Solved

Offline WSUS - clients won't get updates

Posted on 2011-09-15
11
6,209 Views
Last Modified: 2013-02-13
Hello

We have got two WSUS servers, one is connected to the internet while the other is inside a closed network (due to security). we are using import-export in order to sync the update from the online server to the offline server.
The problem is that after approving a test machine, setting the GPO and checking for new updates nothing happen, the client log reported: "Found 0 updates" (full log below)

 
2011-09-15	11:35:01:506	 380	784	AU	AU received policy change subscription event
2011-09-15	11:38:46:226	 380	a88	AU	Triggering AU detection through DetectNow API
2011-09-15	11:38:46:226	 380	a88	AU	Triggering Online detection (interactive)
2011-09-15	11:38:46:226	 380	784	AU	#############
2011-09-15	11:38:46:226	 380	784	AU	## START ##  AU: Search for updates
2011-09-15	11:38:46:226	 380	784	AU	#########
2011-09-15	11:38:46:242	 380	784	AU	<<## SUBMITTED ## AU: Search for updates [CallId = {32CCAA2B-1A4D-4846-9C51-7F54E9A2E42F}]
2011-09-15	11:38:46:242	 380	150c	Agent	*************
2011-09-15	11:38:46:242	 380	150c	Agent	** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
2011-09-15	11:38:46:242	 380	150c	Agent	*********
2011-09-15	11:38:46:242	 380	150c	Agent	  * Online = Yes; Ignore download priority = No
2011-09-15	11:38:46:242	 380	150c	Agent	  * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
2011-09-15	11:38:46:242	 380	150c	Agent	  * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
2011-09-15	11:38:46:242	 380	150c	Agent	  * Search Scope = {Machine}
2011-09-15	11:38:46:289	 380	150c	Setup	Checking for agent SelfUpdate
2011-09-15	11:38:46:320	 380	150c	Setup	Client version: Core: 7.4.7600.226  Aux: 7.4.7600.226
2011-09-15	11:38:46:320	 380	150c	Misc	Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2011-09-15	11:38:46:336	 380	150c	Misc	 Microsoft signed: Yes
2011-09-15	11:38:46:336	 380	150c	Misc	Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2011-09-15	11:38:46:351	 380	150c	Misc	 Microsoft signed: Yes
2011-09-15	11:38:46:351	 380	150c	Misc	Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
2011-09-15	11:38:46:367	 380	150c	Misc	 Microsoft signed: Yes
2011-09-15	11:38:46:367	 380	150c	Misc	Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
2011-09-15	11:38:46:367	 380	150c	Misc	 Microsoft signed: Yes
2011-09-15	11:38:46:398	 380	150c	Setup	Determining whether a new setup handler needs to be downloaded
2011-09-15	11:38:46:398	 380	150c	Setup	SelfUpdate handler is not found.  It will be downloaded
2011-09-15	11:38:46:398	 380	150c	Setup	Evaluating applicability of setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~amd64~~7.4.7600.226"
2011-09-15	11:38:47:147	 380	150c	Setup	Setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~amd64~~7.4.7600.226" is already installed.
2011-09-15	11:38:47:147	 380	150c	Setup	Evaluating applicability of setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~amd64~~7.4.7600.226"
2011-09-15	11:38:47:162	 380	150c	Setup	Setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~amd64~~7.4.7600.226" is already installed.
2011-09-15	11:38:47:162	 380	150c	Setup	Evaluating applicability of setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~amd64~~7.4.7600.226"
2011-09-15	11:38:47:194	 380	150c	Setup	Setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~amd64~~7.4.7600.226" is already installed.
2011-09-15	11:38:47:194	 380	150c	Setup	SelfUpdate check completed.  SelfUpdate is NOT required.
2011-09-15	11:38:48:332	 380	150c	PT	+++++++++++  PT: Synchronizing server updates  +++++++++++
2011-09-15	11:38:48:332	 380	150c	PT	  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://ormanage/ClientWebService/client.asmx
