Solved

WSUS Client Update Problem

Posted on 2012-03-12
9
1,001 Views
Last Modified: 2012-06-21
Hi,

I've been having a problem with some of my WSUS clients not downloading any updates. I've been through various tasks to try and correct this problem and I'm now not sure if this is still a problem or not. The initial issue was this in the windowsupdate.log:

DnldMgr Error 0x80072efe occurred while downloading update; notifying dependent calls.

I then reset the software distribution folder, restarted everything and now this appears in the log:

2012-03-12 12:56:14:858 1440 d9c AU ###########  AU: Initializing Automatic Updates  ###########
2012-03-12 12:56:14:858 1440 d9c AU AU setting next sqm report timeout to 2012-03-12 12:56:14
2012-03-12 12:56:14:858 1440 d9c AU   # WSUS server: http://qmtappsvr03:8530
2012-03-12 12:56:14:858 1440 d9c AU   # Detection frequency: 22
2012-03-12 12:56:14:858 1440 d9c AU   # Approval type: Scheduled (Policy)
2012-03-12 12:56:14:858 1440 d9c AU   # Scheduled install day/time: Every day at 3:00
2012-03-12 12:56:14:858 1440 d9c AU   # Auto-install minor updates: Yes (User preference)
2012-03-12 12:56:14:874 1440 d9c AU Setting AU scheduled install time to 2012-03-13 03:00:00
2012-03-12 12:56:14:874 1440 d9c AU Initializing featured updates
2012-03-12 12:56:14:874 1440 d9c AU Found 0 cached featured updates
2012-03-12 12:56:14:874 1440 d9c AU AU finished delayed initialization
2012-03-12 12:56:15:046 1440 d9c Report ***********  Report: Initializing static reporting data  ***********
2012-03-12 12:56:15:046 1440 d9c Report   * OS Version = 5.1.2600.3.0.65792
2012-03-12 12:56:15:108 1440 d9c Report   * Computer Brand = Hewlett-Packard
2012-03-12 12:56:15:108 1440 d9c Report   * Computer Model = HP Pro 3015 Microtower PC
2012-03-12 12:56:15:124 1440 d9c Report   * Bios Revision = 5.15  
2012-03-12 12:56:15:124 1440 d9c Report   * Bios Name = BIOS Date: 04/23/10 11:08:44 Ver: 5.15
2012-03-12 12:56:15:124 1440 d9c Report   * Bios Release Date = 2010-04-23T00:00:00
2012-03-12 12:56:15:124 1440 d9c Report   * Locale ID = 2057

This is where it stops, even if i stop/start the Auto updates service, it logs to this same point and then nothing after. Is this normal as looking at other, working clients, there appears to be a bit more in the logs.

The server is WSUS 3 and the client is Windows XP SP3

Thanks

Paul
0
Comment
Question by:the1paulcole
  • 5
  • 3
9 Comments
 
LVL 2

Assisted Solution

by:fuzzer123456
fuzzer123456 earned 150 total points
ID: 37710224
try the following VBS file. Should solve the client problem.

Paste the below into notepad and save as detectnow.vbs.

Run it on the client and wait about 20mins or so.

*-*-*-*-*-*-*-

Set oShell = CreateObject("WScript.Shell")

sRegKey = "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate"

' suppress error in case values does not exist
On Error Resume Next

' check for marker
sIDDeleted = oShell.RegRead( sRegKey & "\IDDeleted")

' to be sure values is only deleted once, test on marker
If sIDDeleted <> "yes" Then
' delete values
oShell.RegDelete sRegKey & "\AccountDomainSid"
oShell.RegDelete sRegKey & "\PingID"
oShell.RegDelete sRegKey & "\SusClientId"

' Stop and start the Automatic updates service
oShell.Run "%SystemRoot%\system32\net.exe stop wuauserv", 0, True
oShell.Run "%SystemRoot%\system32\net.exe start wuauserv", 0, True

