Offline WSUS - clients won't get updates

Hello

We have got two WSUS servers, one is connected to the internet while the other is inside a closed network (due to security). we are using import-export in order to sync the update from the online server to the offline server.
The problem is that after approving a test machine, setting the GPO and checking for new updates nothing happen, the client log reported: "Found 0 updates" (full log below)

 
2011-09-15	11:35:01:506	 380	784	AU	AU received policy change subscription event
2011-09-15	11:38:46:226	 380	a88	AU	Triggering AU detection through DetectNow API
2011-09-15	11:38:46:226	 380	a88	AU	Triggering Online detection (interactive)
2011-09-15	11:38:46:226	 380	784	AU	#############
2011-09-15	11:38:46:226	 380	784	AU	## START ##  AU: Search for updates
2011-09-15	11:38:46:226	 380	784	AU	#########
2011-09-15	11:38:46:242	 380	784	AU	<<## SUBMITTED ## AU: Search for updates [CallId = {32CCAA2B-1A4D-4846-9C51-7F54E9A2E42F}]
2011-09-15	11:38:46:242	 380	150c	Agent	*************
2011-09-15	11:38:46:242	 380	150c	Agent	** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
2011-09-15	11:38:46:242	 380	150c	Agent	*********
2011-09-15	11:38:46:242	 380	150c	Agent	  * Online = Yes; Ignore download priority = No
2011-09-15	11:38:46:242	 380	150c	Agent	  * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
2011-09-15	11:38:46:242	 380	150c	Agent	  * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
2011-09-15	11:38:46:242	 380	150c	Agent	  * Search Scope = {Machine}
2011-09-15	11:38:46:289	 380	150c	Setup	Checking for agent SelfUpdate
2011-09-15	11:38:46:320	 380	150c	Setup	Client version: Core: 7.4.7600.226  Aux: 7.4.7600.226
2011-09-15	11:38:46:320	 380	150c	Misc	Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2011-09-15	11:38:46:336	 380	150c	Misc	 Microsoft signed: Yes
2011-09-15	11:38:46:336	 380	150c	Misc	Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2011-09-15	11:38:46:351	 380	150c	Misc	 Microsoft signed: Yes
2011-09-15	11:38:46:351	 380	150c	Misc	Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
2011-09-15	11:38:46:367	 380	150c	Misc	 Microsoft signed: Yes
2011-09-15	11:38:46:367	 380	150c	Misc	Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
2011-09-15	11:38:46:367	 380	150c	Misc	 Microsoft signed: Yes
2011-09-15	11:38:46:398	 380	150c	Setup	Determining whether a new setup handler needs to be downloaded
2011-09-15	11:38:46:398	 380	150c	Setup	SelfUpdate handler is not found.  It will be downloaded
2011-09-15	11:38:46:398	 380	150c	Setup	Evaluating applicability of setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~amd64~~7.4.7600.226"
2011-09-15	11:38:47:147	 380	150c	Setup	Setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~amd64~~7.4.7600.226" is already installed.
2011-09-15	11:38:47:147	 380	150c	Setup	Evaluating applicability of setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~amd64~~7.4.7600.226"
2011-09-15	11:38:47:162	 380	150c	Setup	Setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~amd64~~7.4.7600.226" is already installed.
2011-09-15	11:38:47:162	 380	150c	Setup	Evaluating applicability of setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~amd64~~7.4.7600.226"
2011-09-15	11:38:47:194	 380	150c	Setup	Setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~amd64~~7.4.7600.226" is already installed.
2011-09-15	11:38:47:194	 380	150c	Setup	SelfUpdate check completed.  SelfUpdate is NOT required.
2011-09-15	11:38:48:332	 380	150c	PT	+++++++++++  PT: Synchronizing server updates  +++++++++++
2011-09-15	11:38:48:332	 380	150c	PT	  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://ormanage/ClientWebService/client.asmx
