locked
Server 2012 R2 - WSUS - Win 7 reporting status, Win 8 not RRS feed

  • Question

  • Hi,

    We have WSUS running in Server 2012 R2 standard. I have a handful of Win 7 PCs reporting status successfully. All other Win 7 and Win 8/8.1 have "not yet reported".

    Looked at the windowsupdate.txt to compare a Win 7 working PC to a Win 8.1 non-working PC. Found this difference: Win7 is using http://hccsus01:8530/ClientWebService/client.asmx and Win 8.1 is using https://fe2.ws.microsoft.com/v6/ClientWebService/client.asmx 

    Windows 7

    2014-08-13 12:35:25:886  452 c64 Agent *************
    2014-08-13 12:35:25:886  452 c64 Agent ** START **  Agent: Finding updates [CallerId = System Center Endpoint Protection (DDEFDD14-250E-4DC8-A0B3-9D667EC5D8EB)]
    2014-08-13 12:35:25:886  452 c64 Agent *********
    2014-08-13 12:35:25:886  452 c64 Agent   * Online = Yes; Ignore download priority = No
    2014-08-13 12:35:25:886  452 c64 Agent   * Criteria = "(IsInstalled = 0 and IsHidden = 0 and CategoryIDs contains 'a38c835c-2950-4e87-86cc-6911a52c34a3' and CategoryIDs contains 'e0789628-ce08-4437-be74-2495b842f43b')"
    2014-08-13 12:35:25:886  452 c64 Agent   * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2014-08-13 12:35:25:886  452 c64 Agent   * Search Scope = {Machine}
    2014-08-13 12:35:26:369  452 c64 PT +++++++++++  PT: Starting category scan  +++++++++++
    2014-08-13 12:35:26:369  452 c64 PT   + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://hccsus01:8530/ClientWebService/client.asmx
    2014-08-13 12:35:27:085  452 c64 PT +++++++++++  PT: Synchronizing server updates  +++++++++++
    2014-08-13 12:35:27:085  452 c64 PT   + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://hccsus01:8530/ClientWebService/client.asmx
    2014-08-13 12:35:27:101  452 c64 PT WARNING: Cached cookie has expired or new PID is available
    2014-08-13 12:35:27:101  452 c64 PT Initializing simple targeting cookie, clientId = f1921f0f-c420-4d01-b0f3-24c64a786102, target group = , DNS name = snbk-t13-04.hillcrest.qld.edu.au
    2014-08-13 12:35:27:101  452 c64 PT   Server URL = http://hccsus01:8530/SimpleAuthWebService/SimpleAuth.asmx
    2014-08-13 12:35:27:677  452 c64 PT +++++++++++  PT: Synchronizing extended update info  +++++++++++
    2014-08-13 12:35:27:677  452 c64 PT   + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://hccsus01:8530/ClientWebService/client.asmx
    2014-08-13 12:35:27:927  452 c64 Agent   * Found 0 updates and 4 categories in search; evaluated appl. rules of 64 out of 80 deployed entities
    2014-08-13 12:35:27:942  452 c64 Agent *********
    2014-08-13 12:35:27:942  452 c64 Agent **  END  **  Agent: Finding updates [CallerId = System Center Endpoint Protection (DDEFDD14-250E-4DC8-A0B3-9D667EC5D8EB)]
    2014-08-13 12:35:27:942  452 c64 Agent *************
    2014-08-13 12:35:27:942  452 c64 Report REPORT EVENT: {31C51F1C-F783-4DF0-A59D-B1DEFC6E91EF} 2014-08-13 12:35:21:646+1000 1 190 101 {ACF78076-4EB1-4AA2-B7A8-1FD495789486} 200 0 AutomaticUpdates Success Content Install Installation Successful: Windows successfully installed the following update: Update for Windows 7 for x64-based Systems (KB2846960)
    2014-08-13 12:35:27:942  452 c64 Report REPORT EVENT: {165FE843-CA58-43B1-BAFC-F3EDDBF1D624} 2014-08-13 12:35:21:662+1000 1 190 101 {1A4BBD72-9048-4E79-842F-4AD9A6114195} 200 0 AutomaticUpdates Success Content Install Installation Successful: Windows successfully installed the following update: Security Update for Windows 7 for x64-based Systems (KB2862973)
    2014-08-13 12:35:27:942  452 c64 Report REPORT EVENT: {C3FAA8E2-AAF2-469C-900A-9824B6EBB36C} 2014-08-13 12:35:21:677+1000 1 190 101 {55028D69-EF9F-4949-8C2A-8FDEFBBC754F} 200 0 AutomaticUpdates Success Content Install Installation Successful: Windows successfully installed the following update: Security Update for Windows 7 for x64-based Systems (KB2871997)
    2014-08-13 12:35:27:942  452 c64 Report REPORT EVENT: {A460D377-1182-4784-9E98-921FC7A7AD97} 2014-08-13 12:35:21:693+1000 1 190 101 {CED3293C-2613-41FF-BD6A-D8525504C035} 201 0 AutomaticUpdates Success Content Install Installation Successful: Windows successfully installed the following update: Security Update for Windows 7 for x64-based Systems (KB2957503)
    2014-08-13 12:35:27:942  452 c64 Report REPORT EVENT: {A6D60884-0AFD-483A-A9CF-273892E5D2F1} 2014-08-13 12:35:21:693+1000 1 195 101 {6C60D018-A24B-46E0-820A-3C317F085D41} 201 80242016 AutomaticUpdates Failure Content Install Installation Failure: Windows failed to install the following update with error 0x80242016: Cumulative Security Update for Internet Explorer 9 for Windows 7 for x64-based Systems (KB2962872).
    2014-08-13 12:35:27:942 1236 5c4 COMAPI >>--  RESUMED  -- COMAPI: Search [ClientId = System Center Endpoint Protection (DDEFDD14-250E-4DC8-A0B3-9D667EC5D8EB)]
    2014-08-13 12:35:27:942 1236 5c4 COMAPI   - Updates found = 0
    2014-08-13 12:35:27:942 1236 5c4 COMAPI ---------
    2014-08-13 12:35:27:942 1236 5c4 COMAPI --  END  --  COMAPI: Search [ClientId = System Center Endpoint Protection (DDEFDD14-250E-4DC8-A0B3-9D667EC5D8EB)]
    2014-08-13 12:35:27:942 1236 5c4 COMAPI -------------

