asked on

WSUS Uncontactable from remote PC

Hello Experts

I am having difficulties with some remote PC's contacting WSUS. I will give you a bit of background;

We have a WSUS server behind a firewall and we are using a proxy server. All the PC's this side of the firewall that are on the domain can talk to WSUS and are receiving updates. We have PC's on the domain on remote sites the other side of the firewall which work ok also......BUT we have PCs on the same network as the other remote sites that are NOT on the domain - These are not receiving updates. They are showing up in the WSUS console but are showing as 'Not Yet Reported' It details what Operating System and SP level the PC's are on, it even picks up what Hardware the PC is including the Bios version.

Notes:

The PC is not on the domain
The PC does have our DNS servers listed in TCPIP Propeties
I have tried stopping and starting the wuauserv service
I have deleted the following reg keys

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v AccountDomainSid /f
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v PingID /f
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v SusClientId /f

and then resetting authorization and dection with the following command - wuauclt /resetauthorization /detectnow

Please see log post below from one of the offending PC's

-------------------------------------------------------------------------------------------------------------------------------------------------------

2008-10-09      08:22:13:156      1072      19c      AU      ## START ## AU: Search for updates
2008-10-09      08:22:13:156      1072      19c      AU      #########
2008-10-09      08:22:13:156      1072      19c      AU      <<## SUBMITTED ## AU: Search for updates [CallId = {FBEEA6A1-C8D9-4921-B01A-6DAC8EEB19D9}]
2008-10-09      08:22:13:156      1072      6a8      Agent      *************
2008-10-09      08:22:13:156      1072      6a8      Agent      ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
2008-10-09      08:22:13:156      1072      6a8      Agent      *********
2008-10-09      08:22:13:156      1072      6a8      Agent        * Online = Yes; Ignore download priority = No
2008-10-09      08:22:13:156      1072      6a8      Agent        * Criteria = "IsHidden=0 and IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and IsAssigned=1 or IsHidden=0 and IsInstalled=1 and DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and IsAssigned=1 and RebootRequired=1"
2008-10-09      08:22:13:156      1072      6a8      Agent        * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}
2008-10-09      08:22:13:156      1072      6a8      Agent        * Search Scope = {Machine}
2008-10-09      08:22:13:156      1072      6a8      Misc      Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab:
2008-10-09      08:22:13:171      1072      6a8      Misc       Microsoft signed: Yes
2008-10-09      08:22:15:421      1072      6a8      Misc      Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab:
2008-10-09      08:22:15:437      1072      6a8      Misc       Microsoft signed: Yes
2008-10-09      08:22:15:468      1072      6a8      Misc      Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wsus3setup.cab:
2008-10-09      08:22:15:484      1072      6a8      Misc       Microsoft signed: Yes
2008-10-09      08:22:15:484      1072      6a8      Setup      *********** Setup: Checking whether self-update is required ***********
2008-10-09      08:22:15:484      1072      6a8      Setup        * Inf file: C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wsus3setup.inf
2008-10-09      08:22:15:500      1072      6a8      Setup      Update NOT required for C:\WINDOWS\system32\cdm.dll: target version = 7.2.6001.784, required version = 7.1.6001.65
2008-10-09      08:22:15:500      1072      6a8      Setup      Update NOT required for C:\WINDOWS\system32\wuapi.dll: target version = 7.2.6001.784, required version = 7.1.6001.65
2008-10-09      08:22:15:500      1072      6a8      Setup      Update NOT required for C:\WINDOWS\system32\wuapi.dll.mui: target version = 7.2.6001.784, required version = 7.1.6001.65
2008-10-09      08:22:15:500      1072      6a8      Setup      Update NOT required for C:\WINDOWS\system32\wuauclt.exe: target version = 7.2.6001.784, required version = 7.1.6001.65
2008-10-09      08:22:15:500      1072      6a8      Setup      Update NOT required for C:\WINDOWS\system32\wuaucpl.cpl: target version = 7.2.6001.784, required version = 7.1.6001.65
2008-10-09      08:22:15:500      1072      6a8      Setup      Update NOT required for C:\WINDOWS\system32\wuaucpl.cpl.mui: target version = 7.2.6001.784, required version = 7.1.6001.65
2008-10-09      08:22:15:500      1072      6a8      Setup      Update NOT required for C:\WINDOWS\system32\wuaueng.dll: target version = 7.2.6001.784, required version = 7.1.6001.65
