MDT: deploy a WSUS-server/SCCM and include Windows updates?

Hi,
I'd like to deploy an sccm-server which will contain a WSUS-server. However, this SCCM-server itself should go to Internet and download all updates available. How can I achieve this in a tasksequence step?
Pls advise.
J.
Jan Hoedt

Is this an MDT question or an SCCM question?
The SCCM server would need the Software Update Point role installed but that doesn't make it a WSUS server, per se. SCCM uses the metadata from WSUS to download updates to packages. It does not function like a standalone, traditional WSUS server.
-Nick O.

Similar Messages

  • WSUS Server settings and Migrating SCCM 2007 Clients to SCCM 2012 R2

    I am in the process of migrating a site from SCCM 2007 to SCCM 2012 R2.
    Whilst doing this I came across the following issue:
    The first issue is the workstations are woefully out of date, patch and update-wise, some have never had a patch applied as the branch IT staff are building them from the original disk. The policy is set in the SCCM 2007 client to point the machines at
    the 2007 WSUS server, which is not set to deliver any updates to 2007 clients and hasn't been for a while. So as soon as the client is installed they lose the ability to get updates from Microsoft and don't get them from the 2007 WSUS server either.
    Issue number 2 is the machines are a mixture of hand-built machines to SCCM 2007 delivered images, the SCCM image is patch using offline patching so they are somewhat up-to-date, but the hand-built machines are not and as there is no standardization on
    the Microsoft Update client settings, the IT person on-site sets it to whatever he/she feels like, as it makes no difference once the client is installed and the policy applied.
    So, when I come to update the client from 2007 to 2012, the following occurs
    The Client uninstalls, and the GPO policy settings for Windows Update are removed.
    Depending on the setup of the client initially, some machines are then going to Microsoft for their updates (literally 100s) and although the new client is installed the policy update does not fire to update the Windows Update Policy settings, sometimes
    for hours after the install finishes. My thoughts are that it just can't run the policy as it is bogged down by patches updating and, in some cases, rebooting and then updating some more.
    As a workaround I have had to go in an physically disable Microsoft Update on these machines, which stops the downloading and eventually allows the policy to apply, after which the machine then begins to receive patches from WSUS in a controlled method during
    maintenance windows.
    I have tried a number of approaches, even setting the Global Group Policy for Windows Update, but the install still removes the keys and basically sets Windows updates back to whatever it was set before the policy was applied and stays that way until the
    new client is installed and the Machine policy reapplied. This can be speeded up by initiating it on the client obviously, but that would mean going to each client or using right-click tools on each machine, which is not an option.
    What I would like to know is if there is something I am missing from my methods or is it just that I have never been on a site with such out of date workstations built in such different ways.
    Any help would be appreciated.

    First note that clients do *not* get updates from WSUS in ConfigMgr. The Windows Update Agent (WUA) must point to the WSUS integrated into ConfigMgr (by virtue of having the SUP installed on it) but this is only to make the update catalog/metadata available
    to it. Approving updates in WSUS is unsupported for ConfigMgr.
    What you've described above is all working as designed although these clients are falling into a gap between the 2007 and 2012 configuration and thus they are reaching out to Windows Update during this gap and installing updates. To prevent this, you
    need to disable automatic updates via a domain group policy. This will prevent all automated WUA activity including installing updates from any source automatically. This will not interfere with ConfigMgr Software Updates in any way though.
    Jason | http://blog.configmgrftw.com | @jasonsandys

  • Unable to scan and install windows updates on Win 2008 R2 server

    I've encountered some of my win 2008 servers are unable to scan and receive windows updates from SCCM 2012. Browse through the logs and found some error code related to
    0x80244023. Excerpt from the WindowsUpdate and WUAHandler is as below. Searched the net and found some workaround which is to rename the registry key
    WinHTTPSettings to WinHTTPSettingsx (by adding x at the end of the string)
    under HKEY_LOCAL_MACHINE -> SOFTWARE -> Microsoft -> Windows -> CurrentVersion -> Internet Settings -> Connections.
    I've did just that on the effected servers and after running again the Software Update Scan Cycle action, it is now able to scan and install the updates. My questions is, based on you guys experience, is there any repercussion (apart from enable to install
    software updates) that I could encounter in changing the registry key value WinHTTPSettings?
    WUAHandler
    <![LOG[Scan results will include all superseded updates.]LOG]!><time="04:04:40.982-480" date="09-20-2014" component="WUAHandler" context="" type="1" thread="872" file="cwuahandler.cpp:2913">
    <![LOG[Search Criteria is (DeploymentAction=* AND Type='Software') OR (DeploymentAction=* AND Type='Driver')]LOG]!><time="04:04:40.982-480" date="09-20-2014" component="WUAHandler" context="" type="1"
    thread="872" file="cwuahandler.cpp:2916">
    <![LOG[Async searching of updates using WUAgent started.]LOG]!><time="04:04:40.988-480" date="09-20-2014" component="WUAHandler" context="" type="1" thread="872" file="cwuahandler.cpp:579">
    <![LOG[Async searching completed.]LOG]!><time="04:05:06.262-480" date="09-20-2014" component="WUAHandler" context="" type="1" thread="8112" file="cwuahandler.cpp:2068">
    <![LOG[OnSearchComplete - Failed to end search job. Error = 0x80244023.]LOG]!><time="04:05:06.263-480" date="09-20-2014" component="WUAHandler" context="" type="3"
    thread="872" file="cwuahandler.cpp:3064">
    <![LOG[Scan failed with error = 0x80244023.]LOG]!><time="04:05:06.263-480" date="09-20-2014" component="WUAHandler" context="" type="3" thread="872" file="cwuahandler.cpp:3520">
    WindowsUpdate
    2014-09-20 06:04:03:506  552 634 PT +++++++++++  PT: Synchronizing server updates  +++++++++++
    2014-09-20 06:04:03:506  552 634 PT   + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
    http://"SCCM Server":8530/ClientWebService/client.asmx
    2014-09-20 06:04:25:166  552 634 PT WARNING:
    GetConfig failure, error = 0x80244023, soap client error = 10, soap error code = 0, HTTP status code = 504
    2014-09-20 06:04:25:166  552 634 PT WARNING:
    PTError: 0x80244023
    2014-09-20 06:04:25:166  552 634 PT WARNING:
    GetConfig_WithRecovery failed: 0x80244023
    2014-09-20 06:04:25:166  552 634 PT WARNING: RefreshConfig failed: 0x80244023
    2014-09-20 06:04:25:166  552 634 PT WARNING: RefreshPTState failed: 0x80244023
    2014-09-20 06:04:25:166  552 634 PT WARNING: Sync of Updates: 0x80244023
    2014-09-20 06:04:25:166  552 634 PT WARNING: SyncServerUpdatesInternal failed: 0x80244023
    2014-09-20 06:04:25:166  552 634 Agent   * WARNING:
    Failed to synchronize, error = 0x80244023
    2014-09-20 06:04:25:170  552 634 Agent   * WARNING: Exit code = 0x80244023
    2014-09-20 06:04:25:170  552 634 Agent *********
    2014-09-20 06:04:25:170  552 634 Agent **  END  **  Agent: Finding updates [CallerId = CcmExec]
    2014-09-20 06:04:25:170  552 634 Agent *************
    2014-09-20 06:04:25:170  552 634 Agent WARNING:
    WU client failed Searching for update with error 0x80244023
    2014-09-20 06:04:25:171 5752 de4 COMAPI >>--  RESUMED  -- COMAPI: Search [ClientId = CcmExec]
    2014-09-20 06:04:25:172 5752 de4 COMAPI   - Updates found = 0
    2014-09-20 06:04:25:172 5752 de4 COMAPI   - WARNING: Exit code = 0x00000000, Result code = 0x80244023
    2014-09-20 06:04:25:172 5752 de4 COMAPI ---------
    2014-09-20 06:04:25:172 5752 de4 COMAPI --  END  --  COMAPI: Search [ClientId = CcmExec]
    2014-09-20 06:04:25:172 5752 de4 COMAPI -------------
    2014-09-20 06:04:25:172 5752 de4 COMAPI WARNING: Operation failed due to earlier error, hr=80244023
    2014-09-20 06:04:25:172 5752 de4 COMAPI FATAL:
    Unable to complete asynchronous search. (hr=80244023)
    2014-09-20 06:04:30:171  552 634 Report REPORT EVENT: {37DD5321-4FD5-4024-9C84-1FB9C04D4A5A} 2014-09-20 06:04:25:169+0800 1 148 101 {00000000-0000-0000-0000-000000000000} 0 80244023 CcmExec Failure Software
    Synchronization Windows Update Client failed to detect with error 0x80244023.

    Hi
    If SCCM is setup correctly and your boundaries are correct then once you deploy updates the agents will pick them up.
    Also make sure you SUP role has the FQDN set. Lastly if you are using port 8530 make sure it is open.
    Hope this helps. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  • How to deploy MS Sql Server 2005 and 2008 jdbc driver

    Hi SAP Guru's
    Can somebody tell me how to deploy the jdbc driver of MS SQL Server 2005 and 2008 on SDM.
    According to the SAP instruction we should have 3 files(mssqlserver.jar,msbase.jar,msutil.jar) but in 2005 driver file we only have 1 file i.e sqljdbc.jar so how do i deploy it .
    Secondly i cannot deploy it on visual administrator as well and when i am doing the File to jdbc scenarion i am getting this error
    " Accessing database connection "jdbc.sqlserver://localhost:1433;DatabaseName=Employee failed DriverManagerException. Cannot establish connection to URL jdbc.sqlserver://localhost:1433;DatabaseName=Employee  SAPClassNotFoundException com.microsoft.sqlserver.jdbc.SQLServerDriver".
    can somebody please upload the screen shots on mediafire or any other site so that i will solve my problem.

    Hello,
    *OS: First of all: *
    3 files (msbase.jar,mssqlserver.jar and msutility.jar )should be zipped to aii_af_jmsproviderlib.zip file only for UNIX OS.
    For Windows OS only sqljdbc.jar file which in every version of JDBC driver should be zipped to aii_af_jmsproviderlib.zip.
    You can deploy JDBC driver through SDM tool which mention in guide below:
    New version of JDBC driver installation guiade:
    External Driver Configuration for Process Integration 7.0
    https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/60237e74-ef19-2b10-5a9b-b35cc6a28e83
    Drivertool from this guide you can find at https://www.sdn.sap.com/irj/sdn/howtoguides
    Then Exchange Infrastructure How-to Guides for SAP NetWeaver 2004 HYPERLINK "https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/f04ce027-934d-2a10-5a8f-fa0b1ed4d88f"
    How to Install and Configure External Drivers for JDBC & JMS
    AdaptersHYPERLINK "https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/e00262f5-934d-2a10-b99c-9bc63c2a7768"
    Download attached system files (ZIP 16KB)
    Any questions - let me know
    BR,
    Dzmitry

  • Built and captured new wim and included all updates but more updates get applied when I build from that wim

    EDIT: This is on SCCM 2012 R2 CU3
    (EDIT: simplified title)
    I have a task sequence for building reference images from. This runs the Software Updates Step last and seems to work fine. When it completes I reboot the target machine then do a capture to wim (using the SCCM capture iso).
    I import the new wim and link it to the GOLD build task sequence, but when I build from from it the machine tries to install another bunch of updates.
    The OS I'm building is 2008 R2 SP1. I have all updates from year 2008 deployed to the right collection.
    Why does it try to install more updates??
    I was considering using SCCM to install the updates directly into the WIM but I'm no longer convinced it will work. I just want a gold image, built from scratch, with all updates in it.
    Andy

    P1: Agreed. I didn't do a very good job of explaining myself.
    I have failed to get the multiple "install updates" methods to work at all, though I would love it to work. For Server 2008 installs the process gets stuck for 20mins on the "Detecting Updates..." stage, and loops round again to download
    the same set of updates it did the previous time never reboots, and gets stuck at "Detecting Updates" again. For server 2012 installs it seems to work but it never get all the updates, even after 5 loops of the install updates step.
    I've read sp many posts saying they've got the multiple "install updates" method to work fine. I've tried building my Task Sequence to be exactly as posted by several different people. I've also tried my own improvements. The result is the
    same every time, so I don't think there is a problem with the TS.
    Thanks for you feed back. It is useful to know it "can" work as it implies there is a problem someone (either with me or SCCM). You help is appreciated.
    Thanks.
    As a side note, I'm going to make a new post for the following. I did a bit of further digging and it seems like this might be related to why the above is not working....
    I've built a 2012 and a 2008 server with a single "install updates" step in the task sequence. When the build is finished I then run windows updates within the OS. The result is "No More Updates Found", I felt this was suspicions
    as there were no were near enough updates installed already. I then pointed the machines at Microsoft's update servers and, bingo, it finds more updates. I assumed these updates where missing from my Updates Package in SCCM but that turned out to
    be wrong, they are right there, distributed to the DP, and deployed to the right collection.
    As far as I understand it, you don't need to touch the WSUS console, but seeing as I didn't build this SCCM environment, I thought I would check it out anyway. It looks like WSUS may have been partly configured directly at some point, rather letting
    SCCM to it all. Example: I searched in the WSUS console for appoved updates and found 6 old ones (2003 server and XP) approved for Install. A further search found 421 "Declined" updates. Everything else is marked "Not Approved".
    Does any of this matter if SCCM is supposed to be managing it? Should I trash WSUS and the SCUP and reinstall it, or is there something else I should be doing?

