WSUS: servers not updating

janhoedt
janhoedt used Ask the Experts™
on
Hi,

I have setup WSUS 3 in my W2008 R2 domain. Policies are ok, WSUS is ok, BUT nothing happens. I don't see the updates appearing/installing.
How to troubleshoot?

wsus
policy
Please advise.
J.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Out of curiosity, did you clone your machines?
DonNetwork Administrator

Commented:
Have you approved the updates??

Author

Commented:
No clones, updates approved.
Success in ‘20 With a Profitable Pricing Strategy

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

DonNetwork Administrator

Commented:
FYI if clients have version 7.0.6000.374 or later of the WUA, duplicate SID should not be an issue

More Information section here:
http://support.microsoft.com/kb/903262

"We have added an automatic feature to the Windows Update Agent that is installed on WSUS client computers. This feature can help address this duplicate-SusClientID issue. The feature provides a solution that is added to the client-side Windows Update Agent starting with version 7.0.6000.374. (This version is the client version that was included with WSUS 3.0.)

This solution uses a hardware validation routine to determine whether the current client hardware has changed since the SUSClientID value was created. (This hardware includes network adapters and hard disks.)"
DonNetwork Administrator

Commented:
Are these client machines pending reboots?
DonNetwork Administrator

Commented:
Do you notice any errors in their windowsupdate.log ?? <<Read from bottom up

Author

Commented:
No pending reboots.
DonNetwork Administrator

Commented:
From your screenshot, you can click on "Updates Needed 29" and get further info

Author

Commented:
wsus
04:45:44:548       924      4a4      AU      ## START ##  AU: Search for updates
2012-05-24      04:45:44:548       924      4a4      AU      #########
2012-05-24      04:45:44:548       924      4a4      AU      <<## SUBMITTED ## AU: Search for updates [CallId = {31640201-7468-40A5-A64E-165CAB39B39B}]
2012-05-24      04:45:44:564       924      ffc      Agent      *************
2012-05-24      04:45:44:564       924      ffc      Agent      ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
2012-05-24      04:45:44:564       924      ffc      Agent      *********
2012-05-24      04:45:44:564       924      ffc      Agent        * Online = Yes; Ignore download priority = No
2012-05-24      04:45:44:564       924      ffc      Agent        * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
2012-05-24      04:45:44:564       924      ffc      Agent        * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
2012-05-24      04:45:44:564       924      ffc      Agent        * Search Scope = {Machine}
2012-05-24      04:45:44:564       924      ffc      Setup      Checking for agent SelfUpdate
2012-05-24      04:45:44:564       924      ffc      Setup      Client version: Core: 7.5.7601.17514  Aux: 7.5.7601.17514
2012-05-24      04:45:44:564       924      ffc      Misc      Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2012-05-24      04:45:44:580       924      ffc      Misc       Microsoft signed: Yes
2012-05-24      04:46:08:228       924      ffc      Misc      WARNING: Send failed with hr = 80072ee2.
2012-05-24      04:46:08:228       924      ffc      Misc      WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-05-24      04:46:08:228       924      ffc      Misc      WARNING: WinHttp: SendRequestUsingProxy failed for <http://wsus.mydomain.local/selfupdate/wuident.cab>. error 0x80072ee2
2012-05-24      04:46:08:228       924      ffc      Misc      WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
2012-05-24      04:46:08:228       924      ffc      Misc      WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
2012-05-24      04:46:08:228       924      ffc      Misc      WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
2012-05-24      04:46:31:549       924      ffc      Misc      WARNING: Send failed with hr = 80072ee2.
2012-05-24      04:46:31:549       924      ffc      Misc      WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-05-24      04:46:31:549       924      ffc      Misc      WARNING: WinHttp: SendRequestUsingProxy failed for <http://wsus.mydomain.local/selfupdate/wuident.cab>. error 0x80072ee2
2012-05-24      04:46:31:549       924      ffc      Misc      WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
2012-05-24      04:46:31:549       924      ffc      Misc      WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
2012-05-24      04:46:31:549       924      ffc      Misc      WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
2012-05-24      04:46:54:854       924      ffc      Misc      WARNING: Send failed with hr = 80072ee2.
2012-05-24      04:46:54:854       924      ffc      Misc      WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-05-24      04:46:54:854       924      ffc      Misc      WARNING: WinHttp: SendRequestUsingProxy failed for <http://wsus.mydomain.local/selfupdate/wuident.cab>. error 0x80072ee2
2012-05-24      04:46:54:854       924      ffc      Misc      WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
2012-05-24      04:46:54:854       924      ffc      Misc      WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
2012-05-24      04:46:54:854       924      ffc      Misc      WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
2012-05-24      04:47:18:175       924      ffc      Misc      WARNING: Send failed with hr = 80072ee2.
2012-05-24      04:47:18:175       924      ffc      Misc      WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-05-24      04:47:18:175       924      ffc      Misc      WARNING: WinHttp: SendRequestUsingProxy failed for <http://wsus.mydomain.local/selfupdate/wuident.cab>. error 0x80072ee2
2012-05-24      04:47:18:175       924      ffc      Misc      WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
2012-05-24      04:47:18:175       924      ffc      Misc      WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
2012-05-24      04:47:18:175       924      ffc      Misc      WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
2012-05-24      04:47:18:175       924      ffc      Misc      WARNING: DownloadFileInternal failed for http://wsus.mydomain.local/selfupdate/wuident.cab: error 0x80072ee2
2012-05-24      04:47:18:175       924      ffc      Setup      WARNING: SelfUpdate check failed to download package information, error = 0x80072EE2
2012-05-24      04:47:18:175       924      ffc      Setup      FATAL: SelfUpdate check failed, err = 0x80072EE2
2012-05-24      04:47:18:190       924      ffc      Agent        * WARNING: Skipping scan, self-update check returned 0x80072EE2
2012-05-24      04:47:18:206       924      ffc      Agent        * WARNING: Exit code = 0x80072EE2
2012-05-24      04:47:18:206       924      ffc      Agent      *********
2012-05-24      04:47:18:206       924      ffc      Agent      **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
2012-05-24      04:47:18:206       924      ffc      Agent      *************
2012-05-24      04:47:18:206       924      ffc      Agent      WARNING: WU client failed Searching for update with error 0x80072ee2
2012-05-24      04:47:18:206       924      f6c      AU      >>##  RESUMED  ## AU: Search for updates [CallId = {31640201-7468-40A5-A64E-165CAB39B39B}]
2012-05-24      04:47:18:206       924      f6c      AU        # WARNING: Search callback failed, result = 0x80072EE2
2012-05-24      04:47:18:206       924      f6c      AU        # WARNING: Failed to find updates with error code 80072EE2
2012-05-24      04:47:18:206       924      f6c      AU      #########
2012-05-24      04:47:18:206       924      f6c      AU      ##  END  ##  AU: Search for updates [CallId = {31640201-7468-40A5-A64E-165CAB39B39B}]
2012-05-24      04:47:18:206       924      f6c      AU      #############
2012-05-24      04:47:18:206       924      f6c      AU      Successfully wrote event for AU health state:0
2012-05-24      04:47:18:206       924      f6c      AU      AU setting next detection timeout to 2012-05-24 07:47:18
2012-05-24      04:47:18:206       924      f6c      AU      Setting AU scheduled install time to 2012-05-25 01:00:00
2012-05-24      04:47:18:206       924      f6c      AU      Successfully wrote event for AU health state:0
2012-05-24      04:47:18:206       924      f6c      AU      Successfully wrote event for AU health state:0
2012-05-24      04:47:23:198       924      ffc      Report      REPORT EVENT: {161585CF-A68B-49B0-8B11-C879BF06C31A}      2012-05-24 04:47:18:190+0200      1      148      101      {D67661EB-2423-451D-BF5D-13199E37DF28}      1      80072ee2      SelfUpdate      Failure      Software Synchronization      Windows Update Client failed to detect with error 0x80072ee2.
2012-05-24      04:47:23:323       924      ffc      Report      CWERReporter::HandleEvents - WER report upload completed with status 0x8
2012-05-24      04:47:23:323       924      ffc      Report      WER Report sent: 7.5.7601.17514 0x80072ee2 D67661EB-2423-451D-BF5D-13199E37DF28 Scan 101 Managed
2012-05-24      04:47:23:323       924      ffc      Report      CWERReporter finishing event handling. (00000000)
2012-05-24      04:55:09:489       924      ffc      PT      WARNING: Cached cookie has expired or new PID is available
2012-05-24      04:55:09:489       924      ffc      PT      Initializing simple targeting cookie, clientId = b28b327b-da51-4431-bdd4-d414cef63a0b, target group = , DNS name = mycomputer.mydomain.local.local
2012-05-24      04:55:09:489       924      ffc      PT        Server URL = http://wsus.mydomain.local/SimpleAuthWebService/SimpleAuth.asmx
2012-05-24      04:55:32:825       924      ffc      Misc      WARNING: Send failed with hr = 80072ee2.
2012-05-24      04:55:32:825       924      ffc      Misc      WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-05-24      04:55:32:825       924      ffc      PT        + Last proxy send request failed with hr = 0x80072EE2, HTTP status code = 0
2012-05-24      04:55:32:825       924      ffc      PT        + Caller provided credentials = No
2012-05-24      04:55:32:825       924      ffc      PT        + Impersonate flags = 0
2012-05-24      04:55:32:825       924      ffc      PT        + Possible authorization schemes used =
2012-05-24      04:55:32:825       924      ffc      PT      WARNING: GetAuthorizationCookie failure, error = 0x80072EE2, soap client error = 5, soap error code = 0, HTTP status code = 200
2012-05-24      04:55:32:825       924      ffc      PT      WARNING: Failed to initialize Simple Targeting Cookie: 0x80072ee2
2012-05-24      04:55:32:825       924      ffc      PT      WARNING: PopulateAuthCookies failed: 0x80072ee2
2012-05-24      04:55:32:825       924      ffc      PT      WARNING: RefreshCookie failed: 0x80072ee2
2012-05-24      04:55:32:825       924      ffc      PT      WARNING: RefreshPTState failed: 0x80072ee2
2012-05-24      04:55:32:825       924      ffc      PT      WARNING: PTError: 0x80072ee2

Computer itself:
windowsupdateoncomputer
Applied Group Policy Objects
--------------------------------------------
    Default Domain Controllers Policy
    WSUS

Author

Commented:
Wsus was down during night, latest update in logfile seems better:

2012-05-24      09:47:35:644       924      46c      AU      Successfully wrote event for AU health state:0
2012-05-24      09:47:35:659       924      46c      AU      Featured notifications is disabled.
2012-05-24      09:47:35:659       924      46c      AU      AU setting next detection timeout to 2012-05-25 05:17:13
2012-05-24      09:47:35:659       924      46c      AU      Setting AU scheduled install time to 2012-05-25 01:00:00
2012-05-24      09:47:35:659       924      46c      AU      Successfully wrote event for AU health state:0
2012-05-24      09:47:35:659       924      46c      AU      Successfully wrote event for AU health state:0
2012-05-24      09:47:40:651       924      848      Report      REPORT EVENT: {9D349866-6597-4BBA-A77E-6D70EB5B4D2A}      2012-05-24 09:47:35:644+0200      1      147      101      {00000000-0000-0000-0000-000000000000}      0      0      AutomaticUpdates      Success      Software Synchronization      Windows Update Client successfully detected 0 updates.
2012-05-24      09:47:40:651       924      848      Report      REPORT EVENT: {C30507E6-6EDA-4626-830A-BAB5DB1E12A4}      2012-05-24 09:47:35:644+0200      1      156      101      {00000000-0000-0000-0000-000000000000}      0      0      AutomaticUpdates      Success      Pre-Deployment Check      Reporting client status.
2012-05-24      09:47:40:651       924      848      Report      CWERReporter finishing event handling. (00000000)
2012-05-24      09:55:54:467       924      848      Report      Uploading 1 events using cached cookie, reporting URL = http://wsus.mydomain.local/ReportingWebService/ReportingWebService.asmx
2012-05-24      09:55:54:482       924      848      Report      Reporter successfully uploaded 1 events.
2012-05-24      09:55:54:498       924      848      Report      Uploading 2 events using cached cookie, reporting URL = http://wsus.mydomain.local/ReportingWebService/ReportingWebService.asmx
2012-05-24      09:55:54:514       924      848      Report      Reporter successfully uploaded 2 events.

Author

Commented:
status
Now I wonder what this "download" is, is it WSUS which needs to download OR the client.
How to check both?

Author

Commented:
... and most important: how to trigger update of client(!)

Author

Commented:
It seems my proxy doesn't allow the update ... status is "synchronizing" all the time.
Tried with Privoxy and Squid proxy.
Did allow through firewall (without proxy) but even then. Will reboot now.

Author

Commented:
Works fine now. Only thing I would like to know is how to trigger installation from client on WSUS (not the deadline option). Is there one?
Network Administrator
Commented:
Sorry, for some reason my notifications were going to Junk mail.

If you dont want to use a deadline you can use a great command line tool

wuinstall

http://wuinstall.com/index.php/en/what

to answer previous question

"Now I wonder what this "download" is, is it WSUS which needs to download OR the client.
How to check both? "

This means that the file has not yet downloaded to the WSUS server and will not DL until it has been approved.

Author

Commented:
Ok, thanks.
Now I have this strange thing.
WSUS says there are updates needed but the server itself says it is up to date.

Then I see the updates are not approved and find that in the section "Updates", my predefined Updates (Windows 2008, Windows 7 etc) are gone!

wsus

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial