locked
Clients doesn't take updates from WSUS server RRS feed

  • Question

  • Dears,

    Hello

    I have to deploy updates for about 2000 clients.but after changing membership of clients to a test group to test the updates, clients doesn't download and install updates.

    About the environment :

    WSUS : 3.1.6001.65

    Clients: Windows XP SP3 and Windows 7 SP1

    I have posted windowsupdate.log from one of the Windows 7 X64 computers here:

    -I tried wuauclt.exe /detectnow and also wuauclt /resetauthorization /detectnow but still the client cannot download and install the updates.

    -I also tried http://DRWB003/selfupdate/wuident.cab and i could successfully download that file.

    -I changed the group to another group and also tried applying another updates but still the same it seems the error code is the following line but how can i release?

    :2012-12-21 10:48:45:293  888 c84 Agent WARNING: Failed to evaluate Installed rule, updateId = {189A8F50-0C3A-4FDF-8BC2-BC23A3EB11FB}.101, hr = 80242013

    2012-12-21 10:42:48:935  888 c84 Report Uploading 2 events using cached cookie, reporting URL = http://drwb003/ReportingWebService/ReportingWebService.asmx
    2012-12-21 10:42:48:935  888 c84 Report Reporter successfully uploaded 2 events.
    2012-12-21 10:48:35:244  888 898 AU Triggering AU detection through DetectNow API
    2012-12-21 10:48:35:244  888 898 AU Triggering Online detection (interactive)
    2012-12-21 10:48:35:245  888 9a0 AU #############
    2012-12-21 10:48:35:245  888 9a0 AU ## START ##  AU: Search for updates
    2012-12-21 10:48:35:245  888 9a0 AU #########
    2012-12-21 10:48:35:247  888 9a0 Agent system considered non-Genuine because SLIsGenuineLocal() failed, hr = 0xfa7c15a0
    2012-12-21 10:48:35:247  888 9a0 AU <<## SUBMITTED ## AU: Search for updates [CallId = {CE455AEF-C059-4B95-BD95-B82A0FC0A437}]
    2012-12-21 10:48:35:248  888 c84 Agent *************
    2012-12-21 10:48:35:248  888 c84 Agent ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2012-12-21 10:48:35:248  888 c84 Agent *********
    2012-12-21 10:48:35:248  888 c84 Agent   * Online = Yes; Ignore download priority = No
    2012-12-21 10:48:35:248  888 c84 Agent   * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
    2012-12-21 10:48:35:248  888 c84 Agent   * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2012-12-21 10:48:35:248  888 c84 Agent   * Search Scope = {Machine}
    2012-12-21 10:48:35:248  888 c84 Setup Checking for agent SelfUpdate
    2012-12-21 10:48:35:248  888 c84 Setup Client version: Core: 7.5.7601.17514  Aux: 7.5.7601.17514
    2012-12-21 10:48:35:249  888 c84 Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
    2012-12-21 10:48:35:253  888 c84 Misc  Microsoft signed: Yes
    2012-12-21 10:48:35:263  888 c84 Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
    2012-12-21 10:48:35:267  888 c84 Misc  Microsoft signed: Yes
    2012-12-21 10:48:35:268  888 c84 Setup Skipping SelfUpdate check based on the /SKIP directive in wuident
    2012-12-21 10:48:35:268  888 c84 Setup SelfUpdate check completed.  SelfUpdate is NOT required.
    2012-12-21 10:48:35:783  888 c84 PT +++++++++++  PT: Synchronizing server updates  +++++++++++
    2012-12-21 10:48:35:783  888 c84 PT   + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://drwb003/ClientWebService/client.asmx
    2012-12-21 10:48:45:293  888 c84 Agent WARNING: Failed to evaluate Installed rule, updateId = {189A8F50-0C3A-4FDF-8BC2-BC23A3EB11FB}.101, hr = 80242013
    2012-12-21 10:48:50:378  888 c84 PT +++++++++++  PT: Synchronizing extended update info  +++++++++++
    2012-12-21 10:48:50:378  888 c84 PT   + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://drwb003/ClientWebService/client.asmx
    2012-12-21 10:48:51:083  888 c84 Agent   * Found 0 updates and 67 categories in search; evaluated appl. rules of 1101 out of 1588 deployed entities
    2012-12-21 10:48:51:084  888 c84 Agent *********
    2012-12-21 10:48:51:084  888 c84 Agent **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2012-12-21 10:48:51:084  888 c84 Agent *************
    2012-12-21 10:48:51:098  888 dfc AU >>##  RESUMED  ## AU: Search for updates [CallId = {CE455AEF-C059-4B95-BD95-B82A0FC0A437}]
    2012-12-21 10:48:51:098  888 dfc AU   # 0 updates detected
    2012-12-21 10:48:51:098  888 dfc AU #########
    2012-12-21 10:48:51:098  888 dfc AU ##  END  ##  AU: Search for updates [CallId = {CE455AEF-C059-4B95-BD95-B82A0FC0A437}]
    2012-12-21 10:48:51:098  888 dfc AU #############
    2012-12-21 10:48:51:099  888 dfc AU Successfully wrote event for AU health state:0
    2012-12-21 10:48:51:099  888 dfc AU Featured notifications is disabled.
    2012-12-21 10:48:51:099  888 dfc AU AU setting next detection timeout to 2012-12-21 09:10:31
    2012-12-21 10:48:51:099  888 dfc AU Setting AU scheduled install time to 2012-12-21 23:30:00
    2012-12-21 10:48:51:099  888 dfc AU Successfully wrote event for AU health state:0
    2012-12-21 10:48:51:100  888 dfc AU Successfully wrote event for AU health state:0
    2012-12-21 10:48:56:082  888 c84 Report REPORT EVENT: {17F1B2A9-0AC3-4FD0-A76F-2373A43ED486} 2012-12-21 10:48:51:083+0330 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Software Synchronization Windows Update Client successfully detected 0 updates.
    2012-12-21 10:48:56:082  888 c84 Report REPORT EVENT: {0AA0A424-818D-48DA-A940-0C947ADB9BED} 2012-12-21 10:48:51:084+0330 1 156 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Pre-Deployment Check Reporting client status.
    2012-12-21 10:48:56:083  888 c84 Report CWERReporter finishing event handling. (00000000)
    2012-12-21 11:02:19:968  888 c84 Report Uploading 2 events using cached cookie, reporting URL = http://drwb003/ReportingWebService/ReportingWebService.asmx
    2012-12-21 11:02:19:984  888 c84 Report Reporter successfully uploaded 2 events.
    2012-12-21 12:05:21:270  888 9a0 AU AU received policy change subscription event

    Friday, December 21, 2012 1:39 PM

Answers

  • Am 21.12.2012 schrieb Shahram.dehghani:

    I have to deploy updates for about 2000 clients.but after changing membership of clients to a test group to test the updates, clients doesn't download and install updates.

    About the environment :

    WSUS : 3.1.6001.65

    This ist WSUS 3.0 SP1. Pls update to WSUS 3.0 SP2.
    http://www.microsoft.com/en-us/download/details.aspx?id=5216
    After this, pls install http://support.microsoft.com/kb/2734608 on the
    WSUS.

    Clients: Windows XP SP3 and Windows 7 SP1

    I have posted windowsupdate.log from one of the Windows 7 X64 computers here:

    -I tried wuauclt.exe detectnow and alsowuauclt /resetauthorization /detectnowbut still the client cannot download and install the updates./

    After the Update try this again.

    Winfried


    http://www.microsoft.com/germany/windowsserver2003/technologien/updateservices/default.mspx
    http://www.wsuswiki.com/Home

    Friday, December 21, 2012 3:37 PM
  • SolarWinds.com has an free WSUS Diagnostic Tool.

    http://www.solarwinds.com/downloads/

    Definitely something to explore after properly patching the WSUS server..

    but there are two critical flaws here... and until they're resolved, any potential misconfigurations in the client (which don't seem to be the issue here, and really is what the diag tool is designed to identify) are insignificant.

    First, trying to update a Windows 7 system from a WSUS v3 SP1 server is broken, period. Win7/Win2008R2 clients required SP2 to be installed on WSUS. Both the operating systems (Win7/Win2008R2) and the Service Pack were released in October 2009. (Frankly I'm intrigued -- well, actually, a bit scared! -- that a WSUS3SP1 server even still exists!)

