Solved

Offline WSUS - clients won't get updates

Posted on 2011-09-15
11
6,114 Views
Last Modified: 2013-02-13
Hello

We have got two WSUS servers, one is connected to the internet while the other is inside a closed network (due to security). we are using import-export in order to sync the update from the online server to the offline server.
The problem is that after approving a test machine, setting the GPO and checking for new updates nothing happen, the client log reported: "Found 0 updates" (full log below)

 
2011-09-15	11:35:01:506	 380	784	AU	AU received policy change subscription event
2011-09-15	11:38:46:226	 380	a88	AU	Triggering AU detection through DetectNow API
2011-09-15	11:38:46:226	 380	a88	AU	Triggering Online detection (interactive)
2011-09-15	11:38:46:226	 380	784	AU	#############
2011-09-15	11:38:46:226	 380	784	AU	## START ##  AU: Search for updates
2011-09-15	11:38:46:226	 380	784	AU	#########
2011-09-15	11:38:46:242	 380	784	AU	<<## SUBMITTED ## AU: Search for updates [CallId = {32CCAA2B-1A4D-4846-9C51-7F54E9A2E42F}]
2011-09-15	11:38:46:242	 380	150c	Agent	*************
2011-09-15	11:38:46:242	 380	150c	Agent	** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
2011-09-15	11:38:46:242	 380	150c	Agent	*********
2011-09-15	11:38:46:242	 380	150c	Agent	  * Online = Yes; Ignore download priority = No
2011-09-15	11:38:46:242	 380	150c	Agent	  * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
2011-09-15	11:38:46:242	 380	150c	Agent	  * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
2011-09-15	11:38:46:242	 380	150c	Agent	  * Search Scope = {Machine}
2011-09-15	11:38:46:289	 380	150c	Setup	Checking for agent SelfUpdate
2011-09-15	11:38:46:320	 380	150c	Setup	Client version: Core: 7.4.7600.226  Aux: 7.4.7600.226
2011-09-15	11:38:46:320	 380	150c	Misc	Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2011-09-15	11:38:46:336	 380	150c	Misc	 Microsoft signed: Yes
2011-09-15	11:38:46:336	 380	150c	Misc	Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2011-09-15	11:38:46:351	 380	150c	Misc	 Microsoft signed: Yes
2011-09-15	11:38:46:351	 380	150c	Misc	Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
2011-09-15	11:38:46:367	 380	150c	Misc	 Microsoft signed: Yes
2011-09-15	11:38:46:367	 380	150c	Misc	Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
2011-09-15	11:38:46:367	 380	150c	Misc	 Microsoft signed: Yes
2011-09-15	11:38:46:398	 380	150c	Setup	Determining whether a new setup handler needs to be downloaded
2011-09-15	11:38:46:398	 380	150c	Setup	SelfUpdate handler is not found.  It will be downloaded
2011-09-15	11:38:46:398	 380	150c	Setup	Evaluating applicability of setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~amd64~~7.4.7600.226"
2011-09-15	11:38:47:147	 380	150c	Setup	Setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~amd64~~7.4.7600.226" is already installed.
2011-09-15	11:38:47:147	 380	150c	Setup	Evaluating applicability of setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~amd64~~7.4.7600.226"
2011-09-15	11:38:47:162	 380	150c	Setup	Setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~amd64~~7.4.7600.226" is already installed.
2011-09-15	11:38:47:162	 380	150c	Setup	Evaluating applicability of setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~amd64~~7.4.7600.226"
2011-09-15	11:38:47:194	 380	150c	Setup	Setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~amd64~~7.4.7600.226" is already installed.
2011-09-15	11:38:47:194	 380	150c	Setup	SelfUpdate check completed.  SelfUpdate is NOT required.
2011-09-15	11:38:48:332	 380	150c	PT	+++++++++++  PT: Synchronizing server updates  +++++++++++
2011-09-15	11:38:48:332	 380	150c	PT	  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://ormanage/ClientWebService/client.asmx
