ISE Without WSUS Server

Hi Guys,
i don't have the WSUS Server but i'd like to know if the machines are uptodate with the last Microsoft Windows Update.
Is it possible?
Does the ISE has a internal database to compare with the machines?
thanks a lot

Hello Daniel
I would like you to go through the Posture policies in the following link:
http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_pos_pol.html
Your all queries related to posturing will get cleared. However, in order to answer your query in short , I would say "yes" it does have internal database.

Similar Messages

WSUS server dowloads the updates from microsoft without BUILT IN (MSRC ) number

Hi,
WSUS server downloads the update from microsoft with out MSRC NUMBER and its shows unspecified, as per my knowledge all the hotfixes must have the BUILT number can you please clearify
me on this..?
Thanks
Balaji K

Hi,
WSUS server downloads the update from microsoft with out MSRC NUMBER and its shows unspecified, as per my knowledge all the hotfixes must have the BUILT number can you please clearify
me on this..?
Thanks
Balaji K
Only *Security Updates* have MSRC Security Bulletin numbers, but not all security updates have MSRC Security Bulletins associated with them. In fact, there are a large number of security updates that are not associated with security bulletins. -242- of 'em
on my WSUS server.
Otherwise, the MSRC Number field will always be blank on non-security updates, and may be blank on security updates.
Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
SolarWinds Head Geek
Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
http://www.solarwinds.com/gotmicrosoft
The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

Migrate WSUS server from 2003x86 to 2008x64, new hardware, use same name and IP address?

Searching through the WSUS forums and reading the TechNET migration documentation, I have bits and pieces of information to make this a smooth transition...I think. I have a plan in mind but
would like the communities input on what I am thinking before moving forward and having it blowup in my face :). <o:p></o:p>
I have the following currently:<o:p></o:p>
A single WSUS 3.0 SP2 server, running on Server Win2003x86, using the default WID (susdb.mdf) on the same server. I have SQL 2005 Express installed on this server as well for other services
but this has no bearing on the WID correct?<o:p></o:p>
What I would like to do:<o:p></o:p>
I have a new server (a much better one) that I would like to move WSUS on to, that will be running Server Win2008x64 (I have to setup first). <o:p></o:p>
Steps that I would like to follow:<o:p></o:p>
1. I will go through and setup this new server with all M$ updates etc... under a new name (ex. wsusnew) and DHCP acquired IP address and then power it down. <o:p></o:p>
2. Get on my current WSUS server and backup all current WSUS settings, groups, DB etc... to a network location for temporary storage. Then power it down.<o:p></o:p>
3. Delete the current WSUS server computer object in AD, DNS entry I will leave because my intension is to give the same IP address to the new WSUS server.<o:p></o:p>
4. Start the new server, static assign the IP address from the old WSUS server to this new server and then change the name of (wsusnew) to the old servers name, which should be ok sense I deleted
the AD object in step 3.<o:p></o:p>
5. After the obvious restart, the new server will have the same name and IP address as the old server. <o:p></o:p>
6. Now that the new server is up (with same settings name/IP as old server), I will then go through and install the WSUS role on the server and restore my WSUS information.<o:p></o:p>
Questions:<o:p></o:p>
1. Step 2 above, is it possible to do this, without making replica servers? I kept reading about this as I was researching doing this, I would rather just copy the DB and folders and simply
put them in-place on the new server.<o:p></o:p>
2. Step 6 above, restoring of the data, what is the proper way to do this in the scenarioI described? <o:p></o:p>
Thank you to anyone who can provide me some information.
Jeff

Thank you for the reply, I will follow and let you know. Proabably be next week sometime before I'm able to try though. So look for a reponse then. Thank you again.
Jeff
OR...
You can use the much more simple, much more reliable, and much more proven method of:
Install new server as a replica of the old.
Replicate.
Configure new server as upstream server.
Point clients to new server.
Turn off old server after all clients have redirected to the new server.
For everybody that has tried the backup/restore the database procedure described above, they have encounted complications of one form or another.
WSUS has a built-in and fully supported comprehensive replication capbility. use it! :-)
Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
Microsoft MVP - Software Distribution (2005-2012)
My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin

Client machine not reporting to wsus server

My server Windows Server 2008 R2 Standard x 64 virtual machine install in Hyper-v server and Install SCE management version 2010.
in sudden server stopped sending updated to client machine. So I check many and did many changed as per MS community forums. But still I have same issue.
Then I planned to install again SCE management server in different VM. But even though I am getting error that old SCE management server is existing in my domain. Therefore I am afraid to change or remove any setting in AD since I have short
of knowledge about SCE servers.
However my SCE server was working smoothly until 11-2013 and then suddenly stuck. When I check the server machine I found that local drive C: is getting full and SCE management is fail to start. So from that to now when ever I had free time I changed
many things. But unfortunately I couldn't get the sever back to normal.
Few changes which I made are below.
- Remove and reinstall WAUS several times
- Check online update and direct updated server SCE machine without getting updated from SCE
- Remove dotnet frame work and updated version 4
- product configuration wizard reconfigure
- Repair management agent in client machine.
Kindly help for me to repair my SCE server or make another installation without having change of settings.
It would be highly appreciated if you could resolve issue
The error massage is below in windows update log.
2015-02-11 11:37:46:747 904 c78 Misc =========== Logging initialized (build: 7.6.7600.320, tz: +0300) ===========
2015-02-11 11:37:46:747 904 c78 Misc = Process: C:\Windows\system32\svchost.exe
2015-02-11 11:37:46:747 904 c78 Misc = Module: c:\windows\system32\wuaueng.dll
2015-02-11 11:37:46:747 904 c78 Service *************
2015-02-11 11:37:46:747 904 c78 Service ** START ** Service: Service startup
2015-02-11 11:37:46:747 904 c78 Service *********
2015-02-11 11:37:46:750 904 c78 Agent * WU client version 7.6.7600.320
2015-02-11 11:37:46:750 904 c78 Agent * Base directory: C:\Windows\SoftwareDistribution
2015-02-11 11:37:46:750 904 c78 Agent * Access type: No proxy
2015-02-11 11:37:46:751 904 c78 Agent * Network state: Connected
2015-02-11 11:37:58:940 904 8a0 Report CWERReporter::Init succeeded
2015-02-11 11:37:58:940 904 8a0 Agent *********** Agent: Initializing Windows Update Agent ***********
2015-02-11 11:37:58:941 904 8a0 Agent * Prerequisite roots succeeded.
2015-02-11 11:37:58:941 904 8a0 Agent *********** Agent: Initializing global settings cache ***********
2015-02-11 11:37:58:941 904 8a0 Agent * WSUS server: http://SCE-01.mubarrad.com.kw:8530
2015-02-11 11:37:58:941 904 8a0 Agent * WSUS status server: http://SCE-01.mubarrad.com.kw:8530
2015-02-11 11:37:58:941 904 8a0 Agent * Target group: (Unassigned Computers)
2015-02-11 11:37:58:941 904 8a0 Agent * Windows Update access disabled: No
2015-02-11 11:37:59:068 904 8a0 DnldMgr Download manager restoring 0 downloads
2015-02-11 11:37:59:081 904 8a0 AU ########### AU: Initializing Automatic Updates ###########
2015-02-11 11:37:59:082 904 8a0 AU # WSUS server: http://SCE-01.mubarrad.com.kw:8530
2015-02-11 11:37:59:082 904 8a0 AU # Detection frequency: 22
2015-02-11 11:37:59:082 904 8a0 AU # Approval type: Pre-install notify (Policy)
2015-02-11 11:37:59:082 904 8a0 AU # Auto-install minor updates: No (User preference)
2015-02-11 11:37:59:082 904 8a0 AU # Will interact with non-admins (Non-admins are elevated (User preference))
2015-02-11 11:37:59:082 904 8a0 AU # Will display featured software notifications (User preference)
2015-02-11 11:37:59:301 904 c78 Report *********** Report: Initializing static reporting data ***********
2015-02-11 11:37:59:301 904 c78 Report * OS Version = 6.1.7601.1.0.196880
2015-02-11 11:37:59:301 904 c78 Report * OS Product Type = 0x00000007
2015-02-11 11:37:59:313 904 c78 Report * Computer Brand = Microsoft Corporation
2015-02-11 11:37:59:313 904 c78 Report * Computer Model = Virtual Machine
2015-02-11 11:37:59:316 904 c78 Report * Bios Revision = 090004
2015-02-11 11:37:59:316 904 c78 Report * Bios Name = BIOS Date: 03/19/09 22:51:32 Ver: 09.00.04
2015-02-11 11:37:59:316 904 c78 Report * Bios Release Date = 2009-03-19T00:00:00
2015-02-11 11:37:59:316 904 c78 Report * Locale ID = 1033
2015-02-11 11:37:59:352 904 8a0 AU Successfully wrote event for AU health state:0
2015-02-11 11:37:59:352 904 8a0 AU Initializing featured updates
2015-02-11 11:37:59:352 904 8a0 AU Found 0 cached featured updates
2015-02-11 11:37:59:352 904 8a0 AU Successfully wrote event for AU health state:0
2015-02-11 11:37:59:353 904 8a0 AU Successfully wrote event for AU health state:0
2015-02-11 11:37:59:354 904 8a0 AU AU finished delayed initialization
2015-02-11 11:37:59:354 904 c78 AU #############
2015-02-11 11:37:59:354 904 c78 AU ## START ## AU: Search for updates
2015-02-11 11:37:59:354 904 c78 AU #########
2015-02-11 11:37:59:356 904 c78 AU <<## SUBMITTED ## AU: Search for updates [CallId = {A05977D0-8D58-4DC1-AAC5-C5FD68987D7F}]
2015-02-11 11:38:01:818 904 8a0 AU Triggering AU detection through DetectNow API
2015-02-11 11:38:01:818 904 8a0 AU Will do the detection after current detection completes
2015-02-11 11:38:03:808 904 1de0 Misc WARNING: Send failed with hr = 80072efd.
2015-02-11 11:38:03:808 904 1de0 Misc WARNING: SendRequest failed with hr = 80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2015-02-11 11:38:03:808 904 1de0 Misc FATAL: SOAP/WinHttp - SendRequest: SendRequestUsingProxy failed. error 0x80072efd
2015-02-11 11:38:03:808 904 1de0 PT + Last proxy send request failed with hr = 0x80072EFD, HTTP status code = 0
2015-02-11 11:38:03:808 904 1de0 PT + Caller provided credentials = No
2015-02-11 11:38:03:808 904 1de0 PT + Impersonate flags = 0
2015-02-11 11:38:03:808 904 1de0 PT + Possible authorization schemes used =
2015-02-11 11:38:03:808 904 1de0 PT WARNING: GetConfig failure, error = 0x80072EFD, soap client error = 5, soap error code = 0, HTTP status code = 200
2015-02-11 11:38:03:808 904 1de0 PT WARNING: PTError: 0x80072efd
2015-02-11 11:38:03:808 904 1de0 PT WARNING: GetConfig_WithRecovery failed: 0x80072efd
2015-02-11 11:38:03:808 904 1de0 PT WARNING: RefreshConfig failed: 0x80072efd
2015-02-11 11:38:03:808 904 1de0 PT WARNING: RefreshPTState failed: 0x80072efd
2015-02-11 11:38:03:808 904 1de0 PT WARNING: PTError: 0x80072efd
2015-02-11 11:38:03:808 904 1de0 Report WARNING: Reporter failed to upload events with hr = 80072efd.
2015-02-11 11:38:08:092 904 1de0 Misc WARNING: Send failed with hr = 80072efd.
2015-02-11 11:38:08:092 904 1de0 Misc WARNING: SendRequest failed with hr = 80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2015-02-11 11:38:08:092 904 1de0 Misc FATAL: SOAP/WinHttp - SendRequest: SendRequestUsingProxy failed. error 0x80072efd
2015-02-11 11:38:08:092 904 1de0 PT + Last proxy send request failed with hr = 0x80072EFD, HTTP status code = 0
2015-02-11 11:38:08:092 904 1de0 PT + Caller provided credentials = No
2015-02-11 11:38:08:092 904 1de0 PT + Impersonate flags = 0
2015-02-11 11:38:08:092 904 1de0 PT + Possible authorization schemes used =
2015-02-11 11:38:08:092 904 1de0 PT WARNING: GetConfig failure, error = 0x80072EFD, soap client error = 5, soap error code = 0, HTTP status code = 200
2015-02-11 11:38:08:092 904 1de0 PT WARNING: PTError: 0x80072efd
2015-02-11 11:38:08:092 904 1de0 PT WARNING: GetConfig_WithRecovery failed: 0x80072efd
2015-02-11 11:38:08:092 904 1de0 PT WARNING: RefreshConfig failed: 0x80072efd
2015-02-11 11:38:08:092 904 1de0 PT WARNING: RefreshPTState failed: 0x80072efd
2015-02-11 11:38:08:092 904 1de0 PT WARNING: PTError: 0x80072efd
2015-02-11 11:38:08:092 904 1de0 Report WARNING: Reporter failed to upload events with hr = 80072efd.
2015-02-11 11:38:08:093 904 1de0 Report REPORT EVENT: {62417852-380A-47BC-B153-8A8E0E198470} 2015-02-11 11:37:59:352+0300 1 202 102 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Content Install Reboot completed.
2015-02-11 11:38:08:098 904 1de0 Report CWERReporter finishing event handling. (00000000)
2015-02-11 11:38:08:098 904 1de0 Agent *************
2015-02-11 11:38:08:098 904 1de0 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
2015-02-11 11:38:08:098 904 1de0 Agent *********
2015-02-11 11:38:08:098 904 1de0 Agent * Online = No; Ignore download priority = No
2015-02-11 11:38:08:098 904 1de0 Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
2015-02-11 11:38:08:098 904 1de0 Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
2015-02-11 11:38:08:098 904 1de0 Agent * Search Scope = {Machine}
2015-02-11 11:38:08:440 904 1de0 Agent * Found 0 updates and 0 categories in search; evaluated appl. rules of 0 out of 0 deployed entities
2015-02-11 11:38:08:441 904 1de0 Agent *********
2015-02-11 11:38:08:441 904 1de0 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
2015-02-11 11:38:08:441 904 1de0 Agent *************
2015-02-11 11:38:08:441 904 edc AU >>## RESUMED ## AU: Search for updates [CallId = {A05977D0-8D58-4DC1-AAC5-C5FD68987D7F}]
2015-02-11 11:38:08:441 904 edc AU # 0 updates detected
2015-02-11 11:38:08:441 904 edc AU #########
2015-02-11 11:38:08:441 904 edc AU ## END ## AU: Search for updates [CallId = {A05977D0-8D58-4DC1-AAC5-C5FD68987D7F}]
2015-02-11 11:38:08:441 904 edc AU #############
2015-02-11 11:38:08:441 904 edc AU Featured notifications is disabled.
2015-02-11 11:38:08:442 904 edc AU Successfully wrote event for AU health state:0
2015-02-11 11:38:08:442 904 edc AU Successfully wrote event for AU health state:0
2015-02-11 11:38:08:442 904 c78 AU #############
2015-02-11 11:38:08:442 904 c78 AU ## START ## AU: Search for updates
2015-02-11 11:38:08:442 904 c78 AU #########
2015-02-11 11:38:08:444 904 c78 AU <<## SUBMITTED ## AU: Search for updates [CallId = {B8E1001D-5C48-4A26-888D-99FECCD6F9F1}]
2015-02-11 11:38:08:444 904 1de0 Agent *************
2015-02-11 11:38:08:444 904 1de0 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
2015-02-11 11:38:08:444 904 1de0 Agent *********
2015-02-11 11:38:08:444 904 1de0 Agent * Online = Yes; Ignore download priority = No
2015-02-11 11:38:08:444 904 1de0 Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
2015-02-11 11:38:08:444 904 1de0 Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
2015-02-11 11:38:08:444 904 1de0 Agent * Search Scope = {Machine}
2015-02-11 11:38:08:444 904 1de0 Setup Checking for agent SelfUpdate
2015-02-11 11:38:08:445 904 1de0 Setup Client version: Core: 7.6.7600.320 Aux: 7.6.7600.320
2015-02-11 11:38:12:726 904 1de0 Misc WARNING: Send failed with hr = 80072efd.
2015-02-11 11:38:12:726 904 1de0 Misc WARNING: SendRequest failed with hr = 80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2015-02-11 11:38:12:726 904 1de0 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://SCE-01.mubarrad.com.kw:8530/selfupdate/wuident.cab>. error 0x80072efd
2015-02-11 11:38:12:726 904 1de0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efd
2015-02-11 11:38:12:726 904 1de0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efd
2015-02-11 11:38:12:726 904 1de0 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efd
2015-02-11 11:38:16:993 904 1de0 Misc WARNING: Send failed with hr = 80072efd.
2015-02-11 11:38:16:993 904 1de0 Misc WARNING: SendRequest failed with hr = 80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2015-02-11 11:38:16:993 904 1de0 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://SCE-01.mubarrad.com.kw:8530/selfupdate/wuident.cab>. error 0x80072efd
2015-02-11 11:38:16:993 904 1de0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efd
2015-02-11 11:38:16:993 904 1de0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efd
2015-02-11 11:38:16:993 904 1de0 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efd
2015-02-11 11:38:21:278 904 1de0 Misc WARNING: Send failed with hr = 80072efd.
2015-02-11 11:38:21:278 904 1de0 Misc WARNING: SendRequest failed with hr = 80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2015-02-11 11:38:21:278 904 1de0 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://SCE-01.mubarrad.com.kw:8530/selfupdate/wuident.cab>. error 0x80072efd
2015-02-11 11:38:21:278 904 1de0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efd
2015-02-11 11:38:21:278 904 1de0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efd
2015-02-11 11:38:21:278 904 1de0 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efd
2015-02-11 11:38:25:564 904 1de0 Misc WARNING: Send failed with hr = 80072efd.
2015-02-11 11:38:25:564 904 1de0 Misc WARNING: SendRequest failed with hr = 80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2015-02-11 11:38:25:564 904 1de0 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://SCE-01.mubarrad.com.kw:8530/selfupdate/wuident.cab>. error 0x80072efd
2015-02-11 11:38:25:564 904 1de0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efd
2015-02-11 11:38:25:564 904 1de0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efd
2015-02-11 11:38:25:564 904 1de0 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efd
2015-02-11 11:38:25:564 904 1de0 Misc WARNING: DownloadFileInternal failed for http://SCE-01.mubarrad.com.kw:8530/selfupdate/wuident.cab: error 0x80072efd
2015-02-11 11:38:25:564 904 1de0 Setup FATAL: DownloadCab failed, err = 0x80072EFD
2015-02-11 11:38:25:564 904 1de0 Setup WARNING: SelfUpdate check failed to download package information, error = 0x80072EFD
2015-02-11 11:38:25:564 904 1de0 Setup FATAL: SelfUpdate check failed, err = 0x80072EFD
2015-02-11 11:38:25:565 904 1de0 Agent * WARNING: Skipping scan, self-update check returned 0x80072EFD
2015-02-11 11:38:25:565 904 1de0 Agent * WARNING: Exit code = 0x80072EFD
2015-02-11 11:38:25:565 904 1de0 Agent *********
2015-02-11 11:38:25:565 904 1de0 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
2015-02-11 11:38:25:565 904 1de0 Agent *************
2015-02-11 11:38:25:565 904 1de0 Agent WARNING: WU client failed Searching for update with error 0x80072efd
2015-02-11 11:38:25:565 904 1de0 Report CWERReporter finishing event handling. (00000000)
2015-02-11 11:38:25:565 904 edc AU >>## RESUMED ## AU: Search for updates [CallId = {B8E1001D-5C48-4A26-888D-99FECCD6F9F1}]
2015-02-11 11:38:25:566 904 edc AU # WARNING: Search callback failed, result = 0x80072EFD
2015-02-11 11:38:25:566 904 edc AU # WARNING: Failed to find updates with error code 80072EFD
2015-02-11 11:38:25:566 904 edc AU #########
2015-02-11 11:38:25:566 904 edc AU ## END ## AU: Search for updates [CallId = {B8E1001D-5C48-4A26-888D-99FECCD6F9F1}]
2015-02-11 11:38:25:566 904 edc AU #############
2015-02-11 11:38:25:566 904 edc AU Successfully wrote event for AU health state:0
2015-02-11 11:38:25:566 904 edc AU AU setting next detection timeout to 2015-02-11 13:38:25
2015-02-11 11:38:25:566 904 edc AU Successfully wrote event for AU health state:0
2015-02-11 11:38:25:567 904 edc AU Successfully wrote event for AU health state:0
2015-02-11 11:38:30:595 904 1de0 Report REPORT EVENT: {6470B8FE-1600-4F7B-807F-6031606ECC8B} 2015-02-11 11:38:25:564+0300 1 148 101 {D67661EB-2423-451D-BF5D-13199E37DF28} 1 80072efd SelfUpdate Failure Software Synchronization Windows Update Client failed to detect with error 0x80072efd.
2015-02-11 11:38:30:613 904 1de0 Report CWERReporter::HandleEvents - WER report upload completed with status 0x8
2015-02-11 11:38:30:613 904 1de0 Report WER Report sent: 7.6.7600.320 0x80072efd D67661EB-2423-451D-BF5D-13199E37DF28 Scan 101 Managed
2015-02-11 11:38:30:613 904 1de0 Report CWERReporter finishing event handling. (00000000)

