Client cannot download updates from WSUS, clientdiag error
Hello,
I have a problem with WSUS and computer, which connects to WSUS from internet.
Client succesfuly reports status to WSUS (strange that it does not show up in tergergroup, but in the unnassigned folder), but he cannot download updates.
ClientDiag.exe shows error in the end, maybe someone could help me:
WSUS Client Diagnostics Tool
Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is running. . . PASS
Wuaueng.dll version 7.4.7600.226. . . . . . . . . . . . PASS
This version is WSUS 2.0
Checking AU Settings
AU Option is 2 : Notify Prior to Download . . . . . . . PASS
Option is from Policy settings
Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use
Checking Connection to WSUS/SUS Server
WUServer = http://wsus.myserver.lt:8530 (changed for confidenciality reasons)
WUStatusServer = http://wsus.myserver.lt:8530
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
Connection to server. . . . . . . . . . . . . . . . . . PASS
WinHttpDownloadFileToMemor
r) failed with hr=0x80072ee2
The operation timed out
Press Enter to Complete
I have a problem with WSUS and computer, which connects to WSUS from internet.
Client succesfuly reports status to WSUS (strange that it does not show up in tergergroup, but in the unnassigned folder), but he cannot download updates.
ClientDiag.exe shows error in the end, maybe someone could help me:
WSUS Client Diagnostics Tool
Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is running. . . PASS
Wuaueng.dll version 7.4.7600.226. . . . . . . . . . . . PASS
This version is WSUS 2.0
Checking AU Settings
AU Option is 2 : Notify Prior to Download . . . . . . . PASS
Option is from Policy settings
Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use
Checking Connection to WSUS/SUS Server
WUServer = http://wsus.myserver.lt:8530 (changed for confidenciality reasons)
WUStatusServer = http://wsus.myserver.lt:8530
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
Connection to server. . . . . . . . . . . . . . . . . . PASS
WinHttpDownloadFileToMemor
r) failed with hr=0x80072ee2
The operation timed out
Press Enter to Complete
ASKER
server is dedicated to WSUS and do not have apache or any other software. It runs on port 80, but I have redirected 8530 port from internet to 80 port on inside server. As I mentioned, client apears in WSUS, it reports correct status of updates.
As client use WSUS from internet (outside our LAN), I can not check connection both ways. Telnet from client to server connects.
As client use WSUS from internet (outside our LAN), I can not check connection both ways. Telnet from client to server connects.
I think your issue is with the port redirection, did you try changing the clients to just point to http://wsus.myserver.lt <<<without the 8530
If WSUS is installed on port 80, clients also need to point to port 80 and vice versa
If WSUS is installed on port 80, clients also need to point to port 80 and vice versa
ASKER
It is OK to forward 8530 port to internal 80 - it works. Solved half of my problem when found error in script, whith I use to configure client to use WSUS - now cliendiag does not show up any errors.
The only thing is not working now - client does not take place in WSUS computer group (targetgroup configuration entry). It is still "unassigned"...
The only thing is not working now - client does not take place in WSUS computer group (targetgroup configuration entry). It is still "unassigned"...
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
This solved my unassigned computers problem:
https://www.experts-exchange.com/questions/23914677/Target-Group-in-WSUS-does-not-get-put-into-correct-group-on-WU-Server.html
https://www.experts-exchange.com/questions/23914677/Target-Group-in-WSUS-does-not-get-put-into-correct-group-on-WU-Server.html
ASKER
Thanks
yup that refers to the image i provided above
or
i see that connections have passed but have you tried both ways telnet from the server to client
+ client to server over your wsus port