Solved

Windows Server Update Services - unable to open console or browse to servers IIS

Posted on 2008-10-09
36
1,059 Views
Last Modified: 2008-10-17
Hi guys (first post so please be gentle!)

I have inherited a few servers and one has WSUS installed but all of a sudden it has stopped working correctly. I came to this conclusion when I opened the console and I received the following error:

The WSUS administration console was unable to connect to the WSUS Server via the remote API.

Verify that the Update Services service, IIS and SQL are running on the server. If the problem persists, try restarting IIS, SQL, and the Update Services Service.

ETC...

Now to compound this and I am sure it is related, when I try to browse through IE to the server on a client (http://server:8530) I get:

Directory Listing Denied
This Virtual Directory does not allow contents to be listed.

I have had a look around and I think this might be something to do with me installing framework 1.1 earlier in the month as the timings add up but I have since uninstalled the 1.1 and just put (Server 2003 64bit) Framework 64 bit on there and still no joy: http://www.microsoft.com/DOWNLOADS/details.aspx?familyid=B44A0000-ACF8-4FA1-AFFB-40E78D788B00&displaylang=en

It is also worth pointing out that it is our domain controller so reboots are not really on the menu unfortunatley!

The Update, www RPC services are all running and have been restarted around 4.9 million times in the hope that it might just spark things into life but to no avail.

I would appreciate some information on this if anyone has it.

Thanks in advance
Steve
0
Comment
Question by:Stevemarsh00
  • 18
  • 16
  • 2
36 Comments
 
LVL 5

Expert Comment

by:micalkin
Comment Utility
Using a Web Browser to go to http://server:8530 for wsus won't work.  There is no browser interface for wsus even though it uses iis to do it's work.
Make certain in your mmc that you are connecting to your wsus server with the correct port.
0
 

Author Comment

by:Stevemarsh00
Comment Utility
How do I ensure I am using the correct port with the console? As soon as I open the console I receive a connection error.

I am sure I have seen the console page through a browser but maybe I was wrong??
0
 

Author Comment

by:Stevemarsh00
Comment Utility
Sorry, I have just tried to connect using the port 8530 and I get:

cannot connect to SERVERNAME. The server may be using another port or different secure sockets layer setting.

0
 
LVL 5

Expert Comment

by:micalkin
Comment Utility
go to IIS admin on the server.  Then look at the website properties for WSUS Administration.  The website tab will tell you the port numbers.
Also on the server should be a preconfigured icon in the administration tools.  My icon is called "Microsoft Windows Server Update Services 3.0 SP1".  This mmc should have been configured correctly for use when WSUS was installed.
0
 

Author Comment

by:Stevemarsh00
Comment Utility
Also on the server should be a preconfigured icon in the administration tools.  My icon is called "Microsoft Windows Server Update Services 3.0 SP1".  This mmc should have been configured correctly for use when WSUS was installed.
Yes I have this but that is the problem, When I open it I get the error.
go to IIS admin on the server.  Then look at the website properties for WSUS Administration.  The website tab will tell you the port numbers.
I have done this and saw 2 sites. One called Default web site that has a virtual directory called Root that points to C:\Program Files\Update Services\WebServices\Root and another site called WSUS Administration which points to C:\Program Files\Update Services\WebServices\Root\. I noticed when I select the properties of the defualt site I see it using port 8080 and the WSUS Administration one is using 8530. The WSUS Administration site also has a few other virtual directories within it (ApoRemoting30, Client WebService, DssAuthWebService, ReportingWebService, ServerSyncWbService and SimpleAuthWebService)
What one is which as this must have something to do with the overall problem.
Also, how can I test whether my PC is talking to the WSUS?
0
 
LVL 5

Expert Comment

by:micalkin
Comment Utility
If you have upgraded from Windows 2000 Server to Windows Server 2003, and then install WSUS 3.0, you may have problems starting the WSUS Administration snap-in
If you have upgraded your server from Windows 2000 Server to Windows Server 2003, and you then install WSUS 3.0, you may encounter difficulties starting the WSUS Administration snap-in. This is because WSUS is running in IIS 5.0 isolation mode. To address this issue, change to worker process isolation mode using the following steps:

In IIS Manager, expand the local computer node, right-click Web Sites, and then click Properties.


