WSUS 3 0n 64bit 2008 R2 client errors

Check if it is either firewall/proxy issue or ISA(If in your environment)


http://www.techtalkz.com/windows-help/19535-windows-server-2008-windows-update-failing-error-8024401f.html

Hi, Thanks, but there is no firewall between the clients and the server, I have disabled the inbuilt firewall on the 2008 server and I have disabled the firewall on the client and it is the same.

Also disabled the proxy settings in the browser, so no using it.

did you also try proxycfg -d ?

have you gone over ?

http://technet.microsoft.com/en-us/library/cc708545(WS.10).aspx

It's even possible to be a virus/trojan


http://www.petri.co.il/forums/showthread.php?t=36447

Scanned server overnight so pretty sure (as you can ever be) that it is not a virus. Verified all the server settings more than once.
I have just tried proxycfg -d and still the same.
Thanks

Just removed some updates and rebooted. Still the same

From your WSUS console, what port is being used ?
WSUSPort.gif

Type: Non-SSL
Port: 80
Server version: 3.2.7600.226

I have checked the IIS server and it is running on 80, IUSR is used for Anon Access.
This was working, cannot see anything that has changed.
Thanks

Save below as fixwsus.bat and run on a client, give it a few minutes(at least 5) and check the windowsupdate.log for errors.

%Windir%\system32\net.exe stop bits 
%Windir%\system32\net.exe stop wuauserv  


if exist %Windir%\system32\atl.dll %Windir%\system32\regsvr32.exe /s %Windir%\system32\atl.dll  
if exist %Windir%\system32\jscript.dll %Windir%\system32\regsvr32.exe /s %Windir%\system32\jscript.dll 
if exist %Windir%\system32\softpub.dll  %Windir%\system32\regsvr32.exe /s %Windir%\system32\softpub.dll  
if exist %Windir%\system32\wuapi.dll %Windir%\system32\regsvr32.exe /s %Windir%\system32\wuapi.dll 
if exist %Windir%\system32\wuaueng.dll  %Windir%\system32\regsvr32.exe /s %Windir%\system32\wuaueng.dll  
if exist %Windir%\system32\wuaueng1.dll  %Windir%\system32\regsvr32.exe /s %Windir%\system32\wuaueng1.dll  
if exist %Windir%\system32\wucltui.dll  %Windir%\system32\regsvr32.exe /s %Windir%\system32\wucltui.dll  
if exist %Windir%\system32\wups.dll  %Windir%\system32\regsvr32.exe /s %Windir%\system32\wups.dll  
if exist %Windir%\system32\wups2.dll  %Windir%\system32\regsvr32.exe /s %Windir%\system32\wups2.dll  
if exist %Windir%\system32\wuweb.dll  %Windir%\system32\regsvr32.exe /s %Windir%\system32\wuweb.dll  
if exist %windir%\system32\iuengine.dll %windir%\system32\regsvr32.exe /s iuengine.dll
if exist %windir%\system32\wuauserv.dll %windir%\system32\regsvr32.exe /s wuauserv.dll
if exist %windir%\system32\cdm.dll %windir%\system32\regsvr32.exe /s cdm.dll
if exist %windir%\system32\msxml2r.dll %windir%\system32\regsvr32.exe /s msxml2r.dll
if exist %windir%\system32\msxml3r.dll %windir%\system32\regsvr32.exe /s msxml3r.dll
if exist %windir%\system32\msxml.dll  %windir%\system32\regsvr32.exe /s msxml.dll
if exist %windir%\system32\msxml3.dll %windir%\system32\regsvr32.exe /s msxml3.dll
if exist %windir%\system32\msxmlr.dll %windir%\system32\regsvr32.exe /s msxmlr.dll
if exist %windir%\system32\msxml2.dll %windir%\system32\regsvr32.exe /s msxml2.dll
if exist %windir%\system32\qmgr.dll %windir%\system32\regsvr32.exe /s qmgr.dll
if exist %windir%\system32\qmgrprxy.dll %windir%\system32\regsvr32.exe /s qmgrprxy.dll
if exist %windir%\system32\iuctl.dll %windir%\system32\regsvr32.exe /s iuctl.dll
reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v AccountDomainSid /f
reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v PingID /f
reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v SusClientId /f
reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v LastWaitTimeout /f
reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v DetectionStartTime /f
reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v NextDetectionTime /f


