Solved

Offline WSUS - clients won't get updates

Posted on 2011-09-15
11
5,800 Views
Last Modified: 2013-02-13
Hello

We have got two WSUS servers, one is connected to the internet while the other is inside a closed network (due to security). we are using import-export in order to sync the update from the online server to the offline server.
The problem is that after approving a test machine, setting the GPO and checking for new updates nothing happen, the client log reported: "Found 0 updates" (full log below)

 
2011-09-15	11:35:01:506	 380	784	AU	AU received policy change subscription event
2011-09-15	11:38:46:226	 380	a88	AU	Triggering AU detection through DetectNow API
2011-09-15	11:38:46:226	 380	a88	AU	Triggering Online detection (interactive)
2011-09-15	11:38:46:226	 380	784	AU	#############
2011-09-15	11:38:46:226	 380	784	AU	## START ##  AU: Search for updates
2011-09-15	11:38:46:226	 380	784	AU	#########
2011-09-15	11:38:46:242	 380	784	AU	<<## SUBMITTED ## AU: Search for updates [CallId = {32CCAA2B-1A4D-4846-9C51-7F54E9A2E42F}]
2011-09-15	11:38:46:242	 380	150c	Agent	*************
2011-09-15	11:38:46:242	 380	150c	Agent	** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
2011-09-15	11:38:46:242	 380	150c	Agent	*********
2011-09-15	11:38:46:242	 380	150c	Agent	  * Online = Yes; Ignore download priority = No
2011-09-15	11:38:46:242	 380	150c	Agent	  * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
2011-09-15	11:38:46:242	 380	150c	Agent	  * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
2011-09-15	11:38:46:242	 380	150c	Agent	  * Search Scope = {Machine}
2011-09-15	11:38:46:289	 380	150c	Setup	Checking for agent SelfUpdate
2011-09-15	11:38:46:320	 380	150c	Setup	Client version: Core: 7.4.7600.226  Aux: 7.4.7600.226
2011-09-15	11:38:46:320	 380	150c	Misc	Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2011-09-15	11:38:46:336	 380	150c	Misc	 Microsoft signed: Yes
2011-09-15	11:38:46:336	 380	150c	Misc	Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2011-09-15	11:38:46:351	 380	150c	Misc	 Microsoft signed: Yes
2011-09-15	11:38:46:351	 380	150c	Misc	Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
2011-09-15	11:38:46:367	 380	150c	Misc	 Microsoft signed: Yes
2011-09-15	11:38:46:367	 380	150c	Misc	Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
2011-09-15	11:38:46:367	 380	150c	Misc	 Microsoft signed: Yes
2011-09-15	11:38:46:398	 380	150c	Setup	Determining whether a new setup handler needs to be downloaded
2011-09-15	11:38:46:398	 380	150c	Setup	SelfUpdate handler is not found.  It will be downloaded
2011-09-15	11:38:46:398	 380	150c	Setup	Evaluating applicability of setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~amd64~~7.4.7600.226"
2011-09-15	11:38:47:147	 380	150c	Setup	Setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~amd64~~7.4.7600.226" is already installed.
2011-09-15	11:38:47:147	 380	150c	Setup	Evaluating applicability of setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~amd64~~7.4.7600.226"
2011-09-15	11:38:47:162	 380	150c	Setup	Setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~amd64~~7.4.7600.226" is already installed.
2011-09-15	11:38:47:162	 380	150c	Setup	Evaluating applicability of setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~amd64~~7.4.7600.226"
2011-09-15	11:38:47:194	 380	150c	Setup	Setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~amd64~~7.4.7600.226" is already installed.
2011-09-15	11:38:47:194	 380	150c	Setup	SelfUpdate check completed.  SelfUpdate is NOT required.
2011-09-15	11:38:48:332	 380	150c	PT	+++++++++++  PT: Synchronizing server updates  +++++++++++
2011-09-15	11:38:48:332	 380	150c	PT	  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://ormanage/ClientWebService/client.asmx
