locked
WU Client failed searching for update with error 0x8024000b RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    We have a few workstations that are no longer reporting to WSUS. I noticed the issue while trying to deploy the latest version of Java via SolarWinds Patch Manager back in April/May. We started troubleshooting Patch Manager, but the problem appears to be with the clients/WSUS. Our environment consists of W2K8 R2 servers and Windows 7 workstations. Can someone please take a look at the below windows update log entries from today to see what is going on?

    Thanks,

    Chad


    • Edited by HTCIT Thursday, July 21, 2016 3:59 PM
    Monday, July 18, 2016 8:20 PM

Answers

All replies

  • Question
    Sign in to vote
    1
    Sign in to vote
    [3AM is default wakeup timer for AU]
    2016-07-18 03:00:10:958 1240 408 AU Forced install timer expired for AUInstallType = 4
    2016-07-18 03:00:10:958 1240 408 AU UpdateDownloadProperties: 0 download(s) are still in progress.
    2016-07-18 03:00:10:958 1240 408 AU Setting AU scheduled install time to 2016-07-19 07:00:00
    2016-07-18 03:00:10:958 1240 408 AU Successfully wrote event for AU health state:0
    [no work to do at 3AM]
    [something triggered the DetectNow?]
    [a Detection was already in progress but not visibly so in the log?]
    2016-07-18 11:24:00:672 1240 8b8 AU Triggering AU detection through DetectNow API
    2016-07-18 11:24:00:672 1240 8b8 AU Piggybacking on an AU detection already in progress
    [49 minutes, nothing logged? no result from the earlier Detection?]
    2016-07-18 12:03:35:016 1240 408 AU AU setting next sqm report timeout to 2016-07-19 16:03:35
    [computer is shutting down for no obvious reason in log?]
    2016-07-18 14:15:32:755 1240 408 AU Initiating Install-at-shutdown
    2016-07-18 14:15:32:755 1240 408 Shutdwn user declined update at shutdown
    2016-07-18 14:15:32:755 1240 408 AU Successfully wrote event for AU health state:0
    2016-07-18 14:15:32:755 1240 408 AU AU initiates service shutdown
    2016-07-18 14:15:32:755 1240 408 AU ###########  AU: Uninitializing Automatic Updates  ###########
    2016-07-18 14:15:32:755 1240 a0c Agent  * WARNING: Failed to filter search results, error = 0x8024000B
    [8024000B=operation was cancelled, this is logical as a shutdown of computer is in progress]
    2016-07-18 14:15:32:849 1240 a0c Agent *********
    2016-07-18 14:15:32:849 1240 a0c Agent **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2016-07-18 14:15:32:849 1240 a0c Agent *************
    2016-07-18 14:15:32:849 1240 a0c Agent *************
    2016-07-18 14:15:32:849 1240 a0c Agent ** START **  Agent: Finding updates [CallerId = EminentWare Extension Pack - HARTIT\linder]
    2016-07-18 14:15:32:849 1240 a0c Agent *********
    2016-07-18 14:15:32:849 1240 a0c Agent  * Include potentially superseded updates
    2016-07-18 14:15:32:849 1240 a0c Agent  * Online = Yes; Ignore download priority = No
    2016-07-18 14:15:32:849 1240 a0c Agent  * Criteria = "DeploymentAction=*"
    2016-07-18 14:15:32:849 1240 a0c Agent  * ServiceID = {00000000-0000-0000-0000-000000000000} Third party service
    2016-07-18 14:15:32:849 1240 a0c Agent  * Search Scope = {Machine}
    2016-07-18 14:15:35:019 1240 a0c Agent  * WARNING: Exit code = 0x8024000B
    2016-07-18 14:15:35:019 1240 a0c Agent *********
    2016-07-18 14:15:35:019 1240 a0c Agent **  END  **  Agent: Finding updates [CallerId = EminentWare Extension Pack - HARTIT\linder]
    2016-07-18 14:15:35:019 1240 a0c Agent *************
    2016-07-18 14:15:35:019 1240 a0c Agent WARNING: WU client failed Searching for update with error 0x8024000b
    2016-07-18 14:15:35:019 1240 408 Agent Sending shutdown notification to client
    2016-07-18 14:15:35:190 1240 408 Service *********
    2016-07-18 14:15:35:190 1240 408 Service **  END  **  Service: Service exit [Exit code = 0x240001]
    2016-07-18 14:15:35:190 1240 408 Service *************
    [computer has shutdown and is restarting now...]
    2016-07-18 14:18:52:118 1292 e04 Misc ===========  Logging initialized (build: 7.6.7601.19161, tz: -0400)  ===========
    2016-07-18 14:18:52:118 1292 e04 Misc  = Process: C:\Windows\system32\svchost.exe
    2016-07-18 14:18:52:118 1292 e04 Misc  = Module: c:\windows\system32\wuaueng.dll
    2016-07-18 14:18:52:118 1292 e04 Service *************
    2016-07-18 14:18:52:118 1292 e04 Service ** START **  Service: Service startup
    2016-07-18 14:18:52:118 1292 e04 Service *********
    2016-07-18 14:18:52:227 1292 e04 Agent  * WU client version 7.6.7601.19161
    2016-07-18 14:18:52:227 1292 e04 Agent  * Base directory: C:\Windows\SoftwareDistribution
    2016-07-18 14:18:52:227 1292 e04 Agent  * Access type: No proxy
    2016-07-18 14:18:52:227 1292 e04 Agent  * Network state: Connected
    2016-07-18 14:19:37:830 1292 e04 Report CWERReporter::Init succeeded
    2016-07-18 14:19:37:830 1292 e04 Agent ***********  Agent: Initializing Windows Update Agent  ***********
    2016-07-18 14:19:37:830 1292 e04 Agent  * Prerequisite roots succeeded.
    2016-07-18 14:19:37:830 1292 e04 Agent ***********  Agent: Initializing global settings cache  ***********
    2016-07-18 14:19:37:830 1292 e04 Agent  * WSUS server: http://util2:8530
    2016-07-18 14:19:37:830 1292 e04 Agent  * WSUS status server: http://util2:8530
    2016-07-18 14:19:37:830 1292 e04 Agent  * Target group: (Unassigned Computers)
    2016-07-18 14:19:37:830 1292 e04 Agent  * Windows Update access disabled: No
    2016-07-18 14:19:37:845 1292 e04 DnldMgr Download manager restoring 0 downloads
    2016-07-18 14:19:37:861 1292 e04 AU ###########  AU: Initializing Automatic Updates  ###########
    2016-07-18 14:19:37:861 1292 e04 AU AU setting next detection timeout to 2016-07-18 18:19:37
    2016-07-18 14:19:37:861 1292 e04 AU  # WSUS server: http://util2:8530
    2016-07-18 14:19:37:861 1292 e04 AU  # Detection frequency: 12
    2016-07-18 14:19:37:861 1292 e04 AU  # Approval type: Scheduled (Policy)
    2016-07-18 14:19:37:861 1292 e04 AU  # Scheduled install day/time: Every day at 3:00
    2016-07-18 14:19:37:861 1292 e04 AU  # Auto-install minor updates: Yes (User preference)
    2016-07-18 14:19:37:861 1292 e04 AU  # Will interact with non-admins (Non-admins are elevated (User preference))
    2016-07-18 14:19:37:861 1292 e04 AU Setting AU scheduled install time to 2016-07-19 07:00:00
    2016-07-18 14:19:37:986 1292 e04 Report ***********  Report: Initializing static reporting data  ***********
    2016-07-18 14:19:37:986 1292 e04 Report  * OS Version = 6.1.7601.1.0.65792
    2016-07-18 14:19:37:986 1292 e04 Report  * OS Product Type = 0x00000030
    2016-07-18 14:19:37:986 1292 e04 Report  * Computer Brand = Dell Inc.
    2016-07-18 14:19:37:986 1292 e04 Report  * Computer Model = OptiPlex 7010
    2016-07-18 14:19:37:986 1292 e04 Report  * Bios Revision = A12
    2016-07-18 14:19:37:986 1292 e04 Report  * Bios Name = BIOS Date: 01/10/13 08:20:54 Ver: A12.00
    2016-07-18 14:19:37:986 1292 e04 Report  * Bios Release Date = 2013-01-10T00:00:00
    2016-07-18 14:19:37:986 1292 e04 Report  * Locale ID = 1033
    2016-07-18 14:19:38:141 1292 e04 AU Successfully wrote event for AU health state:0
    2016-07-18 14:19:38:141 1292 e04 AU Initializing featured updates
    2016-07-18 14:19:38:141 1292 e04 AU Found 0 cached featured updates
    2016-07-18 14:19:38:141 1292 e04 AU Successfully wrote event for AU health state:0
    2016-07-18 14:19:38:141 1292 e04 AU Successfully wrote event for AU health state:0
    2016-07-18 14:19:38:141 1292 e04 AU AU finished delayed initialization
    2016-07-18 14:19:38:141 1292 e04 AU #############
    2016-07-18 14:19:38:141 1292 e04 AU ## START ##  AU: Search for updates
    2016-07-18 14:19:38:141 1292 e04 AU #########
    [Detection is beginning as part of startup routine]
    2016-07-18 14:19:38:173 1292 e04 AU <<## SUBMITTED ## AU: Search for updates [CallId = {D2DB9934-2E82-43B4-8EE8-A68BB47185A8}]
    2016-07-18 14:19:38:422 1292 fe8 Agent *************
    2016-07-18 14:19:38:422 1292 fe8 Agent ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2016-07-18 14:19:38:422 1292 fe8 Agent *********
    2016-07-18 14:19:38:422 1292 fe8 Agent  * Online = Yes; Ignore download priority = No
    2016-07-18 14:19:38:422 1292 fe8 Agent  * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
    2016-07-18 14:19:38:422 1292 fe8 Agent  * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2016-07-18 14:19:38:422 1292 fe8 Agent  * Search Scope = {Machine}
    2016-07-18 14:19:38:453 1292 fe8 Setup Checking for agent SelfUpdate
    [deleted details of self-update checks...]
    2016-07-18 14:19:40:043 1292 fe8 Setup SelfUpdate check completed.  SelfUpdate is NOT required.
    2016-07-18 14:19:41:819 1292 fe8 PT +++++++++++  PT: Synchronizing server updates  +++++++++++
    2016-07-18 14:19:41:819 1292 fe8 PT  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://util2:8530/ClientWebService/client.asmx
    2016-07-18 14:19:41:835 1292 fe8 PT WARNING: Cached cookie has expired or new PID is available
    2016-07-18 14:19:41:835 1292 fe8 PT Initializing simple targeting cookie, clientId = e2046035-f8d8-4dd6-a011-804ce2a30c7e, target group = , DNS name = cricews.hartit.net
    2016-07-18 14:19:41:835 1292 fe8 PT  Server URL = http://util2:8530/SimpleAuthWebService/SimpleAuth.asmx
    [2 minute gap here...]
    2016-07-18 14:21:43:706 1292 fe8 PT +++++++++++  PT: Synchronizing extended update info  +++++++++++
    2016-07-18 14:21:43:706 1292 fe8 PT  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://util2:8530/ClientWebService/client.asmx
    2016-07-18 14:21:43:741 1292 fe8 PT Initializing simple targeting cookie, clientId = e2046035-f8d8-4dd6-a011-804ce2a30c7e, target group = , DNS name = cricews.hartit.net
    2016-07-18 14:21:43:741 1292 fe8 PT  Server URL = http://util2:8530/SimpleAuthWebService/SimpleAuth.asmx
    [log ends here. no results of Detection are logged?]

    Don [doesn't work for MSFT, and they're probably glad about that ;]


    • Edited by DonPick Tuesday, July 19, 2016 8:39 PM
    Monday, July 18, 2016 9:25 PM
  • Question
    Sign in to vote
    1
    Sign in to vote

    Hi HTCIT,

    Check if after doing the following steps could work:

    1. rename the Spupdsvc.exe file:

    https://support.microsoft.com/en-sg/kb/958040

    2. Reset windows update components:

    https://support.microsoft.com/en-us/kb/971058

    3. Rename SoftwareDistribution folder:

    In cmd, net stop wuauserv;

    Rename C:\Windows\SoftwareDistribution folder;

    In cmd, net start wuauserv.

    Best Regards,

    Anne

    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Tuesday, July 19, 2016 5:45 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi HTCIT,

    Check if after doing the following steps could work:

    1. rename the Spupdsvc.exe file:

    https://support.microsoft.com/en-sg/kb/958040

    2. Reset windows update components:

    https://support.microsoft.com/en-us/kb/971058

    3. Rename SoftwareDistribution folder:

    In cmd, net stop wuauserv;

    Rename C:\Windows\SoftwareDistribution folder;

    In cmd, net start wuauserv.

    Best Regards,

    Anne

    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    I use patch manager and I have had to remove the contents of the SoftwareDistribution folder when generating a new certificate for WSUS 3rd party software. So, I only did step 3 and this has worked for me in the past. I don't rename the folder, I just stop wuauserv , delete the contents, then start again and it all works. I have had to do this on two occasions so far. Luckily PatchManager provides a mechanism where I can do this to the workstations from the PatchManager console. It is on the Windows Update Agent Maintenance and Repair and the check box is called Delete Software Distribution Folder and sub-folders.
    Tuesday, July 19, 2016 5:41 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi HTCIT,

    Have you got any progress with your issue?

    Feel free to feed back.

    Best Regards,

    Anne

    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Friday, July 22, 2016 5:41 AM