Can you try the below to reset the authorization and force a connection back from one of the win 7 machines:
it should help pinpoint exact issues.
1. Record the system time.
2. Reboot the system (or restart the Windows Update service).
3. After reboot run the command wuauclt
/resetauthorization /detectnow.
4. Wait 30 minutes.
5. Post the entries from the WindowsUpdate.log starting at the time recorded in Step #1.
Do you have any Windows 7 machines that are reporting? Are other machines with different operating systems reporting correctly?

Failed to set Subscriptions on the WSUS Server

We are running SCCM 2012 R2; synchronization of updates is not working.
The SUP is running on a Windows 2008 R2 server and it is not the Site Server.
Below I have some log data. I have already tried uninstalling and reinstalling WSUS.
WCM.log
Starting WSUS category sync from upstream... SMS_WSUS_CONFIGURATION_MANAGER 1/6/2015 1:14:22 PM 4488 (0x1188)
Refreshing categories from WSUS server SMS_WSUS_CONFIGURATION_MANAGER 1/6/2015 1:14:27 PM 4488 (0x1188)
Attempting connection to WSUS server: cobalt.ad.northcentral.edu, port: 8530, useSSL: False SMS_WSUS_CONFIGURATION_MANAGER 1/6/2015 1:14:27 PM 4488 (0x1188)
Successfully connected to server: cobalt.ad.northcentral.edu, port: 8530, useSSL: False SMS_WSUS_CONFIGURATION_MANAGER 1/6/2015 1:14:27 PM 4488 (0x1188)
Successfully refreshed categories from WSUS server SMS_WSUS_CONFIGURATION_MANAGER 1/6/2015 1:14:53 PM 4488 (0x1188)
Attempting connection to WSUS server: cobalt.ad.northcentral.edu, port: 8530, useSSL: False SMS_WSUS_CONFIGURATION_MANAGER 1/6/2015 1:14:53 PM 4488 (0x1188)
Successfully connected to server: cobalt.ad.northcentral.edu, port: 8530, useSSL: False SMS_WSUS_CONFIGURATION_MANAGER 1/6/2015 1:14:53 PM 4488 (0x1188)
Category Company:94d731de-22a6-4458-dc4d-b5267de026fc (Adobe Systems, Inc.) not found on WSUS SMS_WSUS_CONFIGURATION_MANAGER 1/6/2015 1:14:53 PM 4488 (0x1188)
Subscription contains categories unknown to WSUS. SMS_WSUS_CONFIGURATION_MANAGER 1/6/2015 1:14:53 PM 4488 (0x1188)
Failed to set Subscriptions on the WSUS Server. Error:(-2147467259)Unspecified error SMS_WSUS_CONFIGURATION_MANAGER 1/6/2015 1:14:53 PM 4488 (0x1188)
STATMSG: ID=6603 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_WSUS_CONFIGURATION_MANAGER" SYS=ALGAE.ad.northcentral.edu SITE=NCU PID=1204 TID=4488 GMTDATE=Tue Jan 06 19:14:53.974 2015 ISTR0="cobalt.ad.northcentral.edu" ISTR1=""
ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0 SMS_WSUS_CONFIGURATION_MANAGER 1/6/2015 1:14:53 PM 4488 (0x1188)
Waiting for changes for 59 minutes SMS_WSUS_CONFIGURATION_MANAGER 1/6/2015 1:14:53 PM 4488 (0x1188)
wsyncmgr.log
Found active SUP SUP.ad.domain.tld from SCF File.SMS_WSUS_SYNC_MANAGER
1/6/2015 1:10:45 PM    4576 (0x11E0)
Sync failed: WSUS update source not found on site NCU. Please refer to WCM.log for configuration error details.. Source: getSiteUpdateSourceSMS_WSUS_SYNC_MANAGER
1/6/2015 1:10:45 PM
4576 (0x11E0)
STATMSG: ID=6703 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_WSUS_SYNC_MANAGER" SYS=Siteserver.ad.domain.tld SITE=NCU PID=1204 TID=4576 GMTDATE=Tue Jan 06 19:10:45.260 2015 ISTR0="getSiteUpdateSource" ISTR1="WSUS update source
not found on site NCU. Please refer to WCM.log for configuration error details." ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0SMS_WSUS_SYNC_MANAGER
1/6/2015 1:10:45 PM
4576 (0x11E0)
Sync failed. Will retry in 60 minutes
SMS_WSUS_SYNC_MANAGER 1/6/2015 1:10:45 PM
4576 (0x11E0)
Setting sync alert to active state on site NCU
SMS_WSUS_SYNC_MANAGER 1/6/2015 1:10:45 PM
4576 (0x11E0)
Sync time: 0d00h00m00s   SMS_WSUS_SYNC_MANAGER
1/6/2015 1:10:45 PM
4576 (0x11E0)
WSUSCtrl.log
Failed to create instance of Microsoft.SystemsManagementServer.WSUS.WSUSServer. error = Unspecified errorSMS_WSUS_CONTROL_MANAGER
1/6/2015 12:39:11 PM
4888 (0x1318)

Blank out/remove all of the categories you have configured in ConfigMgr on the Software Update Point. Then run a full synchronization from the console. This will synch up all available categories without trying to subscribe to any. Then, you can go back
re-select the categories that want (after the full synch completes) and perform another full synch.
Right now, you are trying to subscribe to a category that doesn't exist.
Jason | http://blog.configmgrftw.com | @jasonsandys

Run windows update against specific wsus server

Is it possible to run windows update from a specific wsus server using
cmdline or powershell? Eventually I am trying to do something with powershell but without using the WSUS API for versions 4 and above.
Thanks

Is it possible to run windows update from a specific wsus server using cmdline or powershell? Eventually I am trying to do something with powershell but without using the WSUS API for versions 4 and above.
Perhaps you could elaborate on the actual problem you're trying to solve and we can suggest appropriate and viable solutions for that problem?
Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
SolarWinds Head Geek
Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
http://www.solarwinds.com/gotmicrosoft
The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

How to get update KB3008273 on my 2012R2 WSUS Server

I am not sure if this is a WSUS issue or not, I can not find
KB3008273 on my WSUS server and I have the Windows 8 updates selected, I also tried to download it from the
Windows Update Catalog and it is not available on that site either.
I looked at the article Description of Software Update Services and Windows Server Update Services changes in content for 2014
which appears to indicate that it should be available for download to WSUS
Is this an update that is only available directly from Microsoft Update?
Thanks
Bruce

I do have the Windows 8 and 8.1 categories selected and the Updates classification as per the pictures below.
My objective was to try and update my 8.0 systems to 8.1 using my WSUS server, but in testing using a VM, I found that even if I applies the missing KB3008273 update directly from Windows Update I still had to go to the Microsoft Store to get the update
package to do the actual 8 to 8.1 update. If there is some other way to accomplish this task I would be interested. I do not have a Volume License agreement with Microsoft so this appears to be my only option to get these system up to 8.1 without
purchasing new licenses!
Thanks
Bruce H.
Bruce H.

My WSUS Server is only showing 2 machines

Hi,
I recently setup a WSUS server.
Its a virtual machine running with 4GB RAM
Windows Server 2008 R2 Enterprise, SP1
For some reason, everytime I check the WSUS console, it will only display 2 machines
Sometimes it will display PC-04 and PC-20, or then randomly will then display PC-07 and PC-15.
I have checked the reg of various PCs and they all appear to be connected to the WSUS server.
I ran the solarwinds utility and it all appears to be working although and I have tested the cab file within a web page and it appears to ask for the cab file to be downloaded.
I am stumped as to why it would do this, but it seems to be updating and communicating.
Also, I have setup GPOs and configured them with the how tos online
Any ideas?

I can understand this being an issue of the cloned lab pcs, but it is also not picking up any staff PCs which are HPs which have been purchased with windows 7 already on them and have not being imaged or cloned in any way yet when I check regedit it seems
that they are connected to the WSUS server but are not being displayed in the WSUS console on the server.
Also it doesnt seem to pick up any windows 8 machines either?
Doesnt that seem strange?
No. Nothing that gets posted in this forum seems strange.
Almost without fail everything that you might think is "strange" ultimately gets traced back to some simple failure to follow instructions or set configuration options correctly.
So... checking the registry doesn't really tell us anything useful. Mostly because you didn't share any details of what you actually did check, so I can't even assume that you checked the right things.
But more notably, what's really relevant here is what the systems are DOING. They can be configured perfectly to talk to some WSUS server, but if the network, or a firewall, or a proxy server, or a misconfiguration in the WSUS server, prevents that from
happening .. those registry settings are meaningless.
But I am intrigued with why you chose to check the registry for the configuration, as opposed to other methodologies.
So, first things first. Fix the clones and see if those machines report properly.
Then, for problem number two, which could not have even been recognized as a problem having been masked by the more obvious problem number one .... please do the following on one of your staff HP PCs.
Record the system time.
Reboot the system.
Run this command from a command prompt: wuauclt /resetauthorization /detectnow.
Wait 30 minutes.
Post ALL of the entries from the WindowsUpdate.log (found in C:\WINDOWS) starting with the entry at the time you recorded in Step #1.
Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
SolarWinds Head Geek
Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
http://www.solarwinds.com/gotmicrosoft
The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

Server 2012 R2 cannot update from 2008 R2 WSUS server

Our WSUS server is on a 2008 R2 VM. Updates for all 2008 R2 and lower servers, and Windows 7 clients work fine. I have one Server 2012 R2 in production and it cannot check for updates. It gets 800b0001 as the error code. I can
click on check for updates from Microsoft, then it does reach out to the Internet, download and install updates.
I also tried from my Win 8.1 laptop and I get error 8024402C. Any idea's?