2011-09-15	11:38:48:442	 380	150c	PT	WARNING: Cached cookie has expired or new PID is available
2011-09-15	11:38:48:442	 380	150c	PT	Initializing simple targeting cookie, clientId = 26396688-271b-4a8e-82e0-d1e1248b4466, target group = , DNS name = orpc8.orion.local
2011-09-15	11:38:48:442	 380	150c	PT	  Server URL = http://ormanage/SimpleAuthWebService/SimpleAuth.asmx
2011-09-15	11:38:50:766	 380	150c	PT	WARNING: GetCookie failure, error = 0x8024400D, soap client error = 7, soap error code = 300, HTTP status code = 200
2011-09-15	11:38:50:766	 380	150c	PT	WARNING: SOAP Fault: 0x00012c
2011-09-15	11:38:50:766	 380	150c	PT	WARNING:     faultstring:Fault occurred
2011-09-15	11:38:50:766	 380	150c	PT	WARNING:     ErrorCode:ConfigChanged(2)
2011-09-15	11:38:50:766	 380	150c	PT	WARNING:     Message:(null)
2011-09-15	11:38:50:766	 380	150c	PT	WARNING:     Method:"http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService/GetCookie"
2011-09-15	11:38:50:766	 380	150c	PT	WARNING:     ID:e17d2c3a-abdd-4625-aeef-63ebae2c2ec9
2011-09-15	11:38:50:797	 380	150c	PT	WARNING: Cached cookie has expired or new PID is available
2011-09-15	11:38:50:797	 380	150c	PT	Initializing simple targeting cookie, clientId = 26396688-271b-4a8e-82e0-d1e1248b4466, target group = , DNS name = orpc8.orion.local
2011-09-15	11:38:50:797	 380	150c	PT	  Server URL = http://ormanage/SimpleAuthWebService/SimpleAuth.asmx
2011-09-15	11:38:54:962	 380	150c	PT	+++++++++++  PT: Synchronizing extended update info  +++++++++++
2011-09-15	11:38:54:962	 380	150c	PT	  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://ormanage/ClientWebService/client.asmx
2011-09-15	11:38:55:181	 380	150c	Agent	  * Found 0 updates and 62 categories in search; evaluated appl. rules of 1002 out of 1538 deployed entities
2011-09-15	11:38:55:181	 380	150c	Agent	*********
2011-09-15	11:38:55:181	 380	150c	Agent	**  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
2011-09-15	11:38:55:181	 380	150c	Agent	*************
2011-09-15	11:38:55:196	 380	1044	AU	>>##  RESUMED  ## AU: Search for updates [CallId = {32CCAA2B-1A4D-4846-9C51-7F54E9A2E42F}]
2011-09-15	11:38:55:196	 380	1044	AU	  # 0 updates detected
2011-09-15	11:38:55:196	 380	1044	AU	#########
2011-09-15	11:38:55:196	 380	1044	AU	##  END  ##  AU: Search for updates [CallId = {32CCAA2B-1A4D-4846-9C51-7F54E9A2E42F}]
2011-09-15	11:38:55:196	 380	1044	AU	#############
2011-09-15	11:38:55:196	 380	1044	AU	Successfully wrote event for AU health state:0
2011-09-15	11:38:55:196	 380	1044	AU	Featured notifications is disabled.
2011-09-15	11:38:55:196	 380	1044	AU	AU setting next detection timeout to 2011-09-16 06:06:52
2011-09-15	11:38:55:196	 380	1044	AU	Setting AU scheduled install time to 2011-09-16 18:00:00
2011-09-15	11:38:55:196	 380	1044	AU	Successfully wrote event for AU health state:0
2011-09-15	11:38:55:196	 380	1044	AU	Successfully wrote event for AU health state:0
2011-09-15	11:39:00:188	 380	150c	Report	REPORT EVENT: {303D5DFC-8CC8-4E02-96A1-C8D0DC36C4B3}	2011-09-15 11:38:55:181+0300	1	147	101	{00000000-0000-0000-0000-000000000000}	0	0	AutomaticUpdates	Success	Software Synchronization	Windows Update Client successfully detected 0 updates.
2011-09-15	11:39:00:188	 380	150c	Report	REPORT EVENT: {90DCB42A-7ACD-4A5D-AB49-F174A468A394}	2011-09-15 11:38:55:181+0300	1	156	101	{00000000-0000-0000-0000-000000000000}	0	0	AutomaticUpdates	Success	Pre-Deployment Check	Reporting client status.
2011-09-15	11:39:00:188	 380	150c	Report	CWERReporter finishing event handling. (00000000)
2011-09-15	11:44:56:274	 380	150c	Report	Uploading 2 events using cached cookie, reporting URL = http://ormanage/ReportingWebService/ReportingWebService.asmx
2011-09-15	11:44:56:274	 380	150c	Report	Reporter successfully uploaded 2 events.

