locked
Server 2012 attempting to access Microsoft Update although configured for WSUS RRS feed

  • Question

  • We have an existing WSUS 3.0 SP2 server running on Server 2008 R2. It stores updates locally and services over 4,000 client machines which are Windows XP, Windows Vista, Windows 7, and Server 2008 R2. We have begun introducing Windows 8 and Server 2012 clients over the past few weeks, and most of those are updating as expected from our WSUS server. Update KB2734608 was installed on the WSUS server prior to deployment of any Windows 8 or Server 2012 clients.

    Last week we deployed the first Server 2012 machine in our environment that is intended to be isolated from the internet but still has network access to our WSUS server, and it is having problems checking for updates. When an admin clicks the Check for Updates link, Windows Update freezes for approximately 12 minutes and remains unresponsive. Also the WindowsUpdate.log file does not update during this time.

    After the long ~12 minute delay, Windows Update completes successfully and obtains any needed updates.

    MU ServiceManager shows the following via PowerShell:

    ipmo BitsTransfer
    $mu = New-Object -ComObject Microsoft.Update.ServiceManager -Strict
    $mu.Services

    Name : Windows Server Update Service ContentValidationCert : {} ExpirationDate : 6/18/5254 9:21:00 PM IsManaged : True IsRegisteredWithAU : True IssueDate : 1/1/2003 12:00:00 AM OffersWindowsUpdates : True RedirectUrls : System.__ComObject ServiceID : 3da21691-e39d-4da6-8a4b-b43877bcb1b7 IsScanPackageService : False CanRegisterWithAU : True ServiceUrl : SetupPrefix : IsDefaultAUService : True Name : Windows Update ContentValidationCert : {} ExpirationDate : 6/18/5254 9:21:00 PM IsManaged : False IsRegisteredWithAU : True IssueDate : 1/1/2003 12:00:00 AM OffersWindowsUpdates : True RedirectUrls : System.__ComObject ServiceID : 9482f4b4-e343-43b6-b170-9a65bc822c77 IsScanPackageService : False CanRegisterWithAU : True ServiceUrl : SetupPrefix : IsDefaultAUService : False

    I have run the following commands in a batch file but doing so does not appear to have any effect on the behavior.

    net stop bits
    net stop wuauserv
    ipconfig /flushdns
    cd C:\ProgramData\Microsoft\Network\Downloader
    del qmgr0.dat
    del qmgr1.dat
    cd C:\
    rd C:\Windows\SoftwareDistribution -Recurse
    net start bits
    net start wuauserv

    The WindowsUpdate.log file shows attempts to obtain wuredir.cab from ds.download.windowsupdate.com and fe1.update.microsoft.com multiple times each with a long delay each time, after which the client finally tries our WSUS server and succeeds very quickly. Automatic updates throughout the day do not appear to suffer from the failed attempts to access the internet.

    2013-04-25	16:56:15:130	 840	a68	AU	#############
    2013-04-25	17:01:04:397	 840	358	AU	Triggering AU detection through DetectNow API
    2013-04-25	17:01:04:397	 840	358	AU	Triggering Online detection (interactive)
    2013-04-25	17:01:07:408	 840	a68	AU	#############
    2013-04-25	17:01:07:408	 840	a68	AU	## START ##  AU: Search for updates
    2013-04-25	17:01:07:408	 840	a68	AU	#########
    2013-04-25	17:01:49:451	 840	a68	Misc	WARNING: Send failed with hr = 80072ee2.
    2013-04-25	17:01:49:451	 840	a68	Misc	WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2013-04-25	17:01:49:451	 840	a68	Misc	WARNING: Send request failed, hr:0x80072ee2
    2013-04-25	17:01:49:451	 840	a68	Misc	WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2
    2013-04-25	17:01:49:451	 840	a68	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2013-04-25	17:01:49:451	 840	a68	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2013-04-25	17:01:49:451	 840	a68	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2013-04-25	17:02:31:510	 840	a68	Misc	WARNING: Send failed with hr = 80072ee2.
    2013-04-25	17:02:31:510	 840	a68	Misc	WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2013-04-25	17:02:31:510	 840	a68	Misc	WARNING: Send request failed, hr:0x80072ee2
    2013-04-25	17:02:31:510	 840	a68	Misc	WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2
    2013-04-25	17:02:31:510	 840	a68	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2013-04-25	17:02:31:510	 840	a68	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2013-04-25	17:02:31:510	 840	a68	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2013-04-25	17:03:13:584	 840	a68	Misc	WARNING: Send failed with hr = 80072ee2.
    2013-04-25	17:03:13:584	 840	a68	Misc	WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2013-04-25	17:03:13:584	 840	a68	Misc	WARNING: Send request failed, hr:0x80072ee2
    2013-04-25	17:03:13:584	 840	a68	Misc	WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2
    2013-04-25	17:03:13:584	 840	a68	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2013-04-25	17:03:13:584	 840	a68	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2013-04-25	17:03:13:584	 840	a68	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2013-04-25	17:03:56:688	 840	a68	Misc	WARNING: Send failed with hr = 80072ee2.
    2013-04-25	17:03:56:688	 840	a68	Misc	WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2013-04-25	17:03:56:688	 840	a68	Misc	WARNING: Send request failed, hr:0x80072ee2
    2013-04-25	17:03:56:688	 840	a68	Misc	WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2
    2013-04-25	17:03:56:688	 840	a68	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2013-04-25	17:03:56:688	 840	a68	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2013-04-25	17:03:56:688	 840	a68	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2013-04-25	17:03:56:688	 840	a68	Misc	WARNING: DownloadFileInternal failed for http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab: error 0x80072ee2
    2013-04-25	17:04:17:764	 840	a68	Misc	WARNING: Send failed with hr = 80072ee2.
    2013-04-25	17:04:17:764	 840	a68	Misc	WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2013-04-25	17:04:17:764	 840	a68	Misc	WARNING: Send request failed, hr:0x80072ee2
    2013-04-25	17:04:17:764	 840	a68	Misc	WARNING: WinHttp: SendRequestUsingProxy failed for <http://fe1.update.microsoft.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2
    2013-04-25	17:04:17:764	 840	a68	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2013-04-25	17:04:17:764	 840	a68	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2013-04-25	17:04:17:764	 840	a68	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2013-04-25	17:04:38:794	 840	a68	Misc	WARNING: Send failed with hr = 80072ee2.
    2013-04-25	17:04:38:794	 840	a68	Misc	WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2013-04-25	17:04:38:794	 840	a68	Misc	WARNING: Send request failed, hr:0x80072ee2
    2013-04-25	17:04:38:794	 840	a68	Misc	WARNING: WinHttp: SendRequestUsingProxy failed for <http://fe1.update.microsoft.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2
    2013-04-25	17:04:38:794	 840	a68	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2013-04-25	17:04:38:794	 840	a68	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2013-04-25	17:04:38:794	 840	a68	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2013-04-25	17:04:59:823	 840	a68	Misc	WARNING: Send failed with hr = 80072ee2.
    2013-04-25	17:04:59:823	 840	a68	Misc	WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2013-04-25	17:04:59:823	 840	a68	Misc	WARNING: Send request failed, hr:0x80072ee2
    2013-04-25	17:04:59:823	 840	a68	Misc	WARNING: WinHttp: SendRequestUsingProxy failed for <http://fe1.update.microsoft.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2
    2013-04-25	17:04:59:823	 840	a68	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2013-04-25	17:04:59:823	 840	a68	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2013-04-25	17:04:59:823	 840	a68	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2013-04-25	17:05:20:852	 840	a68	Misc	WARNING: Send failed with hr = 80072ee2.
    2013-04-25	17:05:20:852	 840	a68	Misc	WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2013-04-25	17:05:20:852	 840	a68	Misc	WARNING: Send request failed, hr:0x80072ee2
    2013-04-25	17:05:20:852	 840	a68	Misc	WARNING: WinHttp: SendRequestUsingProxy failed for <http://fe1.update.microsoft.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2
    2013-04-25	17:05:20:852	 840	a68	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2013-04-25	17:05:20:852	 840	a68	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2013-04-25	17:05:20:852	 840	a68	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2013-04-25	17:05:20:852	 840	a68	Misc	WARNING: DownloadFileInternal failed for http://fe1.update.microsoft.com/w8/2/windowsupdate/redir/wuredir.cab: error 0x80072ee2
    2013-04-25	17:06:02:942	 840	a68	Misc	WARNING: Send failed with hr = 80072ee2.
    2013-04-25	17:06:02:942	 840	a68	Misc	WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2013-04-25	17:06:02:942	 840	a68	Misc	WARNING: Send request failed, hr:0x80072ee2
    2013-04-25	17:06:02:942	 840	a68	Misc	WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2
    2013-04-25	17:06:02:942	 840	a68	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2013-04-25	17:06:02:942	 840	a68	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2013-04-25	17:06:02:942	 840	a68	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2013-04-25	17:06:45:017	 840	a68	Misc	WARNING: Send failed with hr = 80072ee2.
    2013-04-25	17:06:45:017	 840	a68	Misc	WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2013-04-25	17:06:45:017	 840	a68	Misc	WARNING: Send request failed, hr:0x80072ee2
    2013-04-25	17:06:45:017	 840	a68	Misc	WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2
    2013-04-25	17:06:45:017	 840	a68	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2013-04-25	17:06:45:017	 840	a68	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2013-04-25	17:06:45:017	 840	a68	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2013-04-25	17:07:27:127	 840	a68	Misc	WARNING: Send failed with hr = 80072ee2.
    2013-04-25	17:07:27:127	 840	a68	Misc	WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2013-04-25	17:07:27:127	 840	a68	Misc	WARNING: Send request failed, hr:0x80072ee2
    2013-04-25	17:07:27:127	 840	a68	Misc	WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2
    2013-04-25	17:07:27:127	 840	a68	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2013-04-25	17:07:27:127	 840	a68	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2013-04-25	17:07:27:127	 840	a68	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2013-04-25	17:08:09:174	 840	a68	Misc	WARNING: Send failed with hr = 80072ee2.
    2013-04-25	17:08:09:174	 840	a68	Misc	WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2013-04-25	17:08:09:174	 840	a68	Misc	WARNING: Send request failed, hr:0x80072ee2
    2013-04-25	17:08:09:174	 840	a68	Misc	WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2
    2013-04-25	17:08:09:174	 840	a68	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2013-04-25	17:08:09:174	 840	a68	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2013-04-25	17:08:09:174	 840	a68	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2013-04-25	17:08:09:174	 840	a68	Misc	WARNING: DownloadFileInternal failed for http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab: error 0x80072ee2
    2013-04-25	17:08:09:174	 840	a68	EP	FATAL: SLS: Failed to download and verify redir., error = 0x80072EE2
    2013-04-25	17:08:09:174	 840	a68	EP	FATAL: Failed to obtain 9482F4B4-E343-43B6-B170-9A65BC822C77 redir SecondaryServiceAuth URL, error = 0x80072EE2
    2013-04-25	17:08:09:174	 840	a68	Agent	WARNING: Failed to obtain the authorization cab URL for service 7971f918-a847-4430-9279-4a52d1efe18d, hr=0
    2013-04-25	17:08:09:174	 840	a68	Agent	FATAL: Caller <NULL> failed to opt in to service 7971f918-a847-4430-9279-4a52d1efe18d, hr=0X80072EE2
    2013-04-25	17:08:09:174	 840	a68	AU	<<## SUBMITTED ## AU: Search for updates  [CallId = {E1ADFF6B-386C-4363-9567-AE83BAE7DAE0} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}]
    2013-04-25	17:08:09:174	 840	f94	Agent	*************
    2013-04-25	17:08:09:174	 840	f94	Agent	** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2013-04-25	17:08:09:174	 840	f94	Agent	*********
    2013-04-25	17:08:09:174	 840	f94	Agent	  * Online = Yes; Ignore download priority = No
    2013-04-25	17:08:09:174	 840	f94	Agent	  * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
    2013-04-25	17:08:09:174	 840	f94	Agent	  * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2013-04-25	17:08:09:174	 840	f94	Agent	  * Search Scope = {Machine & All Users}
    2013-04-25	17:08:09:174	 840	f94	Agent	  * Caller SID for Applicability: S-1-5-21-111288279-36659543-794563710-92819
    2013-04-25	17:08:09:221	 840	f94	EP	Got WSUS Client/Server URL: "https://supd1p1.systems.***.***/ClientWebService/client.asmx"
    2013-04-25	17:08:09:221	 840	f94	Setup	Checking for agent SelfUpdate
    2013-04-25	17:08:09:221	 840	f94	Setup	Client version: Core: 7.8.9200.16547  Aux: 7.8.9200.16547
    2013-04-25	17:08:09:221	 840	f94	EP	Got WSUS SelfUpdate URL: "https://supd1p1.systems.***.***/selfupdate"
    2013-04-25	17:08:09:237	 840	f94	Misc	Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
    2013-04-25	17:08:09:237	 840	f94	Misc	 Microsoft signed: Yes
    2013-04-25	17:08:09:237	 840	f94	Misc	 Infrastructure signed: Yes
    2013-04-25	17:08:09:252	 840	f94	Misc	Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
    2013-04-25	17:08:09:268	 840	f94	Misc	 Microsoft signed: Yes
    2013-04-25	17:08:09:268	 840	f94	Misc	 Infrastructure signed: Yes
    2013-04-25	17:08:09:268	 840	f94	Setup	Skipping SelfUpdate check based on the /SKIP directive in wuident
    2013-04-25	17:08:09:268	 840	f94	Setup	SelfUpdate check completed.  SelfUpdate is NOT required.
    2013-04-25	17:08:10:126	 840	f94	PT	+++++++++++  PT: Synchronizing server updates  +++++++++++
    2013-04-25	17:08:10:126	 840	f94	PT	  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = https://supd1p1.systems.***.***/ClientWebService/client.asmx
    2013-04-25	17:08:27:397	 840	f94	PT	+++++++++++  PT: Synchronizing extended update info  +++++++++++
    2013-04-25	17:08:27:397	 840	f94	PT	  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = https://supd1p1.systems.***.***/ClientWebService/client.asmx
    2013-04-25	17:08:28:271	 840	f94	Agent	  * Found 0 updates and 68 categories in search; evaluated appl. rules of 554 out of 857 deployed entities
    2013-04-25	17:08:28:271	 840	f94	Agent	Reporting status event with 0 installable, 39 installed,  0 installed pending, 0 failed and 0 downloaded updates
    2013-04-25	17:08:28:271	 840	f94	Agent	*********
    2013-04-25	17:08:28:271	 840	f94	Agent	**  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2013-04-25	17:08:28:271	 840	f94	Agent	*************
    2013-04-25	17:08:28:271	 840	350	AU	>>##  RESUMED  ## AU: Search for updates [CallId = {E1ADFF6B-386C-4363-9567-AE83BAE7DAE0} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}]
    2013-04-25	17:08:28:271	 840	350	AU	  # 0 updates detected
    2013-04-25	17:08:28:271	 840	350	AU	#########
    2013-04-25	17:08:28:271	 840	350	AU	##  END  ##  AU: Search for updates  [CallId = {E1ADFF6B-386C-4363-9567-AE83BAE7DAE0} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}]
    2013-04-25	17:08:28:271	 840	350	AU	#############
    2013-04-25	17:08:28:271	 840	350	AU	All AU searches complete.
    2013-04-25	17:08:28:271	 840	350	AU	AU setting next detection timeout to 2013-04-26 04:56:23
    