2011-09-15	11:38:48:442	 380	150c	PT	WARNING: Cached cookie has expired or new PID is available
2011-09-15	11:38:48:442	 380	150c	PT	Initializing simple targeting cookie, clientId = 26396688-271b-4a8e-82e0-d1e1248b4466, target group = , DNS name = orpc8.orion.local
2011-09-15	11:38:48:442	 380	150c	PT	  Server URL = http://ormanage/SimpleAuthWebService/SimpleAuth.asmx
2011-09-15	11:38:50:766	 380	150c	PT	WARNING: GetCookie failure, error = 0x8024400D, soap client error = 7, soap error code = 300, HTTP status code = 200
2011-09-15	11:38:50:766	 380	150c	PT	WARNING: SOAP Fault: 0x00012c
2011-09-15	11:38:50:766	 380	150c	PT	WARNING:     faultstring:Fault occurred
2011-09-15	11:38:50:766	 380	150c	PT	WARNING:     ErrorCode:ConfigChanged(2)
2011-09-15	11:38:50:766	 380	150c	PT	WARNING:     Message:(null)
2011-09-15	11:38:50:766	 380	150c	PT	WARNING:     Method:"http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService/GetCookie"
2011-09-15	11:38:50:766	 380	150c	PT	WARNING:     ID:e17d2c3a-abdd-4625-aeef-63ebae2c2ec9
2011-09-15	11:38:50:797	 380	150c	PT	WARNING: Cached cookie has expired or new PID is available
2011-09-15	11:38:50:797	 380	150c	PT	Initializing simple targeting cookie, clientId = 26396688-271b-4a8e-82e0-d1e1248b4466, target group = , DNS name = orpc8.orion.local
2011-09-15	11:38:50:797	 380	150c	PT	  Server URL = http://ormanage/SimpleAuthWebService/SimpleAuth.asmx
2011-09-15	11:38:54:962	 380	150c	PT	+++++++++++  PT: Synchronizing extended update info  +++++++++++
2011-09-15	11:38:54:962	 380	150c	PT	  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://ormanage/ClientWebService/client.asmx
2011-09-15	11:38:55:181	 380	150c	Agent	  * Found 0 updates and 62 categories in search; evaluated appl. rules of 1002 out of 1538 deployed entities
2011-09-15	11:38:55:181	 380	150c	Agent	*********
2011-09-15	11:38:55:181	 380	150c	Agent	**  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
2011-09-15	11:38:55:181	 380	150c	Agent	*************
2011-09-15	11:38:55:196	 380	1044	AU	>>##  RESUMED  ## AU: Search for updates [CallId = {32CCAA2B-1A4D-4846-9C51-7F54E9A2E42F}]
2011-09-15	11:38:55:196	 380	1044	AU	  # 0 updates detected
2011-09-15	11:38:55:196	 380	1044	AU	#########
2011-09-15	11:38:55:196	 380	1044	AU	##  END  ##  AU: Search for updates [CallId = {32CCAA2B-1A4D-4846-9C51-7F54E9A2E42F}]
2011-09-15	11:38:55:196	 380	1044	AU	#############
2011-09-15	11:38:55:196	 380	1044	AU	Successfully wrote event for AU health state:0
2011-09-15	11:38:55:196	 380	1044	AU	Featured notifications is disabled.
2011-09-15	11:38:55:196	 380	1044	AU	AU setting next detection timeout to 2011-09-16 06:06:52
2011-09-15	11:38:55:196	 380	1044	AU	Setting AU scheduled install time to 2011-09-16 18:00:00
2011-09-15	11:38:55:196	 380	1044	AU	Successfully wrote event for AU health state:0
2011-09-15	11:38:55:196	 380	1044	AU	Successfully wrote event for AU health state:0
2011-09-15	11:39:00:188	 380	150c	Report	REPORT EVENT: {303D5DFC-8CC8-4E02-96A1-C8D0DC36C4B3}	2011-09-15 11:38:55:181+0300	1	147	101	{00000000-0000-0000-0000-000000000000}	0	0	AutomaticUpdates	Success	Software Synchronization	Windows Update Client successfully detected 0 updates.
2011-09-15	11:39:00:188	 380	150c	Report	REPORT EVENT: {90DCB42A-7ACD-4A5D-AB49-F174A468A394}	2011-09-15 11:38:55:181+0300	1	156	101	{00000000-0000-0000-0000-000000000000}	0	0	AutomaticUpdates	Success	Pre-Deployment Check	Reporting client status.
2011-09-15	11:39:00:188	 380	150c	Report	CWERReporter finishing event handling. (00000000)
2011-09-15	11:44:56:274	 380	150c	Report	Uploading 2 events using cached cookie, reporting URL = http://ormanage/ReportingWebService/ReportingWebService.asmx
2011-09-15	11:44:56:274	 380	150c	Report	Reporter successfully uploaded 2 events.

Open in new window


In addition, the ClientDiag.exe reports "GetFileVersion(szEngineDir,&susVersion) failed with hr=0x80070002"

 
C:\>C:\Windows\ClientDiag.exe

WSUS Client Diagnostics Tool

Checking Machine State
        Checking for admin rights to run tool . . . . . . . . . PASS
        Automatic Updates Service is running. . . . . . . . . . PASS
        Background Intelligent Transfer Service is running. . . PASS

GetFileVersion(szEngineDir,&susVersion) failed with hr=0x80070002

The system cannot find the file specified.

Open in new window


Thanks in advance
Oded
0
Comment
Question by:ness-tsg-cto
  • 5
  • 2
  • 2
  • +1
11 Comments
 
LVL 37

Expert Comment

by:Neil Russell
Comment Utility
What OS is the server?

This error is often caused by a known conflict between htttp.sys and IIS6 on Win2003SP1 systems.

See this hotfix for a possible solution:
http://support.microsoft.com/?id=898708

0
 
LVL 37

Expert Comment

by:Neil Russell
Comment Utility
Also have you tried doing a wuauclt /resetauthorization /detectnow from a command prompt?
0
 

Author Comment

by:ness-tsg-cto
Comment Utility
@Neilsr:

1. The server OS is Windows 2008 R2.
2. I was trying to perform wuauclt /resetauthorization /detectnow, nothing happens.
0
 

Expert Comment

by:ArticFruit
Comment Utility
I normally use this script to get a clean wsus registration:

@echo off
Echo Save the batch file "AU_Clean_SID.cmd". This batch file will do the following:
Echo 1.    Stops the wuauserv service
Echo 2.    Deletes the AccountDomainSid registry key (if it exists)
Echo 3.    Deletes the PingID registry key (if it exists)
Echo 4.    Deletes the SusClientId registry key (if it exists)
Echo 5.    Restarts the wuauserv service
Echo 6.    Resets the Authorization Cookie
Echo 6.    More information on http://msmvps.com/Athif
Pause
@echo on
net stop wuauserv
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v AccountDomainSid /f
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v PingID /f
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v SusClientId /f
net start wuauserv
wuauclt /resetauthorization /detectnow /reportnow
Pause
0
 

Author Comment

by:ness-tsg-cto
Comment Utility
Thanks ArticFruit, after running the script, there are still no updates....
0
Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 

Expert Comment

by:ArticFruit
Comment Utility
How does it look in the wsus console? Can you see the server and how many updates are pending?
0
 
LVL 47

Expert Comment

by:dstewartjr
Comment Utility
Your clientdiag error hr=0x80070002 is because it doesnt run on 64 bit systems, clientdiag is 32 bit only

Try these steps

Stop the service "Windows Management Instrumentation" (WMI),
Delete the directory "% systemroot% \ system32 \ wbem \ repository"
Start the service "Windows Management Instrumentation" (WMI)

Wuauclt / detectnow
0
 
LVL 47

Expert Comment

by:dstewartjr
Comment Utility
If that dont work, run the System Update Readiness tool

http://www.microsoft.com/download/en/details.aspx?id=14668
0
 

Author Comment

by:ness-tsg-cto
Comment Utility
Thanks!!, I will try that and report back
0
 

Accepted Solution

by:
ness-tsg-cto earned 0 total points
Comment Utility
Well.... after copying c:\wsus again, exporting and importing (again) the database > clients can get updates.

Thanks for everyone !
0
 

Author Closing Comment

by:ness-tsg-cto
Comment Utility
I have manage to solve the problem after re-exporting the db
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
Redirected folders in a windows domain can be quite useful for a number of reasons, one of them being that with redirected application data, you can give users more seamless experience when logging into different workstations.  For example, if a use…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now