Click the Service tab, clear the Run WWW service in IIS 5.0 isolation mode check box, and then click OK.
 
Also Make certain you are running the MMC with a user that is part of the local computer group on the server WSUS Administrators
0
 

Author Comment

by:Stevemarsh00
Comment Utility
The upgrade scenerio did not happen.I think it has something to do with different .NET versions I have installed. What do I need and how can I check effectively what I have and what is need excluding looking in add/remove programs.
Currently (ironically, using add/remove programs):
Microsoft .NET Framework 1.1 (just installed this but to no avail)
Microsoft .NET Framework 2.0 (x64) (Have reinstalled since this drama but again, to no avail)
 
I have also noticed that the asp.NET tab in the website is no longer there - maybe that is coinsidental?
 
 
0
 
LVL 5

Expert Comment

by:micalkin
Comment Utility
You might need to re-register .NET
somewhere in the %WindowsDir%\Microsoft.NET\Framework directory structure is aspnet_regiis.exe
aspnet_regiis.exe -i
0
 

Author Comment

by:Stevemarsh00
Comment Utility
Tried that but didn't help either the asp.net tab or the WSUS console.
I tried both:

aspnet_regiis.exe -i and
aspnet_regiis.exe -i -enable
0
 

Expert Comment

by:FolknerComputing
Comment Utility
I had a similar problem with the MMC suddenly stopped working. Un-install and reinstall were of no help.
What I eventually figured out was that I had restricted the IIS to only one NIC on my multi-homed server, after having installed WSUS initially.  So while both DNS and WINS would correctly the server by name to eiter IP address the MMC only worked if I added the server by its IP address as restricted in IIS. I also had to use the IP address in the group policy configuration  or only a few computers appeared as having contacted the WSUS server.

Hope this helps
0
 

Author Comment

by:Stevemarsh00
Comment Utility
How can I check if the computers are talking to it all as I can view the console!!

What is the best way to find this out?
0
 
LVL 5

Expert Comment

by:micalkin
Comment Utility
Look at the client log file in c:\windows\windowsupdate.log
Look for the startup line similiar to:
 2008-10-15 07:35:47:968 1160 190 Service ** START **  Service: Service startup
Everything after that should tell you the settings and whatnot that the client knows about.
0
 

Author Comment

by:Stevemarsh00
Comment Utility
This is what my log file on the client looks like:

2008-10-15      15:21:08:856       600      c178      PT      WARNING: PopulateAuthCookies failed: 0x80244019
2008-10-15      15:21:08:856       600      c178      PT      WARNING: RefreshCookie failed: 0x80244019
2008-10-15      15:21:08:856       600      c178      PT      WARNING: RefreshPTState failed: 0x80244019
2008-10-15      15:21:08:856       600      c178      PT      WARNING: PTError: 0x80244019
2008-10-15      15:21:08:856       600      c178      Report      WARNING: Reporter failed to upload events with hr = 8024401
0
 
LVL 5

Expert Comment

by:micalkin
Comment Utility
take a look at this thread which had the same problem that you are currently having.
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_22864445.html
0
 
LVL 5

Expert Comment

by:micalkin
Comment Utility
Also just to make certain your WSUS is working correctly you can actually go to http://server:8530/iuident.cab which is listed in the thread i linked above in the question section.
0
 

Author Comment

by:Stevemarsh00
Comment Utility
Right, if I go to :http://servername/8530 I get:

Directory Listing Denied
This Virtual Directory does not allow contents to be listed.

If I go to http://server:8530/iuident.cab I get prompted to download the cab file?
0
 

Expert Comment

by:FolknerComputing
Comment Utility
Were you able to add the WSUS server to the MMC using it's IP address?
0
 
LVL 5

Expert Comment

by:micalkin
Comment Utility
Right you should get the prompt to download a file.  Means the website should be working fine.  Try the ideas in the other thread I linked and see if you can get something working with that.  Looks like from your log that it is a possible client problem.
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 

Author Comment

by:Stevemarsh00
Comment Utility
FolknerComputing: - no luck with the IP

micalkin - Doesn't it seem unluckly that there is a problem with the client when on the server we can't load the console? It has to be something wrong at the server end I think but I am willing to explorer the client issues if need be.