  • Perform Forced Manual Failover of Availability Group (SQL Server 2012) and WSFC (Windows Server Failover Cluster)

    I have a scenario with the three nodes with server 2012 standard, each running an instance of SQL Server 2012 enterprise, participate in a
    single Windows Server Fail-over Cluster (WSFC) that spans two data centers.
    If the nodes in the primary data center are unavailable due to data center outage. Then how I can able to access node in the WSFC (Windows Server Fail-over Cluster) in the secondary disaster recovery data center automatically with some script.
    I want to write script that can be able to check primary data center by pinging some IP after every 5 or 10 minutes.
    If that IP is unable to respond then script can be able to Perform Forced Manual Fail-over of Availability Group (SQL Server) and WSFC (Windows Server Fail-over Cluster)
    Can you please guide me for script writing for automatic fail-over in case of primary data-center outage?

    +1 to David's comment. I would not suggest to run a script automatically. During such failover you might have data loss and decision has to be made with business owners during disaster.
    During such situation, you need to start cluster service in force quorum mode (/fq switch) and then perform manual failover of AG to DR site.
    Balmukund Lakhani
    Please mark solved if I've answered your question, vote for it as helpful to help other users find a solution quicker
    This posting is provided "AS IS" with no warranties, and confers no rights.
    My Blog |
    Team Blog | @Twitter
    | Facebook
    Author: SQL Server 2012 AlwaysOn -
    Paperback, Kindle

  • SCCM 2012 Setting Windows Update GP's

    Hopefully this is a simple one.
    I have setup WSUS with SCCM 2012 and currently its sole purpose is for updating our WIM images however... It seems though that all of our devices that have the SCCM 2012 client installed are having their windows updates local group policy settings changed
    to our distribution point and all other setting changed to not configured(overriding the settings the admins previously had in place).
    I don't want the sccm client to make changes to the windows update local group policy... how can I accomplish this?  

    We are using a separate WSUS server to manage updates on servers and clients.
    In the near future I'll attempt to transition to the WSUS I have integrated with SCCM.
    For regular client machines we're pushing the windows update GP's but for our servers the system admin are managing those themselves depending on how they want windows updates to behave on their systems.

  • [SCCM 2012 R2] Windows Update Agent do not scan correctly thus SCCM has bad reports

    Hi All,
    My colleagues reported that after manual download and installation of update Office 2010 SP2 ... SCCM still do not report as Installed:
    https://support.microsoft.com/en-us/kb/2687455
    KB2687455 update on SCCM is reported as:
    Update ID: 9c5e43a3-3ae9-434d-b105-a9d7902d5f9f
    Update Title: Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition
    Test Computer:
    After investigation I found out that Windows Update Agent (verbose logging) is reporting that this update is really not installed:  Agent Update {9C5E43A3-3AE9-434D-B105-A9D7902D5F9F} is deployed for scan, and is installable. It will be reported
    as installable.
    Update KB2687455 is shown in Programs and Features/Installed Updates as installed on this computer.
    Question:
    This update is MSP (not standard update) so it cannot be queried by win32_quickfixengineering WMI class. How to query all installed updates on system (registry, API, ...)?
    How WUA query ALL installed updates?
    Thank you in advance.
    Regards,

    Hi,
    You could check the version number. The version number of Office 2010 SP2 is greater than or equal to
    14.0.7015.1000.
    The script in the blog below could get List of installed Windows / office Updates.
    http://www.blackforce.co.uk/2013/01/27/get-list-of-installed-windows-office-updates-command-line
    The sample in the following article can be used to determine if a critical security update is installed on a computer. If the update isn't installed, the user can ensure that the update is downloaded and installed. The user can also ensure that
    they are notified about the status of the installation.
    https://msdn.microsoft.com/en-us/library/windows/desktop/aa387101(v=vs.85).aspx
    Note: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft
    does not guarantee the accuracy of this third-party contact information.
    Best Regards,
    Joyce
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • How to quickly recover from the broken Exchange Server VM due to Windows Update patch or Service Pack ?