    Windows 8.1

    2014-10-07 15:33:23:740  936 186c Agent ** START **  Agent: Finding updates [CallerId = Windows Update Command Line  Id = 70]
    2014-10-07 15:33:23:740  936 bfc Agent   * Caller SID for Applicability: S-1-5-18
    2014-10-07 15:33:23:740  936 186c Agent *********
    2014-10-07 15:33:23:740  936 bfc Agent   * RegisterService is set
    2014-10-07 15:33:23:740  936 186c Agent   * Online = Yes; Ignore download priority = No
    2014-10-07 15:33:23:741  936 186c Agent   * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
    2014-10-07 15:33:23:741  936 186c Agent   * ServiceID = {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} Third party service
    2014-10-07 15:33:23:741  936 186c Agent   * Search Scope = {Machine & All Users}
    2014-10-07 15:33:23:741  936 186c Agent   * Caller SID for Applicability: S-1-5-18
    2014-10-07 15:33:23:741  936 186c Agent   * RegisterService is set
    2014-10-07 15:33:23:741  936 bfc EP Got WSUS Client/Server URL: "http://hccsus01:8530/ClientWebService/client.asmx"
    2014-10-07 15:33:23:743  936 186c EP Got 9482F4B4-E343-43B6-B170-9A65BC822C77 redir SecondaryServiceAuth URL: "117cab2d-82b1-4b5a-a08c-4d62dbee7782"
    2014-10-07 15:33:23:747  936 186c EP Got 117CAB2D-82B1-4B5A-A08C-4D62DBEE7782 redir Client/Server URL: "https://fe2.ws.microsoft.com/v6/ClientWebService/client.asmx"
    2014-10-07 15:33:23:755  936 186c PT +++++++++++  PT: Synchronizing server updates  +++++++++++
    2014-10-07 15:33:23:755  936 186c PT   + ServiceId = {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}, Server URL = https://fe2.ws.microsoft.com/v6/ClientWebService/client.asmx
    2014-10-07 15:33:23:756  936 186c Agent Reading cached app categories using lifetime 604800 seconds
    2014-10-07 15:33:23:756  936 186c Agent Read 0 cached app categories
    2014-10-07 15:33:23:756  936 186c Agent SyncUpdates adding 0 visited app categories
    2014-10-07 15:33:24:021  936 186c IdleTmr WU operation (CAgentProtocolTalker::SyncUpdates_WithRecover) started; operation # 10001; does use network; is at background priority
    2014-10-07 15:33:24:483  936 bfc PT +++++++++++  PT: Synchronizing server updates  +++++++++++
    2014-10-07 15:33:24:483  936 bfc PT   + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://hccsus01:8530/ClientWebService/client.asmx
    2014-10-07 15:33:24:491  936 bfc Agent Reading cached app categories using lifetime 604800 seconds
    2014-10-07 15:33:24:491  936 bfc Agent Read 0 cached app categories
    2014-10-07 15:33:24:491  936 bfc Agent SyncUpdates adding 0 visited app categories
    2014-10-07 15:33:25:038  936 186c IdleTmr WU operation (CAgentProtocolTalker::SyncUpdates_WithRecover, operation # 10001) stopped; does use network; is at background priority
    2014-10-07 15:33:25:038  936 186c Agent Reading cached app categories using lifetime 604800 seconds
    2014-10-07 15:33:25:038  936 186c Agent Read 0 cached app categories
    2014-10-07 15:33:25:038  936 186c Agent SyncUpdates adding 0 visited app categories
    2014-10-07 15:33:25:056  936 186c PT   + SyncUpdates round trips: 1
    2014-10-07 15:33:25:142  936 bfc IdleTmr WU operation (CAgentProtocolTalker::SyncUpdates_WithRecover) started; operation # 10002; does use network; is at background priority
    2014-10-07 15:33:25:193  936 bfc IdleTmr WU operation (CAgentProtocolTalker::SyncUpdates_WithRecover, operation # 10002) stopped; does use network; is at background priority
    2014-10-07 15:33:25:193  936 bfc Agent Reading cached app categories using lifetime 604800 seconds
    2014-10-07 15:33:25:193  936 bfc Agent Read 0 cached app categories
    2014-10-07 15:33:25:193  936 bfc Agent SyncUpdates adding 0 visited app categories
    2014-10-07 15:33:25:221  936 bfc IdleTmr WU operation (CAgentProtocolTalker::SyncUpdates_WithRecover) started; operation # 10003; does use network; is at background priority
    2014-10-07 15:33:25:235  936 bfc IdleTmr WU operation (CAgentProtocolTalker::SyncUpdates_WithRecover, operation # 10003) stopped; does use network; is at background priority
    2014-10-07 15:33:25:235  936 bfc PT   + SyncUpdates round trips: 2
    2014-10-07 15:33:29:220  936 186c Agent   * Added update {3F0C7A2A-336A-4D59-B38A-0C36D63B0DB2}.1 to search result
    2014-10-07 15:33:29:220  936 186c Agent   * Added update {EC9994ED-440F-4AFC-A0FA-CB90285A1226}.1 to search result
    2014-10-07 15:33:29:220  936 186c Agent   * Added update {DE323AF5-28CA-4BAB-A85B-B074001783BF}.1 to search result
    2014-10-07 15:33:29:220  936 186c Agent   * Added update {E44E8654-728E-49D5-A3A3-4BCFCBEF56C0}.1 to search result
    2014-10-07 15:33:29:220  936 186c Agent   * Added update {B7E8218C-20B2-4F04-B7E8-D3228A9B8546}.1 to search result
    2014-10-07 15:33:29:220  936 186c Agent   * Added update {2DDF83CB-B38E-443E-8BD9-A92D564A2851}.1 to search result
    2014-10-07 15:33:29:220  936 186c Agent   * Added update {E94B5DA8-C4D4-48BE-A54F-76AFB13A318F}.1 to search result
    2014-10-07 15:33:29:220  936 186c Agent   * Added update {B3411B62-63F7-44F2-999B-BCDFF13306B9}.1 to search result
    2014-10-07 15:33:29:220  936 186c Agent   * Added update {D87FA2B6-A04D-4920-92AE-7C6586F98ED4}.1 to search result
    2014-10-07 15:33:29:220  936 186c Agent   * Added update {00563009-B9BF-43A4-8B4E-5ACE3172912B}.2 to search result
    2014-10-07 15:33:29:220  936 186c Agent   * Added update {D73327BD-8697-4486-9AFC-70C59746203D}.1 to search result
    2014-10-07 15:33:29:220  936 186c Agent   * Added update {CE28408E-E7D6-4846-A8EA-A195793146B2}.1 to search result
    2014-10-07 15:33:29:220  936 186c Agent   * Added update {2FA08060-64AE-4346-AC95-242853B9F810}.1 to search result
    2014-10-07 15:33:29:220  936 186c Agent   * Added update {ED11C6E2-F7CB-4A7F-8802-7EE5133526A9}.1 to search result
    2014-10-07 15:33:29:220  936 186c Agent   * Added update {9E03B879-90B1-48D6-9865-5595F857EE9F}.1 to search result
    2014-10-07 15:33:29:220  936 186c Agent   * Added update {A281593D-85FC-43C1-B66C-8D7031952489}.1 to search result
    2014-10-07 15:33:29:220  936 186c Agent   * Added update {EEEC4FAF-41B2-467D-BE87-7617505E92B6}.1 to search result
    2014-10-07 15:33:29:220  936 186c Agent   * Added update {57D48F6B-2C9E-468C-9BFC-4D3E090A0BC6}.1 to search result
    2014-10-07 15:33:29:220  936 186c Agent   * Added update {63872F34-415D-4C31-BD17-013E892F1358}.1 to search result
    2014-10-07 15:33:29:220  936 186c Agent   * Added update {EA8829A8-226D-409A-A17C-1A2E2BF0BF2D}.1 to search result
    2014-10-07 15:33:29:220  936 186c Agent   * Added update {65BC05C5-944E-4685-B961-91B8ED14E09E}.1 to search result
    2014-10-07 15:33:29:220  936 186c Agent   * Added update {B8AA2946-F586-47B1-A953-07D15B64446F}.1 to search result
    2014-10-07 15:33:29:220  936 186c Agent   * Added update {BD56C6B6-5467-42ED-A1A3-75FD751815B0}.1 to search result
    2014-10-07 15:33:29:220  936 186c Agent   * Added update {BB57D17A-B3DC-4D85-BF6C-EE3D304D5737}.1 to search result
    2014-10-07 15:33:29:220  936 186c Agent   * Found 24 updates and 40 categories in search; evaluated appl. rules of 105 out of 137 deployed entities
    2014-10-07 15:33:29:221  936 186c Agent *********
    2014-10-07 15:33:29:221  936 186c Agent **  END  **  Agent: Finding updates [CallerId = Windows Update Command Line  Id = 70]