rd /s /q %windir%\softwareDistribution
sleep 5
%Windir%\system32\net.exe start bits 
%Windir%\system32\net.exe start wuauserv 


sc sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)


sc sdset bits D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)

wuauclt /resetauthorization /detectnow

exit /B 0

Select allOpen in new window

Hi,
Still the same. I can open the file in the filesystem, I can go to the IIS 7.0 default website page, but get 500 error when trying to open in IE.
Thanks

Have you run a scan with malwarebytes ?   http://malwarebytes.org/

Malwarebytes and McAfee, both negative. Done yesterday. Seems to be an IIS issue.
Thanks

What do you get when you use IP address instead ?


http://IpAddress/Content/FF/94A7AF17907C0ED6EF08ABAA0BF41228EF0B3AFF.exe,

Exactly the same; It is resolving the IP address as I get the iis welcome page if I just go to http://server1 or ip address. I have browse to the file by exploring the Content diretory from within IIS manager on the server.
Thanks

Give this a shot


http://support.microsoft.com/kb/910336

You may also need to

Try running on your WSUS server from command prompt:

wsusutil /reset


http://technet.microsoft.com/en-us/library/cc708524(WS.10).aspx


This checks that every update metadata row in the database has corresponding update files stored in the file system. If update files are missing or have been corrupted, WSUS downloads the update files again.


http://technet.microsoft.com/en-us/library/cc720466(WS.10).aspx 

I have done this on several clients, still the same. I haven't done it on the server though. The clients get the Windows Update shield but it just sticks at downloading 0% for a while and it then closes. Is there a document with WSUS settings for IIS7.0 on W2008R2, I couldn't find and exact one, just to check the ISS security and the filesystem. But like I said it was working just a few days ago

The files could be corrupt or missing....WSUSutil /reset forces wsus to redownload them

I can browse to the files and install them. Like I said working until a few days ago. I can'
t even open a text file in one of the content directories via IIs, just get error 500. I can open it on the filesystem. Seems to be something to do with IIS/ filesystem permissions - at a guess.

Have you gone over


http://technet.microsoft.com/en-us/library/cc720452(WS.10).aspx

Hi tried WSUSutil reset and checkhealth. Still the same. I also could get into.
http://server1/ClientWebService/client.asmx
Now getting in the error log:
***********************************************************************
Event Type:      Warning
Event Source:      ASP.NET 2.0.50727.0
Event Category:      (3)
Event ID:      1309
Date:            17/11/2010
Time:            10:52:52
User:            N/A
Computer:      Server1.domain.com
Description:
Event code: 3005
Event message: An unhandled exception has occurred.
Event time: 17/11/2010 10:52:52
Event time (UTC): 17/11/2010 10:52:52
Event ID: d365684dce384d448d26ce245d82fda0
Event sequence: 353
Event occurrence: 6
Event detail code: 0
 
Application information:
    Application domain: /LM/W3SVC/1/ROOT/ClientWebService-3-129344602102695817
    Trust level: Full
    Application Virtual Path: /ClientWebService
    Application Path: C:\Program Files\Update Services\WebServices\ClientWebService\
    Machine name: server1
Process information:
    Process ID: 6068
    Process name: w3wp.exe
    Account name: NT AUTHORITY\NETWORK SERVICE
 
Exception information:
    Exception type: InvalidOperationException
    Exception message: Request format is unrecognized.
 
Request information:
    Request URL: http://server1/ClientWebService/client.asmx 
    Request path: /ClientWebService/client.asmx
    User host address: 193.150.136.143
    User:  
    Is authenticated: False
    Authentication Type:  
    Thread account name: NT AUTHORITY\NETWORK SERVICE
 
Thread information:
    Thread ID: 12
    Thread account name: NT AUTHORITY\NETWORK SERVICE
    Is impersonating: False
    Stack trace:    at System.Web.Services.Protocols.WebServiceHandlerFactory.CoreGetHandler(Type type, HttpContext context, HttpRequest request, HttpResponse response)
   at System.Web.Services.Protocols.WebServiceHandlerFactory.GetHandler(HttpContext context, String verb, String url, String filePath)
   at System.Web.HttpApplication.MaterializeHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
   at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
 
 
Custom event details:

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
**************************************************************************
******************************************************************************

And if I run in IE on the server i get:

Server Error in '/ClientWebService' Application.
--------------------------------------------------------------------------------

Request format is unrecognized.
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.InvalidOperationException: Request format is unrecognized.

Source Error:

An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.  

Stack Trace:


[InvalidOperationException: Request format is unrecognized.]
   System.Web.Services.Protocols.WebServiceHandlerFactory.CoreGetHandler(Type type, HttpContext context, HttpRequest request, HttpResponse response) +401258
   System.Web.Services.Protocols.WebServiceHandlerFactory.GetHandler(HttpContext context, String verb, String url, String filePath) +281
   System.Web.MaterializeHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +425
   System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +263

 *********************************************************************************

I have checked all the temp folders/variables and they seem okay, network service has full control to both system and ones in .net folders.

I attach my IIS applicationHost.config, I have been through the document and everything that is required is there. It was working and I can't see anything that has changed.


 applicationHost.config applicationHost.config

I can go to:
http://server1/selfupdate/wuident.cab and it offers to find a program or save.

Here is the tail from my IIS server log. Seems to work okay until it tries to download, then getting error 500.

2010-11-17 11:29:01 193.150.132.4 GET /Content/FB/B6A3D8953714847D02D614E8FCB5B4171D1029FB.exe - 80 - 193.150.149.130 Microsoft+BITS/6.7 - - server1 500 19 183 0
2010-11-17 11:29:03 193.150.132.4 GET /Content/2C/F08C92A67F1BD7F0768ECA980D885EB85A91D52C.exe - 80 - 193.150.137.149 Microsoft+BITS/6.7 - - server1 500 19 183 187
2010-11-17 11:29:03 193.150.132.4 GET /Content/1A/82BD58DD365D93AFA746A4BEAF2A1AD5B8D5181A.exe - 80 - 193.150.149.130 Microsoft+BITS/6.7 - - server1 500 19 183 15
2010-11-17 11:29:05 193.150.132.4 GET /Content/C6/763F14B5B111ABA84F2605F869C2C203476AD0C6.CAB - 80 - 193.150.136.24 Microsoft+BITS/6.7 - - server1 500 19 183 171
2010-11-17 11:29:05 193.150.132.4 GET /Content/E6/8A430C98AAE7FCD27E01691DACBAE46A4463A9E6.cab - 80 - 193.150.137.27 Microsoft+BITS/6.7 - - server1 500 19 183 218
2010-11-17 11:29:05 193.150.132.4 GET /Content/16/7D6C2299F8768B9CFA8134B998B893291B165616.cab - 80 - 193.150.136.10 Microsoft+BITS/6.7 - - server1 500 19 183 187
2010-11-17 11:29:07 193.150.132.4 GET /Content/9D/1D84219447EDEE9E6989E740E7FD477360E4059D.exe - 80 - 193.150.130.45 Microsoft+BITS/6.7 - - server1 500 19 183 249
2010-11-17 11:29:08 193.150.132.4 GET /Content/16/0921578964F6939355B418FA3B510EA983A42916.cab - 80 - 193.150.136.145 Microsoft+BITS/6.7 - - server1 500 19 183 171
2010-11-17 11:29:11 193.150.132.4 GET /Content/D8/11F7B200A2BBB1B053E34B821141E72240C592D8.exe - 80 - 193.150.149.130 Microsoft+BITS/6.7 - - server1 500 19 183 15
2010-11-17 11:29:12 193.150.132.4 GET /Content/0A/32A2DF3D4C54273164C8D0F5A4B645890BC0580A.CAB - 80 - 193.150.130.28 Microsoft+BITS/6.7 - - server1 500 19 183 171
2010-11-17 11:29:12 193.150.132.4 GET /Content/1A/82BD58DD365D93AFA746A4BEAF2A1AD5B8D5181A.exe - 80 - 193.150.137.6 Microsoft+BITS/6.7 - - server1 500 19 183 202
2010-11-17 11:29:14 193.150.132.4 GET /Content/A7/60A362B77F6E5FB22208B05624D30F817C4BD4A7.exe - 80 - 193.150.149.130 Microsoft+BITS/6.7 - - server1 500 19 183 0
2010-11-17 11:29:16 193.150.132.4 GET /Content/3B/9722544230B316CBD21740ED56DC7A9E7AF9603B.exe - 80 - 193.150.137.184 Microsoft+BITS/6.7 - - server1 500 19 183 124
2010-11-17 11:29:16 193.150.132.4 GET /Content/3C/DC7F4B15FF426D9E413B87909C35929660D8A33C.exe - 80 - 193.150.137.27 Microsoft+BITS/6.7 - - server1 500 19 183 312
2010-11-17 11:29:16 193.150.132.4 GET /Content/BE/4D87C29E02A9F212A012F3E035F91E68C8FC60BE.exe - 80 - 193.150.149.130 Microsoft+BITS/6.7 - - server1 500 19 183 0
2010-11-17 11:29:18 193.150.132.4 GET /Content/59/60547C9FF654ED09C9343B3096E726EAF44E2259.exe - 80 - 193.150.136.50 Microsoft+BITS/6.7 - - server1 500 19 183 140
2010-11-17 11:29:18 193.150.132.4 GET /Content/1A/82BD58DD365D93AFA746A4BEAF2A1AD5B8D5181A.exe - 80 - 193.150.137.17 Microsoft+BITS/6.7 - - server1 500 19 183 218
2010-11-17 11:29:20 193.150.132.4 GET /Content/37/C87E2FE94DD873224AFA65E2AF2473CA3E307A37.CAB - 80 - 193.150.130.42 Microsoft+BITS/6.7 - - server1 500 19 183 124
2010-11-17 11:29:20 193.150.132.4 GET /Content/02/49AE6AC4F6E0A609124F2CE6F80FCEF249273C02.exe - 80 - 193.150.149.130 Microsoft+BITS/6.7 - - server1 500 19 183 0
2010-11-17 11:29:24 193.150.132.4 GET /Content/8D/703673B065074BB9DD7D849F420E52EA0D343F8D.exe - 80 - 193.150.136.50 Microsoft+BITS/6.7 - - server1 500 19 183 140
2010-11-17 11:29:24 193.150.132.4 GET /Content/0A/32A2DF3D4C54273164C8D0F5A4B645890BC0580A.CAB - 80 - 193.150.130.45 Microsoft+BITS/6.7 - - server1 500 19 183 234
2010-11-17 11:29:24 193.150.132.4 GET /Content/64/0A99A4ABCED5B224AB8FDF5054D5D6CFF991E064.exe - 80 - 193.150.149.130 Microsoft+BITS/6.7 - - server1 500 19 183 0
