Server not installing WSUS updates.

drebaje
drebaje used Ask the Experts™
on
I have 5 servers on the network that are showing in WSUS as needing 25 updates. I tried running the / D e t e c t N o w  command and still nothing. Also tried stopping the service and deleting some registry values and restarted the machine. I also tried rebooting the server and nothing.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Administrator
Top Expert 2005
Commented:
I solve these issues with these commands on the command shell at the client server:

Tolomir

net stop wuauserv
 REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v SusClientId /f
 net start wuauserv
 wuauclt /resetauthorization /detectnow

Open in new window

Author

Commented:
Just did that. Do you have to wait a while for it?
TolomirAdministrator
Top Expert 2005

Commented:
Go to C:\Windows\SoftwareDistribution on the target server (client)

and check the file: ReportingEvents.log

it will tell you all the details (scroll to end)
Learn SQL Server Core 2016

This course will introduce you to SQL Server Core 2016, as well as teach you about SSMS, data tools, installation, server configuration, using Management Studio, and writing and executing queries.

Author

Commented:
MicrosoftUpdate      Success      Software Synchronization      Windows Update Client successfully detected 7 updates.

AutomaticUpdates      Failure      Software Synchronization      Windows Update Client failed to detect with error 0x80072ee2.


AutomaticUpdates      Failure      Software Synchronization      Windows Update Client failed to detect with error 0x80244010.

Author

Commented:
How did you insert that scroll box in your first reply?
TolomirAdministrator
Top Expert 2005

Commented:
select Code below the text window

Author

Commented:
Check today's logs out.
26th-Logs.txt
TolomirAdministrator
Top Expert 2005

Commented:
These are the error codes:

---

Can you open the wsus url http://wsusserver in the webbrowser of the target in question?

0x80072EEF ERROR_INTERNET_LOGIN_FAILURE
0x80244010 WARNING: Exceeded max server round trips

Open in new window

TolomirAdministrator
Top Expert 2005

Commented:
seems to me like firewall issues, please check if you can open the wsus url in IE browser

Author

Commented:
Under Construction


The site you are trying to view does not currently have a default page. It may be in the process of being upgraded and configured.

Please try this site again later. If you still experience the problem, try contacting the Web site administrator.

Thats what I get
TolomirAdministrator
Top Expert 2005

Commented:
try this, replacing the *** with your wsus server name/ip

 http://*************/SimpleAuthWebService/SimpleAuth.asmx

Author

Commented:
This is what I get.
The following operations are supported. For a formal definition, please review the Service Description. 

GetAuthorizationCookie 

Ping

Open in new window

TolomirAdministrator
Top Expert 2005

Commented:
something else to test

reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v AccountDomainSid /f
reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v PingID /f
reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v SusClientId /f
cls
@echo Triggering detection after resetting WSUS client identity
net stop wuauserv
net start wuauserv
wuauclt /resetauthorization /detectnow

Open in new window

TolomirAdministrator
Top Expert 2005

Commented:
so there is no firewall issue, good.

Try to run the commands from my last posting on the client server. It should delete some more registry settings.

Got it from here:

http://www.wsuswiki.com/ClientFAQ

Author

Commented:
Here are the logs after I ran that script.
2010-09-26	09:50:50:035	 832	358 035 832 358      Agent	Created new random SusClientId 0cc36b0f-7438-4f96-9e4f-d7b6a7ea804f. Old Id: none.
2010-09-26	09:50:50:035	 832	358	Report	***********  Report: Initializing static reporting data  ***********
2010-09-26	09:50:50:035	 832	358	Report	  * OS Version = 5.2.3790.2.0.196882
2010-09-26	09:50:50:316	 832	358	Report	  * Computer Brand = VMware, Inc.
2010-09-26	09:50:50:316	 832	358	Report	  * Computer Model = VMware Virtual Platform
2010-09-26	09:50:50:316	 832	358	Report	  * Bios Revision = 6.00
2010-09-26	09:50:50:316	 832	358	Report	  * Bios Name = PhoenixBIOS 4.0 Release 6.0     
2010-09-26	09:50:50:316	 832	358	Report	  * Bios Release Date = 2008-07-22T00:00:00
2010-09-26	09:50:50:316	 832	358	Report	  * Locale ID = 1033
2010-09-26	09:50:50:316	 832	358	AU	#############
2010-09-26	09:50:50:316	 832	358	AU	## START ##  AU: Search for updates
2010-09-26	09:50:50:316	 832	358	AU	#########
2010-09-26	09:50:50:316	 832	358	AU	<<## SUBMITTED ## AU: Search for updates [CallId = {A08B4C2A-AD99-4A2C-A1A9-38259534DDBD}]
2010-09-26	09:50:52:472	 832	 b4	Agent	*************
2010-09-26	09:50:52:472	 832	 b4	Agent	** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
2010-09-26	09:50:52:472	 832	 b4	Agent	*********
2010-09-26	09:50:52:472	 832	 b4	Agent	  * Online = Yes; Ignore download priority = No
2010-09-26	09:50:52:472	 832	 b4	Agent	  * Criteria = "IsHidden=0 and IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and IsAssigned=1 or IsHidden=0 and IsInstalled=1 and DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and IsAssigned=1 and RebootRequired=1"
2010-09-26	09:50:52:472	 832	 b4	Agent	  * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
2010-09-26	09:50:52:472	 832	 b4	Agent	  * Search Scope = {Machine}
2010-09-26	09:50:52:472	 832	 b4	Misc	Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab:
2010-09-26	09:50:52:488	 832	 b4	Misc	 Microsoft signed: Yes
2010-09-26	09:50:52:769	 832	 b4	Misc	Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab:
2010-09-26	09:50:52:785	 832	 b4	Misc	 Microsoft signed: Yes
2010-09-26	09:50:52:925	 832	 b4	Misc	Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wsus3setup.cab:
2010-09-26	09:50:52:941	 832	 b4	Misc	 Microsoft signed: Yes
2010-09-26	09:50:52:972	 832	 b4	Setup	***********  Setup: Checking whether self-update is required  ***********
2010-09-26	09:50:52:972	 832	 b4	Setup	  * Inf file: C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wsus3setup.inf
2010-09-26	09:50:52:972	 832	 b4	Setup	Update NOT required for C:\WINDOWS\system32\cdm.dll: target version = 7.4.7600.226, required version = 7.1.6001.65
2010-09-26	09:50:52:972	 832	 b4	Setup	Update NOT required for C:\WINDOWS\system32\wuapi.dll: target version = 7.4.7600.226, required version = 7.1.6001.65
2010-09-26	09:50:52:972	 832	 b4	Setup	Update NOT required for C:\WINDOWS\system32\wuapi.dll.mui: target version = 7.4.7600.226, required version = 7.1.6001.65
2010-09-26	09:50:52:972	 832	 b4	Setup	Update NOT required for C:\WINDOWS\system32\wuauclt.exe: target version = 7.4.7600.226, required version = 7.1.6001.65
2010-09-26	09:50:52:972	 832	 b4	Setup	Update NOT required for C:\WINDOWS\system32\wuaucpl.cpl: target version = 7.4.7600.226, required version = 7.1.6001.65
2010-09-26	09:50:52:972	 832	 b4	Setup	Update NOT required for C:\WINDOWS\system32\wuaucpl.cpl.mui: target version = 7.4.7600.226, required version = 7.1.6001.65
2010-09-26	09:50:52:972	 832	 b4	Setup	Update NOT required for C:\WINDOWS\system32\wuaueng.dll: target version = 7.4.7600.226, required version = 7.1.6001.65
