Link to home
Start Free TrialLog in
Avatar of janhoedt
janhoedt

asked on

WSUS: servers not updating

Hi,

I have setup WSUS 3 in my W2008 R2 domain. Policies are ok, WSUS is ok, BUT nothing happens. I don't see the updates appearing/installing.
How to troubleshoot?

User generated image
User generated image
Please advise.
J.
Avatar of motnahp00
motnahp00
Flag of United States of America image

Out of curiosity, did you clone your machines?
Avatar of Don
Have you approved the updates??
Avatar of janhoedt
janhoedt

ASKER

No clones, updates approved.
FYI if clients have version 7.0.6000.374 or later of the WUA, duplicate SID should not be an issue

More Information section here:
http://support.microsoft.com/kb/903262

"We have added an automatic feature to the Windows Update Agent that is installed on WSUS client computers. This feature can help address this duplicate-SusClientID issue. The feature provides a solution that is added to the client-side Windows Update Agent starting with version 7.0.6000.374. (This version is the client version that was included with WSUS 3.0.)

This solution uses a hardware validation routine to determine whether the current client hardware has changed since the SUSClientID value was created. (This hardware includes network adapters and hard disks.)"
Are these client machines pending reboots?
Do you notice any errors in their windowsupdate.log ?? <<Read from bottom up
No pending reboots.
From your screenshot, you can click on "Updates Needed 29" and get further info
User generated image
04:45:44:548       924      4a4      AU      ## START ##  AU: Search for updates
2012-05-24      04:45:44:548       924      4a4      AU      #########
2012-05-24      04:45:44:548       924      4a4      AU      <<## SUBMITTED ## AU: Search for updates [CallId = {31640201-7468-40A5-A64E-165CAB39B39B}]
2012-05-24      04:45:44:564       924      ffc      Agent      *************
2012-05-24      04:45:44:564       924      ffc      Agent      ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
2012-05-24      04:45:44:564       924      ffc      Agent      *********
2012-05-24      04:45:44:564       924      ffc      Agent        * Online = Yes; Ignore download priority = No
2012-05-24      04:45:44:564       924      ffc      Agent        * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
2012-05-24      04:45:44:564       924      ffc      Agent        * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
2012-05-24      04:45:44:564       924      ffc      Agent        * Search Scope = {Machine}
2012-05-24      04:45:44:564       924      ffc      Setup      Checking for agent SelfUpdate
2012-05-24      04:45:44:564       924      ffc      Setup      Client version: Core: 7.5.7601.17514  Aux: 7.5.7601.17514
2012-05-24      04:45:44:564       924      ffc      Misc      Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2012-05-24      04:45:44:580       924      ffc      Misc       Microsoft signed: Yes
2012-05-24      04:46:08:228       924      ffc      Misc      WARNING: Send failed with hr = 80072ee2.
2012-05-24      04:46:08:228       924      ffc      Misc      WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-05-24      04:46:08:228       924      ffc      Misc      WARNING: WinHttp: SendRequestUsingProxy failed for <http://wsus.mydomain.local/selfupdate/wuident.cab>. error 0x80072ee2
2012-05-24      04:46:08:228       924      ffc      Misc      WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
2012-05-24      04:46:08:228       924      ffc      Misc      WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
2012-05-24      04:46:08:228       924      ffc      Misc      WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
2012-05-24      04:46:31:549       924      ffc      Misc      WARNING: Send failed with hr = 80072ee2.
2012-05-24      04:46:31:549       924      ffc      Misc      WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-05-24      04:46:31:549       924      ffc      Misc      WARNING: WinHttp: SendRequestUsingProxy failed for <http://wsus.mydomain.local/selfupdate/wuident.cab>. error 0x80072ee2
2012-05-24      04:46:31:549       924      ffc      Misc      WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
2012-05-24      04:46:31:549       924      ffc      Misc      WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
2012-05-24      04:46:31:549       924      ffc      Misc      WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
2012-05-24      04:46:54:854       924      ffc      Misc      WARNING: Send failed with hr = 80072ee2.
2012-05-24      04:46:54:854       924      ffc      Misc      WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-05-24      04:46:54:854       924      ffc      Misc      WARNING: WinHttp: SendRequestUsingProxy failed for <http://wsus.mydomain.local/selfupdate/wuident.cab>. error 0x80072ee2
2012-05-24      04:46:54:854       924      ffc      Misc      WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
2012-05-24      04:46:54:854       924      ffc      Misc      WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
2012-05-24      04:46:54:854       924      ffc      Misc      WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
2012-05-24      04:47:18:175       924      ffc      Misc      WARNING: Send failed with hr = 80072ee2.
2012-05-24      04:47:18:175       924      ffc      Misc      WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-05-24      04:47:18:175       924      ffc      Misc      WARNING: WinHttp: SendRequestUsingProxy failed for <http://wsus.mydomain.local/selfupdate/wuident.cab>. error 0x80072ee2
2012-05-24      04:47:18:175       924      ffc      Misc      WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
2012-05-24      04:47:18:175       924      ffc      Misc      WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
2012-05-24      04:47:18:175       924      ffc      Misc      WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
2012-05-24      04:47:18:175       924      ffc      Misc      WARNING: DownloadFileInternal failed for http://wsus.mydomain.local/selfupdate/wuident.cab: error 0x80072ee2
2012-05-24      04:47:18:175       924      ffc      Setup      WARNING: SelfUpdate check failed to download package information, error = 0x80072EE2
2012-05-24      04:47:18:175       924      ffc      Setup      FATAL: SelfUpdate check failed, err = 0x80072EE2
2012-05-24      04:47:18:190       924      ffc      Agent        * WARNING: Skipping scan, self-update check returned 0x80072EE2
2012-05-24      04:47:18:206       924      ffc      Agent        * WARNING: Exit code = 0x80072EE2
2012-05-24      04:47:18:206       924      ffc      Agent      *********
2012-05-24      04:47:18:206       924      ffc      Agent      **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
2012-05-24      04:47:18:206       924      ffc      Agent      *************
2012-05-24      04:47:18:206       924      ffc      Agent      WARNING: WU client failed Searching for update with error 0x80072ee2
2012-05-24      04:47:18:206       924      f6c      AU      >>##  RESUMED  ## AU: Search for updates [CallId = {31640201-7468-40A5-A64E-165CAB39B39B}]
2012-05-24      04:47:18:206       924      f6c      AU        # WARNING: Search callback failed, result = 0x80072EE2
2012-05-24      04:47:18:206       924      f6c      AU        # WARNING: Failed to find updates with error code 80072EE2
2012-05-24      04:47:18:206       924      f6c      AU      #########
2012-05-24      04:47:18:206       924      f6c      AU      ##  END  ##  AU: Search for updates [CallId = {31640201-7468-40A5-A64E-165CAB39B39B}]
2012-05-24      04:47:18:206       924      f6c      AU      #############
2012-05-24      04:47:18:206       924      f6c      AU      Successfully wrote event for AU health state:0
2012-05-24      04:47:18:206       924      f6c      AU      AU setting next detection timeout to 2012-05-24 07:47:18
2012-05-24      04:47:18:206       924      f6c      AU      Setting AU scheduled install time to 2012-05-25 01:00:00
2012-05-24      04:47:18:206       924      f6c      AU      Successfully wrote event for AU health state:0
2012-05-24      04:47:18:206       924      f6c      AU      Successfully wrote event for AU health state:0
2012-05-24      04:47:23:198       924      ffc      Report      REPORT EVENT: {161585CF-A68B-49B0-8B11-C879BF06C31A}      2012-05-24 04:47:18:190+0200      1      148      101      {D67661EB-2423-451D-BF5D-13199E37DF28}      1      80072ee2      SelfUpdate      Failure      Software Synchronization      Windows Update Client failed to detect with error 0x80072ee2.
2012-05-24      04:47:23:323       924      ffc      Report      CWERReporter::HandleEvents - WER report upload completed with status 0x8
2012-05-24      04:47:23:323       924      ffc      Report      WER Report sent: 7.5.7601.17514 0x80072ee2 D67661EB-2423-451D-BF5D-13199E37DF28 Scan 101 Managed
2012-05-24      04:47:23:323       924      ffc      Report      CWERReporter finishing event handling. (00000000)
2012-05-24      04:55:09:489       924      ffc      PT      WARNING: Cached cookie has expired or new PID is available
2012-05-24      04:55:09:489       924      ffc      PT      Initializing simple targeting cookie, clientId = b28b327b-da51-4431-bdd4-d414cef63a0b, target group = , DNS name = mycomputer.mydomain.local.local
2012-05-24      04:55:09:489       924      ffc      PT        Server URL = http://wsus.mydomain.local/SimpleAuthWebService/SimpleAuth.asmx
2012-05-24      04:55:32:825       924      ffc      Misc      WARNING: Send failed with hr = 80072ee2.
2012-05-24      04:55:32:825       924      ffc      Misc      WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-05-24      04:55:32:825       924      ffc      PT        + Last proxy send request failed with hr = 0x80072EE2, HTTP status code = 0
2012-05-24      04:55:32:825       924      ffc      PT        + Caller provided credentials = No
2012-05-24      04:55:32:825       924      ffc      PT        + Impersonate flags = 0
2012-05-24      04:55:32:825       924      ffc      PT        + Possible authorization schemes used =
2012-05-24      04:55:32:825       924      ffc      PT      WARNING: GetAuthorizationCookie failure, error = 0x80072EE2, soap client error = 5, soap error code = 0, HTTP status code = 200
2012-05-24      04:55:32:825       924      ffc      PT      WARNING: Failed to initialize Simple Targeting Cookie: 0x80072ee2
2012-05-24      04:55:32:825       924      ffc      PT      WARNING: PopulateAuthCookies failed: 0x80072ee2
2012-05-24      04:55:32:825       924      ffc      PT      WARNING: RefreshCookie failed: 0x80072ee2
2012-05-24      04:55:32:825       924      ffc      PT      WARNING: RefreshPTState failed: 0x80072ee2
2012-05-24      04:55:32:825       924      ffc      PT      WARNING: PTError: 0x80072ee2