2011-09-15	11:38:48:442	 380	150c	PT	WARNING: Cached cookie has expired or new PID is available
2011-09-15	11:38:48:442	 380	150c	PT	Initializing simple targeting cookie, clientId = 26396688-271b-4a8e-82e0-d1e1248b4466, target group = , DNS name = orpc8.orion.local
2011-09-15	11:38:48:442	 380	150c	PT	  Server URL = http://ormanage/SimpleAuthWebService/SimpleAuth.asmx
2011-09-15	11:38:50:766	 380	150c	PT	WARNING: GetCookie failure, error = 0x8024400D, soap client error = 7, soap error code = 300, HTTP status code = 200
2011-09-15	11:38:50:766	 380	150c	PT	WARNING: SOAP Fault: 0x00012c
2011-09-15	11:38:50:766	 380	150c	PT	WARNING:     faultstring:Fault occurred
2011-09-15	11:38:50:766	 380	150c	PT	WARNING:     ErrorCode:ConfigChanged(2)
2011-09-15	11:38:50:766	 380	150c	PT	WARNING:     Message:(null)
2011-09-15	11:38:50:766	 380	150c	PT	WARNING:     Method:"http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService/GetCookie"
2011-09-15	11:38:50:766	 380	150c	PT	WARNING:     ID:e17d2c3a-abdd-4625-aeef-63ebae2c2ec9
2011-09-15	11:38:50:797	 380	150c	PT	WARNING: Cached cookie has expired or new PID is available
2011-09-15	11:38:50:797	 380	150c	PT	Initializing simple targeting cookie, clientId = 26396688-271b-4a8e-82e0-d1e1248b4466, target group = , DNS name = orpc8.orion.local
2011-09-15	11:38:50:797	 380	150c	PT	  Server URL = http://ormanage/SimpleAuthWebService/SimpleAuth.asmx
2011-09-15	11:38:54:962	 380	150c	PT	+++++++++++  PT: Synchronizing extended update info  +++++++++++
2011-09-15	11:38:54:962	 380	150c	PT	  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://ormanage/ClientWebService/client.asmx
2011-09-15	11:38:55:181	 380	150c	Agent	  * Found 0 updates and 62 categories in search; evaluated appl. rules of 1002 out of 1538 deployed entities
2011-09-15	11:38:55:181	 380	150c	Agent	*********
2011-09-15	11:38:55:181	 380	150c	Agent	**  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
2011-09-15	11:38:55:181	 380	150c	Agent	*************
2011-09-15	11:38:55:196	 380	1044	AU	>>##  RESUMED  ## AU: Search for updates [CallId = {32CCAA2B-1A4D-4846-9C51-7F54E9A2E42F}]
2011-09-15	11:38:55:196	 380	1044	AU	  # 0 updates detected
2011-09-15	11:38:55:196	 380	1044	AU	#########
2011-09-15	11:38:55:196	 380	1044	AU	##  END  ##  AU: Search for updates [CallId = {32CCAA2B-1A4D-4846-9C51-7F54E9A2E42F}]
2011-09-15	11:38:55:196	 380	1044	AU	#############
2011-09-15	11:38:55:196	 380	1044	AU	Successfully wrote event for AU health state:0
2011-09-15	11:38:55:196	 380	1044	AU	Featured notifications is disabled.
2011-09-15	11:38:55:196	 380	1044	AU	AU setting next detection timeout to 2011-09-16 06:06:52
2011-09-15	11:38:55:196	 380	1044	AU	Setting AU scheduled install time to 2011-09-16 18:00:00
2011-09-15	11:38:55:196	 380	1044	AU	Successfully wrote event for AU health state:0
2011-09-15	11:38:55:196	 380	1044	AU	Successfully wrote event for AU health state:0
2011-09-15	11:39:00:188	 380	150c	Report	REPORT EVENT: {303D5DFC-8CC8-4E02-96A1-C8D0DC36C4B3}	2011-09-15 11:38:55:181+0300	1	147	101	{00000000-0000-0000-0000-000000000000}	0	0	AutomaticUpdates	Success	Software Synchronization	Windows Update Client successfully detected 0 updates.
2011-09-15	11:39:00:188	 380	150c	Report	REPORT EVENT: {90DCB42A-7ACD-4A5D-AB49-F174A468A394}	2011-09-15 11:38:55:181+0300	1	156	101	{00000000-0000-0000-0000-000000000000}	0	0	AutomaticUpdates	Success	Pre-Deployment Check	Reporting client status.
2011-09-15	11:39:00:188	 380	150c	Report	CWERReporter finishing event handling. (00000000)
2011-09-15	11:44:56:274	 380	150c	Report	Uploading 2 events using cached cookie, reporting URL = http://ormanage/ReportingWebService/ReportingWebService.asmx
2011-09-15	11:44:56:274	 380	150c	Report	Reporter successfully uploaded 2 events.

Open in new window


In addition, the ClientDiag.exe reports "GetFileVersion(szEngineDir,&susVersion) failed with hr=0x80070002"

 
C:\>C:\Windows\ClientDiag.exe

WSUS Client Diagnostics Tool

Checking Machine State
        Checking for admin rights to run tool . . . . . . . . . PASS
        Automatic Updates Service is running. . . . . . . . . . PASS
        Background Intelligent Transfer Service is running. . . PASS

GetFileVersion(szEngineDir,&susVersion) failed with hr=0x80070002

The system cannot find the file specified.

Open in new window


Thanks in advance
Oded
ness-tsg-ctoAsked:
Who is Participating?
 
ness-tsg-ctoConnect With a Mentor Author Commented:
Well.... after copying c:\wsus again, exporting and importing (again) the database > clients can get updates.

Thanks for everyone !
0
 
Neil RussellTechnical Development LeadCommented:
What OS is the server?

This error is often caused by a known conflict between htttp.sys and IIS6 on Win2003SP1 systems.

See this hotfix for a possible solution:
http://support.microsoft.com/?id=898708

0
 
Neil RussellTechnical Development LeadCommented:
Also have you tried doing a wuauclt /resetauthorization /detectnow from a command prompt?
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
ness-tsg-ctoAuthor Commented:
@Neilsr:

1. The server OS is Windows 2008 R2.
2. I was trying to perform wuauclt /resetauthorization /detectnow, nothing happens.
0
 
ArticFruitCommented:
I normally use this script to get a clean wsus registration:

@echo off
Echo Save the batch file "AU_Clean_SID.cmd". This batch file will do the following:
Echo 1.    Stops the wuauserv service
Echo 2.    Deletes the AccountDomainSid registry key (if it exists)
Echo 3.    Deletes the PingID registry key (if it exists)
Echo 4.    Deletes the SusClientId registry key (if it exists)
Echo 5.    Restarts the wuauserv service
Echo 6.    Resets the Authorization Cookie
Echo 6.    More information on http://msmvps.com/Athif
Pause
@echo on
net stop wuauserv
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v AccountDomainSid /f
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v PingID /f
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v SusClientId /f
net start wuauserv
wuauclt /resetauthorization /detectnow /reportnow
Pause
0
 
ness-tsg-ctoAuthor Commented:
Thanks ArticFruit, after running the script, there are still no updates....
0
 
ArticFruitCommented:
How does it look in the wsus console? Can you see the server and how many updates are pending?
0
 
DonNetwork AdministratorCommented:
Your clientdiag error hr=0x80070002 is because it doesnt run on 64 bit systems, clientdiag is 32 bit only

Try these steps

Stop the service "Windows Management Instrumentation" (WMI),
Delete the directory "% systemroot% \ system32 \ wbem \ repository"
Start the service "Windows Management Instrumentation" (WMI)

Wuauclt / detectnow
0
 
DonNetwork AdministratorCommented:
If that dont work, run the System Update Readiness tool

http://www.microsoft.com/download/en/details.aspx?id=14668
0
 
ness-tsg-ctoAuthor Commented:
Thanks!!, I will try that and report back
0
 
ness-tsg-ctoAuthor Commented:
I have manage to solve the problem after re-exporting the db
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.