2008-10-09      08:22:15:500      1072      6a8      Setup      Update NOT required for C:\WINDOWS\system32\wuaueng.dll.mui: target version = 7.2.6001.784, required version = 7.1.6001.65
2008-10-09      08:22:15:500      1072      6a8      Setup      Update NOT required for C:\WINDOWS\system32\wucltui.dll: target version = 7.2.6001.784, required version = 7.1.6001.65
2008-10-09      08:22:15:500      1072      6a8      Setup      Update NOT required for C:\WINDOWS\system32\wucltui.dll.mui: target version = 7.2.6001.784, required version = 7.1.6001.65
2008-10-09      08:22:15:500      1072      6a8      Setup      Update NOT required for C:\WINDOWS\system32\wups.dll: target version = 7.2.6001.784, required version = 7.1.6001.65
2008-10-09      08:22:15:500      1072      6a8      Setup      Update NOT required for C:\WINDOWS\system32\wups2.dll: target version = 7.2.6001.784, required version = 7.1.6001.65
2008-10-09      08:22:15:500      1072      6a8      Setup      Update NOT required for C:\WINDOWS\system32\wuweb.dll: target version = 7.1.6001.65, required version = 7.1.6001.65
2008-10-09      08:22:15:500      1072      6a8      Setup        * IsUpdateRequired = No
2008-10-09      08:22:16:812      1072      6a8      PT      +++++++++++ PT: Synchronizing server updates +++++++++++
2008-10-09      08:22:16:812      1072      6a8      PT        + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://server.fqdn.com/ClientWebService/client.asmx
2008-10-09      08:22:18:453      1072      6a8      PT      WARNING: SyncUpdates failure, error = 0x8024400E, soap client error = 7, soap error code = 400, HTTP status code = 200
2008-10-09      08:22:18:453      1072      6a8      PT      WARNING: SOAP Fault: 0x000190
2008-10-09      08:22:18:453      1072      6a8      PT      WARNING: faultstring:Fault occurred
2008-10-09      08:22:18:453      1072      6a8      PT      WARNING: ErrorCode:InternalServerError(5)
2008-10-09      08:22:18:453      1072      6a8      PT      WARNING: Message:(null)
2008-10-09      08:22:18:453      1072      6a8      PT      WARNING: Method:"http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService/SyncUpdates"
2008-10-09      08:22:18:453      1072      6a8      PT      WARNING: ID:aa21ae7b-ed23-4c3e-9b05-2dc32c86b7a4
2008-10-09      08:22:18:453      1072      6a8      PT      WARNING: PTError: 0x8024400e
2008-10-09      08:22:18:453      1072      6a8      PT      WARNING: SyncUpdates_WithRecovery failed.: 0x8024400e
2008-10-09      08:22:18:453      1072      6a8      PT      WARNING: Sync of Updates: 0x8024400e
2008-10-09      08:22:18:453      1072      6a8      PT      WARNING: SyncServerUpdatesInternal failed: 0x8024400e
2008-10-09      08:22:18:453      1072      6a8      Agent        * WARNING: Failed to synchronize, error = 0x8024400E
2008-10-09      08:22:18:453      1072      6a8      Agent        * WARNING: Exit code = 0x8024400E
2008-10-09      08:22:18:453      1072      6a8      Agent      *********
2008-10-09      08:22:18:453      1072      6a8      Agent      ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
2008-10-09      08:22:18:453      1072      6a8      Agent      *************
2008-10-09      08:22:18:453      1072      6a8      Agent      WARNING: WU client failed Searching for update with error 0x8024400e
2008-10-09      08:22:18:468      1072      14e8      AU      >>## RESUMED ## AU: Search for updates [CallId = {FBEEA6A1-C8D9-4921-B01A-6DAC8EEB19D9}]
2008-10-09      08:22:18:468      1072      14e8      AU        # WARNING: Search callback failed, result = 0x8024400E
2008-10-09      08:22:18:468      1072      14e8      AU        # WARNING: Failed to find updates with error code 8024400E
2008-10-09      08:22:18:468      1072      14e8      AU      #########
2008-10-09      08:22:18:468      1072      14e8      AU      ## END ## AU: Search for updates [CallId = {FBEEA6A1-C8D9-4921-B01A-6DAC8EEB19D9}]
2008-10-09      08:22:18:468      1072      14e8      AU      #############
2008-10-09      08:22:18:468      1072      14e8      AU      AU setting next detection timeout to 2008-10-09 08:19:17
2008-10-09      08:22:18:468      1072      14e8      AU      Setting AU scheduled install time to 2008-10-09 15:00:00
2008-10-09      08:22:23:453      1072      6a8      Report      REPORT EVENT: {EA85F4EE-0B6A-4891-8CA2-E9EF3BA91581}      2008-10-09 08:22:18:453+0100      1      148      101      {00000000-0000-0000-0000-000000000000}      0      8024400e      AutomaticUpdates      Failure      Software Synchronization      Windows Update Client failed to detect with error 0x8024400e.
2008-10-09      08:30:50:421      1072      6a8      Report      Uploading 1 events using cached cookie, reporting URL = http://server.fqdn.com/ReportingWebService/ReportingWebService.asmx
2008-10-09      08:30:50:437      1072      6a8      Report      Reporter successfully uploaded 1 events.
