IBCM Software updates, Do I need an Internet SUP or not?

Hi,
A quick description of our current setup (relevant bits at least):
Site server
Windows Server 2012 R2 with ConfigMgr 2012 R2 C3 primary site, with intranet client only SUP
DMZ server
Windows Server 2012 R2 with MP and DP roles installed (no SUP)
I'm able to manage internet clients, apply policies and deploy software (both apps and packages). So I know my IBCM setup works
Here's is the issue:
I'm unable to deploy software updates to internet clients.
Windowsupdate.log shows the following
2015-02-04 14:48:21:811 1332 1d98 EP Got WSUS Client/Server URL: "https://primarysiteserver.fqdn:8531/ClientWebService/client.asmx"
2015-02-04 14:48:21:811 1332 1d98 Setup Checking for agent SelfUpdate
2015-02-04 14:48:21:811 1332 1d98 Setup Client version: Core: 7.9.9600.17489 Aux: 7.9.9600.17489
2015-02-04 14:48:21:811 1332 1d98 EP Got WSUS SelfUpdate URL: "https://primarysiteserver.fqdn:8531/selfupdate"
2015-02-04 14:48:21:811 1332 1d98 Misc WARNING: Send failed with hr = 80072ee7.
2015-02-04 14:48:21:811 1332 1d98 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
2015-02-04 14:48:21:811 1332 1d98 Misc WARNING: Send request failed, hr:0x80072ee7
2015-02-04 14:48:21:811 1332 1d98 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <https://primarysiteserver.fqdn:8531/selfupdate/wuident.cab>. error 0x8024402c
2015-02-04 14:48:21:811 1332 1d98 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x8024402c
2015-02-04 14:48:21:811 1332 1d98 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x8024402c
2015-02-04 14:48:21:811 1332 1d98 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
2015-02-04 14:48:21:827 1332 1d98 Misc WARNING: Send failed with hr = 80072ee7.
2015-02-04 14:48:21:827 1332 1d98 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
2015-02-04 14:48:21:827 1332 1d98 Misc WARNING: Send request failed, hr:0x80072ee7
2015-02-04 14:48:21:827 1332 1d98 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <https://primarysiteserver.fqdn:8531/selfupdate/wuident.cab>. error 0x8024402c
2015-02-04 14:48:21:827 1332 1d98 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x8024402c
2015-02-04 14:48:21:827 1332 1d98 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x8024402c
2015-02-04 14:48:21:827 1332 1d98 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
2015-02-04 14:48:21:827 1332 1d98 Misc WARNING: Send failed with hr = 80072ee7.
2015-02-04 14:48:21:827 1332 1d98 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
2015-02-04 14:48:21:827 1332 1d98 Misc WARNING: Send request failed, hr:0x80072ee7
2015-02-04 14:48:21:827 1332 1d98 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <https://primarysiteserver.fqdn:8531/selfupdate/wuident.cab>. error 0x8024402c
2015-02-04 14:48:21:827 1332 1d98 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x8024402c
2015-02-04 14:48:21:827 1332 1d98 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x8024402c
2015-02-04 14:48:21:827 1332 1d98 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
2015-02-04 14:48:21:827 1332 1d98 Misc WARNING: Send failed with hr = 80072ee7.
2015-02-04 14:48:21:827 1332 1d98 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
2015-02-04 14:48:21:827 1332 1d98 Misc WARNING: Send request failed, hr:0x80072ee7
2015-02-04 14:48:21:827 1332 1d98 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <https://primarysiteserver.fqdn:8531/selfupdate/wuident.cab>. error 0x8024402c
2015-02-04 14:48:21:827 1332 1d98 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x8024402c
2015-02-04 14:48:21:827 1332 1d98 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x8024402c
2015-02-04 14:48:21:827 1332 1d98 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
2015-02-04 14:48:21:827 1332 1d98 Misc WARNING: DownloadFileInternal failed for
https://primarysiteserver.fqdn:8531/selfupdate/wuident.cab: error 0x8024402c
2015-02-04 14:48:21:827 1332 1d98 Setup FATAL: DownloadCab failed, err = 0x8024402C
2015-02-04 14:48:21:827 1332 1d98 Setup WARNING: SelfUpdate check failed to download package information, err = 0x8024402C
2015-02-04 14:48:21:827 1332 1d98 Setup FATAL: SelfUpdate check failed, err = 0x8024402C
2015-02-04 14:48:21:827 1332 1d98 Agent * WARNING: Skipping scan, self-update check returned 0x8024402C
2015-02-04 14:48:21:827 1332 1d98 Agent * WARNING: Exit code = 0x8024402C
2015-02-04 14:48:21:827 1332 1d98 Agent *********
2015-02-04 14:48:21:827 1332 1d98 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdatesWuApp Id = 2]
2015-02-04 14:48:21:827 1332 1d98 Agent *************
2015-02-04 14:48:21:827 1332 1d98 Agent WARNING: WU client failed Searching for update with error 0x8024402c
I can see the primary site server, which happens to be the only SUP on the hierarchy is still being referenced.
It is my understanding that internet clients will default to downloading updates from windows update when "if software updates are note available on preferred distribution point or remote distribution point, download content from microsoft updates"
enabled in the deployment settings (see screenshot below).
My question is: Am I missing something? do I need to deploy a SUP on the DMZ site system? If so... will this DMZ SUP synchronize according to the settings defined on the site settings?
Your help would be greatly appreciated.

You can have both, btw. Configure your GPO with a filter so it only applies a WSUS point if the SCCMExec isn't detected. More info can be found here:
http://blogs.technet.com/b/configmgrteam/archive/2013/03/27/group-policy-preferences-and-software-updates-in-cm2012sp1.aspx
This way any clients without a SCCM agent still honor the GPO for updates but the GPO effectively stops "fighting" with the installed agent once it gets installed.
Also, I'm pretty sure you still need an internet facing SUP. THe checkbox you are playing with is only for downloading the patches ... not for detecting what patches are needed:
https://technet.microsoft.com/en-us/library/gg712701.aspx
"New
in System Center 2012 Configuration Manager, when you have a software update point that is configured to accept connections from the Internet, Configuration Manager Internet-based clients on the Internet always scan against this software update
point, to determine which software updates are required. However, when these clients are on the Internet, they first try to download the software updates from Microsoft Update, rather than from an Internet-based distribution point. Only if this fails, will
they then try to download the required software updates from an Internet-based distribution point. Clients that are not configured for Internet-based client management never try to download the software updates from Microsoft Update, but always use Configuration
Manager distribution points."

Similar Messages

Software update says I need to do the lastest update which I have tried to do at least 6 times. It downloads the software, the computer restarts, it starts to finish the download and then says ' there was an error in installing the software" What is up?

Software update says I need to download MacOS 10.6.7. Each time I try, I have tried 6 times, the software downloads, it has me restart the system, it then writes the files to disk and then I get an error measage that "there was error in installing the softare. Anybody have this problem and how do you fix it? I am running 10.6.6

Try this before trying to install the update.
Repair the Hard Drive and Permissions
Boot from your Snow Leopard Installer disc. After the installer loads select your language and click on the Continue button. When the menu bar appears select Disk Utility from the Utilities menu. After DU loads select your hard drive entry (mfgr.'s ID and drive size) from the the left side list. In the DU status area you will see an entry for the S.M.A.R.T. status of the hard drive. If it does not say "Verified" then the hard drive is failing or failed. (SMART status is not reported on external Firewire or USB drives.) If the drive is "Verified" then select your OS X volume from the list on the left (sub-entry below the drive entry,) click on the First Aid tab, then click on the Repair Disk button. If DU reports any errors that have been fixed, then re-run Repair Disk until no errors are reported. If no errors are reported click on the Repair Permissions button. Wait until the operation completes, then quit DU and return to the installer.
If DU reports errors it cannot fix, then you will need Disk Warrior and/or Tech Tool Pro to repair the drive. If you don't have either of them or if neither of them can fix the drive, then you will need to reformat the drive and reinstall OS X.
If you still have a problem then I suggest you download the 10.6.7 Combo Updater and install it.

Snow leopard server for net boot and software updates only what needs to be running to use it?

Snow leopard server for net boot and software updates only what needs to be running to have it work right?

Netboot and Software Update, at its simplest. Mac OS X Server also expects to have functional IP networking and DNS services (somewhere) on the LAN (and if you're behind a NAT gateway, then the DNS server(s) are on your LAN and not out at your ISP), or things get weird. SUS (usually) works out of the box, outside of cases where there's an outbound firewall. Netboot can be more effort to setup, in terms of what you're loading into the clients.

I Installed Lion and now my USB modem will not work to send a PDF fax? Do I need a new USB modem to send faxes or is there a software update that I need?

I Installed Lion and now my USB modem will not work to send a PDF fax? Do I need a new USB modem to send faxes or is there a software update that I need? Also can I change the picture of the login screen? That grey mat looks ugly!

As posted by Ham on July 29 @ 9pm on this thread <https://discussions.apple.com/message/15786976#15786976>.
Official statement from Apple:
http://support.apple.com/kb/ht3152

HT6058 good morning.please help me with my iphone 5.i already downloaded iOS7 in my software update.but eventhough i have internet connection,verifying update said that i have no internet connection.what should i do?

good morning.please help me with my iphone 5.i already downloaded iOS7 in my software update.but eventhough i have internet connection,verifying update said that i have no internet connection.what should i do?

i try to reset my iphone but still the reply pf verifying update still the same.update failed because im no longer connected to internet.but i have full signal strength of internet.what should i try to do?

I cannot update my ipad2 to ios5. Updating through iTunes on pc Windows Vista, Error message reads "cannot connect to iPad Software Update Server. Tried resetting network settings, still not connecting. Tried updating iTunes, still not connecting.

I cannot update my ipad2 to ios5. Updating through iTunes on pc Windows Vista, Error message reads "cannot connect to iPad Software Update Server. Tried resetting network settings, still not connecting. Tried updating iTunes, still not connecting.

Look at iOS Troubleshooting Wi-Fi networks and connections http://support.apple.com/kb/TS1398
Additional things to try.
Try this first. Turn Off your iPad. Then turn Off (disconnect power cord) the wireless router & then back On. Now boot your iPad. Hopefully it will see the WiFi.
Change the channel on your wireless router. Instructions at http://macintoshhowto.com/advanced/how-to-get-a-good-range-on-your-wireless-netw ork.html
How to Quickly Fix iPad 3 Wi-Fi Reception Problems
http://osxdaily.com/2012/03/21/fix-new-ipad-3-wi-fi-reception-problems/
If none of the above suggestions work, look at this link.
iPad Wi-Fi Problems: Comprehensive List of Fixes
http://appletoolbox.com/2010/04/ipad-wi-fi-problems-comprehensive-list-of-fixes/
 Cheers, Tom

I am a windows user that has converted to Mac and loving it but when I updated to Lion my wireless internet dongle would not work anymore and the Macbook Pro does not recognise the device at all so I am unable to reinstall it again. Any ideas

I am a windows user that has converted to Mac and loving it but when I updated to Lion my wireless internet dongle would not work anymore and the Macbook Pro does not recognise the device at all so I am unable to reinstall it again. Any ideas would be greatly appreciated.

Go to Finder > Preferences then select the General tab
Make sure External disks is selected.

I have macbook pro 13 late 2011. efi 2.7 not see on software update and if download from site say in not compatible. why? in not compatible. why?

i have macbook pro 13 late 2011. efi 2.7 not see on software update and if download from site say in not compatible. why?

Because your MBP does not require it.

HT1688 during a software update, i lost all my apps. restore did not bring them back, how do i get my apps back?

during a software update, i lost all my apps. restore did not bring them back, how do i get my apps back?

Your apps will only be where you put them. if you failed to put them on your computer beore updating, then they would certainly be gone.
You can redownload them:
Downloading past purchases from the App Store, iBookstore, and iTunes Store

Why does the software update say that drivers for my printers are not available? I have the drivers installed from the CD but can't add the printer because it wants to go through software update.

I have the latest operating system, but can't get my printers added. Why does the software update say that drivers for my printers are not available? I have the drivers installed from the CD but can't add the printer because it wants to go through software update.

It's pretty difficult to offer suggestions when you say nothing about your Mac, the version of Mac OS it's running, or the models of printers you have. This forum, however, is intended for questions about old, pre-G3 hardware, so unless you are asking about an very old Mac, this is not the forum where you'll be most likely to get help with your problem. I'd suggest you ask this question in the forum for your model of Mac or version of Mac OS X it's running. You'll be more likely to get assistance there, assuming you provide sufficient detail for anyone to make a diagnosis of the problem.
Regards.

Apple software update for itunes version 11.0.1 will not update

apple software update for itunes version 11.0.1 will not update says invalid signature and will not be installed? how do i fix this?

apple software update for itunes version 11.0.1 will not update says invalid signature and will not be installed? how do i fix this?

After upgrading to Snow Leopard I can't use software update or firefox, and the internet is slow

I'm getting big problems. After installing Mac OS X Leopard from my usb, I had to since my disk drive stopped working, I had the following problems. 1) Firefox stopped working. 2) Software Update stopped working 3) Chrome runs really slow. 4) Safari stopped working 5) Even on Chrome I can't access any email, including; gmail; hotmail; yahoo; etc...
When software update loads it says checking... but it stays at 10% for at least 1 hr. I reinstalled SL once and it did something different, suddenly my wifi stopped working, and rapidly fluxtuated.
What the heck is going on?

Yes LS needs a update to work with the changes in 10.6.8, so does Parallels.
Read my backup, bootable clones, troubleshooting, performance, wifi security and restore info/advice here
https://discussions.apple.com/message/16276201#16276201

HT4623 MyiPhone 3GS on setting general does not have the place for software update adn I need to update to iOS5.1

My iphone 3GS does not have in General the place for software update and for some my apps it request that I do iOS5.1 but I cannot do it tell me how

The OTA update capability was not introduced until iOS 5. You will need to connect the device to the computer and iTunes and update it as you did in the past.Once you have updated, you will have the ability to do OTA updates in the future.

Software update doesn't acces teh internet properly on my Intel Tower

After hearing of the firmware update I went to try to get the update, and got the progress bar about 1/5 of the way. I waited a long time to no avail. The computer was able to access web sites, and I was able to update itunes using software update on another computer, a g4 laptop.
I thought I might just be impatient so tried it a few more times, and still no result (even after letting it go all night). Any help?

It is not my ISP-it does not work on both a university network, a cable service provider and a normal home internet connection-i.e. in every possible type of network I connect to. I have not changed my internet configuration or anything-it simply stopped working after my last major OS update (must have been quite large as it took about 20 minutes for my old computer to install it on restart).
Pinging swcdn works fine.
Pinging swquery and swscan does not work. I guess this must be the problem.
I can download files from the apple website fine. Its just a bit annoying to have to remember to go to the website.

IOS 8 update did not installing iPad Mini, space still used by installer, not recognized by Software Update, says I need to make more space again

I Cleared room on my iPad Mini for the iOS 8 install, downloaded the installer and started he install. Device restarted rather quickly after turning off for install, did not update. When I went back to Software Update to try again, it says I need to redownload the installer and I now am using the ~1GB of space taken up by the original install file and need to clear that much space. Any way to either get my iPad to recognize the install files or delete it so I can try again?

Hooked it up to iTunes to update. The first time I tried, an error popped up that said there was an error with the firmware, so I reset my iPad Mini and tried again. This time it updated fine, no errors. Thanks for the help. Also, the original update file is now deleted. Because I have that space back.

IBCM Software updates, Do I need an Internet SUP or not?

Similar Messages

Maybe you are looking for