    Wednesday, October 8, 2014 4:59 AM

All replies

  • 2014-10-07 15:33:29:220  936 186c Agent   * Found 24 updates and 40 categories in search; evaluated appl. rules of 105 out of 137 deployed entities

    There appears to be absolutely nothing wrong with this client's operation, ergo, the only reason I can think of why the client is "not reporting" is that you have duplicate SusClientIDs.


    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    • Marked as answer by Alex Lv Tuesday, October 14, 2014 3:31 AM
    • Unmarked as answer by SMM06 Wednesday, October 22, 2014 12:06 AM
    Thursday, October 9, 2014 3:34 AM
  • Hi SMM06,

    As Lawrence mentioned, the vast majority of client can’t update the status caused by the duplicate SusClientIDs, you can fist refer the following article to perform the duplicate check in order that we can narrow down this issue.

    Resolving the duplicate SUSClientID issue, or “Why don’t all my clients show up in the WSUS console?”

    http://blogs.technet.com/b/sus/archive/2009/05/05/resolving-the-duplicate-susclientid-issue-or-why-don-t-all-my-clients-show-up-in-the-wsus-console.aspx

    I’m glad to be of help to you!


    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

    • Marked as answer by Alex Lv Tuesday, October 14, 2014 3:30 AM
    • Unmarked as answer by SMM06 Wednesday, October 22, 2014 12:06 AM
    Friday, October 10, 2014 2:30 AM
  • Hi,

    I've run the script to update my SIS Client ID on my own Windows 8.1 machine, and it reappears in the SUS console, however it still doesn't report status.

    I have no problem with machines appearing in the SUS console, they all seem to be there. But the majority of them are not reporting status so I find it hard to believe that duplicate SUS IDs is the problem. But I will keep an eye on mine.

    Wednesday, October 22, 2014 12:09 AM
  • it reappears in the SUS console, however it still doesn't report status.

    Appearing in the console, and actually detecting, downloading, installing updates, or reporting status are all separate events and need to be diagnosed as such.

    So now, to diagnose the "doesn't report status" scenario, we once again return to the WindowsUpdate.log. Show us the most recent detection event where reporting failed.


    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Thursday, October 23, 2014 2:29 AM
  • Sorry if I am posting too much of the log file:

    2014-10-23 09:34:35:207  936 1ff4 Agent *************
    2014-10-23 09:34:35:207  936 1ff4 Agent ** START **  Agent: Finding updates [CallerId = AutomaticUpdates  Id = 25]
    2014-10-23 09:34:35:207  936 1ff4 Agent *********
    2014-10-23 09:34:35:207  936 1ff4 Agent   * Online = No; Ignore download priority = No
    2014-10-23 09:34:35:207  936 1ff4 Agent   * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
    2014-10-23 09:34:35:207  936 1ff4 Agent   * ServiceID = {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} Third party service
    2014-10-23 09:34:35:207  936 1ff4 Agent   * Search Scope = {Current User}
    2014-10-23 09:34:35:207  936 1ff4 Agent   * Caller SID for Applicability: S-1-5-21-2026328644-1534031742-38565284-21128
    2014-10-23 09:34:35:821  936 1ff4 Agent   * Added update {C21E26AB-BFEE-425B-BD0B-C0043B81B034}.1 to search result
    2014-10-23 09:34:35:821  936 1ff4 Agent   * Added update {F944750C-BED6-4116-BFC4-91361F87CE97}.1 to search result
    2014-10-23 09:34:35:821  936 1ff4 Agent   * Added update {AE53F50B-1F53-4E10-93A2-7005AD671608}.100 to search result
    2014-10-23 09:34:35:821  936 1ff4 Agent   * Added update {17A599BB-6485-4405-89C1-77A260C078D9}.100 to search result
    2014-10-23 09:34:35:821  936 1ff4 Agent   * Added update {1E536662-7256-42FA-9373-7A009A14400B}.100 to search result
    2014-10-23 09:34:35:821  936 1ff4 Agent   * Added update {BB8EED48-5EB9-481D-A043-D8BE51942055}.1 to search result
    2014-10-23 09:34:35:821  936 1ff4 Agent   * Added update {4849182B-70A4-4A3F-9FF9-054D8BCDCDDD}.1 to search result
    2014-10-23 09:34:35:821  936 1ff4 Agent   * Found 7 updates and 40 categories in search; evaluated appl. rules of 95 out of 158 deployed entities
    2014-10-23 09:34:35:821  936 1ff4 Agent *********
    2014-10-23 09:34:35:821  936 1ff4 Agent **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates  Id = 25]
    2014-10-23 09:34:35:821  936 1ff4 Agent *************
    2014-10-23 09:34:35:821  936 1ff4 Agent Removing per user update {EC9994ED-440F-4AFC-A0FA-CB90285A1226} from search result since it applies to no users
    2014-10-23 09:34:35:821  936 1ff4 IdleTmr WU operation (CSearchCall::Init ID 25, operation # 179) stopped; does not use network; is at background priority
    2014-10-23 09:34:35:821  936 1ff4 IdleTmr WU operation (CSearchCall::Init ID 4, operation # 153) stopped; does not use network; is at background priority
    2014-10-23 09:34:35:837  936 1db0 AU >>##  RESUMED  ## AU: Search for updates [CallId = {FD3E1275-77A9-486E-966C-356F504EECA3} ServiceId = {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}]
    2014-10-23 09:34:35:837  936 1db0 AU   # 25 updates detected
    2014-10-23 09:34:35:837  936 1db0 AU #########
    2014-10-23 09:34:35:837  936 1db0 AU ##  END  ##  AU: Search for updates  [CallId = {FD3E1275-77A9-486E-966C-356F504EECA3} ServiceId = {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}]
    2014-10-23 09:34:35:837  936 1db0 AU #############
    2014-10-23 09:34:35:837  936 1db0 AU All AU searches complete.
    2014-10-23 09:34:35:837  936 1db0 AU Adding timer:
    2014-10-23 09:34:35:837  936 1db0 AU     Timer: 31DA7559-FE27-4810-8FF6-987195B1FD98, Expires 2014-10-23 15:43:33, not idle-only, not network-only
    2014-10-23 09:34:35:837  936 1db0 AU   # Publishing WNF Per user update count event Count: 20 SID {S-1-5-21-2944061896-1139597750-3336218179-1001} Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}
    2014-10-23 09:34:35:837  936 1db0 AU   # Publishing WNF Per user update count event Count: 14 SID {S-1-5-21-2026328644-1534031742-38565284-31239} Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}
    2014-10-23 09:34:35:837  936 1db0 AU   # Publishing WNF Per user update count event Count: 11 SID {S-1-5-21-2026328644-1534031742-38565284-2061} Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}
    2014-10-23 09:34:35:837  936 1db0 AU   # Publishing WNF Per user update count event Count: 14 SID {S-1-5-21-2026328644-1534031742-38565284-2065} Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}
    2014-10-23 09:34:35:837  936 1db0 AU   # Publishing WNF Per user update count event Count: 13 SID {S-1-5-21-2026328644-1534031742-38565284-8465} Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}
    2014-10-23 09:34:35:837  936 1db0 AU   # Publishing WNF Per user update count event Count: 15 SID {S-1-5-21-2026328644-1534031742-38565284-11034} Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}
    2014-10-23 09:34:35:837  936 1db0 AU   # Publishing WNF Per user update count event Count: 11 SID {S-1-5-21-2026328644-1534031742-38565284-13341} Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}
    2014-10-23 09:34:35:837  936 1db0 AU   # Publishing WNF Per user update count event Count: 14 SID {S-1-5-21-2026328644-1534031742-38565284-24355} Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}
    2014-10-23 09:34:35:837  936 1db0 AU   # Publishing WNF Per user update count event Count: 0 SID {S-1-5-21-2026328644-1534031742-38565284-18802} Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}
    2014-10-23 09:34:35:837  936 1db0 AU   # Publishing WNF Per user update count event Count: 15 SID {S-1-5-21-2026328644-1534031742-38565284-14209} Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}
    2014-10-23 09:34:35:837  936 1db0 AU   # Publishing WNF Per user update count event Count: 14 SID {S-1-5-21-2026328644-1534031742-38565284-20353} Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}
    2014-10-23 09:34:35:837  936 1db0 AU   # Publishing WNF Per user update count event Count: 14 SID {S-1-5-21-2026328644-1534031742-38565284-10627} Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}
    2014-10-23 09:34:35:837  936 1db0 AU   # Publishing WNF Per user update count event Count: 1 SID {S-1-5-21-2026328644-1534031742-38565284-22425} Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}
    2014-10-23 09:34:35:837  936 1db0 AU   # Publishing WNF Per user update count event Count: 15 SID {S-1-5-21-2026328644-1534031742-38565284-24256} Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}
    2014-10-23 09:34:35:837  936 1db0 AU   # Publishing WNF Per user update count event Count: 13 SID {S-1-5-21-2026328644-1534031742-38565284-13251} Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}
    2014-10-23 09:34:35:837  936 1db0 AU   # Publishing WNF Per user update count event Count: 14 SID {S-1-5-21-2026328644-1534031742-38565284-14279} Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}
    2014-10-23 09:34:35:853  936 1db0 AU   # Publishing WNF Per user update count event Count: 14 SID {S-1-5-21-2026328644-1534031742-38565284-30666} Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}
    2014-10-23 09:34:35:853  936 1db0 AU   # Publishing WNF Per user update count event Count: 11 SID {S-1-5-21-2026328644-1534031742-38565284-500} Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}
    2014-10-23 09:34:35:853  936 1db0 AU   # Publishing WNF Per user update count event Count: 14 SID {S-1-5-21-2944061896-1139597750-3336218179-500} Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}
    2014-10-23 09:34:35:853  936 1db0 AU   # Publishing WNF Per user update count event Count: 2 SID {S-1-5-21-2026328644-1534031742-38565284-30713} Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}
    2014-10-23 09:34:35:853  936 1db0 AU   # Publishing WNF Per user update count event Count: 0 SID {S-1-5-21-2026328644-1534031742-38565284-21128} Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}
    2014-10-23 09:36:57:217  936 1b6c Misc WARNING:     IsSessionRemote: WinStationQueryInformationW(WTSIsRemoteSession) failed for session 1, GetLastError=2250
    2014-10-23 09:36:57:999  936 1b6c Misc WARNING:     IsSessionRemote: WinStationQueryInformationW(WTSIsRemoteSession) failed for session 1, GetLastError=2250
    2014-10-23 09:36:58:233  936 1b6c Misc WARNING:     IsSessionRemote: WinStationQueryInformationW(WTSIsRemoteSession) failed for session 1, GetLastError=2250
    2014-10-23 09:37:05:023  936 1b6c Misc WARNING:     IsSessionRemote: WinStationQueryInformationW(WTSIsRemoteSession) failed for session 1, GetLastError=2250
    2014-10-23 09:43:11:935  936 151c SLS Retrieving SLS response from server using ETAG "rb8COOsTDgXFc0zxoL6zacOQpaa9aiTtEjb2yq2aUaA=_1440"...
    2014-10-23 09:43:11:998  936 151c SLS Making request with URL HTTPS://sls.update.microsoft.com/SLS/{117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}/x64/6.3.9600.0/0?CH=454&L=en-US&P=&PT=0x4&WUA=7.9.9600.17336&AM=0&SCV=788
    2014-10-23 09:43:16:243  936 151c EP Got 117CAB2D-82B1-4B5A-A08C-4D62DBEE7782 redir Client/Server URL: "https://fe2.ws.microsoft.com/v6/ClientWebService/client.asmx"
    2014-10-23 09:43:16:321  936 151c EP Got 117CAB2D-82B1-4B5A-A08C-4D62DBEE7782 redir Reporting URL: "http://statsfe2.ws.microsoft.com/ReportingWebService/ReportingWebService.asmx"
    2014-10-23 09:43:16:321  936 151c Report OpenReportingWebServiceConnection, reporting URL = http://statsfe2.ws.microsoft.com/ReportingWebService/ReportingWebService.asmx
    2014-10-23 09:43:16:321  936 151c IdleTmr WU operation (CLegacyEventUploader::HandleEvents) started; operation # 290; does use network; is at background priority
    2014-10-23 09:43:16:321  936 151c Report Uploading 1 events using cached cookie.
    2014-10-23 09:43:16:947  936 151c Report Reporter successfully uploaded 1 events.
    2014-10-23 09:43:16:947  936 151c IdleTmr WU operation (CLegacyEventUploader::HandleEvents, operation # 290) stopped; does use network; is at background priority
    2014-10-23 09:51:16:954  936 151c Report WARNING: CSerializationHelper:: InitSerialize failed : 0x80070002
    2014-10-23 09:53:16:960  936 1108 AU Earliest future timer found:
    2014-10-23 09:53:16:960  936 1108 AU     Timer: 31DA7559-FE27-4810-8FF6-987195B1FD98, Expires 2014-10-23 15:43:33, not idle-only, not network-only
    2014-10-23 09:53:17:960  936 1b6c AU ###########  AU: Uninitializing Automatic Updates  ###########
    2014-10-23 09:53:18:960  936 1b6c WuTask Uninit WU Task Manager
    2014-10-23 09:53:19:288  936 1b6c WuTask WARNING: SessionConnectHandler, could not validate and register task, error = 0x80070534
    2014-10-23 09:53:19:288  936 1b6c Agent Sending shutdown notification to client
    2014-10-23 09:53:19:288  936 1b6c AU Earliest future timer found:
    2014-10-23 09:53:19:288  936 1b6c AU     Timer: 31DA7559-FE27-4810-8FF6-987195B1FD98, Expires 2014-10-23 15:43:33, not idle-only, not network-only
    2014-10-23 09:53:19:491  936 1b6c AU Earliest future timer found:
    2014-10-23 09:53:19:491  936 1b6c AU     Timer: 31DA7559-FE27-4810-8FF6-987195B1FD98, Expires 2014-10-23 15:43:33, not idle-only, not network-only
    2014-10-23 09:53:19:788  936 1b6c Service *********
    2014-10-23 09:53:19:788  936 1b6c Service **  END  **  Service: Service exit [Exit code = 0x240001]
    2014-10-23 09:53:19:788  936 1b6c Service *************
    2014-10-23 11:49:51:818  936 1dac Misc ===========  Logging initialized (build: 7.9.9600.17336, tz: +1000)  ===========
    2014-10-23 11:49:51:818  936 1dac Misc   = Process: C:\Windows\system32\svchost.exe
    2014-10-23 11:49:51:818  936 1dac Misc   = Module: c:\windows\system32\wuaueng.dll
    2014-10-23 11:49:51:818  936 1dac Service *************
    2014-10-23 11:49:51:818  936 1dac Service ** START **  Service: Service startup
    2014-10-23 11:49:51:818  936 1dac Service *********
    2014-10-23 11:49:51:833  936 1dac IdleTmr Non-AoAc machine.  Aoac operations will be ignored.
    2014-10-23 11:49:51:833  936 1dac Agent   * WU client version 7.9.9600.17336
    2014-10-23 11:49:51:833  936 1dac Agent WARNING: SleepStudyTracker: Machine is non-AOAC. Sleep study tracker disabled.
    2014-10-23 11:49:51:833  936 1dac Agent   * Base directory: C:\Windows\SoftwareDistribution
    2014-10-23 11:49:51:833  936 1dac Agent   * Access type: No proxy
    2014-10-23 11:49:51:833  936 1dac Service UpdateNetworkState Ipv6, cNetworkInterfaces = 1.
    2014-10-23 11:49:51:833  936 1dac Service UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
    2014-10-23 11:49:51:833  936 1dac Agent   * Network state: Connected
    2014-10-23 11:49:51:833  936 1dac Service UpdateNetworkState Ipv6, cNetworkInterfaces = 1.
    2014-10-23 11:49:51:833  936 1dac Service UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
    2014-10-23 11:49:51:849  936 1dac Agent ***********  Agent: Initializing global settings cache  ***********
    2014-10-23 11:49:51:849  936 1dac Agent   * Endpoint Provider: 00000000-0000-0000-0000-000000000000
    2014-10-23 11:49:51:849  936 1dac Agent   * WSUS server: http://hccsus01:8530/
    2014-10-23 11:49:51:849  936 1dac Agent   * WSUS status server: http://hccsus01:8530/
    2014-10-23 11:49:51:849  936 1dac Agent   * Target group: (Unassigned Computers)
    2014-10-23 11:49:51:849  936 1dac Agent   * Windows Update access disabled: No
    2014-10-23 11:49:51:849  936 1dac WuTask WuTaskManager delay initialize completed successfully..
    2014-10-23 11:49:51:849  936 1dac AU     Timer: 31DA7559-FE27-4810-8FF6-987195B1FD98, Expires 2014-10-23 15:43:33, not idle-only, not network-only
    2014-10-23 11:49:51:849  936 1dac AU     Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2014-10-23 21:44:50, not idle-only, not network-only
    2014-10-23 11:49:51:849  936 1dac AU     Timer: 29A863E7-8609-4D1E-B7CD-5668F857F1DB, Expires 2014-10-23 21:44:46, not idle-only, not network-only
    2014-10-23 11:49:51:849  936 1dac AU     Timer: E25CADF6-86A6-4569-BCDF-89BE66B0CA66, Expires 2014-10-24 21:33:11, not idle-only, not network-only
    2014-10-23 11:49:51:849  936 1dac Report WARNING: CSerializationHelper:: InitSerialize failed : 0x80070002
    2014-10-23 11:49:51:849  936 1dac Report CWERReporter::Init succeeded
    2014-10-23 11:49:51:849  936 1dac Agent ***********  Agent: Initializing Windows Update Agent  ***********
    2014-10-23 11:49:51:849  936 1dac DnldMgr Download manager restoring 0 downloads
    2014-10-23 11:49:51:849  936 1dac AU ###########  AU: Initializing Automatic Updates  ###########
    2014-10-23 11:49:51:849  936 1dac AU Additional Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} with Approval type {Scheduled} added to AU services list
    2014-10-23 11:49:51:849  936 1dac AU AIR Mode is disabled
    2014-10-23 11:49:51:849  936 1dac AU   # Policy Driven Provider: http://hccsus01:8530/
    2014-10-23 11:49:51:849  936 1dac AU   # Detection frequency: 22
    2014-10-23 11:49:51:849  936 1dac AU   # Approval type: Scheduled (Policy)
    2014-10-23 11:49:51:849  936 1dac AU   # Auto-install minor updates: Yes (User preference)
    2014-10-23 11:49:51:849  936 1dac AU   # ServiceTypeDefault: Service 117CAB2D-82B1-4B5A-A08C-4D62DBEE7782 Approval type: (Scheduled)
    2014-10-23 11:49:51:849  936 1dac AU   # Will interact with non-admins (Non-admins are elevated (User preference))
    2014-10-23 11:49:51:865  936 1dac AU WARNING: Failed to get Wu Exemption info from NLM, assuming not exempt, error = 0x80070032
    2014-10-23 11:49:51:974  936 1dac AU AU finished delayed initialization
    2014-10-23 11:49:52:287  936 2340 DnldMgr Asking handlers to reconcile their sandboxes
    2014-10-23 11:59:52:061  936 2338 AU Earliest future timer found:
    2014-10-23 11:59:52:061  936 2338 AU     Timer: 31DA7559-FE27-4810-8FF6-987195B1FD98, Expires 2014-10-23 15:43:33, not idle-only, not network-only
    2014-10-23 11:59:53:061  936 1dac AU ###########  AU: Uninitializing Automatic Updates  ###########
    2014-10-23 11:59:53:123  936 1dac WuTask Uninit WU Task Manager
    2014-10-23 11:59:53:232  936 1dac WuTask WARNING: SessionConnectHandler, could not validate and register task, error = 0x80070534
    2014-10-23 11:59:53:232  936 1dac AU Earliest future timer found:
    2014-10-23 11:59:53:232  936 1dac AU     Timer: 31DA7559-FE27-4810-8FF6-987195B1FD98, Expires 2014-10-23 15:43:33, not idle-only, not network-only
    2014-10-23 11:59:53:311  936 1dac AU Earliest future timer found:
    2014-10-23 11:59:53:311  936 1dac AU     Timer: 31DA7559-FE27-4810-8FF6-987195B1FD98, Expires 2014-10-23 15:43:33, not idle-only, not network-only
    2014-10-23 11:59:53:436  936 1dac Service *********
    2014-10-23 11:59:53:436  936 1dac Service **  END  **  Service: Service exit [Exit code = 0x240001]
    2014-10-23 11:59:53:436  936 1dac Service *************

