locked
Updates failures on all clients from WSUS3 on a 2k3 R2 Server RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Good day all,

     

    I have an issue that I have detected recently and not too sure how to go about the resolution of it.Here is the layout of my domains so you get an idea my specific scenario.

    Two domains I will name Domain1 and Domain2. Domain1 has the WSUS server along with other servers and Domain2 has all the client workstations as well as 1 server which is for the AD for Domain2.

     

    The problem is that all the clients thats are trying to update from the WSUS (which include Win 7, XP, Server 2k3, 2k8, Server 2000) all report that they have errors with the updates. Its not "all" the updates that are giving an issue, its only specific ones by the looks of things. I think its possibly something to do with the Auto Approval account that is used on the WSUS.

    Why I say this, is that some updates are approved by WUS Server and others are from the Domain1\Administrator account. I am not sure why its using different accounts firstly and secondly how to go about resolving this. I have read other errors similiar to this but no solution from them.

     

    I have viewed the logfile and cant see anything too specific although it is thousands of lines long and not exactly sure what to look for either. 

    It might be a stupid setting that has been changed over time as at one point it worked perfectly and for weeks all the computers we Successfully updated and hardly any issues!

     

    I appreciate any help you guys can offer me.

     

    Tim

    MCP, MCSE, MCDST, MCSA, MCT, MCITP:EA, MCITP:CST, A+, N+, CTT+, MCTS, CBP
    Tuesday, September 21, 2010 10:41 AM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    The Default Web Site and all webservice application v-dirs should be set to Execution permissions: Scripts only.

    The Content virtual directory should be set to Execute permissions: None.

    These settings are documented in Appendix C of the WSUS Operations Guide.

     

    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    Principal/CTO, Onsite Technology Solutions, Houston, Texas
    Microsoft MVP - Software Distribution (2005-2010)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    My Blog: http://onsitechsolutions.spaces.live.com
    • Marked as answer by Tim Katsapas Wednesday, September 29, 2010 7:45 AM
    Tuesday, September 28, 2010 4:49 PM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    Greetings Tim.

    First, the account used to approve updates on the WSUS server has absolutely nothing to do with how the client detects, downloads, or installs those updates.

    Second, to answer one of your questions .. the updates approved by the 'WUS Server' account are updates that have been approved as a result of Automatic Approval Rules. The others, approved by the Domain1\Administrator account are the updates that you have approved from the console.

    As for the errors.. we need to know what specific errors you are encountering in order to provide any useful feedback.

    Please do the following:

    1. Note the system time on one of the clients that is failing.
    2. Restart the Automatic Updates service
    3. Run this command: wuauclt /resetauthorization /detectnow
    4. Wait 30 minutes.
    5. Post all of the log entries from the WindowsUpdate.log starting at the time recorded in Step #1.
    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    Principal/CTO, Onsite Technology Solutions, Houston, Texas
    Microsoft MVP - Software Distribution (2005-2010)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    My Blog: http://onsitechsolutions.spaces.live.com
    Tuesday, September 21, 2010 3:24 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    2010-09-22    07:35:59:993     996    b70    AU    Getting featured update notifications.  fIncludeDismissed = true
    2010-09-22    07:35:59:993     996    b70    AU    No featured updates available.
    2010-09-22    07:37:15:802     996    b50    AU    ###########  AU: Uninitializing Automatic Updates  ###########
    2010-09-22    07:37:16:400     996    b50    Report    CWERReporter finishing event handling. (00000000)
    2010-09-22    07:37:16:541     996    b50    Service    *********
    2010-09-22    07:37:16:541     996    b50    Service    **  END  **  Service: Service exit [Exit code = 0x240001]
    2010-09-22    07:37:16:541     996    b50    Service    *************
    2010-09-22    07:37:22:556     996    10f4    Misc    ===========  Logging initialized (build: 7.4.7600.226, tz: +0200)  ===========
    2010-09-22    07:37:22:557     996    10f4    Misc      = Process: C:\Windows\system32\svchost.exe
    2010-09-22    07:37:22:557     996    10f4    Misc      = Module: c:\windows\system32\wuaueng.dll
    2010-09-22    07:37:22:556     996    10f4    Service    *************
    2010-09-22    07:37:22:557     996    10f4    Service    ** START **  Service: Service startup
    2010-09-22    07:37:22:557     996    10f4    Service    *********
    2010-09-22    07:37:22:560     996    10f4    Agent      * WU client version 7.4.7600.226
    2010-09-22    07:37:22:561     996    10f4    Agent      * Base directory: C:\Windows\SoftwareDistribution
    2010-09-22    07:37:22:561     996    10f4    Agent      * Access type: No proxy
    2010-09-22    07:37:22:562     996    10f4    Agent      * Network state: Connected
    2010-09-22    07:37:47:755     996    b70    Report    CWERReporter::Init succeeded
    2010-09-22    07:37:47:755     996    b70    Agent    ***********  Agent: Initializing Windows Update Agent  ***********
    2010-09-22    07:37:47:755     996    b70    Agent    ***********  Agent: Initializing global settings cache  ***********
    2010-09-22    07:37:47:755     996    b70    Agent      * WSUS server: http://server:8530
    2010-09-22    07:37:47:755     996    b70    Agent      * WSUS status server: http://server:8530
    2010-09-22    07:37:47:755     996    b70    Agent      * Target group: (Unassigned Computers)
    2010-09-22    07:37:47:755     996    b70    Agent      * Windows Update access disabled: No
    2010-09-22    07:37:47:755     996    b70    DnldMgr    Download manager restoring 0 downloads
    2010-09-22    07:37:47:757     996    b70    AU    ###########  AU: Initializing Automatic Updates  ###########
    2010-09-22    07:37:47:757     996    b70    AU      # WSUS server: http://server:8530
    2010-09-22    07:37:47:758     996    b70    AU      # Detection frequency: 22
    2010-09-22    07:37:47:758     996    b70    AU      # Approval type: Pre-install notify (Policy)
    2010-09-22    07:37:47:758     996    b70    AU      # Auto-install minor updates: No (User preference)
    2010-09-22    07:37:47:758     996    b70    AU      # Will interact with non-admins (Non-admins are elevated (Policy))
    2010-09-22    07:37:48:162     996    10f4    Report    ***********  Report: Initializing static reporting data  ***********
    2010-09-22    07:37:48:162     996    10f4    Report      * OS Version = 6.1.7600.0.0.65792
    2010-09-22    07:37:48:162     996    10f4    Report      * OS Product Type = 0x00000030
    2010-09-22    07:37:48:184     996    10f4    Report      * Computer Brand = Gigabyte Technology Co., Ltd.
    2010-09-22    07:37:48:184     996    10f4    Report      * Computer Model = H55M-UD2H
    2010-09-22    07:37:48:188     996    10f4    Report      * Bios Revision = F8
    2010-09-22    07:37:48:188     996    10f4    Report      * Bios Name = Award Modular BIOS v6.00PG
    2010-09-22    07:37:48:188     996    10f4    Report      * Bios Release Date = 2010-02-12T00:00:00
    2010-09-22    07:37:48:188     996    10f4    Report      * Locale ID = 7177
    2010-09-22    07:37:48:204     996    b70    AU    Successfully wrote event for AU health state:0
    2010-09-22    07:37:48:205     996    b70    AU    Initializing featured updates
    2010-09-22    07:37:48:205     996    b70    AU    Found 0 cached featured updates