Open in new window


In addition, the ClientDiag.exe reports "GetFileVersion(szEngineDir,&susVersion) failed with hr=0x80070002"

 
C:\>C:\Windows\ClientDiag.exe

WSUS Client Diagnostics Tool

Checking Machine State
        Checking for admin rights to run tool . . . . . . . . . PASS
        Automatic Updates Service is running. . . . . . . . . . PASS
        Background Intelligent Transfer Service is running. . . PASS

GetFileVersion(szEngineDir,&susVersion) failed with hr=0x80070002

The system cannot find the file specified.

Open in new window


Thanks in advance
Oded
0
Comment
Question by:ness-tsg-cto
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 2
  • 2
  • +1
11 Comments
 
LVL 37

Expert Comment

by:Neil Russell
ID: 36541801
What OS is the server?

This error is often caused by a known conflict between htttp.sys and IIS6 on Win2003SP1 systems.

See this hotfix for a possible solution:
http://support.microsoft.com/?id=898708

0
 
LVL 37

Expert Comment

by:Neil Russell
ID: 36541828
Also have you tried doing a wuauclt /resetauthorization /detectnow from a command prompt?
0
 

Author Comment

by:ness-tsg-cto
ID: 36541873
@Neilsr:

1. The server OS is Windows 2008 R2.
2. I was trying to perform wuauclt /resetauthorization /detectnow, nothing happens.
0
Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Expert Comment

by:ArticFruit
ID: 36542664
I normally use this script to get a clean wsus registration:

@echo off
Echo Save the batch file "AU_Clean_SID.cmd". This batch file will do the following:
Echo 1.    Stops the wuauserv service
Echo 2.    Deletes the AccountDomainSid registry key (if it exists)
Echo 3.    Deletes the PingID registry key (if it exists)
Echo 4.    Deletes the SusClientId registry key (if it exists)
Echo 5.    Restarts the wuauserv service
Echo 6.    Resets the Authorization Cookie
Echo 6.    More information on http://msmvps.com/Athif
Pause
@echo on
net stop wuauserv
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v AccountDomainSid /f
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v PingID /f
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v SusClientId /f
net start wuauserv
wuauclt /resetauthorization /detectnow /reportnow
Pause
0
 

Author Comment

by:ness-tsg-cto
ID: 36542743
Thanks ArticFruit, after running the script, there are still no updates....
0
 

Expert Comment

by:ArticFruit
ID: 36542878
How does it look in the wsus console? Can you see the server and how many updates are pending?
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36543295
Your clientdiag error hr=0x80070002 is because it doesnt run on 64 bit systems, clientdiag is 32 bit only

Try these steps

Stop the service "Windows Management Instrumentation" (WMI),
Delete the directory "% systemroot% \ system32 \ wbem \ repository"
Start the service "Windows Management Instrumentation" (WMI)

Wuauclt / detectnow
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36543311
If that dont work, run the System Update Readiness tool

http://www.microsoft.com/download/en/details.aspx?id=14668
0
 

Author Comment

by:ness-tsg-cto
ID: 36543484
Thanks!!, I will try that and report back
0
 

Accepted Solution

by:
ness-tsg-cto earned 0 total points
ID: 36555619
Well.... after copying c:\wsus again, exporting and importing (again) the database > clients can get updates.

Thanks for everyone !
0
 

Author Closing Comment

by:ness-tsg-cto
ID: 36579022
I have manage to solve the problem after re-exporting the db
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

I was asked if I could set up a fax machine so that incoming faxes were delivered to people's Exchange inboxes and so that they could send faxes from their desktops without needing to print the document first.  I knew it was possible but I had no id…
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question