    Second, the fact that this Windows 7 SP1 client is still running WUAgent 7.5 also tells us it hasn't been patched with ANYTHING since at least June, 2012 (when the updated WUAgent was released to AU/WU/MU). Now, as long as this Win7SP1 system never talks to anything except a WSUS v3 SP2 server, it will continue to function -- but the moment that Win7SP1 client gets a whiff of AU/WU/MU, it's going to update the WUAgent to v7.6 and it'll be broken all over again... thus then requiring KB2720211 to be installed on the WSUS v3 SP2 server.

    Winfried offers KB2734608 which is an alternative to KB2720211 (after installing Service Pack 2). Both updates have pros/cons. One or the other is required inasmuch as 2012 ends in four days.

    Oh, actually, there is one other potential complication too....

    2012-12-21 10:48:45:293  888 c84 Agent WARNING: Failed to evaluate Installed rule, updateId = {189A8F50-0C3A-4FDF-8BC2-BC23A3EB11FB}.101, hr = 80242013


    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    SolarWinds Head Geek
    Microsoft MVP - Software Distribution (2005-2012)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Friday, December 28, 2012 3:20 AM

All replies

  • Am 21.12.2012 schrieb Shahram.dehghani:

    I have to deploy updates for about 2000 clients.but after changing membership of clients to a test group to test the updates, clients doesn't download and install updates.

    About the environment :

    WSUS : 3.1.6001.65

    This ist WSUS 3.0 SP1. Pls update to WSUS 3.0 SP2.
    http://www.microsoft.com/en-us/download/details.aspx?id=5216
    After this, pls install http://support.microsoft.com/kb/2734608 on the
    WSUS.

    Clients: Windows XP SP3 and Windows 7 SP1

    I have posted windowsupdate.log from one of the Windows 7 X64 computers here:

    -I tried wuauclt.exe detectnow and alsowuauclt /resetauthorization /detectnowbut still the client cannot download and install the updates./

    After the Update try this again.

    Winfried


    http://www.microsoft.com/germany/windowsserver2003/technologien/updateservices/default.mspx
    http://www.wsuswiki.com/Home

    Friday, December 21, 2012 3:37 PM
  • Shahram,

    SolarWinds.com has an free WSUS Diagnostic Tool.

    http://www.solarwinds.com/downloads/

    perhaps you has something on it.

    Peter

    Monday, December 24, 2012 8:21 AM
  • SolarWinds.com has an free WSUS Diagnostic Tool.

    http://www.solarwinds.com/downloads/

    Definitely something to explore after properly patching the WSUS server..

    but there are two critical flaws here... and until they're resolved, any potential misconfigurations in the client (which don't seem to be the issue here, and really is what the diag tool is designed to identify) are insignificant.

    First, trying to update a Windows 7 system from a WSUS v3 SP1 server is broken, period. Win7/Win2008R2 clients required SP2 to be installed on WSUS. Both the operating systems (Win7/Win2008R2) and the Service Pack were released in October 2009. (Frankly I'm intrigued -- well, actually, a bit scared! -- that a WSUS3SP1 server even still exists!)

    Second, the fact that this Windows 7 SP1 client is still running WUAgent 7.5 also tells us it hasn't been patched with ANYTHING since at least June, 2012 (when the updated WUAgent was released to AU/WU/MU). Now, as long as this Win7SP1 system never talks to anything except a WSUS v3 SP2 server, it will continue to function -- but the moment that Win7SP1 client gets a whiff of AU/WU/MU, it's going to update the WUAgent to v7.6 and it'll be broken all over again... thus then requiring KB2720211 to be installed on the WSUS v3 SP2 server.

    Winfried offers KB2734608 which is an alternative to KB2720211 (after installing Service Pack 2). Both updates have pros/cons. One or the other is required inasmuch as 2012 ends in four days.

    Oh, actually, there is one other potential complication too....

    2012-12-21 10:48:45:293  888 c84 Agent WARNING: Failed to evaluate Installed rule, updateId = {189A8F50-0C3A-4FDF-8BC2-BC23A3EB11FB}.101, hr = 80242013


    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    SolarWinds Head Geek
    Microsoft MVP - Software Distribution (2005-2012)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Friday, December 28, 2012 3:20 AM