    Thursday, April 25, 2013 10:32 PM

Answers

  • Based in part on customer feedback, we have added the ability in Windows 8.1/WS2012 R2 to restrict WUA from contacting MU to download Store content. More on that in an upcoming WSUS blog post.

    Thank you for your feedback!

    Thanks,
    Ben



    Friday, September 27, 2013 11:40 PM
  • Our Microsoft TAM provided the following information in response to a Premier case I opened about this issue. While Microsoft has acknowledged the problem, as we suspected they do not plan to implement a fix in Server 2012 RTM. Instead, a new Windows Update group policy has been created in Server 2012 R2 to correct the problem.

    Title: Do not connect to any Windows Update Internet locations

    Description:

    Even when Windows Update is configured to receive updates from an intranet update service, it will periodically retrieve information from the public Windows Update service to enable future connections to Windows Update, and other services like Microsoft Update or the Windows Store. Enabling this policy will disable that functionality, and may cause connection to public services such as the Windows Store to stop working.

    Note: This policy applies only when this PC is configured to connect to an intranet update service using the "Specify intranet Microsoft update service location" policy.

    • Marked as answer by tdoan Tuesday, October 8, 2013 1:44 PM
    Tuesday, October 8, 2013 1:44 PM
  • Based in part on customer feedback, we have added the ability in Windows 8.1/WS2012 R2 to restrict WUA from contacting MU to download Store content. More on that in an upcoming WSUS blog post.

    Thank you for your feedback!

    Thanks,
    Ben



    The fix is now available and described here: http://blogs.technet.com/b/wsus/archive/2013/10/08/enabling-a-more-predictable-windows-update-experience-for-windows-8-and-windows-server-2012-kb-2885694.aspx

    and here: http://support.microsoft.com/kb/2885694

    Tuesday, October 8, 2013 4:59 PM

All replies

  • We see this a lot, particularly with non-Internet-enabled computers that did have Internet access during their early days, and most notably right after Patch Tuesday.

    It seems that this machine did successfully scan AU/WU/MU and identify updates that were needed . . . . and then it's Internet access was taken away, and now it cannot download the update files stuck in the download queue -- which means it's effectively ignoring the WSUS server.

    Using this article in TechNet, use the PowerShell BITS cmdlets to DELETE the current BITS queue.

    Then run wuauclt /resetauthorization /detectnow from the command prompt and the system will re-queue the update downloads for the approved updates from the WSUS server.


    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    SolarWinds Head Geek
    Microsoft MVP - Software Distribution (2005-2013)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Friday, April 26, 2013 2:12 AM
  • Thanks for the response, Lawrence.

    I had seen your previous postings about clearing the BITS queue, but it's not clear to me how to do so in Server 2012. After importing the BitsTransfer PowerShell module, I'm not finding any BITS jobs to clear. Here's the code, which returns no results.

    ipmo BitsTransfer
    Get-BitsTransfer -AllUsers

    I also attempted to clear the BITS queue by removing the qmgr0.dat and qmgr1.dat files as shown in my original post, but I'm not sure whether that method has any affect with Server 2012 (the files do exist). Maybe if I can find how to accomplish this, the problem will be resolved.

    However, I did go ahead and add the wuauclt /resetauthorization /detectnow command to the end of my CleanUp.bat batch file based on your recommendation, and the following resulted in the WindowsUpdate.log.

    2013-04-26	00:07:12:845	 840	a7c	AU	###########  AU: Uninitializing Automatic Updates  ###########
    2013-04-26	00:07:12:876	 840	a7c	WuTask	Uninit WU Task Manager
    2013-04-26	00:07:13:001	 840	a7c	Service	*********
    2013-04-26	00:07:13:001	 840	a7c	Service	**  END  **  Service: Service exit [Exit code = 0x240001]
    2013-04-26	00:07:13:001	 840	a7c	Service	*************
    2013-04-26	00:07:17:900	 840	ee0	Misc	===========  Logging initialized (build: 7.8.9200.16547, tz: -0500)  ===========
    2013-04-26	00:07:17:900	 840	ee0	Misc	  = Process: C:\Windows\system32\svchost.exe
    2013-04-26	00:07:17:900	 840	ee0	Misc	  = Module: c:\windows\system32\wuaueng.dll
    2013-04-26	00:07:17:900	 840	ee0	Service	*************
    2013-04-26	00:07:17:900	 840	ee0	Service	** START **  Service: Service startup
    2013-04-26	00:07:17:900	 840	ee0	Service	*********
    2013-04-26	00:07:17:915	 840	ee0	Agent	  * WU client version 7.8.9200.16547
    2013-04-26	00:07:17:915	 840	ee0	Agent	  * Base directory: C:\Windows\SoftwareDistribution
    2013-04-26	00:07:17:915	 840	ee0	Agent	  * Access type: No proxy
    2013-04-26	00:07:17:915	 840	ee0	Service	UpdateNetworkState Ipv6, cNetworkInterfaces = 0.
    2013-04-26	00:07:17:915	 840	ee0	Service	UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
    2013-04-26	00:07:17:915	 840	ee0	Agent	  * Network state: Connected
    2013-04-26	00:07:17:915	 840	ee0	Service	UpdateNetworkState Ipv6, cNetworkInterfaces = 0.
    2013-04-26	00:07:17:915	 840	ee0	Service	UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
    2013-04-26	00:07:18:414	 840	ee0	DtaStor	Default service for AU is {00000000-0000-0000-0000-000000000000}
    2013-04-26	00:07:18:430	 840	ee0	DtaStor	Default service for AU is {9482F4B4-E343-43B6-B170-9A65BC822C77}
    2013-04-26	00:07:18:446	 840	ee0	DtaStor	Data store successfully created
    2013-04-26	00:07:18:446	 840	ee0	Agent	***********  Agent: Initializing global settings cache  ***********
    2013-04-26	00:07:18:446	 840	ee0	Agent	  * Endpoint Provider: 00000000-0000-0000-0000-000000000000
    2013-04-26	00:07:18:446	 840	ee0	Agent	  * WSUS server: https://supd1p1.systems.***.***
    2013-04-26	00:07:18:446	 840	ee0	Agent	  * WSUS status server: https://supd1p1.systems.***.***
    2013-04-26	00:07:18:446	 840	ee0	Agent	  * Target group: OIT Servers
    2013-04-26	00:07:18:446	 840	ee0	Agent	  * Windows Update access disabled: No
    2013-04-26	00:07:18:446	 840	ee0	Misc	WARNING: Network Cost is assumed to be not supported as something failed with trying to get handles to wcmapi.dll
    2013-04-26	00:07:18:461	 840	ee0	WuTask	WuTaskManager delay initialize completed successfully..
    2013-04-26	00:07:18:461	 840	ee0	Report	WARNING: Failed to initialize event uploader for new server {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} with hr = 8024043d.
    2013-04-26	00:07:18:461	 840	ee0	Report	CWERReporter::Init succeeded
    2013-04-26	00:07:18:461	 840	ee0	Agent	***********  Agent: Initializing Windows Update Agent  ***********
    2013-04-26	00:07:18:461	 840	ee0	DnldMgr	Download manager restoring 0 downloads
    2013-04-26	00:07:18:477	 840	ee0	AU	###########  AU: Initializing Automatic Updates  ###########
    2013-04-26	00:07:18:477	 840	ee0	AU	AIR Mode is disabled
    2013-04-26	00:07:18:477	 840	ee0	AU	  # Policy Driven Provider: https://supd1p1.systems.***.***
    2013-04-26	00:07:18:477	 840	ee0	AU	  # Detection frequency: 8
    2013-04-26	00:07:18:477	 840	ee0	AU	  # Target group: OIT Servers
    2013-04-26	00:07:18:477	 840	ee0	AU	  # Approval type: Pre-install notify (User preference)
    2013-04-26	00:07:18:477	 840	ee0	AU	  # Auto-install minor updates: No (User preference)
    2013-04-26	00:07:18:477	 840	ee0	AU	  # Auto update required (cannot be disabled)
    2013-04-26	00:07:18:477	 840	ee0	AU	  # Will interact with non-admins (Non-admins are elevated (User preference))
    2013-04-26	00:07:18:477	 840	ee0	AU	WARNING: Failed to get Wu Exemption info from NLM, assuming not exempt, error = 0x80240037
    2013-04-26	00:07:18:492	 840	ee0	AU	AU finished delayed initialization
    2013-04-26	00:07:18:492	 840	ee0	AU	Obtained Post reboot hr from Agent:8024000c
    2013-04-26	00:07:18:492	 840	ee0	AU	Triggering Offline detection (non-interactive)
    2013-04-26	00:07:18:508	 840	ee0	AU	#############
    2013-04-26	00:07:18:508	 840	ee0	AU	## START ##  AU: Search for updates
    2013-04-26	00:07:18:508	 840	ee0	AU	#########
    2013-04-26	00:07:18:602	 840	ee0	Report	***********  Report: Initializing static reporting data  ***********
    2013-04-26	00:07:18:602	 840	ee0	Report	  * OS Version = 6.2.9200.0.0.196880
    2013-04-26	00:07:18:602	 840	ee0	Report	  * OS Product Type = 0x00000007
    2013-04-26	00:07:18:617	 840	ee0	Report	  * Computer Brand = VMware, Inc.
    2013-04-26	00:07:18:617	 840	ee0	Report	  * Computer Model = VMware Virtual Platform
    2013-04-26	00:07:18:617	 840	ee0	Report	  * Platform Role = 1
    2013-04-26	00:07:18:617	 840	ee0	Report	  * AlwaysOn/AlwaysConnected (AOAC) = 0
    2013-04-26	00:07:18:633	 840	ee0	Report	  * Bios Revision = 6.00
    2013-04-26	00:07:18:633	 840	ee0	Report	  * Bios Name = PhoenixBIOS 4.0 Release 6.0     
    2013-04-26	00:07:18:633	 840	ee0	Report	  * Bios Release Date = 2012-06-22T00:00:00
    2013-04-26	00:07:18:633	 840	ee0	Report	  * Bios Sku Number unavailable.
    2013-04-26	00:07:18:633	 840	ee0	Report	  * Bios Vendor = Phoenix Technologies LTD
    2013-04-26	00:07:18:633	 840	ee0	Report	  * Bios Family unavailable.
    2013-04-26	00:07:18:633	 840	ee0	Report	  * Bios Major Release = 4
    2013-04-26	00:07:18:633	 840	ee0	Report	  * Bios Minor Release = 6
    2013-04-26	00:07:18:633	 840	ee0	Report	  * Locale ID = 1033
    2013-04-26	00:07:18:633	 840	ee0	AU	<<## SUBMITTED ## AU: Search for updates  [CallId = {A4DD9522-E439-4494-80FB-CC1E01E3B7DD} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}]
    2013-04-26	00:07:18:633	 840	9f4	Agent	*************
    2013-04-26	00:07:18:633	 840	9f4	Agent	** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2013-04-26	00:07:18:633	 840	9f4	Agent	*********
    2013-04-26	00:07:18:633	 840	9f4	Agent	  * Online = No; Ignore download priority = No
    2013-04-26	00:07:18:633	 840	9f4	Agent	  * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
    2013-04-26	00:07:18:633	 840	9f4	Agent	  * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2013-04-26	00:07:18:633	 840	9f4	Agent	  * Search Scope = {Machine & All Users}
    2013-04-26	00:07:18:633	 840	9f4	Agent	  * Caller SID for Applicability: S-1-5-18
    2013-04-26	00:07:18:726	 840	9f4	Agent	  * Found 0 updates and 0 categories in search; evaluated appl. rules of 0 out of 0 deployed entities
    2013-04-26	00:07:18:726	 840	9f4	Agent	*********
    2013-04-26	00:07:18:726	 840	9f4	Agent	**  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2013-04-26	00:07:18:726	 840	9f4	Agent	*************
    2013-04-26	00:07:18:726	 840	d78	AU	>>##  RESUMED  ## AU: Search for updates [CallId = {A4DD9522-E439-4494-80FB-CC1E01E3B7DD} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}]
    2013-04-26	00:07:18:726	 840	d78	AU	  # 0 updates detected
    2013-04-26	00:07:18:726	 840	d78	AU	#########
    2013-04-26	00:07:18:726	 840	d78	AU	##  END  ##  AU: Search for updates  [CallId = {A4DD9522-E439-4494-80FB-CC1E01E3B7DD} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}]
    2013-04-26	00:07:18:726	 840	d78	AU	#############
    2013-04-26	00:07:18:726	 840	d78	AU	All AU searches complete.

    Looks fine up to this point, but when I open the Windows Update control panel, it hangs immediately and the following appears in the WindowsUpdate.log after several minutes.

    2013-04-26 00:08:05:092 840 ee0 Misc WARNING: Send failed with hr = 80072ee2. 2013-04-26 00:08:05:092 840 ee0 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None> 2013-04-26 00:08:05:092 840 ee0 Misc WARNING: Send request failed, hr:0x80072ee2 2013-04-26 00:08:05:092 840 ee0 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2 2013-04-26 00:08:05:092 840 ee0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2 2013-04-26 00:08:05:092 840 ee0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2 2013-04-26 00:08:05:092 840 ee0 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2 2013-04-26 00:08:47:183 840 ee0 Misc WARNING: Send failed with hr = 80072ee2. 2013-04-26 00:08:47:183 840 ee0 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None> 2013-04-26 00:08:47:183 840 ee0 Misc WARNING: Send request failed, hr:0x80072ee2 2013-04-26 00:08:47:183 840 ee0 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2 2013-04-26 00:08:47:183 840 ee0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2 2013-04-26 00:08:47:183 840 ee0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2 2013-04-26 00:08:47:183 840 ee0 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2 2013-04-26 00:09:29:242 840 ee0 Misc WARNING: Send failed with hr = 80072ee2. 2013-04-26 00:09:29:242 840 ee0 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None> 2013-04-26 00:09:29:242 840 ee0 Misc WARNING: Send request failed, hr:0x80072ee2 2013-04-26 00:09:29:242 840 ee0 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2 2013-04-26 00:09:29:242 840 ee0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2 2013-04-26 00:09:29:242 840 ee0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2 2013-04-26 00:09:29:242 840 ee0 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2 2013-04-26 00:10:11:287 840 ee0 Misc WARNING: Send failed with hr = 80072ee2. 2013-04-26 00:10:11:287 840 ee0 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None> 2013-04-26 00:10:11:287 840 ee0 Misc WARNING: Send request failed, hr:0x80072ee2 2013-04-26 00:10:11:287 840 ee0 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2 2013-04-26 00:10:11:287 840 ee0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2 2013-04-26 00:10:11:287 840 ee0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2 2013-04-26 00:10:11:287 840 ee0 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2 2013-04-26 00:10:11:287 840 ee0 Misc WARNING: DownloadFileInternal failed for http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab: error 0x80072ee2 2013-04-26 00:10:32:348 840 ee0 Misc WARNING: Send failed with hr = 80072ee2. 2013-04-26 00:10:32:348 840 ee0 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None> 2013-04-26 00:10:32:348 840 ee0 Misc WARNING: Send request failed, hr:0x80072ee2 2013-04-26 00:10:32:348 840 ee0 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://fe1.update.microsoft.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2 2013-04-26 00:10:32:348 840 ee0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2 2013-04-26 00:10:32:348 840 ee0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2 2013-04-26 00:10:32:348 840 ee0 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2 2013-04-26 00:10:53:378 840 ee0 Misc WARNING: Send failed with hr = 80072ee2. 2013-04-26 00:10:53:378 840 ee0 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None> 2013-04-26 00:10:53:378 840 ee0 Misc WARNING: Send request failed, hr:0x80072ee2 2013-04-26 00:10:53:378 840 ee0 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://fe1.update.microsoft.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2 2013-04-26 00:10:53:378 840 ee0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2 2013-04-26 00:10:53:378 840 ee0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2 2013-04-26 00:10:53:378 840 ee0 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2 2013-04-26 00:11:14:407 840 ee0 Misc WARNING: Send failed with hr = 80072ee2. 2013-04-26 00:11:14:407 840 ee0 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None> 2013-04-26 00:11:14:407 840 ee0 Misc WARNING: Send request failed, hr:0x80072ee2 2013-04-26 00:11:14:407 840 ee0 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://fe1.update.microsoft.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2 2013-04-26 00:11:14:407 840 ee0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2 2013-04-26 00:11:14:407 840 ee0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2 2013-04-26 00:11:14:407 840 ee0 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2 2013-04-26 00:11:35:437 840 ee0 Misc WARNING: Send failed with hr = 80072ee2. 2013-04-26 00:11:35:437 840 ee0 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None> 2013-04-26 00:11:35:437 840 ee0 Misc WARNING: Send request failed, hr:0x80072ee2 2013-04-26 00:11:35:437 840 ee0 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://fe1.update.microsoft.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2 2013-04-26 00:11:35:437 840 ee0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2 2013-04-26 00:11:35:437 840 ee0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2 2013-04-26 00:11:35:437 840 ee0 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2 2013-04-26 00:11:35:437 840 ee0 Misc WARNING: DownloadFileInternal failed for http://fe1.update.microsoft.com/w8/2/windowsupdate/redir/wuredir.cab: error 0x80072ee2 2013-04-26 00:12:17:482 840 ee0 Misc WARNING: Send failed with hr = 80072ee2. 2013-04-26 00:12:17:482 840 ee0 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None> 2013-04-26 00:12:17:482 840 ee0 Misc WARNING: Send request failed, hr:0x80072ee2 2013-04-26 00:12:17:482 840 ee0 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2 2013-04-26 00:12:17:482 840 ee0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2 2013-04-26 00:12:17:482 840 ee0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2 2013-04-26 00:12:17:482 840 ee0 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2 2013-04-26 00:12:59:545 840 ee0 Misc WARNING: Send failed with hr = 80072ee2. 2013-04-26 00:12:59:545 840 ee0 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None> 2013-04-26 00:12:59:545 840 ee0 Misc WARNING: Send request failed, hr:0x80072ee2 2013-04-26 00:12:59:545 840 ee0 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2 2013-04-26 00:12:59:545 840 ee0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2 2013-04-26 00:12:59:545 840 ee0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2 2013-04-26 00:12:59:545 840 ee0 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2 2013-04-26 00:13:41:640 840 ee0 Misc WARNING: Send failed with hr = 80072ee2. 2013-04-26 00:13:41:640 840 ee0 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None> 2013-04-26 00:13:41:640 840 ee0 Misc WARNING: Send request failed, hr:0x80072ee2 2013-04-26 00:13:41:640 840 ee0 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2 2013-04-26 00:13:41:640 840 ee0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2 2013-04-26 00:13:41:640 840 ee0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2 2013-04-26 00:13:41:640 840 ee0 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2 2013-04-26 00:14:23:687 840 ee0 Misc WARNING: Send failed with hr = 80072ee2. 2013-04-26 00:14:23:687 840 ee0 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None> 2013-04-26 00:14:23:687 840 ee0 Misc WARNING: Send request failed, hr:0x80072ee2 2013-04-26 00:14:23:687 840 ee0 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2 2013-04-26 00:14:23:687 840 ee0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2 2013-04-26 00:14:23:687 840 ee0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2 2013-04-26 00:14:23:687 840 ee0 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2 2013-04-26 00:14:23:687 840 ee0 Misc WARNING: DownloadFileInternal failed for http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab: error 0x80072ee2 2013-04-26 00:14:23:687 840 ee0 EP FATAL: SLS: Failed to download and verify redir., error = 0x80072EE2 2013-04-26 00:14:23:687 840 ee0 EP FATAL: Failed to obtain 9482F4B4-E343-43B6-B170-9A65BC822C77 redir SecondaryServiceAuth URL, error = 0x80072EE2 2013-04-26 00:14:23:687 840 ee0 Agent WARNING: Failed to obtain the authorization cab URL for service 7971f918-a847-4430-9279-4a52d1efe18d, hr=0 2013-04-26 00:14:23:687 840 ee0 Agent FATAL: Caller <NULL> failed to opt in to service 7971f918-a847-4430-9279-4a52d1efe18d, hr=0X80072EE2 2013-04-26 00:14:23:687 840 ee0 AU <<## SUBMITTED ## AU: Search for updates [CallId = {4E72A175-64EA-487E-8662-42C0E91EC1C2} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}] 2013-04-26 00:14:23:687 840 9f4 Agent ************* 2013-04-26 00:14:23:687 840 9f4 Agent ** START ** Agent: Finding updates [CallerId = Windows Update Command Line] 2013-04-26 00:14:23:687 840 9f4 Agent ********* 2013-04-26 00:14:23:687 840 9f4 Agent * Online = Yes; Ignore download priority = No 2013-04-26 00:14:23:687 840 9f4 Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1" 2013-04-26 00:14:23:687 840 9f4 Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed 2013-04-26 00:14:23:687 840 9f4 Agent * Search Scope = {Machine & All Users} 2013-04-26 00:14:23:687 840 9f4 Agent * Caller SID for Applicability: S-1-5-18 2013-04-26 00:14:23:718 840 9f4 EP Got WSUS Client/Server URL: "https://supd1p1.systems.***.***/ClientWebService/client.asmx" 2013-04-26 00:14:23:812 840 9f4 PT +++++++++++ PT: Synchronizing server updates +++++++++++ 2013-04-26 00:14:23:812 840 9f4 PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = https://supd1p1.systems.***.***/ClientWebService/client.asmx 2013-04-26 00:14:23:843 840 9f4 PT WARNING: Cached cookie has expired or new PID is available 2013-04-26 00:14:23:843 840 9f4 EP Got WSUS SimpleTargeting URL: https://supd1p1.systems.***.*** 2013-04-26 00:14:23:843 840 9f4 PT Initializing simple targeting cookie, clientId = a2944d93-f741-49a5-be5a-80349960d6a0, target group = OIT Servers, DNS name = shcmdmoc12.systems.***.***
    2013-04-26 00:14:23:843 840 9f4 PT Server URL = https://supd1p1.systems.***.***/SimpleAuthWebService/SimpleAuth.asmx 2013-04-26 00:14:41:318 840 9f4 PT +++++++++++ PT: Synchronizing extended update info +++++++++++ 2013-04-26 00:14:41:318 840 9f4 PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = https://supd1p1.systems.***.***/ClientWebService/client.asmx 2013-04-26 00:14:44:251 840 9f4 Agent * Found 0 updates and 68 categories in search; evaluated appl. rules of 554 out of 857 deployed entities 2013-04-26 00:14:44:251 840 9f4 Agent Reporting status event with 0 installable, 39 installed, 0 installed pending, 0 failed and 0 downloaded updates 2013-04-26 00:14:44:251 840 9f4 Agent ********* 2013-04-26 00:14:44:251 840 9f4 Agent ** END ** Agent: Finding updates [CallerId = Windows Update Command Line] 2013-04-26 00:14:44:251 840 9f4 Agent ************* 2013-04-26 00:14:44:251 840 d78 AU >>## RESUMED ## AU: Search for updates [CallId = {4E72A175-64EA-487E-8662-42C0E91EC1C2} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}] 2013-04-26 00:14:44:251 840 d78 AU # 0 updates detected 2013-04-26 00:14:44:251 840 d78 AU ######### 2013-04-26 00:14:44:251 840 d78 AU ## END ## AU: Search for updates [CallId = {4E72A175-64EA-487E-8662-42C0E91EC1C2} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}] 2013-04-26 00:14:44:251 840 d78 AU ############# 2013-04-26 00:14:44:251 840 d78 AU All AU searches complete. 2013-04-26 00:14:44:251 840 d78 AU AU setting next detection timeout to 2013-04-26 12:49:15

     


    • Edited by tdoan Wednesday, August 14, 2013 1:11 PM hide FQDN
    Friday, April 26, 2013 5:24 AM
  • Does anyone have a response for me about this ongoing problem? We have confirmed that the issue occurs even with a new Server 2012 build that is isolated from internet access.

    There is suspicion that installation of Forefront Client Security, and the MOM client that accompanies it, may be involved in the problem, but I don't have any evidence to suggest that.

    Friday, May 3, 2013 5:11 AM
  • tdoan,

    I was having the same issue on three servers.  They do not have any Forefront clients installed.  They have never had internet connectivity to Windows Update.

    I am having a bigger issue on two of the servers, in which one of the ServiceHost processes is crashing sporadically.  It currently looks like the Windows Update service is the one that is crashing the process.

    Following Lawrence's guidance above, I looked at BITS, and like you, found no outstanding jobs in the queue.

    On my third server (the one without a crashing process), I ran "wuauclt /resetauthorization /detectnow", and that cleared the problem on that server.

    I have not yet tried it on my other two servers, but have added it to the list of things to try in troubleshooting the crashing processes.  I will keep you posted on the results of that.

    Thanks,

    Tim Curwick

    Friday, May 3, 2013 3:23 PM
  • Unfortunately, running wuauclt /resetauthorization /detectnow (with elevated permissions) has not helped in my case. The WindowsUpdate.log entries continue to appear as shown in my posts above, i.e., lots of 0x80072ee2 errors attempting to obtain wuredir.cab from ds.download.windowsupdate.com and fe1.update.microsoft.com.
    Friday, May 3, 2013 3:44 PM
  • Thanks for the response, Lawrence.

    I had seen your previous postings about clearing the BITS queue, but it's not clear to me how to do so in Server 2012. After importing the BitsTransfer PowerShell module, I'm not finding any BITS jobs to clear.

    Yes, I've observed some quirky behavior with these cmdLets as well. It seems that the authors of the cmdLets were working from the myopic perspective of managing one's own jobs, and not from the administrator's perspective of needing to manage jobs created in the SYSTEM context. Some of this likely also relates to access rights, which became a complication with Windows Server 2008.

    For WS2008/2008R2 systems, BITSADMIN is still a functional tool (albeit deprecated, and predictably absent in WS2012), and you can create a script with BITSADMIN /RESET /ALLUSERS, add it to Task Scheduler, and run the task in the context of the SYSTEM account. I suspect creating a PowerShell script for WS2012 will provide the same relief.

    In the meantime, I'm trying to carve out some time to take a foray into the world of BITS and the PowerShell cmdLets to try to get a better handle on how this impacts day-to-day operations of WSUS (and cleaning house when things go sideways).


    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2013)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Monday, May 27, 2013 9:51 PM
  • To follow up, I ran the following PowerShell script as a scheduled task with elevated permissions under the LOCAL SERVICE account and again under the SYSTEM account.

    ipmo BitsTransfer
    Get-BitsTransfer -AllUsers | Out-File E:\temp\BitsTransfer.txt
    

    However, there was no output to the BitsTransfer.txt file. It appears there are no jobs in the BITS queue.

    There was an increment to the AU version number after installing Microsoft updates last week, and I had some hope that would help, but there has so far been no improvement in the behavior I've described with isolated Server 2012 machines.

    Monday, June 17, 2013 5:20 PM
  • todoan,

    The issue only cleared temporarily for me after I ran wuauclt /resetauthorization /detectnow.  After a few weeks the servers again started making unsuccessful attempts to connect to ds.download.microsoft.com and fe1.download.microsoft.com.  Shortly after that, my servers started soft crashing again.

    Finally after working with Microsoft support on and off for months, they had me apply the two patches below, which were part of the June 2013 patches.

    The errors in the Windows Update log stopped occurring and I have not yet had any problems more with these servers.  The Windows Update log now looks quite different, so there must have been substantial changes made to the update client.

    2845533 Windows RT, Windows 8, and Windows Server 2012 update rollup: June 2013
    http://support.microsoft.com/kb/2845533/EN-US
    2805966 Temporary Internet files and history are lost in Internet Explorer 10 after you upgrade from Windows 7 or Windows Server 2008 R2 to Windows 8 or Windows Server 2012
    http://support.microsoft.com/kb/2805966/EN-US

    Thanks,

    Tim Curwick

    Monday, June 17, 2013 7:46 PM
  • Thanks for the reply, Tim. In my case, I confirmed that KB2845533 and KB2805966 were installed on all of our Server 2012 machines during regularly scheduled patching last week. However, all of our Server 2012 machines that are isolated from internet access continue to have the same symptoms I described in the original post.

    I plan to submit a case with Microsoft since the problem has existed for us for almost 2 months now.

    Monday, June 17, 2013 9:10 PM
  • Any news here?

    I am facing the exact same issue on our newly installed Servers with Server 2012. None of these are allowed to acces the internet.

    Has anybody found a solution yet?

    Tuesday, August 6, 2013 10:52 AM
  • I don't know if this has been linked previously : Windows Update, error 80072ee2

    Indeed even if it's related to Vista, it might be a proxy or firewall problem. Did you try to check if you were able to access websites simply through Internet Explorer.

    TiGrOu.


    Tuesday, August 6, 2013 11:30 AM
  • If you read the thread you will see that this link doesn't help here. It's refering to firewall exeptions.

    The problem here ist that we have Servers 2012 that do not have any access to the internet. They are supposed to pull their updates from the internal WSUS server. But they always try to reach the internet (windowsupdate.com) to get some data from there. This leads to hangs in the Windows Update interface and many errors in the logs.

    The questions ist: Why do the servers want to "phone home" though they have a WSUS server?

    Tuesday, August 6, 2013 11:47 AM
  • Ok, sorry for the mistake, I just read about the error code you had in the first log file.

    In your case, the error 80072ee2 is related to this line :

    2013-04-26	00:14:44:251	 840	d78	AU	AU setting next detection timeout to 2013-04-26 12:49:15

    The timeout causes the error recurring to the WindowsUpdate.log

    When you're talking of isolated servers, how are they connected to your WSUS ?

    TiGrOu.


    • Edited by Brice Pradel Tuesday, August 6, 2013 12:41 PM change answer
    Tuesday, August 6, 2013 12:40 PM
  • Thanks for the response, elTiGrOu. In our environment, we have firewalls that block inbound/outbound internet access for certain servers in our datacenter, but allow network access to internal servers such as our WSUS server. We also have a "server deployment network" that is completely isolated from all other networks, and our WSUS server has an interface on that network. In both instances, we have Server 2012 servers that have no internet access yet do have access over web ports to WSUS.

    Our Server 2012 servers that are blocked from internet access do install updates from WSUS, and also report update status normally. Other than the long delay performing manual updates, they have full update functionality. We have other Server 2012 servers that have internet access and do not experience the long delays performing updates.

    Tuesday, August 6, 2013 1:53 PM
  • Is it possible to check on your "not reporting" 2012 server the following registry key HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\ :

    • WUServer
    • WUStatusServer

    You should find here your server name.

    If it doesn't appears, maybe control the following key HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU\ to be on 1 instead of 0.

    Took information from this article.

    TiGrOu.

    Tuesday, August 6, 2013 2:29 PM
  • In our case all Servers are reporting correctly to WSUS and are also pulling their updates from it.

    The only annoying thing are the many "WARNING: WinHttp: ..." errors in WindowsUpdate.log and the hanging UI while the connections to the internet are tried for minutes.

    WUServer and WUStatusServer are both pointing to http://fqdn.of.local.wsus:8530

    Tuesday, August 6, 2013 2:49 PM
  • Hi elTiGrOu. Yes, I've confirmed the WUServer and WUStatusServer registry keys are both correctly configured with the address of our WSUS server, and the UseWUServer key is set to 1 as expected. These values are configured via GPO, so there's not much chance for misconfiguration.

    Keep in mind that the servers in question are successfully updating from WSUS, and also successfully reporting their update status to WSUS. The issue I'm reporting is that these servers first attempt to obtain wuredir.cab from ds.download.windowsupdate.com and fe1.update.microsoft.com multiple times, and each time with a long delay since those sites are not accessible. After this, they finally attempt our WSUS server and succeed very quickly.

    I might add that the issue is easily reproducible in any environment that has access to a WSUS server but is blocked from outbound internet access.

    Wednesday, August 7, 2013 1:03 PM
  • Is anyone who is having this problem running WSUS on a 2012 server?  Or are all of us using WSUS 3.0 on Server 2008 R2?

    Wednesday, August 7, 2013 2:28 PM
  • I am running WSUS on Server 2012. Everything newly installed some days ago and patched uptodate.

    All other Server 2012 who do not have internet access but get their Updates from the WSUS show the issue.

    Wednesday, August 7, 2013 2:31 PM
  • The problem here ist that we have Servers 2012 that do not have any access to the internet. They are supposed to pull their updates from the internal WSUS server. But they always try to reach the internet (windowsupdate.com) to get some data from there. This leads to hangs in the Windows Update interface and many errors in the logs.

    This is always the inevitable problem when a thread is hijacked for another conversation. Your scenario is NOT the same as that of todan!

    The questions ist: Why do the servers want to "phone home" though they have a WSUS server?

    It's actually very simple answer: Because they've not yet been configured to BE a WSUS client!

    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2013)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Saturday, August 10, 2013 3:15 PM
  • Thanks for the reply, Lawrence.

    The problem is stated in my initial post at the top of the thread.

    "When an admin clicks the Check for Updates link, Windows Update freezes for approximately 12 minutes and remains unresponsive. Also the WindowsUpdate.log file does not update during this time. After the long ~12 minute delay, Windows Update completes successfully and obtains any needed updates."

    My response to elTiGrOu which you quoted was primarily to explain that I do not believe this is a problem with our WSUS server, or a network access problem between the Server 2012 clients and the WSUS server - I believe it's a Server 2012 AU problem. That is to say the Server 2012 clients without internet access do in fact obtain updates from WSUS and also report their update status. However, the 10 to 12 minute they exhibit while obtaining updates manually is quite disruptive for server admins who support and deploy 10s of servers. We have no other WSUS clients (out of approx. 400 servers) that have this problem other than our Server 2012 internet-blocked servers.

    I'm happy to collect and post additional log files beyond the ones posted on 4/25 and 4/26/2013. I'll have those posted soon.

    Saturday, August 10, 2013 3:39 PM
  • Thanks for the reply, Lawrence.

    The problem is stated in my initial post at the top of the thread.

    My apologies... I'm so confused since TPok jumped into this thread.

    Let me go 'undelete' my original reply to TPok which is, once again, relevant, and the post you responded to is going bye-bye as it's totally irrelevant.

    I'll come back and address your delay/freezing issue in another response.


    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2013)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Saturday, August 10, 2013 3:44 PM
  • The problem is stated in my initial post at the top of the thread.

    "When an admin clicks the Check for Updates link, Windows Update freezes for approximately 12 minutes and remains unresponsive. Also the WindowsUpdate.log file does not update during this time. After the long ~12 minute delay, Windows Update completes successfully and obtains any needed updates."

    Okay, to properly continue diagnosis on this we need a current and complete detection event to determine everything that is happening.

    Please do the following on one of the WS2012 systems:

    1. Record the system time.
    2. Restart the Windows Update service.
    3. Run this command: wuauclt /resetauthorization /detectnow.
    4. Wait 30 minutes.
    5. Post the log entries starting at the time recorded in Step #1.

    Also. when you post the log entries, please do NOT post them as a code block. It is exceptionally tedious to read the log entries in a code block, plus, I find the color coding that's being retained in that code block exceptionally distracting.

    Please post the log entries as TEXT in the body of the message.


    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2013)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Saturday, August 10, 2013 3:51 PM
  • Hi Lawrence,

    I am sorry you believe I hijacked this thread. This was not what I wanted to do. But I still believe I am having the same issue as tdoan.

    I see the same log entries tdoan posted in his initial post, I have the same UI hangs when manually searching for updates and the servers that show the issues do not have internet access.

    In my opinion this is the same tdoan describes and I wanted to tell that he is not the only one seeing this behaviour.

    If you want me to open another thread then I will do so. No problem.

    Sunday, August 11, 2013 6:06 PM
  • I have the same UI hangs when manually searching for updates and the servers that show the issues do not have internet access.

    This is really not the issue. The "hangs" are not the problem, they're merely an expected symptom of a not-yet-identified problem. Something on the system appears to be trying to connect to an Internet-based resource and if the Internet is blocked at the firewall, or the network is a disconnected network, then it's going to cause timeouts (and delays) in services. That information, by itself, is of very little actual use.

    The most common cause of this behavior is that the client isn't actually configured as a WSUS client, so the WUAgent is attempting to connect to WU, as it should.

    There's also the lesser scenario where the wrong link has been clicked on. Even if the machine is configured as a WSUS client, if you click on "Check online for updates from Microsoft Update" ... then that's what it's going to try to do.


    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2013)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Sunday, August 11, 2013 8:38 PM
  • This is really not the issue. The "hangs" are not the problem, they're merely an expected symptom of a not-yet-identified problem. Something on the system appears to be trying to connect to an Internet-based resource and if the Internet is blocked at the firewall, or the network is a disconnected network, then it's going to cause timeouts (and delays) in services. That information, by itself, is of very little actual use.

    Right. And this is my issue to. I have the same log entries in windowsupdate.log as tdoan posted in his thread showing that the WSUS agent is trying to connect to windows update instead of the local WSUS and my servers do not have internet access as well. I know that the hanging UI is a symptom of this problem.

    I don't believe it is a misconfiguration because this settings worked well with Server 2008 R2.

    Clicking the wrong link can't be the issue to because the problem also appears at night when the update agent automatically searches for updates.

    For gods sake I will open another thread describe my issue again, so anybody can make his own decision if this is the same or a different issue.

    Monday, August 12, 2013 6:17 AM
  • Hi Lawrence. Please find below the contents of the WindowsUpdate.log file that were generated after following your instructions. Please let me know what else I can provide to assist in the diagnosis.

    I'll add that I found it interesting that on this Server 2012 server, the Windows Update service was stopped before following your instructions, and was stopped again 30 minutes later when I returned to collect the log file. This may simply be new functionality in Server 2012 as opposed to Server 2008 R2.