2010-11-17 11:29:24 193.150.132.4 GET /Content/28/C42F90A1CDB62F35E29F0A7DC1FC9EDEBEF69628.exe - 80 - 193.150.136.10 Microsoft+BITS/6.7 - - server1 500 19 183 187
2010-11-17 11:29:28 193.150.132.4 GET /Content/46/0C55102CEB4984A67E1C364AC95D91086F437B46.cab - 80 - 193.150.136.145 Microsoft+BITS/6.7 - - server1 500 19 183 124
2010-11-17 11:29:28 193.150.132.4 GET /Content/BF/99FE7C707B79C3585B245DE5F811B295A152C3BF.exe - 80 - 193.150.137.149 Microsoft+BITS/6.7 - - server1 500 19 183 124
2010-11-17 11:29:28 193.150.132.4 GET /Content/D8/11F7B200A2BBB1B053E34B821141E72240C592D8.exe - 80 - 193.150.137.6 Microsoft+BITS/6.7 - - server1 500 19 183 265
2010-11-17 11:29:28 193.150.132.4 GET /Content/59/C57ED328AB8838ECBB6FFEA46FA0BCBD76B2CC59.exe - 80 - 193.150.149.130 Microsoft+BITS/6.7 - - server1 500 19 183 0
2010-11-17 11:29:32 193.150.132.4 GET /Content/3B/DCCA5129A21F3CCBEA4609E1BCF7763F07C1883B.exe - 80 - 193.150.149.130 Microsoft+BITS/6.7 - - server1 500 19 183 0
2010-11-17 11:29:32 193.150.132.4 GET /Content/B8/7521F965C94FCE0AC75A45251A68DE8D8F5DDFB8.cab - 80 - 193.150.137.27 Microsoft+BITS/6.7 - - server1 500 19 183 249
2010-11-17 11:29:34 193.150.132.4 GET /Content/37/C87E2FE94DD873224AFA65E2AF2473CA3E307A37.CAB - 80 - 193.150.130.28 Microsoft+BITS/6.7 - - server1 500 19 183 296
2010-11-17 11:29:35 193.150.132.4 GET /Content/F4/A7CB9FDFEDB5E7B464709910AFEEC4CFF61C89F4.exe - 80 - 193.150.149.130 Microsoft+BITS/6.7 - - server1 500 19 183 0
2010-11-17 11:29:36 193.150.132.4 GET /Content/77/6826AB2C0F8CE1E717E693036AE4662C7FCC7277.exe - 80 - 193.150.136.50 Microsoft+BITS/6.7 - - server1 500 19 183 140
2010-11-17 11:29:40 193.150.132.4 GET /Content/E4/A5360324A1FE219A9AA9F0E513EDFFE7305176E4.exe - 80 - 193.150.149.130 Microsoft+BITS/6.7 - - server1 500 19 183 0
2010-11-17 11:29:40 193.150.132.4 GET /Content/C6/763F14B5B111ABA84F2605F869C2C203476AD0C6.CAB - 80 - 193.150.130.42 Microsoft+BITS/6.7 - - server1 500 19 183 156
2010-11-17 11:29:40 193.150.132.4 POST /ReportingWebService/ReportingWebService.asmx - 80 - 193.150.136.143 Windows-Update-Agent - - server1 200 0 0 171
2010-11-17 11:29:40 193.150.132.4 GET /Content/20/3D8A4F0990D13778983B5F2C4DCB982D4D7BFD20.exe - 80 - 193.150.137.184 Microsoft+BITS/6.7 - - server1 500 19 183 140

If I set directory browsing on /Content/15/ I can browse in IE on http://server1/Content/15/.
If I try to open one of the files it gives a 500 error

I can no longer connect via the WSUS console on either on the server or the admin workstation, says it is not available on that port. Have rebooted server and the same. !!!!

Found out the console error, I had set the application pool to accept 32-Bit applications whilst testing this morning. Reset to false and now okay.
I am still getting the original 500 error when downloading updates though.

See if this helps :)



http://blogs.iis.net/webtopics/archive/2010/03/08/troubleshooting-http-500-19-errors-in-iis-7.aspx

Hi,
Think I have found it, I was just going through the IIS settings again and on /content I went into HTTP Response headers, then set common headers and got an error about a duplicate mimetype on line 991 of  applicationHost.config, I couldn't find anything on or around thaat line, so I used a file compare utility and compared to a virgin install of IIS 7, I removed this line:
<mimeMap fileExtension=".psf" mimeType="application/octet-stream" />
did an IIS reset and the updates started.  I will leave until tomorrow, just to chjeck it is okay now.

dstewartjr - you will get the points, you have been a brick and certainly made me look in the right areas.
Cheers
M

Very helpful and assisted me in tracking down the issue. Thanks