    2010-09-22    07:37:48:206     996    b70    AU    Successfully wrote event for AU health state:0
    2010-09-22    07:37:48:210     996    b70    AU    Successfully wrote event for AU health state:0
    2010-09-22    07:37:48:210     996    b70    AU    AU finished delayed initialization
    2010-09-22    07:37:48:210     996    b70    AU    Triggering AU detection through DetectNow API
    2010-09-22    07:37:48:210     996    b70    AU    Triggering Online detection (non-interactive)
    2010-09-22    07:37:48:211     996    10f4    AU    #############
    2010-09-22    07:37:48:211     996    10f4    AU    ## START ##  AU: Search for updates
    2010-09-22    07:37:48:211     996    10f4    AU    #########
    2010-09-22    07:37:48:217     996    10f4    AU    <<## SUBMITTED ## AU: Search for updates [CallId = {341CD23F-BD96-438C-BF45-CB2AA93D1BB5}]
    2010-09-22    07:37:48:223     996    1ea8    Agent    *************
    2010-09-22    07:37:48:223     996    1ea8    Agent    ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2010-09-22    07:37:48:223     996    1ea8    Agent    *********
    2010-09-22    07:37:48:223     996    1ea8    Agent      * Online = Yes; Ignore download priority = No
    2010-09-22    07:37:48:223     996    1ea8    Agent      * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
    2010-09-22    07:37:48:223     996    1ea8    Agent      * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2010-09-22    07:37:48:223     996    1ea8    Agent      * Search Scope = {Machine}
    2010-09-22    07:37:48:223     996    1ea8    Setup    Checking for agent SelfUpdate
    2010-09-22    07:37:48:224     996    1ea8    Setup    Client version: Core: 7.4.7600.226  Aux: 7.4.7600.226
    2010-09-22    07:37:48:224     996    1ea8    Misc    Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
    2010-09-22    07:37:48:236     996    1ea8    Misc     Microsoft signed: Yes
    2010-09-22    07:37:50:819     996    1ea8    Misc    Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
    2010-09-22    07:37:50:831     996    1ea8    Misc     Microsoft signed: Yes
    2010-09-22    07:37:50:839     996    1ea8    Misc    Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
    2010-09-22    07:37:50:852     996    1ea8    Misc     Microsoft signed: Yes
    2010-09-22    07:37:50:856     996    1ea8    Misc    Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
    2010-09-22    07:37:50:867     996    1ea8    Misc     Microsoft signed: Yes
    2010-09-22    07:37:50:891     996    1ea8    Setup    Determining whether a new setup handler needs to be downloaded
    2010-09-22    07:37:50:892     996    1ea8    Misc    Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\Handler\WuSetupV.exe:
    2010-09-22    07:37:50:902     996    1ea8    Misc     Microsoft signed: Yes
    2010-09-22    07:37:50:902     996    1ea8    Setup    SelfUpdate handler update NOT required: Current version: 7.4.7600.226, required version: 7.4.7600.226
    2010-09-22    07:37:50:903     996    1ea8    Setup    Evaluating applicability of setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.4.7600.226"
    2010-09-22    07:37:50:910     996    1ea8    Setup    Setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.4.7600.226" is already installed.
    2010-09-22    07:37:50:910     996    1ea8    Setup    Evaluating applicability of setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~x86~~7.4.7600.226"
    2010-09-22    07:37:50:931     996    1ea8    Setup    Setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~x86~~7.4.7600.226" is already installed.
    2010-09-22    07:37:50:932     996    1ea8    Setup    Evaluating applicability of setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~x86~~7.4.7600.226"
    2010-09-22    07:37:50:958     996    1ea8    Setup    Setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~x86~~7.4.7600.226" is already installed.
    2010-09-22    07:37:50:959     996    1ea8    Setup    SelfUpdate check completed.  SelfUpdate is NOT required.
    2010-09-22    07:37:51:142     996    1ea8    PT    +++++++++++  PT: Synchronizing server updates  +++++++++++
    2010-09-22    07:37:51:148     996    1ea8    PT      + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://server:8530/ClientWebService/client.asmx
    2010-09-22    07:37:51:158     996    1ea8    PT    WARNING: Cached cookie has expired or new PID is available
    2010-09-22    07:37:51:158     996    1ea8    PT    Initializing simple targeting cookie, clientId = b67e9210-0e21-4c61-8399-cd6def97bab0, target group = , DNS name = timk-ws.domain1.local
    2010-09-22    07:37:51:158     996    1ea8    PT      Server URL = http://server:8530/SimpleAuthWebService/SimpleAuth.asmx
    2010-09-22    07:37:52:609     996    1ea8    PT    +++++++++++  PT: Synchronizing extended update info  +++++++++++
    2010-09-22    07:37:52:609     996    1ea8    PT      + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://server:8530/ClientWebService/client.asmx
    2010-09-22    07:37:52:793     996    1ea8    Agent      * Added update {526A115C-2FB9-48E9-BDF6-8BC07079C0B1}.103 to search result
    2010-09-22    07:37:52:793     996    1ea8    Agent      * Found 1 updates and 57 categories in search; evaluated appl. rules of 576 out of 971 deployed entities
    2010-09-22    07:37:52:794     996    1ea8    Agent    *********
    2010-09-22    07:37:52:794     996    1ea8    Agent    **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2010-09-22    07:37:52:795     996    1ea8    Agent    *************
    2010-09-22    07:37:52:798     996    1ea8    Report    REPORT EVENT: {43A7DCF8-B5EC-496A-B1FB-C7CA943DD63A}    2010-09-22 07:37:52:793+0200    1    147    101    {00000000-0000-0000-0000-000000000000}    0    0    AutomaticUpdates    Success    Software Synchronization    Windows Update Client successfully detected 1 updates.
    2010-09-22    07:37:52:799     996    1744    AU    >>##  RESUMED  ## AU: Search for updates [CallId = {341CD23F-BD96-438C-BF45-CB2AA93D1BB5}]
    2010-09-22    07:37:52:799     996    1744    AU      # 1 updates detected
    2010-09-22    07:37:52:799     996    1744    AU    #########
    2010-09-22    07:37:52:799     996    1744    AU    ##  END  ##  AU: Search for updates [CallId = {341CD23F-BD96-438C-BF45-CB2AA93D1BB5}]
    2010-09-22    07:37:52:799     996    1744    AU    #############
    2010-09-22    07:37:52:800     996    1744    AU    Successfully wrote event for AU health state:0
    2010-09-22    07:37:52:800     996    1744    AU    Featured notifications is disabled.
    2010-09-22    07:37:52:800     996    1744    AU    AU setting next detection timeout to 2010-09-23 02:12:54
    2010-09-22    07:37:52:801     996    1744    AU    Successfully wrote event for AU health state:0
    2010-09-22    07:37:52:801     996    1744    AU    Auto-approving update for download, updateId = {526A115C-2FB9-48E9-BDF6-8BC07079C0B1}.103, ForUx=0, IsOwnerUx=0, HasDeadline=0, IsMinor=0
    2010-09-22    07:37:52:801     996    1744    AU    Auto-approved 1 update(s) for download (NOT for Ux)
    2010-09-22    07:37:52:801     996    1744    AU    #############
    2010-09-22    07:37:52:801     996    1744    AU    ## START ##  AU: Download updates
    2010-09-22    07:37:52:801     996    1744    AU    #########
    2010-09-22    07:37:52:801     996    1744    AU      # Approved updates = 1
    2010-09-22    07:37:52:814     996    1744    AU    AU initiated download, updateId = {526A115C-2FB9-48E9-BDF6-8BC07079C0B1}.103, callId = {9721F6FB-5738-40A3-9FA1-5EAA8A76ECC2}
    2010-09-22    07:37:52:814     996    1744    AU    Successfully wrote event for AU health state:0
    2010-09-22    07:37:52:814     996    1744    AU    AU setting pending client directive to 'Download Progress'
    2010-09-22    07:37:52:817     996    1744    AU    Successfully wrote event for AU health state:0
    2010-09-22    07:37:52:817     996    1744    AU      # Pending download calls = 1
    2010-09-22    07:37:52:817     996    1744    AU    <<## SUBMITTED ## AU: Download updates
    2010-09-22    07:37:52:818     996    1744    AU    Successfully wrote event for AU health state:0
    2010-09-22    07:37:52:851     996    1ea8    Report    CWERReporter finishing event handling. (00000000)
    2010-09-22    07:37:52:852     996    1ea8    DnldMgr    *************
    2010-09-22    07:37:52:852     996    1ea8    DnldMgr    ** START **  DnldMgr: Downloading updates [CallerId = AutomaticUpdates]
    2010-09-22    07:37:52:852     996    1ea8    DnldMgr    *********
    2010-09-22    07:37:52:852     996    1ea8    DnldMgr      * Call ID = {9721F6FB-5738-40A3-9FA1-5EAA8A76ECC2}
    2010-09-22    07:37:52:852     996    1ea8    DnldMgr      * Priority = 2, Interactive = 0, Owner is system = 1, Explicit proxy = 0, Proxy session id = -1, ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}
    2010-09-22    07:37:52:852     996    1ea8    DnldMgr      * Updates to download = 1
    2010-09-22    07:37:52:852     996    1ea8    Agent      *   Title = Security Update for Windows 7 (KB981852)
    2010-09-22    07:37:52:852     996    1ea8    Agent      *   UpdateId = {526A115C-2FB9-48E9-BDF6-8BC07079C0B1}.103
    2010-09-22    07:37:52:853     996    1ea8    Agent      *     Bundles 2 updates:
    2010-09-22    07:37:52:853     996    1ea8    Agent      *       {A4128386-9D6E-4E5F-802F-BA8C5352322B}.103
    2010-09-22    07:37:52:853     996    1ea8    Agent      *       {25C7E963-6B8F-4B0D-96C2-285238074F23}.103
    2010-09-22    07:37:52:853     996    1ea8    PT    +++++++++++  PT: Synchronizing file locations  +++++++++++
    2010-09-22    07:37:52:853     996    1ea8    PT      + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://server:8530/ClientWebService/client.asmx
