Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Windows Server Update Services - unable to open console or browse to servers IIS

Posted on 2008-10-09
36
Medium Priority
?
1,107 Views
Last Modified: 2008-10-17
Hi guys (first post so please be gentle!)

I have inherited a few servers and one has WSUS installed but all of a sudden it has stopped working correctly. I came to this conclusion when I opened the console and I received the following error:

The WSUS administration console was unable to connect to the WSUS Server via the remote API.

Verify that the Update Services service, IIS and SQL are running on the server. If the problem persists, try restarting IIS, SQL, and the Update Services Service.

ETC...

Now to compound this and I am sure it is related, when I try to browse through IE to the server on a client (http://server:8530) I get:

Directory Listing Denied
This Virtual Directory does not allow contents to be listed.

I have had a look around and I think this might be something to do with me installing framework 1.1 earlier in the month as the timings add up but I have since uninstalled the 1.1 and just put (Server 2003 64bit) Framework 64 bit on there and still no joy: http://www.microsoft.com/DOWNLOADS/details.aspx?familyid=B44A0000-ACF8-4FA1-AFFB-40E78D788B00&displaylang=en

It is also worth pointing out that it is our domain controller so reboots are not really on the menu unfortunatley!

The Update, www RPC services are all running and have been restarted around 4.9 million times in the hope that it might just spark things into life but to no avail.

I would appreciate some information on this if anyone has it.

Thanks in advance
Steve
0
Comment
Question by:Stevemarsh00
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 18
  • 16
  • 2
36 Comments
 
LVL 5

Expert Comment

by:micalkin
ID: 22679956
Using a Web Browser to go to http://server:8530 for wsus won't work.  There is no browser interface for wsus even though it uses iis to do it's work.
Make certain in your mmc that you are connecting to your wsus server with the correct port.
0
 

Author Comment

by:Stevemarsh00
ID: 22680100
How do I ensure I am using the correct port with the console? As soon as I open the console I receive a connection error.

I am sure I have seen the console page through a browser but maybe I was wrong??
0
 

Author Comment

by:Stevemarsh00
ID: 22680131
Sorry, I have just tried to connect using the port 8530 and I get:

cannot connect to SERVERNAME. The server may be using another port or different secure sockets layer setting.

0
Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

 
LVL 5

Expert Comment

by:micalkin
ID: 22681628
go to IIS admin on the server.  Then look at the website properties for WSUS Administration.  The website tab will tell you the port numbers.
Also on the server should be a preconfigured icon in the administration tools.  My icon is called "Microsoft Windows Server Update Services 3.0 SP1".  This mmc should have been configured correctly for use when WSUS was installed.
0
 

Author Comment

by:Stevemarsh00
ID: 22685430
Also on the server should be a preconfigured icon in the administration tools.  My icon is called "Microsoft Windows Server Update Services 3.0 SP1".  This mmc should have been configured correctly for use when WSUS was installed.
Yes I have this but that is the problem, When I open it I get the error.
go to IIS admin on the server.  Then look at the website properties for WSUS Administration.  The website tab will tell you the port numbers.
I have done this and saw 2 sites. One called Default web site that has a virtual directory called Root that points to C:\Program Files\Update Services\WebServices\Root and another site called WSUS Administration which points to C:\Program Files\Update Services\WebServices\Root\. I noticed when I select the properties of the defualt site I see it using port 8080 and the WSUS Administration one is using 8530. The WSUS Administration site also has a few other virtual directories within it (ApoRemoting30, Client WebService, DssAuthWebService, ReportingWebService, ServerSyncWbService and SimpleAuthWebService)
What one is which as this must have something to do with the overall problem.
Also, how can I test whether my PC is talking to the WSUS?
0
 
LVL 5

Expert Comment

by:micalkin
ID: 22686701
If you have upgraded from Windows 2000 Server to Windows Server 2003, and then install WSUS 3.0, you may have problems starting the WSUS Administration snap-in
If you have upgraded your server from Windows 2000 Server to Windows Server 2003, and you then install WSUS 3.0, you may encounter difficulties starting the WSUS Administration snap-in. This is because WSUS is running in IIS 5.0 isolation mode. To address this issue, change to worker process isolation mode using the following steps:

In IIS Manager, expand the local computer node, right-click Web Sites, and then click Properties.


Click the Service tab, clear the Run WWW service in IIS 5.0 isolation mode check box, and then click OK.
 
Also Make certain you are running the MMC with a user that is part of the local computer group on the server WSUS Administrators
0
 

Author Comment

by:Stevemarsh00
ID: 22686792
The upgrade scenerio did not happen.I think it has something to do with different .NET versions I have installed. What do I need and how can I check effectively what I have and what is need excluding looking in add/remove programs.
Currently (ironically, using add/remove programs):
Microsoft .NET Framework 1.1 (just installed this but to no avail)
Microsoft .NET Framework 2.0 (x64) (Have reinstalled since this drama but again, to no avail)
 
I have also noticed that the asp.NET tab in the website is no longer there - maybe that is coinsidental?
 
 
0
 
LVL 5

Expert Comment

by:micalkin
ID: 22688221
You might need to re-register .NET
somewhere in the %WindowsDir%\Microsoft.NET\Framework directory structure is aspnet_regiis.exe
aspnet_regiis.exe -i
0
 

Author Comment

by:Stevemarsh00
ID: 22688240
Tried that but didn't help either the asp.net tab or the WSUS console.
I tried both:

aspnet_regiis.exe -i and
aspnet_regiis.exe -i -enable
0
 

Expert Comment

by:FolknerComputing
ID: 22714290
I had a similar problem with the MMC suddenly stopped working. Un-install and reinstall were of no help.
What I eventually figured out was that I had restricted the IIS to only one NIC on my multi-homed server, after having installed WSUS initially.  So while both DNS and WINS would correctly the server by name to eiter IP address the MMC only worked if I added the server by its IP address as restricted in IIS. I also had to use the IP address in the group policy configuration  or only a few computers appeared as having contacted the WSUS server.

Hope this helps
0
 

Author Comment

by:Stevemarsh00
ID: 22719743
How can I check if the computers are talking to it all as I can view the console!!

What is the best way to find this out?
0
 
LVL 5

Expert Comment

by:micalkin
ID: 22720993
Look at the client log file in c:\windows\windowsupdate.log
Look for the startup line similiar to:
 2008-10-15 07:35:47:968 1160 190 Service ** START **  Service: Service startup
Everything after that should tell you the settings and whatnot that the client knows about.
0
 

Author Comment

by:Stevemarsh00
ID: 22721427
This is what my log file on the client looks like:

2008-10-15      15:21:08:856       600      c178      PT      WARNING: PopulateAuthCookies failed: 0x80244019
2008-10-15      15:21:08:856       600      c178      PT      WARNING: RefreshCookie failed: 0x80244019
2008-10-15      15:21:08:856       600      c178      PT      WARNING: RefreshPTState failed: 0x80244019
2008-10-15      15:21:08:856       600      c178      PT      WARNING: PTError: 0x80244019
2008-10-15      15:21:08:856       600      c178      Report      WARNING: Reporter failed to upload events with hr = 8024401
0
 
LVL 5

Expert Comment

by:micalkin
ID: 22721758
take a look at this thread which had the same problem that you are currently having.
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_22864445.html 
0
 
LVL 5

Expert Comment

by:micalkin
ID: 22721791
Also just to make certain your WSUS is working correctly you can actually go to http://server:8530/iuident.cab which is listed in the thread i linked above in the question section.
0
 

Author Comment

by:Stevemarsh00
ID: 22721918
Right, if I go to :http://servername/8530 I get:

Directory Listing Denied
This Virtual Directory does not allow contents to be listed.

If I go to http://server:8530/iuident.cab I get prompted to download the cab file?
0
 

Expert Comment

by:FolknerComputing
ID: 22722063
Were you able to add the WSUS server to the MMC using it's IP address?
0
 
LVL 5

Expert Comment

by:micalkin
ID: 22722105
Right you should get the prompt to download a file.  Means the website should be working fine.  Try the ideas in the other thread I linked and see if you can get something working with that.  Looks like from your log that it is a possible client problem.
0
 

Author Comment

by:Stevemarsh00
ID: 22722185
FolknerComputing: - no luck with the IP

micalkin - Doesn't it seem unluckly that there is a problem with the client when on the server we can't load the console? It has to be something wrong at the server end I think but I am willing to explorer the client issues if need be.

0
 

Author Comment

by:Stevemarsh00
ID: 22722326
And the thread you posted referes to that link with the headline of: WSUS: Script to delete duplicate SID created by Disk Imaging / Disk Cloning. I'm not sure that is what I need???
0
 
LVL 5

Expert Comment

by:micalkin
ID: 22722623
The accepted solution there was to run a batch file http://msmvps.com/blogs/athif/pages/66376.aspx that seemed to fix the client issues.
And I had thought earlier you had said you could connect to the server now.
0
 
LVL 5

Expert Comment

by:micalkin
ID: 22722735
take a look at this web page for your MMC connection problem.
http://technet.microsoft.com/en-us/library/cc708630.aspx 
0
 

Author Comment

by:Stevemarsh00
ID: 22722745
But if you read the first line of the paragrapg it says:
You might notice that some computers are appearing multiple times in WSUSAdmin -

I can't get into the console...that is the problem!
0
 
LVL 5

Expert Comment

by:micalkin
ID: 22726545
according to http://technet.microsoft.com/en-us/library/cc720442.aspx the error in your log means http 404 - ther server cannot find the requested URI (Uniform Resource Identifer)
 
http://technet.microsoft.com/en-us/library/cc708504.aspx - Look at appendix C and D for default settings in IIS for WSUS.  Seems like something could be broken in IIS.  You might want to look at your IIS logs for http 404 errors and find out what is wrong there.
0
 

Author Comment

by:Stevemarsh00
ID: 22729305
micalkin - I have read C and D and I couldnt see anything that stuck out.

I am pulling my hair out over this!!

What basic tests can I perform to enusre that the WSUS is working on the server and that the clients can see it?
0
 
LVL 5

Expert Comment

by:micalkin
ID: 22730384
http://technet.microsoft.com/en-us/wsus/bb466192.aspx
go to that website and download the client diags and server diags and run them.  I'm not certain how to interpret the server diags but it may just point you to a problem.
0
 

Author Comment

by:Stevemarsh00
ID: 22730903
micalkin - the client tool suggested that things are working from the client end:

WUServer = http://servername:8530
WUStatuServer = http://servername:8530
UseWuServer  is enbled . . . . . . PASS
Connecttion to server . . . . . . . . PASS

So that makes it even more frustrating as I was going to try re-installing it but it seems silly if the clients are working.

I just need the console to work so I can manage what gets what!

What services should be running?
0
 
LVL 5

Expert Comment

by:micalkin
ID: 22730962
did the server diags give any indication of a problem?
0
 

Author Comment

by:Stevemarsh00
ID: 22731270
The serve one was the first one I tried but rather annoyingly I received:

The application generated an exception that coud not be handled.

0
 
LVL 5

Expert Comment

by:micalkin
ID: 22731304
Did you make certain to run the server diags on the actual server? If you try to run it from a client it will crash.
0
 

Author Comment

by:Stevemarsh00
ID: 22731343
Definately executed on the server :(
0
 
LVL 5

Expert Comment

by:micalkin
ID: 22731461
Other than uninstalling and reinstalling WSUS i'm out of ideas for you to try.
0
 

Author Comment

by:Stevemarsh00
ID: 22731567
When I run the installation will I be asked to reboot? (I can't as it is the DC) and if I uninstall what will happen to all the clients that have checked in with it in the past? Will the get out of sync?
0
 
LVL 5

Accepted Solution

by:
micalkin earned 2000 total points
ID: 22731923
WSUS will have to learn about all your computers again and their patch status.  You will probably have to redo all your approvals.  I think there is a way to save your current settings but at this point I wouldn't trust them.
As far as I reboot, I don't remember my server needing to reboot.
0
 

Author Comment

by:Stevemarsh00
ID: 22732424
Thank you loads for your help
0
 

Author Comment

by:Stevemarsh00
ID: 22739448
I have ran the wsusutil.exe checkhealth command and it alarted me that the following services are screwed:



The DSS Authentication Web Service is not working.

The SimpleAuth Web Service is not working.

The Client Web Service is not working.

The Server Synchronization Web Service is not working.

The API Remoting Web Service is not working.

The Reporting Web Service is not working.

Does that shed any light on this riddle?
0

Featured Post

Ask an Anonymous Question!

Don't feel intimidated by what you don't know. Ask your question anonymously. It's easy! Learn more and upgrade.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Remote Apps is a feature in server 2008 which allows users to run applications off Remote Desktop Servers without having to log into them to run the applications.  The user can either have a desktop shortcut installed or go through the web portal to…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
In this video, Percona Solution Engineer Dimitri Vanoverbeke discusses why you want to use at least three nodes in a database cluster. To discuss how Percona Consulting can help with your design and architecture needs for your database and infras…
How to fix incompatible JVM issue while installing Eclipse While installing Eclipse in windows, got one error like above and unable to proceed with the installation. This video describes how to successfully install Eclipse. How to solve incompa…
Suggested Courses

618 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question