?
Solved

Offline WSUS - clients won't get updates

Posted on 2011-09-15
11
Medium Priority
?
6,818 Views
Last Modified: 2013-02-13
Hello

We have got two WSUS servers, one is connected to the internet while the other is inside a closed network (due to security). we are using import-export in order to sync the update from the online server to the offline server.
The problem is that after approving a test machine, setting the GPO and checking for new updates nothing happen, the client log reported: "Found 0 updates" (full log below)

 
2011-09-15	11:35:01:506	 380	784	AU	AU received policy change subscription event
2011-09-15	11:38:46:226	 380	a88	AU	Triggering AU detection through DetectNow API
2011-09-15	11:38:46:226	 380	a88	AU	Triggering Online detection (interactive)
2011-09-15	11:38:46:226	 380	784	AU	#############
2011-09-15	11:38:46:226	 380	784	AU	## START ##  AU: Search for updates
2011-09-15	11:38:46:226	 380	784	AU	#########
2011-09-15	11:38:46:242	 380	784	AU	<<## SUBMITTED ## AU: Search for updates [CallId = {32CCAA2B-1A4D-4846-9C51-7F54E9A2E42F}]
2011-09-15	11:38:46:242	 380	150c	Agent	*************
2011-09-15	11:38:46:242	 380	150c	Agent	** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
2011-09-15	11:38:46:242	 380	150c	Agent	*********
2011-09-15	11:38:46:242	 380	150c	Agent	  * Online = Yes; Ignore download priority = No
2011-09-15	11:38:46:242	 380	150c	Agent	  * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
2011-09-15	11:38:46:242	 380	150c	Agent	  * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
2011-09-15	11:38:46:242	 380	150c	Agent	  * Search Scope = {Machine}
2011-09-15	11:38:46:289	 380	150c	Setup	Checking for agent SelfUpdate
2011-09-15	11:38:46:320	 380	150c	Setup	Client version: Core: 7.4.7600.226  Aux: 7.4.7600.226
2011-09-15	11:38:46:320	 380	150c	Misc	Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2011-09-15	11:38:46:336	 380	150c	Misc	 Microsoft signed: Yes
2011-09-15	11:38:46:336	 380	150c	Misc	Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2011-09-15	11:38:46:351	 380	150c	Misc	 Microsoft signed: Yes
2011-09-15	11:38:46:351	 380	150c	Misc	Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
2011-09-15	11:38:46:367	 380	150c	Misc	 Microsoft signed: Yes
2011-09-15	11:38:46:367	 380	150c	Misc	Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
2011-09-15	11:38:46:367	 380	150c	Misc	 Microsoft signed: Yes
2011-09-15	11:38:46:398	 380	150c	Setup	Determining whether a new setup handler needs to be downloaded
2011-09-15	11:38:46:398	 380	150c	Setup	SelfUpdate handler is not found.  It will be downloaded
2011-09-15	11:38:46:398	 380	150c	Setup	Evaluating applicability of setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~amd64~~7.4.7600.226"
2011-09-15	11:38:47:147	 380	150c	Setup	Setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~amd64~~7.4.7600.226" is already installed.
2011-09-15	11:38:47:147	 380	150c	Setup	Evaluating applicability of setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~amd64~~7.4.7600.226"
2011-09-15	11:38:47:162	 380	150c	Setup	Setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~amd64~~7.4.7600.226" is already installed.
2011-09-15	11:38:47:162	 380	150c	Setup	Evaluating applicability of setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~amd64~~7.4.7600.226"
2011-09-15	11:38:47:194	 380	150c	Setup	Setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~amd64~~7.4.7600.226" is already installed.
2011-09-15	11:38:47:194	 380	150c	Setup	SelfUpdate check completed.  SelfUpdate is NOT required.
2011-09-15	11:38:48:332	 380	150c	PT	+++++++++++  PT: Synchronizing server updates  +++++++++++
2011-09-15	11:38:48:332	 380	150c	PT	  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://ormanage/ClientWebService/client.asmx
