Asked by:
Event ID 364 - HTTP status 403: The client does not have sufficient access rights to the requested server object

Question
-
Hi all,
My WSUS version is 6.3.9600.18694 on Server 2012 R2. Since June.2019, WSUS start to cannot download some update from Windows Update with event 364. Due to the download failure, my WSUS sync task always stop and sync cannot complete. I have to find the update from event log and deny the update to complete the WSUS sync. Then I evaluate the new updates and push them to my clients.
I did research some doc from the Internet. I ensure it's not the WSUS SHA-2 issue or Internet access control issue. Does anyone encounter same issue like my case? I appreciate any solutions or suggestions.
Content file download failed. Reason: HTTP status 403: The client does not have sufficient access rights to the requested server object.
Source File: /d/msdownload/update/software/secu/2019/06/windows10.0-kb4509093-arm64-express_b7ad877ecd1e9496c67600bea28e340ed210823b.cab
Destination File: c:\wsus\WsusContent\3B\B7AD877ECD1E9496C67600BEA28E340ED210823B.cab
Source File: /c/msdownload/update/software/secu/2019/07/windows10.0-kb4507435-x64_ae84593c0d83489c53581f8745372626fe597869.psf
Destination File: c:\wsus\WsusContent\69\AE84593C0D83489C53581F8745372626FE597869.psf
Source File: /d/msdownload/update/software/secu/2019/07/windows8.1-kb4504418-x64-express_38e87d7e676debadae34caed8b5672c3493d9a0c.cab
Destination File: c:\wsus\WsusContent\0C\38E87D7E676DEBADAE34CAED8B5672C3493D9A0C.cab
Regards
Rick Tan
Monday, August 12, 2019 3:31 AM
All replies
-
Hi Rick,
This article may be a bit outdated, but for the initial check, please refer to the section on IIS settings and disk: "Verifying WSUS Server Settings".
HTTP status 403 is usually a problem with access rights, so I think it's related to the WSUSContent folder.
Regards,
Hope the above can help you.
Yic
Please remember to mark as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.- Edited by Yic LvMicrosoft contingent staff Monday, August 12, 2019 7:02 AM Font.
Monday, August 12, 2019 7:01 AM -
1. Try to resolve your issue with below,
https://gallery.technet.microsoft.com/Troubleshooting-WSUS-d63da113?redir=0
2. Anyway checked the connectivity of WSUS server with Microsoft update servers. Allow your firewall to connect WSUS server to Microsoft update servers.
https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/deploy/2-configure-wsus
3. Checked the permission for your C drive
4. for more, refer here,
https://social.technet.microsoft.com/Forums/office/en-US/6fe26747-77c3-4329-8687-71cac2cee552/http-status-403-the-client-does-not-have-sufficient-access-rights-to-the-requested-server-object-?forum=winserverwsus
Monday, August 12, 2019 1:21 PM -
Hi all,
Reinstall server 2012 R2 and WSUS. Run patch first sync. The error display again.
Content file download failed. Reason: HTTP status 403: The client does not have sufficient access rights to the requested server object.Source File: : /msdownload/update/software/crup/2013/03/windows8-rt-kb2811660-x64-express_5cc12ad137db3dfcf87d9238b69efcd94f6bf7ea.cab
Destination File:: C:\wsus\WsusContent\EA\5CC12AD137DB3DFCF87D9238B69EFCD94F6BF7EA.cabDownloaded 54 GB files and total file 127 GB file.
No idea about it. No deny log from Sangfor Internet proxy.
For exclude DNS issue. Could anyone provide windows update DNS record to setup local host record?
Rick Tan
Friday, August 16, 2019 1:55 AM -
Refer these,
https://www.microsoft.com/en-us/download/details.aspx?id=53602
https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/deploy/2-configure-wsus
http://windowsupdate.microsoft.com
http://*.windowsupdate.microsoft.com
https://*.windowsupdate.microsoft.com
http://*.update.microsoft.com
https://*.update.microsoft.com
http://*.windowsupdate.com
http://download.windowsupdate.com
http://download.microsoft.com
http://*.download.windowsupdate.com
http://wustat.windows.com
http://ntservicepack.microsoft.com
http://stats.microsoft.com
https://stats.microsoft.com
Friday, August 16, 2019 10:46 AM -
Hi all,
The issue resolved when I unjoin WSUS server from our domain.
For security, we need to change DNS server when WSUS server sync Windows update. It may cause WSUScontent folder permission authenticate failure. Thanks for all help.
Rick Tan
Tuesday, August 20, 2019 3:29 AM