2008-10-09      09:19:13:500      1072      19c      AU      AU was unable to detect updates for more than 48 hours
2008-10-09      09:19:17:468      1072      19c      AU      #############
2008-10-09      09:19:17:468      1072      19c      AU      ## START ## AU: Search for updates
2008-10-09      09:19:17:468      1072      19c      AU      #########
2008-10-09      09:19:17:468      1072      19c      AU      <<## SUBMITTED ## AU: Search for updates [CallId = {9787BDA6-54D4-46AC-8487-3B5898DFE392}]
2008-10-09      09:19:17:468      1072      1448      Agent      *************
2008-10-09      09:19:17:468      1072      1448      Agent      ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
2008-10-09      09:19:17:468      1072      1448      Agent      *********
2008-10-09      09:19:17:468      1072      1448      Agent        * Online = Yes; Ignore download priority = No
2008-10-09      09:19:17:468      1072      1448      Agent        * Criteria = "IsHidden=0 and IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and IsAssigned=1 or IsHidden=0 and IsInstalled=1 and DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and IsAssigned=1 and RebootRequired=1"
2008-10-09      09:19:17:468      1072      1448      Agent        * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}
2008-10-09      09:19:17:468      1072      1448      Agent        * Search Scope = {Machine}
2008-10-09      09:19:17:468      1072      1448      Misc      Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab:
2008-10-09      09:19:17:484      1072      1448      Misc       Microsoft signed: Yes
2008-10-09      09:19:17:484      1072      1448      Misc      Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab:
2008-10-09      09:19:17:500      1072      1448      Misc       Microsoft signed: Yes
2008-10-09      09:19:17:546      1072      1448      Misc      Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wsus3setup.cab:
2008-10-09      09:19:17:546      1072      1448      Misc       Microsoft signed: Yes
2008-10-09      09:19:17:562      1072      1448      Setup      *********** Setup: Checking whether self-update is required ***********
2008-10-09      09:19:17:562      1072      1448      Setup        * Inf file: C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wsus3setup.inf
2008-10-09      09:19:17:562      1072      1448      Setup      Update NOT required for C:\WINDOWS\system32\cdm.dll: target version = 7.2.6001.784, required version = 7.1.6001.65
2008-10-09      09:19:17:562      1072      1448      Setup      Update NOT required for C:\WINDOWS\system32\wuapi.dll: target version = 7.2.6001.784, required version = 7.1.6001.65
2008-10-09      09:19:17:562      1072      1448      Setup      Update NOT required for C:\WINDOWS\system32\wuapi.dll.mui: target version = 7.2.6001.784, required version = 7.1.6001.65
2008-10-09      09:19:17:562      1072      1448      Setup      Update NOT required for C:\WINDOWS\system32\wuauclt.exe: target version = 7.2.6001.784, required version = 7.1.6001.65
2008-10-09      09:19:17:562      1072      1448      Setup      Update NOT required for C:\WINDOWS\system32\wuaucpl.cpl: target version = 7.2.6001.784, required version = 7.1.6001.65
2008-10-09      09:19:17:562      1072      1448      Setup      Update NOT required for C:\WINDOWS\system32\wuaucpl.cpl.mui: target version = 7.2.6001.784, required version = 7.1.6001.65
2008-10-09      09:19:17:562      1072      1448      Setup      Update NOT required for C:\WINDOWS\system32\wuaueng.dll: target version = 7.2.6001.784, required version = 7.1.6001.65
2008-10-09      09:19:17:562      1072      1448      Setup      Update NOT required for C:\WINDOWS\system32\wuaueng.dll.mui: target version = 7.2.6001.784, required version = 7.1.6001.65
2008-10-09      09:19:17:562      1072      1448      Setup      Update NOT required for C:\WINDOWS\system32\wucltui.dll: target version = 7.2.6001.784, required version = 7.1.6001.65
2008-10-09      09:19:17:562      1072      1448      Setup      Update NOT required for C:\WINDOWS\system32\wucltui.dll.mui: target version = 7.2.6001.784, required version = 7.1.6001.65
2008-10-09      09:19:17:562      1072      1448      Setup      Update NOT required for C:\WINDOWS\system32\wups.dll: target version = 7.2.6001.784, required version = 7.1.6001.65
2008-10-09      09:19:17:562      1072      1448      Setup      Update NOT required for C:\WINDOWS\system32\wups2.dll: target version = 7.2.6001.784, required version = 7.1.6001.65
2008-10-09      09:19:17:562      1072      1448      Setup      Update NOT required for C:\WINDOWS\system32\wuweb.dll: target version = 7.1.6001.65, required version = 7.1.6001.65
2008-10-09      09:19:17:562      1072      1448      Setup        * IsUpdateRequired = No
2008-10-09      09:19:18:890      1072      1448      PT      +++++++++++ PT: Synchronizing server updates +++++++++++
2008-10-09      09:19:18:890      1072      1448      PT        + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://server.fqdn.com/ClientWebService/client.asmx
2008-10-09      09:19:19:093      1072      1448      PT      WARNING: Cached cookie has expired or new PID is available
2008-10-09      09:19:19:093      1072      1448      PT      Initializing simple targeting cookie, clientId = 3871ac52-48cd-44a4-8e83-27643397b131, target group = Schools, DNS name = sx3103569
2008-10-09      09:19:19:093      1072      1448      PT        Server URL = http://server.fqdn.com/SimpleAuthWebService/SimpleAuth.asmx
2008-10-09      09:19:20:625      1072      1448      PT      WARNING: SyncUpdates failure, error = 0x8024400E, soap client error = 7, soap error code = 400, HTTP status code = 200
2008-10-09      09:19:20:625      1072      1448      PT      WARNING: SOAP Fault: 0x000190
2008-10-09      09:19:20:625      1072      1448      PT      WARNING: faultstring:Fault occurred
2008-10-09      09:19:20:625      1072      1448      PT      WARNING: ErrorCode:InternalServerError(5)
2008-10-09      09:19:20:625      1072      1448      PT      WARNING: Message:(null)
2008-10-09      09:19:20:625      1072      1448      PT      WARNING: Method:"http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService/SyncUpdates"
2008-10-09      09:19:20:625      1072      1448      PT      WARNING: ID:64eb820f-4332-4476-9d37-6437c0eb3d23
2008-10-09      09:19:20:625      1072      1448      PT      WARNING: PTError: 0x8024400e
2008-10-09      09:19:20:625      1072      1448      PT      WARNING: SyncUpdates_WithRecovery failed.: 0x8024400e
2008-10-09      09:19:20:625      1072      1448      PT      WARNING: Sync of Updates: 0x8024400e
2008-10-09      09:19:20:625      1072      1448      PT      WARNING: SyncServerUpdatesInternal failed: 0x8024400e
2008-10-09      09:19:20:625      1072      1448      Agent        * WARNING: Failed to synchronize, error = 0x8024400E
2008-10-09      09:19:20:640      1072      1448      Agent        * WARNING: Exit code = 0x8024400E
2008-10-09      09:19:20:640      1072      1448      Agent      *********
2008-10-09      09:19:20:640      1072      1448      Agent      ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
2008-10-09      09:19:20:640      1072      1448      Agent      *************
2008-10-09      09:19:20:640      1072      1448      Agent      WARNING: WU client failed Searching for update with error 0x8024400e
2008-10-09      09:19:20:640      1072      1448      Report      REPORT EVENT: {7CA45D1D-C86B-482B-941B-2DE3D7776DF8}      2008-10-09 09:19:13:500+0100      1      149      102      {00000000-0000-0000-0000-000000000000}      0      0      AutomaticUpdates      Failure      Software Synchronization      Unable to Connect: Windows is unable to connect to the automatic updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection.
2008-10-09      09:19:20:640      1072      a60      AU      >>## RESUMED ## AU: Search for updates [CallId = {9787BDA6-54D4-46AC-8487-3B5898DFE392}]
2008-10-09      09:19:20:640      1072      a60      AU        # WARNING: Search callback failed, result = 0x8024400E
2008-10-09      09:19:20:640      1072      a60      AU        # WARNING: Failed to find updates with error code 8024400E
2008-10-09      09:19:20:640      1072      a60      AU      #########
2008-10-09      09:19:20:640      1072      a60      AU      ## END ## AU: Search for updates [CallId = {9787BDA6-54D4-46AC-8487-3B5898DFE392}]
2008-10-09      09:19:20:640      1072      a60      AU      #############
2008-10-09      09:19:20:640      1072      a60      AU      AU setting next detection timeout to 2008-10-09 09:12:43
2008-10-09      09:19:20:640      1072      a60      AU      Setting AU scheduled install time to 2008-10-09 15:00:00
2008-10-09      09:19:25:640      1072      1448      Report      REPORT EVENT: {B6C26BEF-0B59-4450-8A15-EF4F6B1BF3A8}      2008-10-09 09:19:20:640+0100      1      148      101      {00000000-0000-0000-0000-000000000000}      0      8024400e      AutomaticUpdates      Failure      Software Synchronization      Windows Update Client failed to detect with error 0x8024400e.
2008-10-09      09:27:52:546      1072      1448      PT      WARNING: Cached cookie has expired or new PID is available
2008-10-09      09:27:52:546      1072      1448      PT      Initializing simple targeting cookie, clientId = 3871ac52-48cd-44a4-8e83-27643397b131, target group = Schools, DNS name = sx3103569
2008-10-09      09:27:52:546      1072      1448      PT        Server URL = http://server.fqdn.com/SimpleAuthWebService/SimpleAuth.asmx
2008-10-09      09:27:54:843      1072      1448      Report      Uploading 1 events using cached cookie, reporting URL = http://server.fqdn.com/ReportingWebService/ReportingWebService.asmx
2008-10-09      09:27:54:859      1072      1448      Report      Reporter successfully uploaded 1 events.

bertgeysels

Did you edit the log file to hide your WSUS server address? Because it shows as
http://server.fqdn.com/ClientWebService/client.asmx

You did change the local computer policy with gpedit.msc to set the intranet wsus location? Because the PC is not in the domain, so it won't get the group policy of the domain.

mitre-technical

ASKER

Hello bertgeysels

Thanks for your post.

Yes i replaced the servername.fqdn in the log. Prob should have mentioned in my post. I had not changed the local policy, i imported the reg keys directly to reflect machines that worked. see below.

do you think i still need to amend the local policy?

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"WUServer"="http://servername.fqdn.com"
"WUStatusServer"="http://servername.fqdn.com"
"TargetGroupEnabled"=dword:00000001
"TargetGroup"="Schools"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoUpdate"=dword:00000000
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"AutoInstallMinorUpdates"=dword:00000001
"RescheduleWaitTimeEnabled"=dword:00000001
"RescheduleWaitTime"=dword:00000005
"UseWUServer"=dword:00000001
"DetectionFrequencyEnabled"=dword:00000001
"DetectionFrequency"=dword:00000001
"AUPowerManagement"=dword:00000001
"AUOptions"=dword:00000004
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:00000010
"RebootRelaunchTimeoutEnabled"=dword:00000001
"RebootRelaunchTimeout"=dword:000003e7

ASKER CERTIFIED SOLUTION

bertgeysels

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

mitre-technical

ASKER

Thanks bertgeysels - I will check this out and get back to you tomorrow hopefully.

mitre-technical

ASKER

Would you belive it - It worked - Thanks very much

mitre-technical

ASKER

Thanks very much for your help