14:10:03:955 508 17a0 Service UpdateNetworkState Ipv4, cNetworkInterfaces = 1. 2015-08-03 14:10:03:955 508 17a0 Agent * Network state: Connected 2015-08-03 14:10:03:970 508 17a0 Service UpdateNetworkState Ipv6, cNetworkInterfaces = 1. 2015-08-03 14:10:03:970 508 17a0 Service UpdateNetworkState Ipv4, cNetworkInterfaces = 1. 2015-08-03 14:10:03:986 508 17a0 Agent *********** Agent: Initializing global settings cache *********** 2015-08-03 14:10:03:986 508 17a0 Agent * Endpoint Provider: 00000000-0000-0000-0000-000000000000 2015-08-03 14:10:03:986 508 17a0 Agent * WSUS server: http://wsushost:8530 2015-08-03 14:10:03:986 508 17a0 Agent * WSUS status server: http://wsushost:8530 2015-08-03 14:10:03:986 508 17a0 Agent * Target group: Servers;Virtual 2015-08-03 14:10:03:986 508 17a0 Agent * Windows Update access disabled: No 2015-08-03 14:10:04:001 508 17a0 Misc WARNING: Network Cost is assumed to be not supported as something failed with trying to get handles to wcmapi.dll 2015-08-03 14:10:04:001 508 17a0 WuTask WuTaskManager delay initialize completed successfully.. 2015-08-03 14:10:04:001 508 17a0 AU Timer: 31DA7559-FE27-4810-8FF6-987195B1FD98, Expires 2015-08-04 16:25:56, not idle-only, not network-only 2015-08-03 14:10:04:001 508 17a0 AU Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2015-08-04 04:39:55, not idle-only, not network-only 2015-08-03 14:10:04:001 508 17a0 AU Timer: 29A863E7-8609-4D1E-B7CD-5668F857F1DB, Expires 2015-08-04 04:39:55, not idle-only, not network-only 2015-08-03 14:10:04:017 508 17a0 Report CWERReporter::Init succeeded 2015-08-03 14:10:04:017 508 17a0 Agent *********** Agent: Initializing Windows Update Agent *********** 2015-08-03 14:10:04:017 508 17a0 DnldMgr Download manager restoring 0 downloads 2015-08-03 14:10:04:017 508 17a0 AU ########### AU: Initializing Automatic Updates ########### 2015-08-03 14:10:04:017 508 17a0 AU Additional Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} with Approval type {Pre-download notify} added to AU services list 2015-08-03 14:10:04:017 508 17a0 AU AIR Mode is disabled 2015-08-03 14:10:04:017 508 17a0 AU # Policy Driven Provider: http://wsushost:8530 2015-08-03 14:10:04:017 508 17a0 AU # Detection frequency: 22 2015-08-03 14:10:04:017 508 17a0 AU # Target group: Servers;Virtual 2015-08-03 14:10:04:017 508 17a0 AU # Approval type: Scheduled (Policy) 2015-08-03 14:10:04:017 508 17a0 AU # Auto-install minor updates: Yes (Policy) 2015-08-03 14:10:04:017 508 17a0 AU # ServiceTypeDefault: Service 117CAB2D-82B1-4B5A-A08C-4D62DBEE7782 Approval type: (Pre-download notify) 2015-08-03 14:10:04:017 508 17a0 AU # Will interact with non-admins (Non-admins are elevated (Policy)) 2015-08-03 14:10:04:017 508 17a0 AU WARNING: Failed to get Wu Exemption info from NLM, assuming not exempt, error = 0x80240037 2015-08-03 14:10:04:017 508 17a0 AU WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037 2015-08-03 14:10:04:033 508 17a0 AU AU finished delayed initialization 2015-08-03 14:10:04:033 508 17a0 AU Currently AUX is enabled - so not show any WU Upgrade notifications. 2015-08-03 14:10:04:033 508 17a0 AU WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037 2015-08-03 14:10:04:033 508 17a0 AU WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037 2015-08-03 14:10:04:033 508 10f8 DnldMgr Asking handlers to reconcile their sandboxes 2015-08-03 14:20:04:045 508 166c AU Earliest future timer found: 2015-08-03 14:20:04:045 508 166c AU Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2015-08-04 04:39:55, not idle-only, not network-only 2015-08-03 14:20:05:051 508 17a0 AU ########### AU: Uninitializing Automatic Updates ########### 2015-08-03 14:20:05:088 508 17a0 WuTask Uninit WU Task Manager 2015-08-03 14:20:05:132 508 17a0 AU Earliest future timer found: 2015-08-03 14:20:05:132 508 17a0 AU Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2015-08-04 04:39:55, not idle-only, not network-only 2015-08-03 14:20:05:149 508 17a0 AU Earliest future timer found: 2015-08-03 14:20:05:149 508 17a0 AU Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2015-08-04 04:39:55, not idle-only, not network-only 2015-08-03 14:20:05:211 508 17a0 Service ********* 2015-08-03 14:20:05:211 508 17a0 Service ** END ** Service: Service exit [Exit code = 0x240001] 2015-08-03 14:20:05:211 508 17a0 Service *************
Monday, August 3, 2015 8:21 PM -
I have the same issue. many Windows 2012 R2 stopping reporting since later July. I suspected that some windows update broken this. It had been working flawlessly before.Monday, August 3, 2015 8:44 PM
-
On two of the affected servers I did the following:
- stopped WUAUSERV and BITS
- deleted the SoftwareDistribution folder
- uninstalled KB3065988 and rebooted
- removed the client from WSUS
- rebooted client
- upon reboot and login, installed a fresh copy of KB3065988 directly downloaded from MS and not from the WSUS server
- rebooted
- upon reboot and login, ran wuauclt /detectnow and noted the client appeared back in WSUS as "Not yet reported"
- ran a check for windows updates and noted client listed as newly reported in WSUS
- installed any updates that were waiting and rebooted
Based on these, it is clearly not a server, GPO or client configuration issue. Now I'll wait for 24 - 48 hours and make sure that the clients continue to report. Historically I've been able to get them to report using a similar method, but only the once. This is the first time I've used a different copy of the KB. Perhaps the one on the WSUS server is corrupt.
Monday, August 3, 2015 9:17 PM -
What is the Version Number for WSUS that's displayed in the main page of the WSUS Console? Maybe you missed an Update for your WSUS and that's why you got the problems with your clients.Tuesday, August 4, 2015 6:26 AM
-
That's a very good question Michael. I was scouring the web just yesterday for an update to the 2012R2 role which would match the new client version, but I have failed to find anything as of yet.
The server version is 6.3.9600.16384.
The client version is now 7.9.9600.17930The client was 7.9.9600.16384 prior to KB3065988. :) I'd love to see a server version of 6.3.9600.17930 too.
Tuesday, August 4, 2015 2:22 PM -
uninstalling the update KB3065988
and running wuauclt /reportnow corrected it for my windows 2012R2 servers will see if reinstalling breaks it again.
Wednesday, August 5, 2015 8:14 PM -
I'm having the same problem description. I will be trying to uninstall KB 3065988 as well to see if it corrects the issue.Wednesday, August 5, 2015 9:52 PM
-
With the described method of remediation above I am down only a few problem machines, which isn't too bad. I'm going to give them a full week of monitoring before I bounce the update again on those devices.Thursday, August 6, 2015 4:34 PM
-
uninstalling the update KB3065988
and running wuauclt /reportnow corrected it for my windows 2012R2 servers will see if reinstalling breaks it again.
Heya DarkHalf,
Definitely let me know how you make out with the re-install. I'm considering uninstalling the KB and declining it on my WSUS server so it doesn't re-apply if re-installing the KB breaks it again.
Thursday, August 6, 2015 4:39 PM -
i have since set the update to uninstall on my WSUS and opened a SR with Microsoft on this. unfortunately reinstalling did not work and the uninstall forces a reboot, so on the next update cycle everything should be back to normal.
Thursday, August 6, 2015 6:29 PM -
Thanks for posting back DarkHalf. So that I am clear, if you uninstall things seem to work fine, but once you re-install they fail once more? As a result you are declining the update in WSUS on your end?i have since set the update to uninstall on my WSUS and opened a SR with Microsoft on this. unfortunately reinstalling did not work and the uninstall forces a reboot, so on the next update cycle everything should be back to normal.
Thursday, August 6, 2015 7:46 PM -
correct.
uninstall KB3065988, reboot, wuauclt /reportnow
i have since tagged the update for uninstall so it will be removed from the hosts that have it already (several dozen)
Friday, August 7, 2015 3:24 PM -
Awesome DarkHalf. I have approved KB3065988 for uninstall in my environment as well. Let us know how you get on with your SR with MS please. :Dcorrect.
uninstall KB3065988, reboot, wuauclt /reportnow
i have since tagged the update for uninstall so it will be removed from the hosts that have it already (several dozen)
Friday, August 7, 2015 6:17 PM -
I had a bit of an issue with a few of my clients even after the removal of the KB failing to report. I ran the WindowsUpdateDiagnostics.diagcab tool on them and it reported it corrected a problem with a recently installed update. I then checked for updates again and once more KB3065988 was available for uninstall. I ran that uninstall again (which did not prompt for a reboot this time) and then a wuauclt /reportnow /detectnow. After that the remaining nodes reported in.
I'll watch them again and see if they fail to report in 48 hours. :D
-Jeff
Friday, August 7, 2015 7:08 PM -
Heya All,
I can now confirm that removing KB3065988 completely and leaving it off fixes the issue. All of my problem servers and desktops that I have done this on are, once again, reporting as expected. The control group I left it on still had the woes. I then removed it from the control group and they too are now reporting correctly also.
I'm interested to hear what MS has to say about your SR DarkHalf. :) Until then, I'm leaving it uninstalled.
This week I'll be installing our first Windows 10 box. We'll see if there are any issues, but I don't expect there will be as this update is a client-side and not a server side (WSUS side) update.
-Jeff
- Marked as answer by Fregi Ventum Sunday, August 9, 2015 8:34 PM
Sunday, August 9, 2015 8:34 PM