I found in another thread the fix.
In regedit go to HKLM\Software\Microsoft\Update Services\Server\Setup and change "wYukonInstalled"
from a 1 to a 0.
Installer succeeds.
However now the Update Services console does not work. I get a connection error.
It's one thing after another with these things. I don't understand why Microsoft can't ever make something simple. IISReset did not cure this either.
The WSUS administration console was unable to connect to the WSUS Server via the remote API.
Verify that the Update Services service, IIS and SQL are running on the server. If the problem persists, try restarting IIS, SQL, and the Update Services Service.
The WSUS administration console has encountered an unexpected error. This may be a transient error; try restarting the administration console. If this error persists,
Try removing the persisted preferences for the console by deleting the wsus file under %appdata%\Microsoft\MMC\.
System.IO.IOException -- The handshake failed due to an unexpected packet format.
Source
System
Stack Trace:
at System.Net.Security.SslState.StartReadFrame(Byte[] buffer, Int32 readBytes, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
at System.Threading.ExecutionContext.runTryCode(Object userData)
at System.Runtime.CompilerServices.RuntimeHelpers.ExecuteCodeWithGuaranteedCleanup(TryCode code, CleanupCode backoutCode, Object userData)
at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
at System.Net.TlsStream.ProcessAuthentication(LazyAsyncResult result)
at System.Net.TlsStream.Write(Byte[] buffer, Int32 offset, Int32 size)
at System.Net.PooledStream.Write(Byte[] buffer, Int32 offset, Int32 size)
at System.Net.ConnectStream.WriteHeaders(Boolean async)
** this exception was nested inside of the following exception **
System.Net.WebException -- The underlying connection was closed: An unexpected error occurred on a send.
Source
Microsoft.UpdateServices.Administration
Stack Trace:
at Microsoft.UpdateServices.Administration.AdminProxy.CreateUpdateServer(Object[] args)
at Microsoft.UpdateServices.Administration.AdminProxy.GetUpdateServer(String serverName, Boolean useSecureConnection, Int32 portNumber)
at Microsoft.UpdateServices.UI.AdminApiAccess.AdminApiTools.GetUpdateServer(String serverName, Boolean useSecureConnection, Int32 portNumber)
at Microsoft.UpdateServices.UI.SnapIn.Scope.ServerSummaryScopeNode.GetUpdateServer(PersistedServerSettings settings)
at Microsoft.UpdateServices.UI.SnapIn.Scope.ServerSummaryScopeNode.ConnectToServer()
at Microsoft.UpdateServices.UI.SnapIn.Scope.ServerSummaryScopeNode.get_ServerTools()

Issue Resolving WSUS Server Across VPN

Hello All,
I have 18 sites connected by cisco SA520's to our main office via broadband connections. I can ping my primary server from the remote sites. I have GPO's that are writing to my remote XP SP3 computers telling them the name of my wsus server http://my-server but they are not logging on the wsus server for windows updates. When I open an IE window on a remote computer and type in http://my-server I get the Cisco admin page A DNS error occurred while opening the page.
The Cisco device is a DHCP server, has my main office DNS and WINS servers IP addresses under the LAN settings. Clients are getting DNS and WINS entries at the remote sites for my main site.
Any help would be greatly appreciated.
Thanks,
Willis

With the FQDN you still recieve the DNS error and the Cisco admin page is displayed? When you do a nslookup what IP address does it resolve to and is this the correct IP address of your wsus server?
Is that server being NAT'ed outside? Is this a seperate machine or does WSUS reside on the DC itself? Do you have any other services such as sharepoint installed on the same server? Did you install WSUS on a different port such as 8530? Did you modify the host header of the WSUS IIS entry?
http://support.microsoft.com/default.aspx?scid=kb;en-us;294382
http://www.wsuswiki.com/WSUSServerFAQ
Check the port of WSUS: http://technet.microsoft.com/en-us/library/bb632477.aspx
Verify that WSUS is assigned an IP address in IIS. Verify that port 80,443, and or 8530 are open in the firewall.
From what you mentioned previously it appears the address is being resolved to the address of the ASA which is why you receiving the Cisco Admin page.
From a remote client do a nslookup and verify that it is resolving correctly. If it is do a tracert and verify that it is going across the tunnel. Post a scrubbed running-config. Also in GPO you can use just the IP address of the server ex: http://10.10.10.15 or http://10.10.10.15:8530.
Is this the only DNS issue you are experiencing? Is group policy being processed correctly? Have you checked eventvwr.exe for any additonal errors?

Failed to set Subscriptions on the WSUS Server. Error:(-2147467259)Unspecified error

Recently restored SCCM 2012 SP1 from Sever 2008 R2, to Server 2012 R2. I had Updates Publisher installed on old 2008 Server with Firefox and Chrome imported into Configuration Manager. Since I have upgraded I am no longer able to sync updates with Microsoft.
WCM.log says:
Category Product:44048288-2aac-b2b5-3730-fc020622ea05 (Firefox) not found on WSUS
Category Product:cc5cb1bb-6b87-94ae-f96a-f758195112a7 (Chrome) not found on WSUS
Subscription contains categories unknown to WSUS.
Failed to set Subscriptions on the WSUS Server. Error:(-2147467259)Unspecified error
STATMSG: ID=6603 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_WSUS_CONFIGURATION_MANAGER" SYS=wdlsccmpri.aarcorp.com SITE=AAR PID=2788 TID=4668 GMTDATE=Mon Feb 17 18:22:43.654 2014 ISTR0="wdlsccmpri.aarcorp.com" ISTR1=""
ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=
I have gone to deselect these products from syncing in Administration> Site > Configure Site Components >Software Update Point Products Tab. They are not there. Any help on getting SCCM to sync updates would be greatly appreciated.

PROBLEM
=========
Unable to sync after moving the Primary site server to different OS.
CAUSE
=======
Issues with the product and classification setup in the SUP after the restore.
RESOLUTION
===========
Ran below query to check if we have reference to Firefox and Chrome categories in the database.
QUERY:
select CategoryInstance_UniqueID, CategoryInstanceName
from fn_ListUpdateCategoryInstances(9) cat
where cat.AllowSubscription=1 and cat.IsSubscribed=1 and cat.IsParentSubscribed=0
order by cat.CategoryInstance_UniqueID
RESULT: [Along with other products we found Chrome and Firefox]
Product:44048288-2aac-b2b5-3730-fc020622ea05 Firefox
Product:cc5cb1bb-6b87-94ae-f96a-f758195112a7 Chrome
Ran Select Query
select * from CI_CategoryInstances where categoryinstanceid in
(select categoryinstanceid from CI_LocalizedCategoryInstances where LocaleID = 9 and CategoryInstanceName = 'Firefox'or
CategoryInstanceName = 'Chrome')
RESULT:
CategoryInstanceID CategoryInstance_UniqueID CategoryTypeName DateLastModified SourceSite ParentCategoryInstanceID IsDeleted rowversion
16777523 Product:cc5cb1bb-6b87-94ae-f96a-f758195112a7 Product 2013-11-27 21:05:23.000 AAR 16777522 0 0x0000000006B08673
16777549 Product:44048288-2aac-b2b5-3730-fc020622ea05 Product 2013-11-27 21:05:23.000 AAR 16777536 0 0x0000000006B08676
Ran Select Query
select * from CI_LocalizedCategoryInstances where LocaleID = 9 and CategoryInstanceName = 'Firefox'or
CategoryInstanceName = 'Chrome'
RESULT:
CategoryInstanceID LocaleID CategoryInstanceName rowversion
16777523 9 Chrome 0x0000000006B08674
16777549 9 Firefox 0x0000000006B08677
We did find Chrome and Firefox items in the database.
We need to delete these items in the database.
We used below queries to delete the reference from the database.
delete from CI_CategoryInstances where categoryinstanceid in
(select categoryinstanceid from CI_LocalizedCategoryInstances where LocaleID = 9 and CategoryInstanceName = 'Firefox'or
CategoryInstanceName = 'Chrome')
delete from CI_LocalizedCategoryInstances where LocaleID = 9 and CategoryInstanceName = 'Firefox'or
CategoryInstanceName = 'Chrome'
After deleting performed Scheduled Sync. Was successful

Switching WSUS server and Windows 8.1/Server2008/Server2012 clients won't connect, Windows 7/Server2003 is fine

I need to split the load of my WSUS on to another site because the amount of computers is straining the internet connection in the amount of uploads performed.
However I'm having an issue at the second WSUS where only Windows 7 and Server 2003 clients will update...
Windows 8.1 and Server 2008 and Server2012 won't update giving the following error codes: 8024400A and 80072EE2
The WSUS is a Server 2012 with Local Update Publisher 1.1 installed. It works fine locally at the site but not across our WAN.
The clients appear in the WSUS console but fail to check for updates.
I've tried it with the firewall turned off...
Both WSUS servers are using Microsoft SCEP 2012.
Has anyone out there experienced this? Or have any suggestions to fix?
Cheers.

Hi there,
I spoke too soon, I think I got one Windows 8 client to update yesterday by fluke. Now today it won't.
There's not much different between the W7 and W8 systems they both use the same antivirus. Same software but updated on W8.
Here is the windows update.log:
2014-06-05 10:44:14:561
976 954
Misc =========== Logging initialized (build: 7.9.9600.17093, tz: +1000) ===========
2014-06-05 10:44:14:639
976 954
Misc = Process: C:\Windows\system32\svchost.exe
2014-06-05 10:44:14:639
976 954
Misc = Module: c:\windows\system32\wuaueng.dll
2014-06-05 10:44:14:561
976 954
Service *************
2014-06-05 10:44:14:639
976 954
Service ** START ** Service: Service startup
2014-06-05 10:44:14:639
976 954
Service *********
2014-06-05 10:44:15:311
976 954
IdleTmr Non-AoAc machine. Aoac operations will be ignored.
2014-06-05 10:44:15:311
976 954
Agent * WU client version 7.9.9600.17093
2014-06-05 10:44:15:326
976 954
Agent WARNING: SleepStudyTracker: Machine is non-AOAC. Sleep study tracker disabled.
2014-06-05 10:44:15:326
976 954
Agent * Base directory: C:\Windows\SoftwareDistribution
2014-06-05 10:44:15:326
976 954
Agent * Access type: No proxy
2014-06-05 10:44:15:326
976 954
Service UpdateNetworkState Ipv6, cNetworkInterfaces = 1.
2014-06-05 10:44:15:326
976 954
Service UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
2014-06-05 10:44:15:326
976 954
Agent * Network state: Connected
2014-06-05 10:44:15:326
976 954
Service UpdateNetworkState Ipv6, cNetworkInterfaces = 1.
2014-06-05 10:44:15:326
976 954
Service UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
2014-06-05 10:44:16:123
976 954
Agent *********** Agent: Initializing global settings cache ***********
2014-06-05 10:44:16:123
976 954
Agent * Endpoint Provider: 00000000-0000-0000-0000-000000000000
2014-06-05 10:44:16:123
976 954
Agent * WSUS server: http://10.155.194.59:8530
2014-06-05 10:44:16:123
976 954
Agent * WSUS status server: http://10.155.194.59:8530
2014-06-05 10:44:16:123
976 954
Agent * Target group: Test Group
2014-06-05 10:44:16:123
976 954
Agent * Windows Update access disabled: No
2014-06-05 10:44:16:170
976 954
WuTask WuTaskManager delay initialize completed successfully..
2014-06-05 10:44:16:170
976 954
AU Timer: 31DA7559-FE27-4810-8FF6-987195B1FD98, Expires 2014-06-05 00:24:13, not idle-only, not network-only
2014-06-05 10:44:16:170
976 954
AU Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2014-06-05 05:36:25, not idle-only, not network-only
2014-06-05 10:44:16:170
976 954
AU Timer: 29A863E7-8609-4D1E-B7CD-5668F857F1DB, Expires 2014-06-05 05:36:25, not idle-only, not network-only
2014-06-05 10:44:16:170
976 954
Report CWERReporter::Init succeeded
2014-06-05 10:44:16:170
976 954
Agent *********** Agent: Initializing Windows Update Agent ***********
2014-06-05 10:44:16:170
976 954
DnldMgr Download manager restoring 0 downloads
2014-06-05 10:44:16:170
976 954
AU ########### AU: Initializing Automatic Updates ###########
2014-06-05 10:44:16:170
976 954
AU Additional Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} with Approval type {Scheduled} added to AU services list
2014-06-05 10:44:16:170
976 954
AU AIR Mode is disabled
2014-06-05 10:44:16:170
976 954
AU # Policy Driven Provider: http://10.155.194.59:8530
2014-06-05 10:44:16:170
976 954
AU # Detection frequency: 22
2014-06-05 10:44:16:170
976 954
AU # Target group: Test Group
2014-06-05 10:44:16:170
976 954
AU # Approval type: Scheduled (Policy)
2014-06-05 10:44:16:170
976 954
AU # Auto-install minor updates: Yes (Policy)
2014-06-05 10:44:16:170
976 954
AU # ServiceTypeDefault: Service 117CAB2D-82B1-4B5A-A08C-4D62DBEE7782 Approval type: (Scheduled)
2014-06-05 10:44:16:170
976 954
AU # Will interact with non-admins (Non-admins are elevated (Policy))
2014-06-05 10:44:16:186
976 954
AU WARNING: Failed to get Wu Exemption info from NLM, assuming not exempt, error = 0x80070032
2014-06-05 10:44:16:186
976 954
AU AU finished delayed initialization
2014-06-05 10:44:16:202
976 954
AU Adding timer:
2014-06-05 10:44:16:202
976 954
AU Timer: 31DA7559-FE27-4810-8FF6-987195B1FD98, Expires 2014-06-05 03:47:12, not idle-only, not network-only
2014-06-05 10:44:16:217
976 99c
DnldMgr Asking handlers to reconcile their sandboxes
2014-06-05 10:45:17:562
976 954
AU ReAttemptDownloadsAsUserIfNecessary, No calls in download progress.
2014-06-05 10:45:31:453
976 778
IdleTmr Incremented idle timer priority operation counter to 1
2014-06-05 10:45:34:562
976 778
AU Triggering AU detection through DetectNow API
2014-06-05 10:45:34:562
976 778
AU Additional Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} with Approval type {Scheduled} added to AU services list
2014-06-05 10:45:34:562
976 778
AU Triggering Online detection (interactive)
2014-06-05 10:45:34:562
976 778
AU Adding timer:
2014-06-05 10:45:34:562
976 778
AU Timer: 31DA7559-FE27-4810-8FF6-987195B1FD98, Expires 2014-06-05 00:45:34, not idle-only, not network-only
2014-06-05 10:45:34:609
976 954
AU #############
2014-06-05 10:45:34:609
976 954
AU ## START ## AU: Search for updates
2014-06-05 10:45:34:609
976 954
AU #########
2014-06-05 10:45:34:609
976 954
AU Additional Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} with Approval type {Scheduled} added to AU services list
2014-06-05 10:45:34:609
976 954
IdleTmr WU operation (CSearchCall::Init ID 1) started; operation # 15; does use network; is not at background priority
2014-06-05 10:45:34:609
976 954
IdleTmr Incremented idle timer priority operation counter to 2
2014-06-05 10:45:34:797
976 954
Report *********** Report: Initializing static reporting data ***********
2014-06-05 10:45:34:797
976 954
Report * OS Version = 6.3.9600.0.0.65792
2014-06-05 10:45:34:797
976 954
Report * OS Product Type = 0x00000004
2014-06-05 10:45:34:813
976 954
Report * Computer Brand = Microsoft Corporation
2014-06-05 10:45:34:813
976 954
Report * Computer Model = Virtual Machine
2014-06-05 10:45:34:813
976 954
Report * Platform Role = 1
2014-06-05 10:45:34:813
976 954
Report * AlwaysOn/AlwaysConnected (AOAC) = 0
2014-06-05 10:45:34:813
976 954
Report * Bios Revision = 090004
2014-06-05 10:45:34:813
976 954
Report * Bios Name = BIOS Date: 03/19/09 22:51:32 Ver: 09.00.04
2014-06-05 10:45:34:813
976 954
Report * Bios Release Date = 2009-03-19T00:00:00
2014-06-05 10:45:34:813
976 954
Report * Bios Sku Number unavailable.
2014-06-05 10:45:34:813
976 954
Report * Bios Vendor = American Megatrends Inc.
2014-06-05 10:45:34:813
976 954
Report * Bios Family unavailable.
2014-06-05 10:45:34:828
976 954
Report * Bios Major Release unavailable.
2014-06-05 10:45:34:828
976 954
Report * Bios Minor Release unavailable.
2014-06-05 10:45:34:828
976 954
Report * Locale ID = 3081
2014-06-05 10:45:35:578
976 954
Agent *** START *** Queueing Finding updates [CallerId = AutomaticUpdatesWuApp Id = 1]
2014-06-05 10:45:35:609
976 954
AU <<## SUBMITTED ## AU: Search for updates [CallId = {CDA6DEA2-9874-4DB5-AAA7-9A05D933C012} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}]
2014-06-05 10:45:35:609
976 fc4
Agent *** END *** Queueing Finding updates [CallerId = AutomaticUpdatesWuApp Id = 1]
2014-06-05 10:45:35:609
976 fc4
Agent *************
2014-06-05 10:45:35:609
976 fc4
Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdatesWuApp Id = 1]
2014-06-05 10:45:35:609
976 fc4
Agent *********
2014-06-05 10:45:35:609
976 fc4
Agent * Online = Yes; Ignore download priority = No
2014-06-05 10:45:35:609
976 fc4
Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0
and DeploymentAction='Uninstallation' and RebootRequired=1"
2014-06-05 10:45:35:609
976 fc4
Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
2014-06-05 10:45:35:609
976 fc4
Agent * Search Scope = {Machine & All Users}
2014-06-05 10:45:35:609
976 fc4
Agent * Caller SID for Applicability: S-1-5-21-1323361640-3159480285-1943353560-1532
2014-06-05 10:45:35:609
976 fc4
Agent * RegisterService is set
2014-06-05 10:45:35:625
976 fc4
EP Got WSUS Client/Server URL: "http://10.155.194.59:8530/ClientWebService/client.asmx"
2014-06-05 10:45:35:641
976 fc4
Setup Checking for agent SelfUpdate
2014-06-05 10:45:35:641
976 fc4
Setup Client version: Core: 7.9.9600.17093 Aux: 7.9.9600.17093
2014-06-05 10:45:35:641
976 fc4
EP Got WSUS SelfUpdate URL: "http://10.155.194.59:8530/selfupdate"
2014-06-05 10:45:35:672
976 fc4
Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab with dwProvFlags 0x00000080:
2014-06-05 10:45:35:734
976 fc4
Misc Microsoft signed: NA
2014-06-05 10:45:35:734
976 fc4
Misc Infrastructure signed: Yes
2014-06-05 10:45:35:734
976 fc4
Misc WARNING: Cab does not contain correct inner CAB file.
2014-06-05 10:45:35:734
976 fc4
Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab with dwProvFlags 0x00000080:
2014-06-05 10:45:35:734
976 fc4
Misc Microsoft signed: NA
2014-06-05 10:45:35:750
976 fc4
Misc Infrastructure signed: Yes
2014-06-05 10:45:35:766
976 fc4
Setup Skipping SelfUpdate check based on the /SKIP directive in wuident
2014-06-05 10:45:35:766
976 fc4
Setup SelfUpdate check completed. SelfUpdate is NOT required.
2014-06-05 10:45:35:907
976 fc4
PT +++++++++++ PT: Synchronizing server updates +++++++++++
--continued--

Clients cannot update from WSUS server - error 8024400E

Alright, so I'm troubleshooting our WSUS server and seem to be stuck. I am running WSUS 3.2.7600.226 on Server 2003. The client I have been using for testing is Windows 7 x64, but we have this issue on all clients (XP, 7 x86, and 7 x64). I started
with an error of 800B0001 and after googling installed KB2720211 to fix it. Now I am getting error 8024400E on clients when I attempt to update. I followed a technet walkthrough and verified that my WSUS settings are all correct (at least regarding iis,
registry, gpo settings, and file system permissions). I am able to download CAB files from the WSUS server by going to the proper address in a browser. Here is a snippet from my WindowsUpdate log on my client:
2013-12-20 10:27:29:784 972 23ac AU #############
2013-12-20 10:27:29:784 972 23ac AU ## START ## AU: Search for updates
2013-12-20 10:27:29:784 972 23ac AU #########
2013-12-20 10:27:29:785 972 23ac AU <<## SUBMITTED ## AU: Search for updates [CallId = {749E5CD5-F4DE-48FC-A691-3610EF622CE3}]
2013-12-20 10:27:29:785 972 2bcc Agent *************
2013-12-20 10:27:29:785 972 2bcc Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
2013-12-20 10:27:29:785 972 2bcc Agent *********
2013-12-20 10:27:29:785 972 2bcc Agent * Online = Yes; Ignore download priority = No
2013-12-20 10:27:29:785 972 2bcc Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation'
and RebootRequired=1"
2013-12-20 10:27:29:785 972 2bcc Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
2013-12-20 10:27:29:785 972 2bcc Agent * Search Scope = {Machine}
2013-12-20 10:27:29:785 972 2bcc Setup Checking for agent SelfUpdate
2013-12-20 10:27:29:785 972 2bcc Setup Client version: Core: 7.6.7600.256 Aux: 7.6.7600.256
2013-12-20 10:27:29:785 972 2bcc Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2013-12-20 10:27:29:789 972 2bcc Misc Microsoft signed: Yes
2013-12-20 10:27:29:794 972 2bcc Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2013-12-20 10:27:29:797 972 2bcc Misc Microsoft signed: Yes
2013-12-20 10:27:29:799 972 2bcc Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
2013-12-20 10:27:29:803 972 2bcc Misc Microsoft signed: Yes
2013-12-20 10:27:29:808 972 2bcc Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
2013-12-20 10:27:29:812 972 2bcc Misc Microsoft signed: Yes
2013-12-20 10:27:29:821 972 2bcc Setup Determining whether a new setup handler needs to be downloaded
2013-12-20 10:27:29:821 972 2bcc Setup SelfUpdate handler is not found. It will be downloaded
2013-12-20 10:27:29:821 972 2bcc Setup Evaluating applicability of setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~amd64~~7.6.7600.256"
2013-12-20 10:27:29:823 972 2bcc Setup Setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~amd64~~7.6.7600.256" is already installed.
2013-12-20 10:27:29:823 972 2bcc Setup Evaluating applicability of setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~amd64~~7.6.7600.256"
2013-12-20 10:27:29:835 972 2bcc Setup Setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~amd64~~7.6.7600.256" is already installed.
2013-12-20 10:27:29:835 972 2bcc Setup Evaluating applicability of setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~amd64~~7.6.7600.256"
2013-12-20 10:27:29:852 972 2bcc Setup Setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~amd64~~7.6.7600.256" is already installed.
2013-12-20 10:27:29:852 972 2bcc Setup SelfUpdate check completed. SelfUpdate is NOT required.
2013-12-20 10:27:29:884 972 2bcc PT +++++++++++ PT: Synchronizing server updates +++++++++++
2013-12-20 10:27:29:884 972 2bcc PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://wsusservername/ClientWebService/client.asmx
2013-12-20 10:27:29:896 972 2bcc PT WARNING: Cached cookie has expired or new PID is available
2013-12-20 10:27:29:896 972 2bcc PT Initializing simple targeting cookie, clientId = 488f3922-1a4e-4921-b015-25957eeb6500, target group = http://wsusservername, DNS name = mycomputer.domain.local
2013-12-20 10:27:29:896 972 2bcc PT Server URL = http://wsusservername/SimpleAuthWebService/SimpleAuth.asmx
2013-12-20 10:27:29:902 972 2bcc PT WARNING: GetAuthorizationCookie failure, error = 0x8024400E, soap client error = 7, soap error code = 400, HTTP status code = 200
2013-12-20 10:27:29:902 972 2bcc PT WARNING: SOAP Fault: 0x000190
2013-12-20 10:27:29:902 972 2bcc PT WARNING: faultstring:Fault occurred
2013-12-20 10:27:29:902 972 2bcc PT WARNING: ErrorCode:InternalServerError(5)
2013-12-20 10:27:29:902 972 2bcc PT WARNING: Message:(null)
2013-12-20 10:27:29:902 972 2bcc PT WARNING: Method:"http://www.microsoft.com/SoftwareDistribution/Server/SimpleAuthWebService/GetAuthorizationCookie";
2013-12-20 10:27:29:902 972 2bcc PT WARNING: ID:9d989bf6-04e3-44a9-8ffd-f20bb997b3f0
2013-12-20 10:27:29:902 972 2bcc PT WARNING: Failed to initialize Simple Targeting Cookie: 0x8024400e
2013-12-20 10:27:29:902 972 2bcc PT WARNING: PopulateAuthCookies failed: 0x8024400e
2013-12-20 10:27:29:902 972 2bcc PT WARNING: RefreshCookie failed: 0x8024400e
2013-12-20 10:27:29:902 972 2bcc PT WARNING: RefreshPTState failed: 0x8024400e
2013-12-20 10:27:29:902 972 2bcc PT WARNING: Sync of Updates: 0x8024400e
2013-12-20 10:27:29:902 972 2bcc PT WARNING: SyncServerUpdatesInternal failed: 0x8024400e
2013-12-20 10:27:29:902 972 2bcc Agent * WARNING: Failed to synchronize, error = 0x8024400E
2013-12-20 10:27:29:902 972 2bcc Agent * WARNING: Exit code = 0x8024400E
2013-12-20 10:27:29:902 972 2bcc Agent *********
2013-12-20 10:27:29:902 972 2bcc Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
2013-12-20 10:27:29:902 972 2bcc Agent *************
2013-12-20 10:27:29:902 972 2bcc Agent WARNING: WU client failed Searching for update with error 0x8024400e
2013-12-20 10:27:29:902 972 1bc8 AU >>## RESUMED ## AU: Search for updates [CallId = {749E5CD5-F4DE-48FC-A691-3610EF622CE3}]
2013-12-20 10:27:29:902 972 1bc8 AU # WARNING: Search callback failed, result = 0x8024400E
2013-12-20 10:27:29:902 972 1bc8 AU # WARNING: Failed to find updates with error code 8024400E
2013-12-20 10:27:29:902 972 1bc8 AU #########
2013-12-20 10:27:29:902 972 1bc8 AU ## END ## AU: Search for updates [CallId = {749E5CD5-F4DE-48FC-A691-3610EF622CE3}]
2013-12-20 10:27:29:902 972 1bc8 AU #############
2013-12-20 10:27:29:903 972 1bc8 AU Successfully wrote event for AU health state:0
2013-12-20 10:27:29:903 972 1bc8 AU AU setting next detection timeout to 2013-12-20 21:27:29
2013-12-20 10:27:29:903 972 1bc8 AU Setting AU scheduled install time to 2013-12-21 10:00:00
2013-12-20 10:27:29:903 972 1bc8 AU Successfully wrote event for AU health state:0
2013-12-20 10:27:29:904 972 1bc8 AU Successfully wrote event for AU health state:0
2013-12-20 10:27:34:498 972 2bcc Report REPORT EVENT: {2519DC64-E7F9-499B-A2F8-B58DA4A0C08A} 2013-12-20 10:27:29:902-0600 1 148 101 {00000000-0000-0000-0000-000000000000} 0 8024400e AutomaticUpdates Failure Software Synchronization Windows Update Client failed
to detect with error 0x8024400e.
2013-12-20 10:27:34:502 972 2bcc Report CWERReporter::HandleEvents - WER report upload completed with status 0x8
2013-12-20 10:27:34:502 972 2bcc Report WER Report sent: 7.6.7600.256 0x8024400e 00000000-0000-0000-0000-000000000000 Scan 101 Managed
2013-12-20 10:27:34:502 972 2bcc Report CWERReporter finishing event handling. (00000000)
I focused in on "GetAuthorizationCookie failure, error = 0x8024400E, soap client error = 7, soap error code = 400, HTTP status code = 200" and did some googling which all points at Microsoft Office 2003 SP1 update as being the culprit, and I followed
the instructions on a technet site to disable the update and am still getting the same error. I'm stumped at this point, and I thought I would post here in the hope that someone can help me before I end up just wiping it out and reinstalling (which I'm worried
won't even solve it).

I focused in on "GetAuthorizationCookie failure, error = 0x8024400E, soap client error = 7, soap error code = 400, HTTP status code = 200" and did some googling which all points at Microsoft Office 2003 SP1 update as being the culprit, and I followed
the instructions on a technet site to disable the update and am still getting the same error.
While you're definitely on the right track, the Office2003SP1 update really has not been an issue since WSUS Service Pack 2 was released in October 2009 (and really, the Office2003SP1 update that was the cause of this was replaced long before that even,
so you probably don't even have the defective update on your server).
However, the error is generally associated with the presence of defective update(s) on the WSUS server, so the first thing to do is address any potential issues caused by a failed install of KB2720211.
If the error still persists after verifying that all other aspects of the server are fully operational, review the list of not-Declined updates on your WSUS server and make sure that:
All Expired updates are Declined (and then run the Server Cleanup Wizard and let it delete the expired updates).
All approvals for older revisions have been removed (and then run the Server Cleanup Wizard and let it delete the older revisions).
All approvals for superseded updates have been removed. (And then, when they report as 100% Not Applicable, decline them, and then run the Server Cleanup Wizard so that it can delete the files associated with those updates).
Once all of the potentially problematic updates have been removed from the view of the Windows Update Agent, and if this error then persists, we can evaluate it from a more focused perspective.
Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
SolarWinds Head Geek
Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
http://www.solarwinds.com/gotmicrosoft
The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

How to set up Group Policy without any server installed

How to set up Group Policy on Win8 without any server installed?
I have set up 50 users on LAN and want to push softwares via one common point. From google I found to deploy Software using Group Policy. But then Group Policy occurs in Servers and I don't have any server set up.

Hello,
a Domain requires at least one Windows server OS machine which has Active Directory installed.
As previous already mentioned from SenneVL this also requires that computers are added to the domain and that you create user accounts in Active Directory users and computers which stores the account information in the Active directory database.
In your case with single computers each machine has its own database(SAM) which stores passwords etc. this is different in a domain.
Each computer has a local policy which will be overwritten from centrally managed policies from the domain.
"The common point would be my PC (Admin PC) ."
This machine can not be used for your needs with software installation for 50 computers.
"How To Use the Group Policy Editor to Manage Local Computer Policy."
This is about the local machine and you cannot manage them for other computers from your Admin PC.
"DOMAIN part: By default Microsoft takes everyone on Workgroup. Is that not a default DOMAIN? or should I make one lets say "ABC" on every PC ?"
NO, this is NOT a domain.
http://windows.microsoft.com/en-us/windows7/what-is-the-difference-between-a-domain-a-workgroup-and-a-homegroup
Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://blogs.msmvps.com/MWeber
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
Twitter:

WSUS server role on Windows Server 2012 R2 - Supported SQL Configurations

According to
this page the supported SQL configurations for WSUS on Windows Server 2012/2012 R2 stop at SQL Server 2012 SP1, but there is no mention of SQL Server 2012 SP2 being supported.
However, both the SCCM 2012 R2
supported configuration page and this announcement state that SQL Server 2012 SP2 is fully supported on SCCM 2012 R2 with no
known limitations. Bearing in mind a big part of SCCM is to perform software updates which in turn requires WSUS to be installed...
... Is SQL Server 2012 SP2 supported on WSUS 4.0 (aka WSUS server role on Windows Server 2012 R2)?

The only thing that mattered for the versions mentioned on TechNet probably is the date the articles are published. I'm no Microsoft employee so I cannot guarantee you support even if I trace back some Microsoft article that explains the lifecycle of MS
products and support.
Fact is that MDT uses a database, SQL is a database server. SQL server has all kinds of compatibility modes to support databases dating multiple versions back.
Another fact is that a Service pack is an
update to the software (be it a large one) Microsoft will not break compatibility with their own products (and may others that relay on SQL server) by an update.
And a last fact is that in general, updates are required when you need support. After all, updates fix issues, and engineers generally don't like ghosthunting a bug that has already been patched.
MCP/MCSA/MCTS/MCITP

ISE Without WSUS Server

Similar Messages

Maybe you are looking for