' Run wuauclt.exe with resetauthorization
sCmd = "%SystemRoot%\system32\wuauclt.exe /resetauthorization /detectnow"
oShell.Run sCmd, 0, True

' create marker
oShell.RegWrite sRegKey & "\IDDeleted", "yes"
End If
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 37710292
0
 
LVL 47

Assisted Solution

by:Donald Stewart
Donald Stewart earned 150 total points
ID: 37710390
Resetting Windows Update Components is also another option to try


http://support.microsoft.com/kb/971058
0
 
LVL 1

Author Comment

by:the1paulcole
ID: 37713833
Ah ha, I wish i had found that kb before going through everything else I had to get to this point... It has worked, however, I have noticed in the log that the client appears to be pulling it's updates directly from Microsoft as opposed to the WSUS server:

2012-03-13      05:01:09:660      1440      558      DnldMgr      ***********  DnldMgr: New download job [UpdateId = {6497A0D7-0B72-489B-A1B1-232DA483C5AA}.106]  ***********
2012-03-13      05:01:10:191      1440      558      DnldMgr        * BITS job initialized, JobId = {4B08E85F-04FF-44A6-8894-8462672048BE}
2012-03-13      05:01:10:598      1440      558      DnldMgr        * Downloading from http://au.download.windowsupdate.com/msdownload/update/software/secu/2011/11/windowsxp-kb2585542-x86-enu_8812e165246f8a1b68f65330ba5621818d9d348c.exe to C:\WINDOWS\SoftwareDistribution\Download\f6704dac24299a592e4e7aa77f5965e1\windowsxp-kb2585542-x86-enu.exe (full file).
2012-03-13      05:01:11:535      1440      df4      DnldMgr      BITS job {7F75A129-CB88-4E91-AA61-2D8B92D90DF5} completed successfully
2012-03-13      05:01:11:723      1440      df4      Misc      Validating signature for C:\WINDOWS\SoftwareDistribution\Download\c3620a167d80b131f28b6d5b0bebf853\windowsxp-kb2646524-x86-express-enu.cab:
2012-03-13      05:01:11:738      1440      df4      Misc       Microsoft signed: Yes
2012-03-13      05:01:11:738      1440      df4      DnldMgr        Download job bytes total = 247122, bytes transferred = 244238
2012-03-13      05:01:11:770      1440      df4      DnldMgr      ***********  DnldMgr: New download job [UpdateId = {4619C813-5E67-4170-AC1B-41B9871BC8E2}.101]  ***********
2012-03-13      05:01:11:770      1440      df4      DnldMgr        * Queueing update for download handler request generation.
2012-03-13      05:01:11:770      1440      df4      DnldMgr      Generating download request for update {4619C813-5E67-4170-AC1B-41B9871BC8E2}.101
2012-03-13      05:01:12:129      1440      df4      Handler      Windows Patch download for UpdateId = {4619C813-5E67-4170-AC1B-41B9871BC8E2}: selected action is download express (delta).
2012-03-13      05:01:12:160      1440      df4      Handler      Updateci: ExpandTokenizedPath( <hklm\software\microsoft\preinstall,path>\winse\wxp_x86_0409_v1\update.exe.ref ): failed (2)
2012-03-13      05:01:12:160      1440      df4      Handler      Updateci: ConvertToXpdFailure: Change error 2 (0x2) to 4316
2012-03-13      05:01:12:160      1440      df4      Handler      Updateci: WinSEUpdateHandler::_UnpackCab: Failed extracting XPD to C:\WINDOWS\SoftwareDistribution\Download\c3620a167d80b131f28b6d5b0bebf853 (4316, 0x10dc)
2012-03-13      05:01:12:160      1440      df4      Handler      Updateci: WinSEUpdateHandler::_Unpack: Mapping XPD failure to STATUS_RETRY_SELF_CONTAINED 0xF207
2012-03-13      05:01:12:160      1440      df4      Handler      Updateci: WinSEUpdateHandler::_Unpack: C:\WINDOWS\SoftwareDistribution\Download\c3620a167d80b131f28b6d5b0bebf853\windowsxp-kb2646524-x86-express-enu.cab failed (61959)
2012-03-13      05:01:12:160      1440      df4      Handler      FATAL: UH: 0x8007f207: Unpack failed in CUHWindowsPatchHandler::ValidateAndUnpackPackage
2012-03-13      05:01:12:160      1440      df4      Handler      FATAL: UH: 0x8024200c: ValidateAndUnpackPackage failed in CUHWindowsPatchHandler::GetRequiredFilesForSandboxState
2012-03-13      05:01:12:176      1440      df4      Handler      Windows Patch download for UpdateId = {4619C813-5E67-4170-AC1B-41B9871BC8E2}: selected action is download full-file.
2012-03-13      05:01:12:207      1440      df4      DnldMgr      ***********  DnldMgr: New download job [UpdateId = {4619C813-5E67-4170-AC1B-41B9871BC8E2}.101]  ***********
2012-03-13      05:01:12:738      1440      df4      DnldMgr        * BITS job initialized, JobId = {AAC811D3-E57D-4D28-8D62-AF19C4F84F1A}
2012-03-13      05:01:13:113      1440      df4      DnldMgr        * Downloading from http://au.download.windowsupdate.com/msdownload/update/software/secu/2011/12/windowsxp-kb2646524-x86-enu_4d4352a7ab38598cd5503dec07f03d5c9a10b928.exe to C:\WINDOWS\SoftwareDistribution\Download\c3620a167d80b131f28b6d5b0bebf853\windowsxp-kb2646524-x86-enu.exe (full file).
2012-03-13      05:01:13:723      1440      558      DnldMgr      BITS job {5923CC79-40BA-400F-908D-39B960CB2E78} completed successfully
2012-03-13      05:01:13:910      1440      558      Misc      Validating signature for C:\WINDOWS\SoftwareDistribution\Download\9e60c24a6ee0f71be2a1e782caa15bc5\windowsxp-kb2544893-v2-x86-express-enu.cab:

The WSUS settings are done by GPO and running a quick results wizard does indicate that the GPO is still reaching the machine, yet all of the download attempts i have seen in the windows update log indicate the client is ignoring the WSUS Server.. And i've also got a log full of this again:

2012-03-13      05:06:44:145      1440      4cc      DnldMgr      Error 0x80072efe occurred while downloading update; notifying dependent calls.

Any ideas?
0
Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

 
LVL 47

Expert Comment

by:Donald Stewart
ID: 37714832
Is the time correct on this PC?
0
 
LVL 1

Author Comment

by:the1paulcole
ID: 37719651
Yeah, they're all set to read from the pdc. It's not just one client either. Basically, I ran the MS 'Fix it' on one of the problem clients yesterday. I then noticed numerous updates scheduled for install and after looking this morning, all of the updates went on fine. However, there were still quite a few updates needed for this PC and yet again, they won't download:

I've attached an excerpt from the log showing the results after I stop/started the automatic updates service.
0
 
LVL 1

Author Comment

by:the1paulcole
ID: 37728686
Well, I think I've found part of the problem. Executables are blocked at the firewall level and since opening this up, it looks like all clients are now able to download the updates. However, I'm not entirely sure why the clients seem to be going directly to MS as opposed to the WSUS Server. Even so, at least they are updating which is a start.
0
 
LVL 1

Accepted Solution

by:
the1paulcole earned 0 total points
ID: 37746440
Sorted this in the end. All clients appear to now be updating properly and downloading from the WSUS server which wasn't happening before. The WSUS server wasn't storing updates locally which it used to. This has been corrected along with a cleanup of the database. I also found an article on a problem with the Office 2003 SP1 which had been known to cause issues - this has now been declined and i'm seeing most of my clients now working correctly.

Thanks to the few responses I got.
0
 
LVL 1

Author Closing Comment

by:the1paulcole
ID: 37764901
Multiple reasons mostly server related and not client related which I resolved myself
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
OfficeMate Freezes on login or does not load after login credentials are input.
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…

759 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now