Computer itself:
User generated image
Applied Group Policy Objects
--------------------------------------------
    Default Domain Controllers Policy
    WSUS
Wsus was down during night, latest update in logfile seems better:

2012-05-24      09:47:35:644       924      46c      AU      Successfully wrote event for AU health state:0
2012-05-24      09:47:35:659       924      46c      AU      Featured notifications is disabled.
2012-05-24      09:47:35:659       924      46c      AU      AU setting next detection timeout to 2012-05-25 05:17:13
2012-05-24      09:47:35:659       924      46c      AU      Setting AU scheduled install time to 2012-05-25 01:00:00
2012-05-24      09:47:35:659       924      46c      AU      Successfully wrote event for AU health state:0
2012-05-24      09:47:35:659       924      46c      AU      Successfully wrote event for AU health state:0
2012-05-24      09:47:40:651       924      848      Report      REPORT EVENT: {9D349866-6597-4BBA-A77E-6D70EB5B4D2A}      2012-05-24 09:47:35:644+0200      1      147      101      {00000000-0000-0000-0000-000000000000}      0      0      AutomaticUpdates      Success      Software Synchronization      Windows Update Client successfully detected 0 updates.
2012-05-24      09:47:40:651       924      848      Report      REPORT EVENT: {C30507E6-6EDA-4626-830A-BAB5DB1E12A4}      2012-05-24 09:47:35:644+0200      1      156      101      {00000000-0000-0000-0000-000000000000}      0      0      AutomaticUpdates      Success      Pre-Deployment Check      Reporting client status.
2012-05-24      09:47:40:651       924      848      Report      CWERReporter finishing event handling. (00000000)
2012-05-24      09:55:54:467       924      848      Report      Uploading 1 events using cached cookie, reporting URL = http://wsus.mydomain.local/ReportingWebService/ReportingWebService.asmx
2012-05-24      09:55:54:482       924      848      Report      Reporter successfully uploaded 1 events.
2012-05-24      09:55:54:498       924      848      Report      Uploading 2 events using cached cookie, reporting URL = http://wsus.mydomain.local/ReportingWebService/ReportingWebService.asmx
2012-05-24      09:55:54:514       924      848      Report      Reporter successfully uploaded 2 events.
User generated image
Now I wonder what this "download" is, is it WSUS which needs to download OR the client.
How to check both?
... and most important: how to trigger update of client(!)
It seems my proxy doesn't allow the update ... status is "synchronizing" all the time.
Tried with Privoxy and Squid proxy.
Did allow through firewall (without proxy) but even then. Will reboot now.
Works fine now. Only thing I would like to know is how to trigger installation from client on WSUS (not the deadline option). Is there one?
ASKER CERTIFIED SOLUTION
Avatar of Don
Don
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Ok, thanks.
Now I have this strange thing.
WSUS says there are updates needed but the server itself says it is up to date.

Then I see the updates are not approved and find that in the section "Updates", my predefined Updates (Windows 2008, Windows 7 etc) are gone!

User generated image