Solved

windows updates fail with error code 8000ffff evaluateapplicability failed in cbs

Posted on 2011-02-25
7
2,104 Views
Last Modified: 2012-05-11
hi,
i only just begun to administrate a windows small business server 2008, set up at another site. first the sbs console cost me nerves, cause it said always something about critical updates which failed.

because of preinstalled wsus 3.0 sp1 it was not possible to search for updates in startmenu, windows updates. as wsus produced tons of wasted disk space and heavy load, i uninstalled it.

when i now search for updates, after some minutes "searching for updates" there appears the error 8000ffff, which i found in your knowledge base.

there is one hint to look for the security of the root directory of c:, if builtin\users has read access; in my case it has already read access; there is another hint to give full access to network service to drive c: (all of it, with all subdirs?); this is not the case on my server, but i am afraid it could open a security hole?

so i attach todays part of windowsupdate.log with the error 8000ffff, please have a look for the reason of the error, i don't want to take unneccessary steps.

after uninstalling wsus, which speeded up the server very much, i also deleted the registry key hklm\software\policy\microsoft\windows\windowsupdate as it seems to relate to wsus; but error 8000ffff remained.

there is another article in your knowledge base, 24277961, about windows updates and removing wsus, which tells about the gpo (run gpedit.msc) "specify intranet microsoft update service location"; in my case it is not configured. despite that, error 8000ffff.


windowsupdate.log
0
Comment
Question by:etusch
  • 3
  • 2
  • 2
7 Comments
 

Author Comment

by:etusch
ID: 34981246
this was my first question.
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 34985952
Welcome to EE,


You should not have removed WSUS from SBS 2008 as you are now finding out.

Here's a repair guide


http://technet.microsoft.com/en-us/library/dd443475%28WS.10%29.aspx


As far as space goes, you can move WSUS content and Database


http://blogs.technet.com/b/sbs/archive/2009/09/23/how-to-move-wsus-content-and-database-files-to-a-different-partition.aspx
0
 
LVL 6

Accepted Solution

by:
comnuts earned 500 total points
ID: 34985954
Have you tried MS KB 971058? http://support.microsoft.com/kb/971058
0
Active Directory Webinar

We all know we need to protect and secure our privileges, but where to start? Join Experts Exchange and ManageEngine on Tuesday, April 11, 2017 10:00 AM PDT to learn how to track and secure privileged users in Active Directory.

 
LVL 6

Expert Comment

by:comnuts
ID: 34985959
If that does not help, reinstall the WU agent from http://support.microsoft.com/kb/949104.
0
 

Author Comment

by:etusch
ID: 34993086
comment to dstewartjr: as i spent already lots of time with f wsus, i would not like to try it from scratch, going through 5 pages of docs, with uncertain ending. my site has only 3 clients, so wsus, if it worked, would not help that much. and now, without wsus, the server has become a real powerful machine. before, with wsus, it was a lame duck.

comment to comnuts: i guess you are the king! i tried kb971058 (without your hint i had not given a damn to that one, cause my os w2k8 SBS is not mentioned in the description of 971058, R2 yes, SBS no, and my error code 8000ffff neither). after your hint i nevertheless tried 971058, first with normal method and reboot, no success, same error. then with agressive method, reboot, wow: no 8000ffff, it is searching updates, finding 58 new updates, by now installing 20 of 58, joy to the world, i keep you informed!
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 34993707
Regardless, WSUS is not supposed to be removed/disabled from SBS. WSUS when set up correctly doesnt use that much resources.

If you like you can also manage the amount of memory used by WSUS

http://bartvdw.wordpress.com/2010/03/07/limit-sql-server-maximum-memory-allocation-for-wsus-instance/
0
 

Author Closing Comment

by:etusch
ID: 34995623
as i assumed in my last comment, all went perfectly ok!
all updates came along and were installed, sbs 2008 can search manually or autimatically for new updates,

congrats comnuts, great hint!

p.s. on sbs 2008 and the formerly attached wsus clients i had to delete the regkey windowsupdate in hklm\software\policies\microsoft\windows\ and to install kb949104 in order to return to normal (non wsus) windows updates.
0

Featured Post

Networking for the Cloud Era

Join Microsoft and Riverbed for a discussion and demonstration of enhancements to SteelConnect:
-One-click orchestration and cloud connectivity in Azure environments
-Tight integration of SD-WAN and WAN optimization capabilities
-Scalability and resiliency equal to a data center

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I’m often asked about newer and larger USB drives connected to SBS2008 and 2011 failing Windows Server Backup vs the older USB drives not failing. As disk space continues to grow and drive technology change SBS2008 and some SBS2011 end up with the f…
I work for a company that primarily works with small businesses as their outsourced IT vendor. As such the majority of these customers utilize some version of Small Business Server. Due to the economics of running a small business, many of these cus…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question