Link to home
Start Free TrialLog in
Avatar of Sys_Admin1
Sys_Admin1

asked on

New 2012r2 WSUS server, clients can't connect with 0x80244019 error

We have a new domain in a closed area (no internet connection).  We built the servers outside the closed area where we had an internet connection and ran windows update to get all the latest patches, as of Dec 1 2016; then we moved it into the closed area.

I checked to be sure KB3159706 was installed on the WSUS server, and performed all the manual steps to configure it correctly (I think).

Client machines (windows 7 and windows 10) can't get updates from the server, with an error 0x80244019.  We have a domain GPO pointing to the wsus server, and I tested and can manually reach the wsus server and download a cab file so I know the server should respond.

What other steps can I take to find this error?
Avatar of Shaun Vermaak
Shaun Vermaak
Flag of Australia image

Can you check is SelfUpdate virtual directory exist in IIS? I know you mentioned you pulled the CAB, I just don't know if you pulled it via SMB or HTTP
Avatar of Sys_Admin1
Sys_Admin1

ASKER

I will check, but I pulled the cab using the http address:

http://server.domain.internat:8350/selfupdate/iuident.cab
Yup, you used it in the URL
Are you using the correct port on client configuration?
We haven't changed the default settings.  Let me figure out how to check to be sure it's still 8350
Shows in MSC for WSUS
OK, had some users errors, but now still getting different error code.

The wsus management console shows 8530.  The GPO was not configured for the port, so I added yesterday but entered 8350.

Now the port is set correctly but the error is now returning 0x8024401f.
Try to browse to this address http://servername:8530/Content
Can't reach that url.  Firefox returns no error, just a blank screen.  Edge says it needs a new app to open the page.
Blank is fine, can you enable IIS logs?
One would think I could, but darned if I can find the logging settings in IIS.  I will figure it out and post back.
ASKER CERTIFIED SOLUTION
Avatar of Shaun Vermaak
Shaun Vermaak
Flag of Australia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Yeah, that's what I mean, I don't see 'logging' in the feature view of IIS manager.  I'll find it or figure out what happened to it.
OK, the feature wasn't installed for Health and diagnostics for IIS.  I will get this configured for logging and then I'll have to circle back to this which probably won't be until next week.

Thanks for your help and happy new year.

t
Waiting for feedback from OP
I apologize for the delay.  This is still on my plate, but we had other things more important to deal with.  I hope to circle back to this problem ASAP.
No problem. Just keeping question open
I'm still waiting to get back to this problem, but the quick glance I took at the logs didn't show me anything of interest.  Nothing jumped out as something I should look into.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Would it be possible for someone to post the correct contents of the web.config file after being edited for KB3159706?
We resolved this problem, though I can't say the exact solution.  We rebuilt the web.config file from scratch and check all other settings and it started working.  Likely cause was the contents of the web.config file.