locked
some client hadn't update FCS???? RRS feed

  • Question

  • بسم الله الرحمن الرحيم

    I had FCS server and SCCM 2007 server and WSUS

    i have 3 subnetwork on my enviorment 192.168.1.0 - 192.168.51.0 - 192.168.20.0 all in one domain

    two of them used Proxy server (TMG) 192.168.1.0 & 192.168.51.0  ( FCS Had update as soon as possible )

    the last one 192.168.20.0 direct access internet without any firewall  ( FCS can't update )

    my proxy configuration apply by group policy.

    how can fix update for subnet 192.168.20.0 ?

     

     

    Tuesday, July 27, 2010 12:47 PM

Answers

All replies

  • Are you getting any error message?  Any error messages in the event log?

    Also, look at the following articles:

    http://portal.sivarajan.com/2010/07/troubleshooting-fcs-definition-update.html

    http://portal.sivarajan.com/2010/04/forefront-client-security-fcs.html

     


    Santhosh Sivarajan | MCTS, MCSE (W2K3/W2K/NT4), MCSA (W2K3/W2K/MSG), CCNA, Network+ Houston, TX http://blogs.sivarajan.com/ http://publications.sivarajan.com/ This posting is provided "AS IS" with no warranties, and confers no rights.
    Tuesday, July 27, 2010 4:40 PM
  •  

    Are you using WSUS for updates? or pulling updates from MS?

    You probably need to configure windows update in Control Panel to pull the updates from MS (provided you are pulling updates from MS)

    Note: This is different from the automatic updates you see in your system tray..

     

    • Proposed as answer by Nick Gu - MSFT Thursday, July 29, 2010 3:38 AM
    Tuesday, July 27, 2010 7:19 PM
  • بسم الله الرحمن الرحيم

    thanks for reply

    i checked Windows update log file.

    2010-07-28 09:55:51:542 1012 f60 Agent ** START **  Agent: Finding updates [CallerId = Microsoft Forefront Client Security]
    2010-07-28 09:55:51:542 1012 f60 Agent *********
    2010-07-28 09:55:51:542 1012 f60 Agent   * Online = Yes; Ignore download priority = No
    2010-07-28 09:55:51:542 1012 f60 Agent   * Criteria = "(IsInstalled = 0 and IsHidden = 0 and CategoryIDs contains 'e0789628-ce08-4437-be74-2495b842f43b' and CategoryIDs contains '0a487050-8b0f-4f81-b401-be4ceacd61cd') or (IsInstalled = 0 and IsHidden = 0 and CategoryIDs contains 'e0789628-ce08-4437-be74-2495b842f43b' and CategoryIDs contains '8c3fcc84-7410-4a95-8b89-a166a0190486')"
    2010-07-28 09:55:51:542 1012 f60 Agent   * ServiceID = {00000000-0000-0000-0000-000000000000} Third party service
    2010-07-28 09:55:51:542 1012 f60 Agent   * Search Scope = {Machine}
    2010-07-28 09:55:51:698 1012 f60 PT WARNING: Cached cookie has expired or new PID is available
    2010-07-28 09:55:51:698 1012 f60 PT Initializing simple targeting cookie, clientId = 4618fa1c-a93e-4e9b-8b44-41fa807ef5e0, target group = , DNS name = ajaj-pc.hq.asq.com
    2010-07-28 09:55:51:698 1012 f60 PT   Server URL = http://SCCM.HQ.ASQ.COM:80/SimpleAuthWebService/SimpleAuth.asmx
    2010-07-28 09:56:51:431 1012 f60 Misc WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <192.168.20.14:8080> Bypass List used : <(null)> Auth Schemes used : <NTLM;Negotiate (NTLM or Kerberos);>
    2010-07-28 09:56:51:431 1012 f60 PT   + Last proxy send request failed with hr = 0x80072EE2, HTTP status code = 0
    2010-07-28 09:56:51:431 1012 f60 PT   + Caller provided proxy = No
    2010-07-28 09:56:51:431 1012 f60 PT   + Proxy list used = 192.168.20.14:8080
    2010-07-28 09:56:51:431 1012 f60 PT   + Bypass list used = <NULL>
    2010-07-28 09:56:51:431 1012 f60 PT   + Caller provided credentials = No
    2010-07-28 09:56:51:431 1012 f60 PT   + Impersonate flags = 1
    2010-07-28 09:56:51:431 1012 f60 PT   + Possible authorization schemes used = NTLM;Negotiate (NTLM or Kerberos);
    2010-07-28 09:56:51:431 1012 f60 PT WARNING: GetAuthorizationCookie failure, error = 0x80072EE2, soap client error = 5, soap error code = 0, HTTP status code = 200
    2010-07-28 09:56:51:431 1012 f60 PT WARNING: Failed to initialize Simple Targeting Cookie: 0x80072ee2
    2010-07-28 09:56:51:431 1012 f60 PT WARNING: PopulateAuthCookies failed: 0x80072ee2
    2010-07-28 09:56:51:431 1012 f60 PT WARNING: RefreshCookie failed: 0x80072ee2
    2010-07-28 09:56:51:431 1012 f60 PT WARNING: RefreshPTState failed: 0x80072ee2
    2010-07-28 09:56:51:431 1012 f60 PT WARNING: StartCategoryScan failed : 0x80072ee2
    2010-07-28 09:56:51:446 1012 f60 Agent   * WARNING: Exit code = 0x80072EE2
    2010-07-28 09:56:51:446 1012 f60 Agent *********
    2010-07-28 09:56:51:446 1012 f60 Agent **  END  **  Agent: Finding updates [CallerId = Microsoft Forefront Client Security]
    2010-07-28 09:56:51:446 1012 f60 Agent *************
    2010-07-28 09:56:51:446 1012 f60 Agent WARNING: WU client failed Searching for update with error 0x80072ee2
    2010-07-28 09:56:51:446 7996 1dc0 COMAPI >>--  RESUMED  -- COMAPI: Search [ClientId = Microsoft Forefront Client Security]
    2010-07-28 09:56:51:446 7996 1dc0 COMAPI   - Updates found = 0
    2010-07-28 09:56:51:446 7996 1dc0 COMAPI   - WARNING: Exit code = 0x00000000, Result code = 0x80072EE2
    2010-07-28 09:56:51:446 7996 1dc0 COMAPI ---------
    2010-07-28 09:56:51:446 7996 1dc0 COMAPI --  END  --  COMAPI: Search [ClientId = Microsoft Forefront Client Security]
    2010-07-28 09:56:51:446 7996 1dc0 COMAPI -------------
    2010-07-28 09:56:51:446 7996 1510 COMAPI WARNING: Operation failed due to earlier error, hr=80072EE2
    2010-07-28 09:56:51:446 7996 1510 COMAPI FATAL: Unable to complete asynchronous search. (hr=80072EE2)
    2010-07-28 09:56:56:454 1012 f60 Report REPORT EVENT: {EEB36C82-80E9-4BA8-9138-6C992AA70824} 2010-07-28 09:56:51:446+0400 1 148 101 {00000000-0000-0000-0000-000000000000} 0 80072ee2 Microsoft Forefront Client Secu Failure Software Synchronization Windows Update Client failed to detect with error 0x80072ee2.
    2010-07-28 09:56:56:454 1012 f60 Report CWERReporter::HandleEvents - WER report upload completed with status 0x8
    2010-07-28 09:56:56:454 1012 f60 Report WER Report sent: 7.4.7600.226 0x80072ee2 00000000-0000-0000-0000-000000000000 Scan 101 Managed
    2010-07-28 09:56:56:454 1012 f60 Report CWERReporter finishing event handling. (00000000)

    Wednesday, July 28, 2010 6:33 AM
  • Try to redeply update and also check Forefront consul and make sure those PC are added and update policy apply for them.
    Wednesday, July 28, 2010 10:20 AM
  • Hi,

     

    Thank you for the post.

     

    The 0x80072ee2 error is a timeout error. For more  information, please refer to: http://support.microsoft.com/kb/836941/en-us.

     

    Regards,

     


    Nick Gu - MSFT
    • Marked as answer by M.Abdelhamid Saturday, June 4, 2011 9:00 AM
    Thursday, July 29, 2010 3:56 AM
  • بسم الله الرحمن الرحيم

    thanks for reply

    i wand add somehing for ur mind

    the subnet 192.168.20.0 in another site Dubai country this site had aditional domain and no poxy there and no wsus and sccm

    i had sccm and wsus on head office only

    is you prefer install secoundry sccm site and wsus there in site having 192.168.20.0

    i wait ur reply ask me anything .

    thanks

    Thursday, July 29, 2010 3:40 PM
  • Hi,

     

    Thank you for the upadate.

     

    Since the subnet in another site, I think you may deploy FCS with /nomom installlation and get the updates directly from MU.  Please refer to this: http://technet.microsoft.com/en-us/library/bb625083.aspx

     

    Regards,


    Nick Gu - MSFT
    • Marked as answer by Nick Gu - MSFT Monday, August 2, 2010 3:04 AM
    • Unmarked as answer by M.Abdelhamid Monday, August 2, 2010 6:35 AM
    • Marked as answer by M.Abdelhamid Saturday, June 4, 2011 9:00 AM
    Monday, August 2, 2010 3:04 AM
  • بسم الله الرحمن الرحيم

    how can manage it???? 

    this for home user without managment server
    Monday, August 2, 2010 6:34 AM