2011-09-15	11:38:48:442	 380	150c	PT	WARNING: Cached cookie has expired or new PID is available
2011-09-15	11:38:48:442	 380	150c	PT	Initializing simple targeting cookie, clientId = 26396688-271b-4a8e-82e0-d1e1248b4466, target group = , DNS name = orpc8.orion.local
2011-09-15	11:38:48:442	 380	150c	PT	  Server URL = http://ormanage/SimpleAuthWebService/SimpleAuth.asmx
2011-09-15	11:38:50:766	 380	150c	PT	WARNING: GetCookie failure, error = 0x8024400D, soap client error = 7, soap error code = 300, HTTP status code = 200
2011-09-15	11:38:50:766	 380	150c	PT	WARNING: SOAP Fault: 0x00012c
2011-09-15	11:38:50:766	 380	150c	PT	WARNING:     faultstring:Fault occurred
2011-09-15	11:38:50:766	 380	150c	PT	WARNING:     ErrorCode:ConfigChanged(2)
2011-09-15	11:38:50:766	 380	150c	PT	WARNING:     Message:(null)
2011-09-15	11:38:50:766	 380	150c	PT	WARNING:     Method:"http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService/GetCookie"
2011-09-15	11:38:50:766	 380	150c	PT	WARNING:     ID:e17d2c3a-abdd-4625-aeef-63ebae2c2ec9
2011-09-15	11:38:50:797	 380	150c	PT	WARNING: Cached cookie has expired or new PID is available
2011-09-15	11:38:50:797	 380	150c	PT	Initializing simple targeting cookie, clientId = 26396688-271b-4a8e-82e0-d1e1248b4466, target group = , DNS name = orpc8.orion.local
2011-09-15	11:38:50:797	 380	150c	PT	  Server URL = http://ormanage/SimpleAuthWebService/SimpleAuth.asmx
2011-09-15	11:38:54:962	 380	150c	PT	+++++++++++  PT: Synchronizing extended update info  +++++++++++
2011-09-15	11:38:54:962	 380	150c	PT	  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://ormanage/ClientWebService/client.asmx
2011-09-15	11:38:55:181	 380	150c	Agent	  * Found 0 updates and 62 categories in search; evaluated appl. rules of 1002 out of 1538 deployed entities
2011-09-15	11:38:55:181	 380	150c	Agent	*********
2011-09-15	11:38:55:181	 380	150c	Agent	**  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
2011-09-15	11:38:55:181	 380	150c	Agent	*************
2011-09-15	11:38:55:196	 380	1044	AU	>>##  RESUMED  ## AU: Search for updates [CallId = {32CCAA2B-1A4D-4846-9C51-7F54E9A2E42F}]
2011-09-15	11:38:55:196	 380	1044	AU	  # 0 updates detected
2011-09-15	11:38:55:196	 380	1044	AU	#########
2011-09-15	11:38:55:196	 380	1044	AU	##  END  ##  AU: Search for updates [CallId = {32CCAA2B-1A4D-4846-9C51-7F54E9A2E42F}]
2011-09-15	11:38:55:196	 380	1044	AU	#############
2011-09-15	11:38:55:196	 380	1044	AU	Successfully wrote event for AU health state:0
2011-09-15	11:38:55:196	 380	1044	AU	Featured notifications is disabled.
2011-09-15	11:38:55:196	 380	1044	AU	AU setting next detection timeout to 2011-09-16 06:06:52
2011-09-15	11:38:55:196	 380	1044	AU	Setting AU scheduled install time to 2011-09-16 18:00:00
2011-09-15	11:38:55:196	 380	1044	AU	Successfully wrote event for AU health state:0
2011-09-15	11:38:55:196	 380	1044	AU	Successfully wrote event for AU health state:0
2011-09-15	11:39:00:188	 380	150c	Report	REPORT EVENT: {303D5DFC-8CC8-4E02-96A1-C8D0DC36C4B3}	2011-09-15 11:38:55:181+0300	1	147	101	{00000000-0000-0000-0000-000000000000}	0	0	AutomaticUpdates	Success	Software Synchronization	Windows Update Client successfully detected 0 updates.
2011-09-15	11:39:00:188	 380	150c	Report	REPORT EVENT: {90DCB42A-7ACD-4A5D-AB49-F174A468A394}	2011-09-15 11:38:55:181+0300	1	156	101	{00000000-0000-0000-0000-000000000000}	0	0	AutomaticUpdates	Success	Pre-Deployment Check	Reporting client status.
2011-09-15	11:39:00:188	 380	150c	Report	CWERReporter finishing event handling. (00000000)
2011-09-15	11:44:56:274	 380	150c	Report	Uploading 2 events using cached cookie, reporting URL = http://ormanage/ReportingWebService/ReportingWebService.asmx
2011-09-15	11:44:56:274	 380	150c	Report	Reporter successfully uploaded 2 events.

Open in new window


In addition, the ClientDiag.exe reports "GetFileVersion(szEngineDir,&susVersion) failed with hr=0x80070002"

 
C:\>C:\Windows\ClientDiag.exe

WSUS Client Diagnostics Tool

Checking Machine State
        Checking for admin rights to run tool . . . . . . . . . PASS
        Automatic Updates Service is running. . . . . . . . . . PASS
        Background Intelligent Transfer Service is running. . . PASS

GetFileVersion(szEngineDir,&susVersion) failed with hr=0x80070002

The system cannot find the file specified.

Open in new window


Thanks in advance
Oded
0
Comment
Question by:ness-tsg-cto
  • 5
  • 2
  • 2
  • +1
11 Comments
 
LVL 37

Expert Comment

by:Neil Russell
ID: 36541801
What OS is the server?

This error is often caused by a known conflict between htttp.sys and IIS6 on Win2003SP1 systems.

See this hotfix for a possible solution:
http://support.microsoft.com/?id=898708

0
 
LVL 37

Expert Comment

by:Neil Russell
ID: 36541828
Also have you tried doing a wuauclt /resetauthorization /detectnow from a command prompt?
0
 

Author Comment

by:ness-tsg-cto
ID: 36541873
@Neilsr:

1. The server OS is Windows 2008 R2.
2. I was trying to perform wuauclt /resetauthorization /detectnow, nothing happens.
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Expert Comment

by:ArticFruit
ID: 36542664
I normally use this script to get a clean wsus registration:

@echo off
Echo Save the batch file "AU_Clean_SID.cmd". This batch file will do the following:
Echo 1.    Stops the wuauserv service
Echo 2.    Deletes the AccountDomainSid registry key (if it exists)
Echo 3.    Deletes the PingID registry key (if it exists)
Echo 4.    Deletes the SusClientId registry key (if it exists)
Echo 5.    Restarts the wuauserv service
Echo 6.    Resets the Authorization Cookie
Echo 6.    More information on http://msmvps.com/Athif
Pause
@echo on
net stop wuauserv
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v AccountDomainSid /f
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v PingID /f
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v SusClientId /f
net start wuauserv
wuauclt /resetauthorization /detectnow /reportnow
Pause
0
 

Author Comment

by:ness-tsg-cto
ID: 36542743
Thanks ArticFruit, after running the script, there are still no updates....
0
 

Expert Comment

by:ArticFruit
ID: 36542878
How does it look in the wsus console? Can you see the server and how many updates are pending?
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36543295
Your clientdiag error hr=0x80070002 is because it doesnt run on 64 bit systems, clientdiag is 32 bit only

Try these steps

Stop the service "Windows Management Instrumentation" (WMI),
Delete the directory "% systemroot% \ system32 \ wbem \ repository"
Start the service "Windows Management Instrumentation" (WMI)

Wuauclt / detectnow
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36543311
If that dont work, run the System Update Readiness tool

http://www.microsoft.com/download/en/details.aspx?id=14668
0
 

Author Comment

by:ness-tsg-cto
ID: 36543484
Thanks!!, I will try that and report back
0
 

Accepted Solution

by:
ness-tsg-cto earned 0 total points
ID: 36555619
Well.... after copying c:\wsus again, exporting and importing (again) the database > clients can get updates.

Thanks for everyone !
0
 

Author Closing Comment

by:ness-tsg-cto
ID: 36579022
I have manage to solve the problem after re-exporting the db
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
Suggested Courses

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question