2010-09-26	09:50:52:972	 832	 b4	Setup	Update NOT required for C:\WINDOWS\system32\wuaueng.dll.mui: target version = 7.4.7600.226, required version = 7.1.6001.65
2010-09-26	09:50:52:972	 832	 b4	Setup	Update NOT required for C:\WINDOWS\system32\wucltui.dll: target version = 7.4.7600.226, required version = 7.1.6001.65
2010-09-26	09:50:52:972	 832	 b4	Setup	Update NOT required for C:\WINDOWS\system32\wucltui.dll.mui: target version = 7.4.7600.226, required version = 7.1.6001.65
2010-09-26	09:50:52:972	 832	 b4	Setup	Update NOT required for C:\WINDOWS\system32\wups.dll: target version = 7.4.7600.226, required version = 7.1.6001.65
2010-09-26	09:50:52:972	 832	 b4	Setup	Update NOT required for C:\WINDOWS\system32\wups2.dll: target version = 7.4.7600.226, required version = 7.1.6001.65
2010-09-26	09:50:52:972	 832	 b4	Setup	Update NOT required for C:\WINDOWS\system32\wuweb.dll: target version = 7.4.7600.226, required version = 7.1.6001.65
2010-09-26	09:50:52:972	 832	 b4	Setup	WARNING: Warning: Setup callback ReportProgress failed: 0x8007000d
2010-09-26	09:50:52:972	 832	 b4	Setup	  * IsUpdateRequired = No
2010-09-26	09:50:56:238	 832	 b4	PT	+++++++++++  PT: Synchronizing server updates  +++++++++++
2010-09-26	09:50:56:238	 832	 b4	PT	  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://wsus-server/ClientWebService/client.asmx
2010-09-26	09:50:56:503	 832	 b4	PT	Initializing simple targeting cookie, clientId = 0cc36b0f-7438-4f96-9e4f-d7b6a7ea804f, target group = Development, DNS name = site.org
2010-09-26	09:50:56:503	 832	 b4	PT	  Server URL = http://wsus-server/SimpleAuthWebService/SimpleAuth.asmx
2010-09-26	09:50:56:550	 832	 b4	PT	WARNING: GetCookie failure, error = 0x8024400D, soap client error = 7, soap error code = 300, HTTP status code = 200
2010-09-26	09:50:56:550	 832	 b4	PT	WARNING: SOAP Fault: 0x00012c
2010-09-26	09:50:56:550	 832	 b4	PT	WARNING:     faultstring:Fault occurred
2010-09-26	09:50:56:550	 832	 b4	PT	WARNING:     ErrorCode:ServerChanged(4)
2010-09-26	09:50:56:550	 832	 b4	PT	WARNING:     Message:Server rolled back since last call to GetCookie
2010-09-26	09:50:56:550	 832	 b4	PT	WARNING:     Method:"http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService/GetCookie"
2010-09-26	09:50:56:550	 832	 b4	PT	WARNING:     ID:79f69126-9a6b-41bc-9758-8b1364a83b02
2010-09-26	09:50:56:550	 832	 b4	PT	WARNING: PTError: 0x80244015
2010-09-26	09:50:56:550	 832	 b4	PT	WARNING: GetCookie_WithRecovery failed : 0x80244015
2010-09-26	09:50:56:550	 832	 b4	PT	WARNING: RefreshCookie failed: 0x80244015
2010-09-26	09:50:56:550	 832	 b4	PT	WARNING: RefreshPTState failed: 0x80244015
2010-09-26	09:50:56:550	 832	 b4	PT	WARNING: Sync of Updates: 0x80244015
2010-09-26	09:50:56:816	 832	 b4	PT	WARNING: Cached cookie has expired or new PID is available
2010-09-26	09:50:56:816	 832	 b4	PT	Initializing simple targeting cookie, clientId = 0cc36b0f-7438-4f96-9e4f-d7b6a7ea804f, target group = Development, DNS name = site.org
2010-09-26	09:50:56:816	 832	 b4	PT	  Server URL = http://wsus-server/SimpleAuthWebService/SimpleAuth.asmx
2010-09-26	09:51:00:988	 832	 b4	Agent	  * WARNING: Failed to synchronize, error = 0x80244015
2010-09-26	09:51:00:988	 832	 b4	DnldMgr	File locations for service 3DA21691-E39D-4DA6-8A4B-B43877BCB1B7 changed
2010-09-26	09:51:00:988	 832	 b4	Agent	Server changed and need resyncing with server
2010-09-26	09:51:01:816	 832	 b4	PT	+++++++++++  PT: Synchronizing server updates  +++++++++++
2010-09-26	09:51:01:816	 832	 b4	PT	  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://wsus-server/ClientWebService/client.asmx