0
 

Author Comment

by:Stevemarsh00
Comment Utility
And the thread you posted referes to that link with the headline of: WSUS: Script to delete duplicate SID created by Disk Imaging / Disk Cloning. I'm not sure that is what I need???
0
 
LVL 5

Expert Comment

by:micalkin
Comment Utility
The accepted solution there was to run a batch file http://msmvps.com/blogs/athif/pages/66376.aspx that seemed to fix the client issues.
And I had thought earlier you had said you could connect to the server now.
0
 
LVL 5

Expert Comment

by:micalkin
Comment Utility
take a look at this web page for your MMC connection problem.
http://technet.microsoft.com/en-us/library/cc708630.aspx
0
 

Author Comment

by:Stevemarsh00
Comment Utility
But if you read the first line of the paragrapg it says:
You might notice that some computers are appearing multiple times in WSUSAdmin -

I can't get into the console...that is the problem!
0
 
LVL 5

Expert Comment

by:micalkin
Comment Utility
according to http://technet.microsoft.com/en-us/library/cc720442.aspx the error in your log means http 404 - ther server cannot find the requested URI (Uniform Resource Identifer)
 
http://technet.microsoft.com/en-us/library/cc708504.aspx - Look at appendix C and D for default settings in IIS for WSUS.  Seems like something could be broken in IIS.  You might want to look at your IIS logs for http 404 errors and find out what is wrong there.
0
 

Author Comment

by:Stevemarsh00
Comment Utility
micalkin - I have read C and D and I couldnt see anything that stuck out.

I am pulling my hair out over this!!

What basic tests can I perform to enusre that the WSUS is working on the server and that the clients can see it?
0
 
LVL 5

Expert Comment

by:micalkin
Comment Utility
http://technet.microsoft.com/en-us/wsus/bb466192.aspx
go to that website and download the client diags and server diags and run them.  I'm not certain how to interpret the server diags but it may just point you to a problem.
0
 

Author Comment

by:Stevemarsh00
Comment Utility
micalkin - the client tool suggested that things are working from the client end:

WUServer = http://servername:8530
WUStatuServer = http://servername:8530
UseWuServer  is enbled . . . . . . PASS
Connecttion to server . . . . . . . . PASS

So that makes it even more frustrating as I was going to try re-installing it but it seems silly if the clients are working.

I just need the console to work so I can manage what gets what!

What services should be running?
0
 
LVL 5

Expert Comment

by:micalkin
Comment Utility
did the server diags give any indication of a problem?
0
 

Author Comment

by:Stevemarsh00
Comment Utility
The serve one was the first one I tried but rather annoyingly I received:

The application generated an exception that coud not be handled.

0
 
LVL 5

Expert Comment

by:micalkin
Comment Utility
Did you make certain to run the server diags on the actual server? If you try to run it from a client it will crash.
0
 

Author Comment

by:Stevemarsh00
Comment Utility
Definately executed on the server :(
0
 
LVL 5

Expert Comment

by:micalkin
Comment Utility
Other than uninstalling and reinstalling WSUS i'm out of ideas for you to try.
0
 

Author Comment

by:Stevemarsh00
Comment Utility
When I run the installation will I be asked to reboot? (I can't as it is the DC) and if I uninstall what will happen to all the clients that have checked in with it in the past? Will the get out of sync?
0
 
LVL 5

Accepted Solution

by:
micalkin earned 500 total points
Comment Utility
WSUS will have to learn about all your computers again and their patch status.  You will probably have to redo all your approvals.  I think there is a way to save your current settings but at this point I wouldn't trust them.
As far as I reboot, I don't remember my server needing to reboot.
0
 

Author Comment

by:Stevemarsh00
Comment Utility
Thank you loads for your help
0
 

Author Comment

by:Stevemarsh00
Comment Utility
I have ran the wsusutil.exe checkhealth command and it alarted me that the following services are screwed:



The DSS Authentication Web Service is not working.

The SimpleAuth Web Service is not working.

The Client Web Service is not working.

The Server Synchronization Web Service is not working.

The API Remoting Web Service is not working.

The Reporting Web Service is not working.

Does that shed any light on this riddle?
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
Learn about cloud computing and its benefits for small business owners.
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now