    2010-09-22    07:37:52:861     996    1ea8    DnldMgr    ***********  DnldMgr: New download job [UpdateId = {A4128386-9D6E-4E5F-802F-BA8C5352322B}.103]  ***********
    2010-09-22    07:37:52:931     996    1ea8    DnldMgr      * BITS job initialized, JobId = {3A31D141-4339-4C81-852B-FDE5A5D0434B}
    2010-09-22    07:37:53:035     996    1ea8    DnldMgr      * Downloading from http://server:8530/Content/D8/B48849770FD1110C15FCC48EB2EA96F58C75F0D8.exe to C:\Windows\SoftwareDistribution\Download\61c0e06a4fc871a88bb6fd5b64ac7bb8\b48849770fd1110c15fcc48eb2ea96f58c75f0d8 (full file).
    2010-09-22    07:37:53:147     996    1ea8    DnldMgr    ***********  DnldMgr: New download job [UpdateId = {25C7E963-6B8F-4B0D-96C2-285238074F23}.103]  ***********
    2010-09-22    07:37:53:148     996    1ea8    DnldMgr      * Queueing update for download handler request generation.
    2010-09-22    07:37:53:149     996    1ea8    DnldMgr    Generating download request for update {25C7E963-6B8F-4B0D-96C2-285238074F23}.103
    2010-09-22    07:37:53:210     996    170c    DnldMgr    WARNING: BITS job {3A31D141-4339-4C81-852B-FDE5A5D0434B} failed, updateId = {A4128386-9D6E-4E5F-802F-BA8C5352322B}.103, hr = 0x80190194, BG_ERROR_CONTEXT = 5
    2010-09-22    07:37:53:211     996    170c    DnldMgr      Progress failure bytes total = 13752, bytes transferred = 0
    2010-09-22    07:37:53:211     996    170c    DnldMgr      Failed job file: URL = http://server:8530/Content/D8/B48849770FD1110C15FCC48EB2EA96F58C75F0D8.exe, local path = C:\Windows\SoftwareDistribution\Download\61c0e06a4fc871a88bb6fd5b64ac7bb8\b48849770fd1110c15fcc48eb2ea96f58c75f0d8
    2010-09-22    07:37:53:218     996    1ea8    Handler    Generating request for CBS update 25C7E963-6B8F-4B0D-96C2-285238074F23 in sandbox C:\Windows\SoftwareDistribution\Download\fd7e1205d3fd14fc0e36efbc50c04905
    2010-09-22    07:37:53:222     996    1ea8    Handler    Selecting self-contained because update has express payload but server doesn't support it.
    2010-09-22    07:37:53:222     996    1ea8    Handler    Selected payload type is ptSelfContained
    2010-09-22    07:37:53:222     996    1ea8    Handler    Detected download state is dsHavePackage
    2010-09-22    07:37:53:245     996    170c    DnldMgr    Error 0x80244019 occurred while downloading update; notifying dependent calls.
    2010-09-22    07:37:53:251     996    1744    AU    >>##  RESUMED  ## AU: Download update [UpdateId = {526A115C-2FB9-48E9-BDF6-8BC07079C0B1}]
    2010-09-22    07:37:53:251     996    1744    AU      # WARNING: Download failed, error = 0x80244019
    2010-09-22    07:37:53:252     996    1ea8    Handler    Request generation for CBS update complete with hr=0x0 and pfResetSandbox=0
    2010-09-22    07:37:53:252     996    1ea8    Agent    *********
    2010-09-22    07:37:53:252     996    1ea8    Agent    **  END  **  Agent: Downloading updates [CallerId = AutomaticUpdates]
    2010-09-22    07:37:53:252     996    1ea8    Agent    *************
    2010-09-22    07:37:53:252     996    1744    AU    #########
    2010-09-22    07:37:53:252     996    1744    AU    ##  END  ##  AU: Download updates
    2010-09-22    07:37:53:252     996    1744    AU    #############
    2010-09-22    07:37:53:265     996    1744    AU    Successfully wrote event for AU health state:0
    2010-09-22    07:37:53:265     996    1ea8    Report    REPORT EVENT: {F8A91AA4-8E33-4494-AB93-410F67EB661F}    2010-09-22 07:37:52:794+0200    1    156    101    {00000000-0000-0000-0000-000000000000}    0    0    AutomaticUpdates    Success    Pre-Deployment Check    Reporting client status.
    2010-09-22    07:37:53:265     996    1ea8    Report    REPORT EVENT: {029B9B3E-6417-4C47-9F40-5FA217CD44B0}    2010-09-22 07:37:53:253+0200    1    161    101    {526A115C-2FB9-48E9-BDF6-8BC07079C0B1}    103    80244019    AutomaticUpdates    Failure    Content Download    Error: Download failed.
    2010-09-22    07:37:53:267     996    1744    AU    Successfully wrote event for AU health state:0
    2010-09-22    07:37:53:284     996    1ea8    Report    CWERReporter::HandleEvents - WER report upload completed with status 0x8
    2010-09-22    07:37:53:284     996    1ea8    Report    WER Report sent: 7.4.7600.226 0x80244019 526A115C-2FB9-48E9-BDF6-8BC07079C0B1 Download 101 Managed
    2010-09-22    07:37:53:284     996    1ea8    Report    CWERReporter finishing event handling. (00000000)
    2010-09-22    07:37:58:267     996    1ea8    Report    CWERReporter finishing event handling. (00000000)
    2010-09-22    07:38:07:815     996    10f4    AU    No pending client directive
    2010-09-22    07:47:59:995     996    1ea8    Report    Uploading 4 events using cached cookie, reporting URL = http://server:8530/ReportingWebService/ReportingWebService.asmx
    2010-09-22    07:48:00:004     996    1ea8    Report    Reporter successfully uploaded 4 events.

    Ok heres the log for that specific period Lawrence. Thanks for your help.

    Only thing I noticed there really was Target Group but not sure if thats of concern or not and also near the end of the log by REPORT EVENT: {029B9B3E-6417-4C47-9F40-5FA217CD44B0}.

     

    Thank you guys.

    MCP, MCSE, MCDST, MCSA, MCT, MCITP:EA, MCITP:CST, A+, N+, CTT+, MCTS, CBP
    Wednesday, September 22, 2010 6:06 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    The client is detecting and reporting fine; it is failing to download the required update content:

    2010-09-22    07:37:52:852     996    1ea8    DnldMgr      * Updates to download = 1
    2010-09-22    07:37:52:852     996    1ea8    Agent      *   Title = Security Update for Windows 7 (KB981852)

    2010-09-22    07:37:53:035     996    1ea8    DnldMgr      * Downloading from http://server:8530/Content/D8/B48849770FD1110C15FCC48EB2EA96F58C75F0D8.exe to C:\Windows\SoftwareDistribution\Download\61c0e06a4fc871a88bb6fd5b64ac7bb8\b48849770fd1110c15fcc48eb2ea96f58c75f0d8 (full file).

    2010-09-22    07:37:53:210     996    170c    DnldMgr    WARNING: BITS job {3A31D141-4339-4C81-852B-FDE5A5D0434B} failed, updateId = {A4128386-9D6E-4E5F-802F-BA8C5352322B}.103, hr = 0x80190194, BG_ERROR_CONTEXT = 5

    2010-09-22    07:37:53:245     996    170c    DnldMgr    Error 0x80244019 occurred while downloading update; notifying dependent calls.

    This is an HTTP 404 error attempting to access the content for download from the WSUS Server.

    This error is caused by one of four typical causes:

    1. The content is physically not present on the WSUS Server. You should inspect the ~\WSUS\WSUSContent\D8 folder to see if this specific file is present. Perform the same examination for any other fail-to-download updates. If the file is not present, this would be an indication that it has been deleted from the filesystem, as the update cannot be queued for download unless the WSUS server thinks that the update content was downloaded at some time previously.
    2. The WSUS Server URL has been modified, either by renaming the server, or manually reconfiguring the port. As a result, the WSUS Server is providing Download URLs pointing to the original server name or the original port number. Since it appears that you performed a Global Search & Replace of your actual server name, I will infer that only one actual hostname occurred in this logfile, and so I do not think that this is the cause of your particular situation..
    3. The /Content v-dir of IIS is pointing to the wrong (non-existent) content folder. Verify that the /Content v-dir is correctly configured to use the existing ~\WSUS\WSUSContent folder.
    4. The ~\WSUSContent folder has been manually moved without using the wsusutil movecontent utility.

    Generally, though, these last two items will result in complete failure of all downloads to all clients. If only some updates are failing to download, the most likely cause is one of the first two, and for the reasons already identified, the first reason is the most likely cause here, and is, in fact, the most common cause of HTTP 404 errors when attempting to download content.

    The remediation for missing files in the ~\WSUSContent folder is to run the command wsusutil reset and then monitor the download queue to verify that all queued downloads have completed successfully.

    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    Principal/CTO, Onsite Technology Solutions, Houston, Texas
    Microsoft MVP - Software Distribution (2005-2010)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    My Blog: http://onsitechsolutions.spaces.live.com
    Wednesday, September 22, 2010 4:53 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Thank you so much for your in-depth explanation as well as making it easy to understand :)

     

    I have run Server CleanUps before, could that possibly account for the issues? Also I have selected it to download Service Packs before and then further deselected it. Would that also cause that?

     

    Other than running wsusutil reset is there any other option to perform checks on the content and ensure consistency with the updates that are still needed and not needed? I thought the Server Cleanup Wizard would perform that for me but seems that only complicated issues further.

     

    Thank you for all your help Lawrence, I ran the command and will run my clients updates again asap and see if its resolved it yet.

    MCP, MCSE, MCDST, MCSA, MCT, MCITP:EA, MCITP:CST, A+, N+, CTT+, MCTS, CBP
    Thursday, September 23, 2010 7:47 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    I have run Server CleanUps before, could that possibly account for the issues?
    Generally, no, but if the updates were placed in a Declined state, that would cause the files to be deleted. Subsequent reapproval could result in the update thinking the content is still present, but if it does, that would be a BUG. (The SCW should be updating the File Status value in the update definition if it deletes file content.)
    Also I have selected it to download Service Packs before and then further deselected it. Would that also cause that?
    No. All the selection does is determine if you obtain new content. Deselecting "Service Packs" simply prevents the synchronization of *new* Service Pack content; it has nothing to do with how file content is managed, nor any impact on content previously synchronized.
    Other than running wsusutil reset is there any other option to perform checks on the content and ensure consistency with the updates that are still needed and not needed?
    No. Generally the application requires no maintenance in this area at all unless something is done from 'outside' the application. (e.g. an errant network-based script or file maintenance utility designed to archive all files older that some 'x' date that runs across all available network shares could, conceivably, wreak havoc on a WSUS server)
    I thought the Server Cleanup Wizard would perform that for me but seems that only complicated issues further.

    The Server Cleanup Wizard's sole purpose is to reclassify or remove dead content; it does not perform any reconciliation or diagnostic tasks.

    Essentially it does the following:

    • Declines updates that are no longer current
    • Deletes updates that are no longer valid
    • Deletes files for declined updates
    • Deletes computers no longer reporting
    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    Principal/CTO, Onsite Technology Solutions, Houston, Texas
    Microsoft MVP - Software Distribution (2005-2010)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    My Blog: http://onsitechsolutions.spaces.live.com
    Thursday, September 23, 2010 3:48 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Good day Lawrence. I thank you for your explanation and help, its very informative.

     

    Although I have bad news to report, I have run the "wsusutil reset" and restarted my client machine and still hasnt resolved the issue. I also ran a Sync today just to ensure that its run (as I have switched off Auto Sync to try diagnose this issue first).

     

    When I try update it cannot Install it for some reason and Im not sure what else I can try to try as a remedy for this, as I want to obviously avoid setting the WSUS up again, but if its needed to get it running sweet then I will do that.

     

    Thank you for your help and will keep reading and seeing what can be done about it.

    MCP, MCSE, MCDST, MCSA, MCT, MCITP:EA, MCITP:CST, A+, N+, CTT+, MCTS, CBP
    Monday, September 27, 2010 9:47 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Okay, back to basics.

    Does the file that the client is trying to download physically exist on the WSUS server in the folder it is supposed to exist in.

    If you attempt to access the URL of the file from Internet Explorer on the WSUS server, is it successful?

    If you attempt to access the URL of the file from Internet Explorer on the client system, is it successful?

    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    Principal/CTO, Onsite Technology Solutions, Houston, Texas
    Microsoft MVP - Software Distribution (2005-2010)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    My Blog: http://onsitechsolutions.spaces.live.com
    Monday, September 27, 2010 2:01 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    From the server as well as my client, for the file that was in "http://server:8530/Content/D8/B48849770FD1110C15FCC48EB2EA96F58C75F0D8.exe" it gives an Error 404 : File or Directory Not Found.

     

    I have verified the file is there and is 14kb big.

     

    What I just tried now was interesting, I could download the cab files but not the exe files at all, would that have something to do with allowing executables and scripts from running in IIS?

     

    Thank you sir. Appreciate the help!

    MCP, MCSE, MCDST, MCSA, MCT, MCITP:EA, MCITP:CST, A+, N+, CTT+, MCTS, CBP
    • Marked as answer by Tim Katsapas Tuesday, September 28, 2010 7:33 AM
    • Unmarked as answer by Tim Katsapas Tuesday, September 28, 2010 11:48 AM
    Tuesday, September 28, 2010 7:21 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Ok what I had to do was changed the Allow Executables and Scripts from running on the site itself! I did change that at some point but cant remember what the reasoning was! Oh well it ran the update perfectly! Thank you so much for your help Lawrence I appreciate it massively!
    MCP, MCSE, MCDST, MCSA, MCT, MCITP:EA, MCITP:CST, A+, N+, CTT+, MCTS, CBP
    Tuesday, September 28, 2010 7:35 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Ok what I had to do was changed the Allow Executables and Scripts from running on the site itself! I did change that at some point but cant remember what the reasoning was! Oh well it ran the update perfectly! Thank you so much for your help Lawrence I appreciate it massively!
    MCP, MCSE, MCDST, MCSA, MCT, MCITP:EA, MCITP:CST, A+, N+, CTT+, MCTS, CBP
    • Marked as answer by Tim Katsapas Tuesday, September 28, 2010 7:35 AM
    • Unmarked as answer by Tim Katsapas Tuesday, September 28, 2010 11:49 AM
    Tuesday, September 28, 2010 7:35 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Haha so I ran updated from all my clients, worked like a bomb afterwhich I couldnt access the Wsus console anymore! So I had to enable Scripting and Executables again to get the console working! Why on earth is it doing that? Im missing something very stupid here!!
    MCP, MCSE, MCDST, MCSA, MCT, MCITP:EA, MCITP:CST, A+, N+, CTT+, MCTS, CBP
    Tuesday, September 28, 2010 11:50 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    The Default Web Site and all webservice application v-dirs should be set to Execution permissions: Scripts only.

    The Content virtual directory should be set to Execute permissions: None.

    These settings are documented in Appendix C of the WSUS Operations Guide.

     

    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    Principal/CTO, Onsite Technology Solutions, Houston, Texas
    Microsoft MVP - Software Distribution (2005-2010)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    My Blog: http://onsitechsolutions.spaces.live.com
    • Marked as answer by Tim Katsapas Wednesday, September 29, 2010 7:45 AM
    Tuesday, September 28, 2010 4:49 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Thank you kindly for all your help Lawrence! You are an absolute WSUS legend! Its running sweet as anything now!
    MCP, MCSE, MCDST, MCSA, MCT, MCITP:EA, MCITP:CST, A+, N+, CTT+, MCTS, CBP
    Wednesday, September 29, 2010 7:46 AM