    2013-08-13 08:43:54:819  852 1820 Misc ===========  Logging initialized (build: 7.8.9200.16604, tz: -0500)  ===========
    2013-08-13 08:43:54:820  852 1820 Misc   = Process: C:\Windows\system32\svchost.exe
    2013-08-13 08:43:54:820  852 1820 Misc   = Module: c:\windows\system32\wuaueng.dll
    2013-08-13 08:43:54:819  852 1820 Service *************
    2013-08-13 08:43:54:820  852 1820 Service ** START **  Service: Service startup
    2013-08-13 08:43:54:820  852 1820 Service *********
    2013-08-13 08:43:54:833  852 1820 Agent   * WU client version 7.8.9200.16604
    2013-08-13 08:43:54:833  852 1820 Agent   * Base directory: C:\Windows\SoftwareDistribution
    2013-08-13 08:43:54:833  852 1820 Agent   * Access type: No proxy
    2013-08-13 08:43:54:867  852 1820 Service UpdateNetworkState Ipv6, cNetworkInterfaces = 0.
    2013-08-13 08:43:54:867  852 1820 Service UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
    2013-08-13 08:43:54:868  852 1820 Agent   * Network state: Connected
    2013-08-13 08:43:54:874  852 1820 Service UpdateNetworkState Ipv6, cNetworkInterfaces = 0.
    2013-08-13 08:43:54:874  852 1820 Service UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
    2013-08-13 08:43:54:903  852 1820 Agent ***********  Agent: Initializing global settings cache  ***********
    2013-08-13 08:43:54:903  852 1820 Agent   * Endpoint Provider: 00000000-0000-0000-0000-000000000000
    2013-08-13 08:43:54:903  852 1820 Agent   * WSUS server: https://supd1p1.systems.company.local
    2013-08-13 08:43:54:903  852 1820 Agent   * WSUS status server: https://supd1p1.systems.company.local
    2013-08-13 08:43:54:903  852 1820 Agent   * Target group: OIT Servers
    2013-08-13 08:43:54:903  852 1820 Agent   * Windows Update access disabled: No
    2013-08-13 08:43:54:904  852 1820 Misc WARNING: Network Cost is assumed to be not supported as something failed with trying to get handles to wcmapi.dll
    2013-08-13 08:43:54:923  852 1820 WuTask WuTaskManager delay initialize completed successfully..
    2013-08-13 08:43:55:122  852 1820 Report WARNING: CSerializationHelper:: InitSerialize failed : 0x80070002
    2013-08-13 08:43:55:124  852 1820 Report CWERReporter::Init succeeded
    2013-08-13 08:43:55:124  852 1820 Agent ***********  Agent: Initializing Windows Update Agent  ***********
    2013-08-13 08:43:55:124  852 1820 DnldMgr Download manager restoring 0 downloads
    2013-08-13 08:43:55:126  852 1820 AU ###########  AU: Initializing Automatic Updates  ###########
    2013-08-13 08:43:55:214  852 1820 AU AIR Mode is disabled
    2013-08-13 08:43:55:214  852 1820 AU   # Policy Driven Provider: https://supd1p1.systems.company.local
    2013-08-13 08:43:55:214  852 1820 AU   # Detection frequency: 4
    2013-08-13 08:43:55:214  852 1820 AU   # Target group: OIT Servers
    2013-08-13 08:43:55:214  852 1820 AU   # Approval type: Scheduled (User preference)
    2013-08-13 08:43:55:214  852 1820 AU   # Auto-install minor updates: Yes (User preference)
    2013-08-13 08:43:55:214  852 1820 AU   # Auto update required (cannot be disabled)
    2013-08-13 08:43:55:215  852 1820 AU   # Will interact with non-admins (Non-admins are elevated (User preference))
    2013-08-13 08:43:55:228  852 1820 Misc WARNING:     IsSessionRemote: WinStationQueryInformationW(WTSIsRemoteSession) failed for session 2, GetLastError=2250
    2013-08-13 08:43:55:256  852 1820 AU WARNING: Failed to get Wu Exemption info from NLM, assuming not exempt, error = 0x80240037
    2013-08-13 08:43:55:283  852 1820 AU AU finished delayed initialization
    2013-08-13 08:44:59:706  852 158 AU Triggering AU detection through DetectNow API
    2013-08-13 08:44:59:706  852 158 AU Triggering Online detection (non-interactive)
    2013-08-13 08:45:02:707  852 1820 AU #############
    2013-08-13 08:45:02:707  852 1820 AU ## START ##  AU: Search for updates
    2013-08-13 08:45:02:766  852 1820 AU #########
    2013-08-13 08:45:44:825  852 1820 Misc WARNING: Send failed with hr = 80072ee2.
    2013-08-13 08:45:44:825  852 1820 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2013-08-13 08:45:44:825  852 1820 Misc WARNING: Send request failed, hr:0x80072ee2
    2013-08-13 08:45:44:868  852 1820 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2
    2013-08-13 08:45:44:868  852 1820 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2013-08-13 08:45:44:868  852 1820 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2013-08-13 08:45:44:894  852 1820 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2013-08-13 08:46:26:933  852 1820 Misc WARNING: Send failed with hr = 80072ee2.
    2013-08-13 08:46:26:933  852 1820 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2013-08-13 08:46:26:933  852 1820 Misc WARNING: Send request failed, hr:0x80072ee2
    2013-08-13 08:46:26:933  852 1820 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2
    2013-08-13 08:46:26:933  852 1820 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2013-08-13 08:46:26:933  852 1820 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2013-08-13 08:46:26:933  852 1820 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2013-08-13 08:47:08:944  852 1820 Misc WARNING: Send failed with hr = 80072ee2.
    2013-08-13 08:47:08:944  852 1820 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2013-08-13 08:47:08:944  852 1820 Misc WARNING: Send request failed, hr:0x80072ee2
    2013-08-13 08:47:08:944  852 1820 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2
    2013-08-13 08:47:08:944  852 1820 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2013-08-13 08:47:08:944  852 1820 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2013-08-13 08:47:08:944  852 1820 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2013-08-13 08:47:50:942  852 1820 Misc WARNING: Send failed with hr = 80072ee2.
    2013-08-13 08:47:50:942  852 1820 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2013-08-13 08:47:50:942  852 1820 Misc WARNING: Send request failed, hr:0x80072ee2
    2013-08-13 08:47:50:942  852 1820 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2
    2013-08-13 08:47:50:942  852 1820 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2013-08-13 08:47:50:942  852 1820 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2013-08-13 08:47:50:942  852 1820 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2013-08-13 08:47:50:957  852 1820 Misc WARNING: DownloadFileInternal failed for http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab: error 0x80072ee2
    2013-08-13 08:48:11:999  852 1820 Misc WARNING: Send failed with hr = 80072ee2.
    2013-08-13 08:48:11:999  852 1820 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2013-08-13 08:48:11:999  852 1820 Misc WARNING: Send request failed, hr:0x80072ee2
    2013-08-13 08:48:11:999  852 1820 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://fe1.update.microsoft.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2
    2013-08-13 08:48:11:999  852 1820 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2013-08-13 08:48:11:999  852 1820 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2013-08-13 08:48:11:999  852 1820 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2013-08-13 08:48:32:997  852 1820 Misc WARNING: Send failed with hr = 80072ee2.
    2013-08-13 08:48:32:997  852 1820 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2013-08-13 08:48:32:997  852 1820 Misc WARNING: Send request failed, hr:0x80072ee2
    2013-08-13 08:48:32:997  852 1820 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://fe1.update.microsoft.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2
    2013-08-13 08:48:32:997  852 1820 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2013-08-13 08:48:32:997  852 1820 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2013-08-13 08:48:32:997  852 1820 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2013-08-13 08:48:53:998  852 1820 Misc WARNING: Send failed with hr = 80072ee2.
    2013-08-13 08:48:53:998  852 1820 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2013-08-13 08:48:53:998  852 1820 Misc WARNING: Send request failed, hr:0x80072ee2
    2013-08-13 08:48:53:998  852 1820 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://fe1.update.microsoft.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2
    2013-08-13 08:48:53:998  852 1820 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2013-08-13 08:48:53:998  852 1820 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2013-08-13 08:48:53:998  852 1820 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2013-08-13 08:49:15:004  852 1820 Misc WARNING: Send failed with hr = 80072ee2.
    2013-08-13 08:49:15:004  852 1820 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2013-08-13 08:49:15:004  852 1820 Misc WARNING: Send request failed, hr:0x80072ee2
    2013-08-13 08:49:15:004  852 1820 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://fe1.update.microsoft.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2
    2013-08-13 08:49:15:004  852 1820 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2013-08-13 08:49:15:004  852 1820 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2013-08-13 08:49:15:004  852 1820 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2013-08-13 08:49:15:004  852 1820 Misc WARNING: DownloadFileInternal failed for http://fe1.update.microsoft.com/w8/2/windowsupdate/redir/wuredir.cab: error 0x80072ee2
    2013-08-13 08:49:57:010  852 1820 Misc WARNING: Send failed with hr = 80072ee2.
    2013-08-13 08:49:57:010  852 1820 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2013-08-13 08:49:57:010  852 1820 Misc WARNING: Send request failed, hr:0x80072ee2
    2013-08-13 08:49:57:010  852 1820 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2
    2013-08-13 08:49:57:010  852 1820 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2013-08-13 08:49:57:010  852 1820 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2013-08-13 08:49:57:010  852 1820 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2013-08-13 08:50:39:015  852 1820 Misc WARNING: Send failed with hr = 80072ee2.
    2013-08-13 08:50:39:015  852 1820 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2013-08-13 08:50:39:015  852 1820 Misc WARNING: Send request failed, hr:0x80072ee2
    2013-08-13 08:50:39:015  852 1820 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2
    2013-08-13 08:50:39:015  852 1820 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2013-08-13 08:50:39:015  852 1820 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2013-08-13 08:50:39:015  852 1820 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2013-08-13 08:51:21:026  852 1820 Misc WARNING: Send failed with hr = 80072ee2.
    2013-08-13 08:51:21:026  852 1820 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2013-08-13 08:51:21:026  852 1820 Misc WARNING: Send request failed, hr:0x80072ee2
    2013-08-13 08:51:21:026  852 1820 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2
    2013-08-13 08:51:21:026  852 1820 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2013-08-13 08:51:21:026  852 1820 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2013-08-13 08:51:21:026  852 1820 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2013-08-13 08:52:03:038  852 1820 Misc WARNING: Send failed with hr = 80072ee2.
    2013-08-13 08:52:03:038  852 1820 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2013-08-13 08:52:03:038  852 1820 Misc WARNING: Send request failed, hr:0x80072ee2
    2013-08-13 08:52:03:038  852 1820 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2
    2013-08-13 08:52:03:038  852 1820 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2013-08-13 08:52:03:038  852 1820 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2013-08-13 08:52:03:038  852 1820 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2013-08-13 08:52:03:038  852 1820 Misc WARNING: DownloadFileInternal failed for http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab: error 0x80072ee2
    2013-08-13 08:52:03:039  852 1820 EP FATAL: SLS: Failed to download and verify redir., error = 0x80072EE2
    2013-08-13 08:52:03:058  852 1820 EP FATAL: Failed to obtain 9482F4B4-E343-43B6-B170-9A65BC822C77 redir SecondaryServiceAuth URL, error = 0x80072EE2
    2013-08-13 08:52:03:058  852 1820 Agent WARNING: Failed to obtain the authorization cab URL for service 7971f918-a847-4430-9279-4a52d1efe18d, hr=0
    2013-08-13 08:52:03:058  852 1820 Agent FATAL: Caller <NULL> failed to opt in to service 7971f918-a847-4430-9279-4a52d1efe18d, hr=0X80072EE2
    2013-08-13 08:52:03:495  852 1820 Report ***********  Report: Initializing static reporting data  ***********
    2013-08-13 08:52:03:495  852 1820 Report   * OS Version = 6.2.9200.0.0.196880
    2013-08-13 08:52:03:495  852 1820 Report   * OS Product Type = 0x00000007
    2013-08-13 08:52:03:509  852 1820 Report   * Computer Brand = VMware, Inc.
    2013-08-13 08:52:03:509  852 1820 Report   * Computer Model = VMware Virtual Platform
    2013-08-13 08:52:03:509  852 1820 Report   * Platform Role = 1
    2013-08-13 08:52:03:510  852 1820 Report   * AlwaysOn/AlwaysConnected (AOAC) = 0
    2013-08-13 08:52:03:514  852 1820 Report   * Bios Revision = 6.00
    2013-08-13 08:52:03:514  852 1820 Report   * Bios Name = PhoenixBIOS 4.0 Release 6.0    
    2013-08-13 08:52:03:514  852 1820 Report   * Bios Release Date = 2012-06-22T00:00:00
    2013-08-13 08:52:03:514  852 1820 Report   * Bios Sku Number unavailable.
    2013-08-13 08:52:03:514  852 1820 Report   * Bios Vendor = Phoenix Technologies LTD
    2013-08-13 08:52:03:514  852 1820 Report   * Bios Family unavailable.
    2013-08-13 08:52:03:514  852 1820 Report   * Bios Major Release = 4
    2013-08-13 08:52:03:514  852 1820 Report   * Bios Minor Release = 6
    2013-08-13 08:52:03:514  852 1820 Report   * Locale ID = 1033
    2013-08-13 08:52:03:516  852 1820 AU <<## SUBMITTED ## AU: Search for updates  [CallId = {B94F75C9-7A15-407F-B94D-8C93D84E05BC} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}]
    2013-08-13 08:52:03:550  852 19dc Agent *************
    2013-08-13 08:52:03:551  852 19dc Agent ** START **  Agent: Finding updates [CallerId = Windows Update Command Line]
    2013-08-13 08:52:03:551  852 19dc Agent *********
    2013-08-13 08:52:03:551  852 19dc Agent   * Online = Yes; Ignore download priority = No
    2013-08-13 08:52:03:551  852 19dc Agent   * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
    2013-08-13 08:52:03:551  852 19dc Agent   * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2013-08-13 08:52:03:551  852 19dc Agent   * Search Scope = {Machine & All Users}
    2013-08-13 08:52:03:551  852 19dc Agent   * Caller SID for Applicability: S-1-5-18
    2013-08-13 08:52:03:577  852 19dc EP Got WSUS Client/Server URL: "https://supd1p1.systems.company.local/ClientWebService/client.asmx"
    2013-08-13 08:52:04:846  852 19dc PT +++++++++++  PT: Synchronizing server updates  +++++++++++
    2013-08-13 08:52:04:846  852 19dc PT   + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = https://supd1p1.systems.company.local/ClientWebService/client.asmx
    2013-08-13 08:52:04:846  852 19dc PT WARNING: Cached cookie has expired or new PID is available
    2013-08-13 08:52:04:846  852 19dc EP Got WSUS SimpleTargeting URL: https://supd1p1.systems.company.local
    2013-08-13 08:52:04:846  852 19dc PT Initializing simple targeting cookie, clientId = a2944d93-f741-49a5-be5a-80349960d6a0, target group = OIT Servers, DNS name = shcmdmoc12.systems.company.local
    2013-08-13 08:52:04:846  852 19dc PT   Server URL = https://supd1p1.systems.company.local/SimpleAuthWebService/SimpleAuth.asmx
    2013-08-13 08:52:24:605  852 19dc PT +++++++++++  PT: Synchronizing extended update info  +++++++++++
    2013-08-13 08:52:24:605  852 19dc PT   + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = https://supd1p1.systems.company.local/ClientWebService/client.asmx
    2013-08-13 08:52:26:217  852 19dc Agent   * Found 0 updates and 68 categories in search; evaluated appl. rules of 580 out of 917 deployed entities
    2013-08-13 08:52:26:236  852 19dc Agent Reporting status event with 1 installable, 49 installed,  0 installed pending, 0 failed and 0 downloaded updates
    2013-08-13 08:52:26:236  852 19dc Agent *********
    2013-08-13 08:52:26:236  852 19dc Agent **  END  **  Agent: Finding updates [CallerId = Windows Update Command Line]
    2013-08-13 08:52:26:236  852 19dc Agent *************
    2013-08-13 08:52:26:239  852 1224 AU >>##  RESUMED  ## AU: Search for updates [CallId = {B94F75C9-7A15-407F-B94D-8C93D84E05BC} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}]
    2013-08-13 08:52:26:239  852 1224 AU   # 0 updates detected
    2013-08-13 08:52:26:242  852 1224 AU #########
    2013-08-13 08:52:26:242  852 1224 AU ##  END  ##  AU: Search for updates  [CallId = {B94F75C9-7A15-407F-B94D-8C93D84E05BC} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}]
    2013-08-13 08:52:26:242  852 1224 AU #############
    2013-08-13 08:52:26:242  852 1224 AU All AU searches complete.
    2013-08-13 08:52:26:244  852 1224 AU AU setting next detection timeout to 2013-08-13 17:29:22
    2013-08-13 08:52:31:249  852 d64 Report REPORT EVENT: {BEDC0DA9-45CB-4028-B002-8599F5488C33} 2013-08-13 08:52:26:236-0500 1 147 [AGENT_DETECTION_FINISHED] 101 {00000000-0000-0000-0000-000000000000} 0 0 Windows Update Command Line Success Software Synchronization Windows Update Client successfully detected 0 updates.
    2013-08-13 08:52:31:249  852 d64 Report REPORT EVENT: {3A536B8F-6E5C-4048-9878-80ACB029463E} 2013-08-13 08:52:26:236-0500 1 156 [AGENT_STATUS_30] 101 {00000000-0000-0000-0000-000000000000} 0 0 Windows Update Command Line Success Pre-Deployment Check Reporting client status.
    2013-08-13 08:52:31:252  852 d64 Report CWERReporter finishing event handling. (00000000)
    2013-08-13 09:00:26:609  852 d64 EP Got WSUS Client/Server URL: "https://supd1p1.systems.company.local/ClientWebService/client.asmx"
    2013-08-13 09:00:26:609  852 d64 PT WARNING: Cached cookie has expired or new PID is available
    2013-08-13 09:00:26:610  852 d64 EP Got WSUS SimpleTargeting URL: https://supd1p1.systems.company.local
    2013-08-13 09:00:26:610  852 d64 PT Initializing simple targeting cookie, clientId = a2944d93-f741-49a5-be5a-80349960d6a0, target group = OIT Servers, DNS name = shcmdmoc12.systems.company.local
    2013-08-13 09:00:26:610  852 d64 PT   Server URL = https://supd1p1.systems.company.local/SimpleAuthWebService/SimpleAuth.asmx
    2013-08-13 09:00:26:671  852 d64 EP Got WSUS Reporting URL: "https://supd1p1.systems.company.local/ReportingWebService/ReportingWebService.asmx"
    2013-08-13 09:00:26:671  852 d64 Report Uploading 2 events using cached cookie, reporting URL = https://supd1p1.systems.company.local/ReportingWebService/ReportingWebService.asmx
    2013-08-13 09:00:26:756  852 d64 Report Reporter successfully uploaded 2 events.
    2013-08-13 09:02:27:348  852 1820 AU ###########  AU: Uninitializing Automatic Updates  ###########
    2013-08-13 09:02:27:442  852 1820 WuTask Uninit WU Task Manager
    2013-08-13 09:02:27:622  852 1820 Service *********
    2013-08-13 09:02:27:622  852 1820 Service **  END  **  Service: Service exit [Exit code = 0x240001]
    2013-08-13 09:02:27:622  852 1820 Service *************
    2013-08-13 09:03:28:418 6196 a88 Misc ===========  Logging initialized (build: 7.8.9200.16604, tz: -0500)  ===========
    2013-08-13 09:03:28:418 6196 a88 Misc   = Process: C:\Program Files\Microsoft Forefront\Client Security\Client\Antimalware\MpCmdRun.exe
    2013-08-13 09:03:28:418 6196 a88 Misc   = Module: C:\Windows\System32\wuapi.dll
    2013-08-13 09:03:28:417 6196 a88 COMAPI -------------
    2013-08-13 09:03:28:418 6196 a88 COMAPI -- START --  COMAPI: Init Search [ClientId = Microsoft Forefront Client Security]
    2013-08-13 09:03:28:418 6196 a88 COMAPI ---------
    2013-08-13 09:03:28:418 6196 a88 COMAPI -------------
    2013-08-13 09:03:28:418 6196 a88 COMAPI -- START --  COMAPI: Search [ClientId = Microsoft Forefront Client Security]
    2013-08-13 09:03:28:418 6196 a88 COMAPI ---------
    2013-08-13 09:03:28:487  852 1b28 Misc ===========  Logging initialized (build: 7.8.9200.16604, tz: -0500)  ===========
    2013-08-13 09:03:28:487  852 1b28 Misc   = Process: C:\Windows\system32\svchost.exe
    2013-08-13 09:03:28:487  852 1b28 Misc   = Module: c:\windows\system32\wuaueng.dll
    2013-08-13 09:03:28:487  852 1b28 Service *************
    2013-08-13 09:03:28:487  852 1b28 Service ** START **  Service: Service startup
    2013-08-13 09:03:28:487  852 1b28 Service *********
    2013-08-13 09:03:28:498  852 1b28 Agent   * WU client version 7.8.9200.16604
    2013-08-13 09:03:28:499  852 1b28 Agent   * Base directory: C:\Windows\SoftwareDistribution
    2013-08-13 09:03:28:499  852 1b28 Agent   * Access type: No proxy
    2013-08-13 09:03:28:499  852 1b28 Service UpdateNetworkState Ipv6, cNetworkInterfaces = 0.
    2013-08-13 09:03:28:499  852 1b28 Service UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
    2013-08-13 09:03:28:499  852 1b28 Agent   * Network state: Connected
    2013-08-13 09:03:28:504  852 1b28 Service UpdateNetworkState Ipv6, cNetworkInterfaces = 0.
    2013-08-13 09:03:28:504  852 1b28 Service UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
    2013-08-13 09:03:28:532  852 1b28 Agent ***********  Agent: Initializing global settings cache  ***********
    2013-08-13 09:03:28:532  852 1b28 Agent   * Endpoint Provider: 00000000-0000-0000-0000-000000000000
    2013-08-13 09:03:28:532  852 1b28 Agent   * WSUS server: https://supd1p1.systems.company.local
    2013-08-13 09:03:28:532  852 1b28 Agent   * WSUS status server: https://supd1p1.systems.company.local
    2013-08-13 09:03:28:532  852 1b28 Agent   * Target group: OIT Servers
    2013-08-13 09:03:28:532  852 1b28 Agent   * Windows Update access disabled: No
    2013-08-13 09:03:28:532  852 1b28 Misc WARNING: Network Cost is assumed to be not supported as something failed with trying to get handles to wcmapi.dll
    2013-08-13 09:03:28:547  852 1b28 WuTask WuTaskManager delay initialize completed successfully..
    2013-08-13 09:03:28:557  852 1b28 Report WARNING: CSerializationHelper:: InitSerialize failed : 0x80070002
    2013-08-13 09:03:28:557  852 1b28 Report CWERReporter::Init succeeded
    2013-08-13 09:03:28:557  852 1b28 Agent ***********  Agent: Initializing Windows Update Agent  ***********
    2013-08-13 09:03:28:558  852 1b28 DnldMgr Download manager restoring 0 downloads
    2013-08-13 09:03:28:561  852 1b28 AU ###########  AU: Initializing Automatic Updates  ###########
    2013-08-13 09:03:28:561  852 1b28 AU AIR Mode is disabled
    2013-08-13 09:03:28:561  852 1b28 AU   # Policy Driven Provider: https://supd1p1.systems.company.local
    2013-08-13 09:03:28:561  852 1b28 AU   # Detection frequency: 4
    2013-08-13 09:03:28:561  852 1b28 AU   # Target group: OIT Servers
    2013-08-13 09:03:28:562  852 1b28 AU   # Approval type: Scheduled (User preference)
    2013-08-13 09:03:28:562  852 1b28 AU   # Auto-install minor updates: Yes (User preference)
    2013-08-13 09:03:28:562  852 1b28 AU   # Auto update required (cannot be disabled)
    2013-08-13 09:03:28:562  852 1b28 AU   # Will interact with non-admins (Non-admins are elevated (User preference))
    2013-08-13 09:03:28:565  852 1b28 Misc WARNING:     IsSessionRemote: WinStationQueryInformationW(WTSIsRemoteSession) failed for session 2, GetLastError=2250
    2013-08-13 09:03:28:567  852 1b28 AU WARNING: Failed to get Wu Exemption info from NLM, assuming not exempt, error = 0x80240037
    2013-08-13 09:03:28:577  852 1b28 AU AU finished delayed initialization
    2013-08-13 09:03:28:689  852  bc Report ***********  Report: Initializing static reporting data  ***********
    2013-08-13 09:03:28:689  852  bc Report   * OS Version = 6.2.9200.0.0.196880
    2013-08-13 09:03:28:689  852  bc Report   * OS Product Type = 0x00000007
    2013-08-13 09:03:28:694  852  bc Report   * Computer Brand = VMware, Inc.
    2013-08-13 09:03:28:694  852  bc Report   * Computer Model = VMware Virtual Platform
    2013-08-13 09:03:28:694  852  bc Report   * Platform Role = 1
    2013-08-13 09:03:28:695  852  bc Report   * AlwaysOn/AlwaysConnected (AOAC) = 0
    2013-08-13 09:03:28:697  852  bc Report   * Bios Revision = 6.00
    2013-08-13 09:03:28:697  852  bc Report   * Bios Name = PhoenixBIOS 4.0 Release 6.0    
    2013-08-13 09:03:28:697  852  bc Report   * Bios Release Date = 2012-06-22T00:00:00
    2013-08-13 09:03:28:697  852  bc Report   * Bios Sku Number unavailable.
    2013-08-13 09:03:28:697  852  bc Report   * Bios Vendor = Phoenix Technologies LTD
    2013-08-13 09:03:28:697  852  bc Report   * Bios Family unavailable.
    2013-08-13 09:03:28:697  852  bc Report   * Bios Major Release = 4
    2013-08-13 09:03:28:697  852  bc Report   * Bios Minor Release = 6
    2013-08-13 09:03:28:697  852  bc Report   * Locale ID = 1033
    2013-08-13 09:03:28:697 6196 a88 COMAPI <<-- SUBMITTED -- COMAPI: Search [ClientId = Microsoft Forefront Client Security]
    2013-08-13 09:03:28:697  852 1210 Agent *************
    2013-08-13 09:03:28:697  852 1210 Agent ** START **  Agent: Finding updates [CallerId = Microsoft Forefront Client Security]
    2013-08-13 09:03:28:698  852 1210 Agent *********
    2013-08-13 09:03:28:698  852 1210 Agent   * Online = Yes; Ignore download priority = No
    2013-08-13 09:03:28:698  852 1210 Agent   * Criteria = "(IsInstalled = 0 and IsHidden = 0 and CategoryIDs contains 'e0789628-ce08-4437-be74-2495b842f43b' and CategoryIDs contains '0a487050-8b0f-4f81-b401-be4ceacd61cd') or (IsInstalled = 0 and IsHidden = 0 and CategoryIDs contains 'e0789628-ce08-4437-be74-2495b842f43b' and CategoryIDs contains '8c3fcc84-7410-4a95-8b89-a166a0190486')"
    2013-08-13 09:03:28:698  852 1210 Agent   * ServiceID = {00000000-0000-0000-0000-000000000000} Third party service
    2013-08-13 09:03:28:698  852 1210 Agent   * Search Scope = {Machine}
    2013-08-13 09:03:28:698  852 1210 Agent   * Caller SID for Applicability: S-1-5-18
    2013-08-13 09:03:28:698  852 1210 EP Got WSUS Client/Server URL: "https://supd1p1.systems.company.local/ClientWebService/client.asmx"
    2013-08-13 09:03:28:750  852 1210 PT +++++++++++  PT: Starting category scan  +++++++++++
    2013-08-13 09:03:28:750  852 1210 PT   + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = https://supd1p1.systems.company.local/ClientWebService/client.asmx
    2013-08-13 09:03:29:046  852 1210 PT +++++++++++  PT: Synchronizing server updates  +++++++++++
    2013-08-13 09:03:29:046  852 1210 PT   + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = https://supd1p1.systems.company.local/ClientWebService/client.asmx
    2013-08-13 09:03:29:105  852 1210 PT +++++++++++  PT: Synchronizing extended update info  +++++++++++
    2013-08-13 09:03:29:105  852 1210 PT   + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = https://supd1p1.systems.company.local/ClientWebService/client.asmx
    2013-08-13 09:03:29:133  852 1210 Agent   * Found 0 updates and 4 categories in search; evaluated appl. rules of 52 out of 126 deployed entities
    2013-08-13 09:03:29:137  852 1210 Agent *********
    2013-08-13 09:03:29:137  852 1210 Agent **  END  **  Agent: Finding updates [CallerId = Microsoft Forefront Client Security]
    2013-08-13 09:03:29:137  852 1210 Agent *************
    2013-08-13 09:03:29:138 6196 f00 COMAPI >>--  RESUMED  -- COMAPI: Search [ClientId = Microsoft Forefront Client Security]
    2013-08-13 09:03:29:186 6196 f00 COMAPI   - Updates found = 0
    2013-08-13 09:03:29:187 6196 f00 COMAPI ---------
    2013-08-13 09:03:29:187 6196 f00 COMAPI --  END  --  COMAPI: Search [ClientId = Microsoft Forefront Client Security]
    2013-08-13 09:03:29:187 6196 f00 COMAPI -------------
    2013-08-13 09:03:34:137  852 1ad8 Report REPORT EVENT: {DA910433-1836-429A-AD20-3BA275FCA630} 2013-08-13 09:03:29:137-0500 1 147 [AGENT_DETECTION_FINISHED] 101 {00000000-0000-0000-0000-000000000000} 0 0 Microsoft Forefront Client Security Success Software Synchronization Windows Update Client successfully detected 0 updates.
    2013-08-13 09:03:34:139  852 1ad8 Report CWERReporter finishing event handling. (00000000)
    2013-08-13 09:11:29:239  852 1ad8 EP Got WSUS Client/Server URL: "https://supd1p1.systems.company.local/ClientWebService/client.asmx"
    2013-08-13 09:11:29:239  852 1ad8 PT WARNING: Cached cookie has expired or new PID is available
    2013-08-13 09:11:29:239  852 1ad8 EP Got WSUS SimpleTargeting URL: https://supd1p1.systems.company.local
    2013-08-13 09:11:29:239  852 1ad8 PT Initializing simple targeting cookie, clientId = a2944d93-f741-49a5-be5a-80349960d6a0, target group = OIT Servers, DNS name = shcmdmoc12.systems.company.local
    2013-08-13 09:11:29:239  852 1ad8 PT   Server URL = https://supd1p1.systems.company.local/SimpleAuthWebService/SimpleAuth.asmx
    2013-08-13 09:11:29:299  852 1ad8 EP Got WSUS Reporting URL: "https://supd1p1.systems.company.local/ReportingWebService/ReportingWebService.asmx"
    2013-08-13 09:11:29:299  852 1ad8 Report Uploading 1 events using cached cookie, reporting URL = https://supd1p1.systems.company.local/ReportingWebService/ReportingWebService.asmx
    2013-08-13 09:11:29:309  852 1ad8 Report Reporter successfully uploaded 1 events.
    2013-08-13 09:13:30:214  852 1b28 AU ###########  AU: Uninitializing Automatic Updates  ###########
    2013-08-13 09:13:30:302  852 1b28 WuTask Uninit WU Task Manager
    2013-08-13 09:13:30:377  852 1b28 Service *********
    2013-08-13 09:13:30:377  852 1b28 Service **  END  **  Service: Service exit [Exit code = 0x240001]
    2013-08-13 09:13:30:377  852 1b28 Service *************



    • Edited by tdoan Wednesday, August 14, 2013 1:16 PM hide FQDN
    Tuesday, August 13, 2013 3:27 PM
  • 2013-08-13 08:43:54:903  852 1820 Agent   * WSUS server:https://supd1p1.systems.company.local
    2013-08-13 08:43:54:903  852 1820 Agent   * WSUS status server:https://supd1p1.systems.company.local 

    2013-08-13 08:43:55:124  852 1820 DnldMgr Download manager restoring 0 downloads

    2013-08-13 08:44:59:706  852 158 AU Triggering AU detection through DetectNow API
    2013-08-13 08:44:59:706  852 158 AU Triggering Online detection (non-interactive)
    2013-08-13 08:45:02:707  852 1820 AU #############
    2013-08-13 08:45:02:707  852 1820 AU ## START ##  AU: Search for updates
    2013-08-13 08:45:02:766  852 1820 AU #########
    2013-08-13 08:45:44:825  852 1820 Misc WARNING: Send failed with hr = 80072ee2.
    2013-08-13 08:45:44:825  852 1820 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2013-08-13 08:45:44:825  852 1820 Misc WARNING: Send request failed, hr:0x80072ee2
    2013-08-13 08:45:44:868  852 1820 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/w8/2/windowsupdate/redir/wuredir.cab>. error 0x80072ee2
    2013-08-13 08:45:44:868  852 1820 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2013-08-13 08:45:44:868  852 1820 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2013-08-13 08:45:44:894  852 1820 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2

    Well, I gotta say, I don't see any legit reason why this machine would want to be contacting windowsupdate.com at that point in the event.

    I've sent the above log snippet to my contact on the WSUS product team to see if somebody internal can speculate on why a WS2012/WUA v7.8 environment would want to be talking to ds.download.windowsupdate.com at this point in the mix.


    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2013)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Tuesday, August 13, 2013 10:47 PM
  • The WSUS product team PM (i.e., yours truly) is now subscribed to this thread :-)

    We've determined that this is a behavior that is contained within WUA and we are doing some further investigation to figure out why this is actually happening.

    Wednesday, August 14, 2013 5:22 AM
  • BTW, I have also engaged the WUA PM on an e-mail thread.
    Wednesday, August 14, 2013 5:25 AM
  • Hi Ben,

    We also have same issue on our Hyper-V nodes. (more than 100 hosts right now) All hosts are completely isolated from internet (inbound and outbound) and just using WSUS to get updates.

    According to WindowsUpdate logs, WU tries to go internet for updates then just hangs. After a few minutes, it starts to run again. It may not be a problem when you manually updates Windows hosts but if you have Cluster, then it's a big mess.

    We see that, that hang also affects Cluster Aware Updates of Windows Server 2012. Right now, CUA doesn't work on our environment, so we have to live migrate all VMs to other Cluster node, update host and live migrate VMs back to same Cluster node again. It's a real pain when you have over 20 Clusters. It takes 15 hours to update our Hyper-V servers (from 6 PM to 9 AM in the morning)

    We also opened a ticket to premier support today.

    Yusuf.


    PowerShell MVP http://www.yusufozturk.info

    Wednesday, August 14, 2013 8:00 AM
  • The problem here ist that we have Servers 2012 that do not have any access to the internet. They are supposed to pull their updates from the internal WSUS server. But they always try to reach the internet (windowsupdate.com) to get some data from there. This leads to hangs in the Windows Update interface and many errors in the logs.

    This is always the inevitable problem when a thread is hijacked for another conversation. Your scenario is NOT the same as that of todan!
    Apologies to TPok. While my original assessment was that the issues were not the same, it has come to light that they are. This was my error.

    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2013)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Wednesday, August 14, 2013 7:59 PM
  • Hi Ben,

    We also have same issue on our Hyper-V nodes. (more than 100 hosts right now) All hosts are completely isolated from internet (inbound and outbound) and just using WSUS to get updates.

    According to WindowsUpdate logs, WU tries to go internet for updates then just hangs. After a few minutes, it starts to run again. It may not be a problem when you manually updates Windows hosts but if you have Cluster, then it's a big mess.

    We see that, that hang also affects Cluster Aware Updates of Windows Server 2012. Right now, CUA doesn't work on our environment, so we have to live migrate all VMs to other Cluster node, update host and live migrate VMs back to same Cluster node again. It's a real pain when you have over 20 Clusters. It takes 15 hours to update our Hyper-V servers (from 6 PM to 9 AM in the morning)

    We also opened a ticket to premier support today.

    Yusuf.


    PowerShell MVP http://www.yusufozturk.info

    Excellent- Premier support is one of the best ways to get a DCR filed. Also, if you file a bug or feedback item on Connect it will go right into our bug DB. We haven't hit RTM yet so it's not too late! If you do this, please let me know the connect #.

    Of course, we're still looking into the issue- but the bugs and such provide concrete customer-based justification which will help us get traction and prioritize this issue along with all the others.

    Thanks,
    Ben


    Wednesday, August 14, 2013 8:04 PM
  • Apologies to TPok. While my original assessment was that the issues were not the same, it has come to light that they are. This was my error.

    As I said before. :)

    No problem. I monitor this thread and see that the issue reached the right people. Now it's their job to find the bug.

    In the end we all have the same goal, solve our problem and help to make the products better.

    Thursday, August 15, 2013 6:03 AM
  • Can you try:

    Windows Registry Editor Version 5.00
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore\WindowsUpdate]
    “AutoDownload”=dword:00000002

    Wednesday, September 11, 2013 8:48 PM
  • Ilunved,

    That should not affect anything on 2012, but at this point it was worth a try, so I tried it.

    I created the HKLM\SOFTWARE\Policies\Microsoft\WindowsStore\WindowsUpdate\AutoDownload dword value and set it to 2.  I then restarted the server and waited.

    It did not help.  No change in behavior.  WindowsUpdate.log still shows failures to make connections to WindwosUpdate.com that it should not be trying to make.

    Thursday, September 12, 2013 6:58 PM
  • Ben,

    Is there any update on this issue? Is this an identified issue with the current windowsupdateagent in 2012?

    Thursday, September 26, 2013 1:53 PM
  • Is there any update on this issue? Is this an identified issue with the current windowsupdateagent in 2012?

    This is a "by design" behavioral artifact of the v7.8 WUAgent (in Win8/WS2012).

    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2013)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Friday, September 27, 2013 9:36 PM
  • Based in part on customer feedback, we have added the ability in Windows 8.1/WS2012 R2 to restrict WUA from contacting MU to download Store content. More on that in an upcoming WSUS blog post.

    Thank you for your feedback!

    Thanks,
    Ben



    Friday, September 27, 2013 11:40 PM
  • Our Microsoft TAM provided the following information in response to a Premier case I opened about this issue. While Microsoft has acknowledged the problem, as we suspected they do not plan to implement a fix in Server 2012 RTM. Instead, a new Windows Update group policy has been created in Server 2012 R2 to correct the problem.

    Title: Do not connect to any Windows Update Internet locations

    Description:

    Even when Windows Update is configured to receive updates from an intranet update service, it will periodically retrieve information from the public Windows Update service to enable future connections to Windows Update, and other services like Microsoft Update or the Windows Store. Enabling this policy will disable that functionality, and may cause connection to public services such as the Windows Store to stop working.

    Note: This policy applies only when this PC is configured to connect to an intranet update service using the "Specify intranet Microsoft update service location" policy.

    • Marked as answer by tdoan Tuesday, October 8, 2013 1:44 PM
    Tuesday, October 8, 2013 1:44 PM
  • Based in part on customer feedback, we have added the ability in Windows 8.1/WS2012 R2 to restrict WUA from contacting MU to download Store content. More on that in an upcoming WSUS blog post.

    Thank you for your feedback!

    Thanks,
    Ben



    The fix is now available and described here: http://blogs.technet.com/b/wsus/archive/2013/10/08/enabling-a-more-predictable-windows-update-experience-for-windows-8-and-windows-server-2012-kb-2885694.aspx

    and here: http://support.microsoft.com/kb/2885694

    Tuesday, October 8, 2013 4:59 PM