    Thursday, October 23, 2014 2:53 AM
  • Sorry if I am posting too much of the log file:

    Actually I'm not sure you've posted enough. What's posted here is inconclusive, and also clouded by a simultaneously occurring attempt to update Definition files for the AV/AM software.

    Please do the following to get a clean and complete logfile for analysis:

    1. Record the system time.
    2. Reboot the system.
    3. After reboot, run this command: wuauclt /resetauthorization /detectnow.
    4. Wait -30- minutes.
    5. Post ALL of the entries in the WindowsUpdate.log starting with the entry at the time recorded in Step #1.

    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Friday, October 24, 2014 11:14 PM
  • Thanks Lawrence, the log file is too big to be posted here. How can I get it to you easily?

    Thanks.

    Tuesday, October 28, 2014 3:59 AM
  • Thanks Lawrence, the log file is too big to be posted here. How can I get it to you easily?

    If you're only posting the =30 minutes= of entries, as asked, that content cannot possibly be "too big" to post here. We do it every day for the past eight years.

    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    • Proposed as answer by Alex Lv Wednesday, November 5, 2014 9:37 AM
    • Marked as answer by Alex Lv Wednesday, November 5, 2014 9:37 AM
    • Unmarked as answer by SMM06 Wednesday, November 5, 2014 10:11 PM
    • Unproposed as answer by Lawrence Garvin Monday, November 10, 2014 4:43 PM
    Thursday, October 30, 2014 9:40 AM
  • Error message I am getting when trying to submit my log:

    "Message from webpage

    Body must be 4 to 60000 characters long"

    First line of my log: "2014-10-28 13:19:32:303  976 7ec Misc ===========  Logging initialized (build: 7.9.9600.17336, tz: +1000)  ==========="

    Last line of my log: "2014-10-28 13:43:49:888  976 7ec Service *************"

    Surely someone has come across this error before.

    Wednesday, November 5, 2014 10:15 PM
  • Error message I am getting when trying to submit my log:

    "Message from webpage

    Body must be 4 to 60000 characters long"

    First line of my log: "2014-10-28 13:19:32:303  976 7ec Misc ===========  Logging initialized (build: 7.9.9600.17336, tz: +1000)  ==========="

    Last line of my log: "2014-10-28 13:43:49:888  976 7ec Service *************"

    Surely someone has come across this error before.

    So split it into two (or more) messages... although the fact that there's >60k chars of log data in that 24 minutes of time is probably pretty telling until itself.

    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    • Marked as answer by Alex Lv Monday, November 10, 2014 8:25 AM
    • Unmarked as answer by Lawrence Garvin Monday, November 10, 2014 4:43 PM
    Friday, November 7, 2014 4:18 AM