Open in new window

Author

Commented:
Closed thanks
TolomirAdministrator
Top Expert 2005

Commented:
Why delete the question?

Seems to me like the issue is solved with my help?

Author

Commented:
Sent you an email at tolomir(aT)experts-exchange.com

Author

Commented:
Yes bottom right
TolomirAdministrator
Top Expert 2005

Commented:
still?

Author

Commented:
Sorry you fixed it, thanks. Well I'm still getting the same problem. Sorry for that mistake earlier
TolomirAdministrator
Top Expert 2005

Commented:
Try this tool:

http://download.microsoft.com/download/9/7/6/976d1084-d2fd-45a1-8c27-a467c768d8ef/WSUS%20Client%20Diagnostic%20Tool.EXE

Download this tool, which has been designed to aid the WSUS  administrator in troubleshooting client machines that are failing to  report back to the WSUS Server. The tool will conduct preliminary checks  and test the communication between the WSUS Server and the client  machine. Once the tool has completed the tests it will display the  results in the console window. The Windows Server Update Services Client  Diagnostic tool is provided AS IS. No product support is available for  this tool.
DonNetwork Administrator

Commented:


Try resetting the "Windows Update Components" on them


http://support.microsoft.com/kb/971058

Author

Commented:


WSUS Client Diagnostics Tool

Checking Machine State
        Checking for admin rights to run tool . . . . . . . . . PASS
        Automatic Updates Service is running. . . . . . . . . . PASS
        Background Intelligent Transfer Service is running. . . PASS
        Wuaueng.dll version 7.4.7600.226. . . . . . . . . . . . PASS
                This version is WSUS 2.0

Checking AU Settings
        AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
                Option is from Policy settings

Checking Proxy Configuration
        Checking for winhttp local machine Proxy settings . . . PASS
                Winhttp local machine access type
                        <Direct Connection>
                Winhttp local machine Proxy. . . . . . . . . .  NONE
                Winhttp local machine ProxyBypass. . . . . . .  NONE
        Checking User IE Proxy settings . . . . . . . . . . . . PASS
                User IE Proxy. . . . . . . . . . . . . . . . .  NONE
                User IE ProxyByPass. . . . . . . . . . . . . .  NONE
                User IE AutoConfig URL Proxy . . . . . . . . .  NONE
                User IE AutoDetect
                AutoDetect not in use

Checking Connection to WSUS/SUS Server
                WUServer = http://wsus-server
                WUStatusServer = http://wsus-server
        UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
        Connection to server. . . . . . . . . . . . . . . . . . PASS
        SelfUpdate folder is present. . . . . . . . . . . . . . PASS

Press Enter to Complete

Open in new window

DonNetwork Administrator

Commented:
Why are we messing with SUSclientID's and whether or not the client has reported to the server?

If you use the WSUS console by clicking on the "25 needed updates" you should get a report that opens up with more info.


The Windowsupdate.log  from any of the problem clients will also give you more info.
DonNetwork Administrator

Commented:
Try using the reset windows components that I provided above
TolomirAdministrator
Top Expert 2005

Commented:
Give the suggestion from dstewartjr a try.


TolomirAdministrator
Top Expert 2005

Commented:
@dstewartj, we got that information already....

See posting http:#a33764341
2010-09-26	09:06:05:932	 832	cb4	Setup	  * IsUpdateRequired = No
2010-09-26	09:06:06:088	 832	cb4	PT	+++++++++++  PT: Synchronizing server updates  +++++++++++
2010-09-26	09:06:06:088	 832	cb4	PT	  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://*************/ClientWebService/client.asmx
2010-09-26	09:07:23:821	 832	cb4	PT	WARNING: Exceeded max server round trips: 0x80244010
2010-09-26	09:07:23:821	 832	cb4	PT	WARNING: Sync of Updates: 0x80244010
2010-09-26	09:07:23:821	 832	cb4	PT	WARNING: SyncServerUpdatesInternal failed: 0x80244010
2010-09-26	09:07:23:821	 832	cb4	Agent	  * WARNING: Failed to synchronize, error = 0x80244010
2010-09-26	09:07:24:039	 832	cb4	Agent	  * WARNING: Exit code = 0x80244010
2010-09-26	09:07:24:039	 832	cb4	Agent	*********
2010-09-26	09:07:24:039	 832	cb4	Agent	**  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
2010-09-26	09:07:24:039	 832	cb4	Agent	*************
2010-09-26	09:07:24:039	 832	cb4	Agent	WARNING: WU client failed Searching for update with error 0x80244010
2010-09-26	09:07:24:055	 832	d10	AU	>>##  RESUMED  ## AU: Search for updates [CallId = {63F1584F-B057-45A9-9155-8A86B833829B}]
2010-09-26	09:07:24:055	 832	d10	AU	  # WARNING: Search callback failed, result = 0x80244010
2010-09-26	09:07:24:055	 832	d10	AU	  # WARNING: Failed to find updates with error code 80244010
2010-09-26	09:07:24:055	 832	d10	AU	#########
2010-09-26	09:07:24:055	 832	d10	AU	##  END  ##  AU: Search for updates [CallId = {63F1584F-B057-45A9-9155-8A86B833829B}]
2010-09-26	09:07:24:055	 832	d10	AU	#############
2010-09-26	09:07:24:055	 832	d10	AU	AU setting next detection timeout to 2010-09-26 14:58:47
2010-09-26	09:07:24:055	 832	d10	AU	Setting AU scheduled install time to 2010-09-30 00:00:00
2010-09-26	09:07:29:039	 832	cb4	Report	REPORT EVENT: {603BD28F-A4E7-4C2C-AD35-C492359506A2}	2010-09-26 09:07:24:039-0400	1	148	101	{00000000-0000-0000-0000-000000000000}	0	80244010	AutomaticUpdates	Failure	Software Synchronization	Windows Update Client failed to detect with error 0x80244010.

Open in new window

DonNetwork Administrator

Commented:
Yes, I was quite aware of that and was only pointing out where to look during troubleshooting this issue.

Author

Commented:
I just did, still didn't fix the problem. I'm trying aggressive mode now.
DonNetwork Administrator

Commented:
If that dont work try reinstalling the "Windows Update Agent".....you will need to use the /wuforce switch


http://msmvps.com/blogs/athif/archive/2006/04/05/Re-Installing-WUA.aspx <<<it mentions the older agent in article but procedure is the same
DonNetwork Administrator

Commented:
This has also been reported to solve the 0x80244010 error in some forums



http://support.microsoft.com/kb/927891

Author

Commented:
Can't RDP into the box after running that MS fix it agressive mode. Troubleshooting it now

Author

Commented:
Checked event viewer getting an error when I boot into the box (Event ID5719). Stating that a services wasn't started. Can't ping the box. Network shows connected. Any ideas?
DonNetwork Administrator

Commented:
Try rebooting it
DonNetwork Administrator

Commented:

Author

Commented:
3 times

Author

Commented:
Tried that too!
TolomirAdministrator
Top Expert 2005

Commented:
Just as plan B: consider server reinstallation.... I don't like those aggressive tactics.

you could check if there are differences in the software updates between a server that is fully wsus enabled vs. one with wsus broken.

http://technet.microsoft.com/en-us/library/cc776518%28WS.10%29.aspx



View a list of updates installed on your computer

   1. Open Add or Remove Programs.

   2. On the top right, select the Show updates check box. All installed updates appear at the top of your program list.

Open in new window

TolomirAdministrator
Top Expert 2005

Commented:
Just for the record, do you get the same error messages on the other servers too?

We could also check the server side:

http://technet.microsoft.com/en-us/wsus/bb466192.aspx

Download this tool, which has been designed to help administrators  gather WSUS server debugging logs and configuration information for  further troubleshooting. The Windows Server Update Services Server  Diagnostic tool is provided AS IS. No product support is available for  this tool. For more information

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial