none
4 of latest updates fail to download with status "The update failed to download": RRS feed

  • 질문

  • We are running Server 2012R2 and W10.

    WSUS is mostly working fine and has downloaded most of the last batch of files without problem however there are four that are marked "The update failed to download":

    2019-11 CU for W10 1809 (KB4523205) and 1903 (KB4524570)

    2019-11 SSU for W10 1809 (KB4523204) and 1903 (KB4524569)

    Other files download OK.

    There are event log entries such as:

    Content file download failed.

    Reason: HTTP status 403: The client does not have sufficient access rights to the requested server object.

    Source File: /filestreamingservice/files/4d1472e2-297a-42a9-b658-a172787be72b/public/windows10.0-kb4524569-x64_72c34125e50af4c16828d2688dc33dbc2af1b5f4.cab

    Destination File: E:\WSUS\WsusContent\F4\72C34125E50AF4C16828D2688DC33DBC2AF1B5F4.cab

    What is happening here - is it just a case of waiting and it will sort itself out as all other files have downloaded OK?

    Thanks,

    Julian

    2019년 11월 15일 금요일 오후 3:30

답변

  • Same problem here.  Temporarily bypassing the firewall whitelisting and deep packet inspection allowed them to download.  Unfortunately I didn't have full logging turned on for the temporary firewall policy that I created, and by the time I changed the setting, they had already downloaded so I missed seeing what URL's it was hitting.  I'm guessing some new Microsoft updates are starting to come from a new source that's getting blocked.



    MS SQL Rookie

    • 답변으로 표시됨 JulianFloyd 2019년 11월 21일 목요일 오전 9:19
    2019년 11월 20일 수요일 오후 5:08

모든 응답

  • Hi Julian,
      

    For HTTP 403 errors, please refer to the tag answer for this thread: "HTTP status 403: The client does not have sufficient access rights to the requested server object - Event ID 364".
       

    If it is not a malfunction caused by the proxy server in your case, please continue to reply and let me know.
       

    Regards,
    Yic

    Please remember to mark as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    2019년 11월 18일 월요일 오전 2:24
  • Thanks - I am not running a proxy server. We so have a Sophos firewall device but I would have thought if there was an issue with a proxy server, firewall or whatever it would effect all WSUS downloads and not just these.

    Is there any common factor to 2019-11 CU for W10 1809 (KB4523205) and 1903 (KB4524570) and 2019-11 SSU for W10 1809 (KB4523204) and 1903 (KB4524569) that is different to all other files that WSUS downloads?

    2019년 11월 18일 월요일 오후 4:23
  • Is there any common factor to 2019-11 CU for W10 1809 (KB4523205) and 1903 (KB4524570) and 2019-11 SSU for W10 1809 (KB4523204) and 1903 (KB4524569) that is different to all other files that WSUS downloads?

    In my test, all four update files can be downloaded completely.
       


       
    So I don't think there is a common factor causing the file to fail to download.
       

    Regards,
    Yic

    Please remember to mark as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    2019년 11월 19일 화요일 오전 2:34
  • I am also having the same issue all other files download just fine to the Wsus except these files KB4523205,KB4504569 AND KB4524570

    I been using my WSUS for over 6 years and never have had this problem until this month. on these 3 files

    funny thinig is i can download them from the microsoft update catalog maunally and save them to a folder but can't import to the WSUS , I believe there is something wrong with these files on the microsoft side

    2019년 11월 19일 화요일 오후 3:05
  • That is exactly what I am seeing.
    2019년 11월 19일 화요일 오후 3:28
  • Hi,
      

    Have you checked the SoftwareDistribution.log (Usually located in Program Files\Update Services\LogFiles), please search according to the updated KB number, you may see the reason for the download failure, which will help you determine the cause.
      

    Regards,
    Yic

    Please remember to mark as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    2019년 11월 20일 수요일 오전 2:32
  • Thanks Yic,

    There are messages similar to those in the event log:

    Source File: /filestreamingservice/files/e9f56524-3a0f-487a-8b59-729ed68e8874/public/windows10.0-kb4523205-x64_a0666e2bc1ac90c1fe71c9e61e9360236cfc17f0.cab
    Destination File: E:\WSUS\WsusContent\F0\A0666E2BC1AC90C1FE71C9E61E9360236CFC17F0.cab
    2019-11-19 22:27:49.583 UTC Warning WsusService.28 ContentSyncAgent.ProcessBITSNotificationQueue ContentSyncAgent recieved Failure for Item: 258850aa-01a9-4422-985b-5d4beef78e24, Item fails
    2019-11-19 22:27:49.583 UTC Info WsusService.28 ContentSyncAgent.ContentSyncSPFireStateMachineEvent ContentSyncAgent firing Event: FileDownloadFailed for Item: 258850aa-01a9-4422-985b-5d4beef78e24
    2019-11-19 22:27:49.614 UTC Info WsusService.28 EventLogEventReporter.ReportEvent EventId=364,Type=Error,Category=Synchronization,Message=Content file download failed.
    Reason: HTTP status 403: The client does not have sufficient access rights to the requested server object.

    All other downloads are working OK so I am puzzled whay these particular files are failing with this error.

    Any suggestions would be appreciated.

    Regards,

    Julian

    2019년 11월 20일 수요일 오전 9:15
  • Same problem here.  Temporarily bypassing the firewall whitelisting and deep packet inspection allowed them to download.  Unfortunately I didn't have full logging turned on for the temporary firewall policy that I created, and by the time I changed the setting, they had already downloaded so I missed seeing what URL's it was hitting.  I'm guessing some new Microsoft updates are starting to come from a new source that's getting blocked.



    MS SQL Rookie

    • 답변으로 표시됨 JulianFloyd 2019년 11월 21일 목요일 오전 9:19
    2019년 11월 20일 수요일 오후 5:08
  • Hi Julian.
      

    If there is a firewall or proxy between WSUS and the Internet, make sure that the list addresses in the following articles are accessible: "Connection from the WSUS server to the Internet".
      

    Regards,
    Yic

    Please remember to mark as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    2019년 11월 21일 목요일 오전 2:57
  • Thanks - That confirms my thoughts. Our firewall blocks user access to the Microsoft Store and it looks as if these updates are now on one of those sites. I have asked the company that manage the firewall to make the changes.
    2019년 11월 21일 목요일 오전 9:21
  • Hi Everyone,
      

    The following is a summary of this thread:
      

    • Issue Symptom
      WSUS cannot get partial updates via Microsoft Update, error message: HTTP status 403
         
    • Cause
      Some Microsoft sites are blocked by firewalls
        
    • Solution
      Firewall adjustment
        
    • Reference Links
      Connection from the WSUS server to the Internet
       
    Regards,
    Yic

    Please remember to mark as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    2019년 11월 22일 금요일 오전 6:17