2011-09-15	11:38:48:442	 380	150c	PT	WARNING: Cached cookie has expired or new PID is available
2011-09-15	11:38:48:442	 380	150c	PT	Initializing simple targeting cookie, clientId = 26396688-271b-4a8e-82e0-d1e1248b4466, target group = , DNS name = orpc8.orion.local
2011-09-15	11:38:48:442	 380	150c	PT	  Server URL = http://ormanage/SimpleAuthWebService/SimpleAuth.asmx
2011-09-15	11:38:50:766	 380	150c	PT	WARNING: GetCookie failure, error = 0x8024400D, soap client error = 7, soap error code = 300, HTTP status code = 200
2011-09-15	11:38:50:766	 380	150c	PT	WARNING: SOAP Fault: 0x00012c
2011-09-15	11:38:50:766	 380	150c	PT	WARNING:     faultstring:Fault occurred
2011-09-15	11:38:50:766	 380	150c	PT	WARNING:     ErrorCode:ConfigChanged(2)
2011-09-15	11:38:50:766	 380	150c	PT	WARNING:     Message:(null)
2011-09-15	11:38:50:766	 380	150c	PT	WARNING:     Method:"http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService/GetCookie"
2011-09-15	11:38:50:766	 380	150c	PT	WARNING:     ID:e17d2c3a-abdd-4625-aeef-63ebae2c2ec9
2011-09-15	11:38:50:797	 380	150c	PT	WARNING: Cached cookie has expired or new PID is available
2011-09-15	11:38:50:797	 380	150c	PT	Initializing simple targeting cookie, clientId = 26396688-271b-4a8e-82e0-d1e1248b4466, target group = , DNS name = orpc8.orion.local
2011-09-15	11:38:50:797	 380	150c	PT	  Server URL = http://ormanage/SimpleAuthWebService/SimpleAuth.asmx
2011-09-15	11:38:54:962	 380	150c	PT	+++++++++++  PT: Synchronizing extended update info  +++++++++++
2011-09-15	11:38:54:962	 380	150c	PT	  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://ormanage/ClientWebService/client.asmx
2011-09-15	11:38:55:181	 380	150c	Agent	  * Found 0 updates and 62 categories in search; evaluated appl. rules of 1002 out of 1538 deployed entities
2011-09-15	11:38:55:181	 380	150c	Agent	*********
2011-09-15	11:38:55:181	 380	150c	Agent	**  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
2011-09-15	11:38:55:181	 380	150c	Agent	*************
2011-09-15	11:38:55:196	 380	1044	AU	>>##  RESUMED  ## AU: Search for updates [CallId = {32CCAA2B-1A4D-4846-9C51-7F54E9A2E42F}]
2011-09-15	11:38:55:196	 380	1044	AU	  # 0 updates detected
2011-09-15	11:38:55:196	 380	1044	AU	#########
2011-09-15	11:38:55:196	 380	1044	AU	##  END  ##  AU: Search for updates [CallId = {32CCAA2B-1A4D-4846-9C51-7F54E9A2E42F}]
2011-09-15	11:38:55:196	 380	1044	AU	#############
2011-09-15	11:38:55:196	 380	1044	AU	Successfully wrote event for AU health state:0
2011-09-15	11:38:55:196	 380	1044	AU	Featured notifications is disabled.
2011-09-15	11:38:55:196	 380	1044	AU	AU setting next detection timeout to 2011-09-16 06:06:52
2011-09-15	11:38:55:196	 380	1044	AU	Setting AU scheduled install time to 2011-09-16 18:00:00
2011-09-15	11:38:55:196	 380	1044	AU	Successfully wrote event for AU health state:0
2011-09-15	11:38:55:196	 380	1044	AU	Successfully wrote event for AU health state:0
2011-09-15	11:39:00:188	 380	150c	Report	REPORT EVENT: {303D5DFC-8CC8-4E02-96A1-C8D0DC36C4B3}	2011-09-15 11:38:55:181+0300	1	147	101	{00000000-0000-0000-0000-000000000000}	0	0	AutomaticUpdates	Success	Software Synchronization	Windows Update Client successfully detected 0 updates.
2011-09-15	11:39:00:188	 380	150c	Report	REPORT EVENT: {90DCB42A-7ACD-4A5D-AB49-F174A468A394}	2011-09-15 11:38:55:181+0300	1	156	101	{00000000-0000-0000-0000-000000000000}	0	0	AutomaticUpdates	Success	Pre-Deployment Check	Reporting client status.
2011-09-15	11:39:00:188	 380	150c	Report	CWERReporter finishing event handling. (00000000)
2011-09-15	11:44:56:274	 380	150c	Report	Uploading 2 events using cached cookie, reporting URL = http://ormanage/ReportingWebService/ReportingWebService.asmx
2011-09-15	11:44:56:274	 380	150c	Report	Reporter successfully uploaded 2 events.

Open in new window


In addition, the ClientDiag.exe reports "GetFileVersion(szEngineDir,&susVersion) failed with hr=0x80070002"

 
C:\>C:\Windows\ClientDiag.exe

WSUS Client Diagnostics Tool

Checking Machine State
        Checking for admin rights to run tool . . . . . . . . . PASS
        Automatic Updates Service is running. . . . . . . . . . PASS
        Background Intelligent Transfer Service is running. . . PASS

GetFileVersion(szEngineDir,&susVersion) failed with hr=0x80070002

The system cannot find the file specified.

Open in new window


Thanks in advance
Oded
0
Comment
Question by:ness-tsg-cto
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 2
  • 2
  • +1
11 Comments
 
LVL 37

Expert Comment

by:Neil Russell
ID: 36541801
What OS is the server?

This error is often caused by a known conflict between htttp.sys and IIS6 on Win2003SP1 systems.

See this hotfix for a possible solution:
http://support.microsoft.com/?id=898708

0
 
LVL 37

Expert Comment

by:Neil Russell
ID: 36541828
Also have you tried doing a wuauclt /resetauthorization /detectnow from a command prompt?
0
 

Author Comment

by:ness-tsg-cto
ID: 36541873
@Neilsr:

1. The server OS is Windows 2008 R2.
2. I was trying to perform wuauclt /resetauthorization /detectnow, nothing happens.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 

Expert Comment

by:ArticFruit
ID: 36542664
I normally use this script to get a clean wsus registration:

@echo off
Echo Save the batch file "AU_Clean_SID.cmd". This batch file will do the following:
Echo 1.    Stops the wuauserv service
Echo 2.    Deletes the AccountDomainSid registry key (if it exists)
Echo 3.    Deletes the PingID registry key (if it exists)
Echo 4.    Deletes the SusClientId registry key (if it exists)
Echo 5.    Restarts the wuauserv service
Echo 6.    Resets the Authorization Cookie
Echo 6.    More information on http://msmvps.com/Athif
Pause
@echo on
net stop wuauserv
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v AccountDomainSid /f
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v PingID /f
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v SusClientId /f
net start wuauserv
wuauclt /resetauthorization /detectnow /reportnow
Pause
0
 

Author Comment

by:ness-tsg-cto
ID: 36542743
Thanks ArticFruit, after running the script, there are still no updates....
0
 

Expert Comment

by:ArticFruit
ID: 36542878
How does it look in the wsus console? Can you see the server and how many updates are pending?
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36543295
Your clientdiag error hr=0x80070002 is because it doesnt run on 64 bit systems, clientdiag is 32 bit only

Try these steps

Stop the service "Windows Management Instrumentation" (WMI),
Delete the directory "% systemroot% \ system32 \ wbem \ repository"
Start the service "Windows Management Instrumentation" (WMI)

Wuauclt / detectnow
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36543311
If that dont work, run the System Update Readiness tool

http://www.microsoft.com/download/en/details.aspx?id=14668
0
 

Author Comment

by:ness-tsg-cto
ID: 36543484
Thanks!!, I will try that and report back
0
 

Accepted Solution

by:
ness-tsg-cto earned 0 total points
ID: 36555619
Well.... after copying c:\wsus again, exporting and importing (again) the database > clients can get updates.

Thanks for everyone !
0
 

Author Closing Comment

by:ness-tsg-cto
ID: 36579022
I have manage to solve the problem after re-exporting the db
0

Featured Post

Comparison of Amazon Drive, Google Drive, OneDrive

What is Best for Backup: Amazon Drive, Google Drive or MS OneDrive? In this free whitepaper we look at their performance, pricing, and platform availability to help you decide which cloud drive is right for your situation. Download and read the results of our testing for free!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question