    Folks,
    I'm planning to apply the Exchange Server 2010 Service Pack 3 and also applying the Cumulative Update 7 along with Windows Update which haven't been done since the past two years (~100+ patches).
    So in this case it I cannot afford to lose any of the Exchange Server due to the bad updates or broken server due to patches. At The moment all of the VMs currently running on VMware:
    HT/CAS role Windows NLB:
    PRODMAIL01-VM
    PRODMAIL02-VM
    Mailbox Server stand-alone non-DAG:
    PRODMBX01-VM
    PRODMBX02-VM
    Domain Controllers:
    PRODDC01
    PRODDC02
    My questions are:
    1. When taking the VMware snapshot for easy roll-back, do I have to take the entire 2 sets of the domain controller as well?
    2. Assuming I have done the Schema Update successfully and moving on to apply the SP3 to the HT/CAS server role, do I have to take both of the mailbox server VMs snapshot as well?
    3. Can I disconnect the virtual NIC inside the guest OS to safely take snapshot before applying the patches or service pack ? or do I have to let the network to be always connected during the Service Pack or CU patch process ?
    Any kind of suggestion for a better way to quickly roll back broken Exchange server due to patching would be greatly appreciated.
    Thanks,
    /* Server Support Specialist */

    not only not recommended, not supported:
    https://technet.microsoft.com/en-us/library/jj619301(v=exchg.150).aspx
    Some hypervisors include features for taking snapshots of virtual machines. Virtual machine snapshots capture the state of a virtual machine while it's running. This feature enables you to take multiple snapshots of a virtual machine and then revert the
    virtual machine to any of the previous states by applying a snapshot to the virtual machine. However, virtual machine snapshots aren't application aware, and using them can have unintended and unexpected consequences for a server application that maintains
    state data, such as Exchange. As a result, making virtual machine snapshots of an Exchange guest virtual machine isn't supported.
    The only supported way to recover a lost Server is gracefully through Setup either Add/Remove programs or recoverserver option
    https://technet.microsoft.com/en-us/library/dd876880(v=exchg.150).aspx
    Twitter!: Please Note: My Posts are provided “AS IS” without warranty of any kind, either expressed or implied.

  • Windows Server 2008 R2 x64 - Windows Update Errors...

    Hello,
    I've a windows 2008 R2 Enterprise SP1 server that I've applied Windows updates to this evening. A large number were successful, however there are 13 that will not install and keep on failing. I've run sfc/scannow which found and repaired some
    errors - restarted server - no difference.
    Please see windowsupdate.log output below (apologies for the length). I've tried installing individual updates from the 13 but it makes no difference and the errors are just the same. It seems to be the same error for each update although unfortunately doesn't
    mean much to me. Any assistance would be greatly appreciated.
    Thanks gents.
    2014-05-13 20:45:13:189  900 f84 AU AU received approval from Ux for 13 updates
    2014-05-13 20:45:13:189  900 f84 AU AU setting pending client directive to 'Progress Ux'
    2014-05-13 20:45:13:219  900 126c AU BeginInteractiveInstall invoked for Download
    2014-05-13 20:45:13:219  900 126c AU Auto-approving update for download, updateId = {1B127611-D28E-4167-A1DC-243A51BC528F}.203, ForUx=1, IsOwnerUx=1, HasDeadline=0, IsMinor=0
    2014-05-13 20:45:13:219  900 126c AU Auto-approving update for download, updateId = {C750962E-9D5E-45CE-9967-AE2D67115966}.202, ForUx=1, IsOwnerUx=1, HasDeadline=0, IsMinor=0
    2014-05-13 20:45:13:219  900 126c AU Auto-approving update for download, updateId = {332AA342-7AC4-4FB4-9C27-C2C9F4EAE6C0}.201, ForUx=1, IsOwnerUx=1, HasDeadline=0, IsMinor=0
    2014-05-13 20:45:13:219  900 126c AU Auto-approving update for download, updateId = {3732354D-3DAE-4E71-B82C-61A12C300F72}.201, ForUx=1, IsOwnerUx=1, HasDeadline=0, IsMinor=0
    2014-05-13 20:45:13:219  900 126c AU Auto-approving update for download, updateId = {A0689F68-807A-4D39-8112-8F931F8D0D85}.202, ForUx=1, IsOwnerUx=1, HasDeadline=0, IsMinor=0
    2014-05-13 20:45:13:220  900 126c AU Auto-approving update for download, updateId = {88126772-A2FD-490A-8C84-787E94DAFE65}.201, ForUx=1, IsOwnerUx=1, HasDeadline=0, IsMinor=0
    2014-05-13 20:45:13:220  900 126c AU Auto-approving update for download, updateId = {DFAA6388-FE05-49D7-A410-71B92D1C1B37}.202, ForUx=1, IsOwnerUx=1, HasDeadline=0, IsMinor=0
    2014-05-13 20:45:13:220  900 126c AU Auto-approving update for download, updateId = {E2186FA0-D10C-4E1D-9619-A4FEB1ECF00B}.201, ForUx=1, IsOwnerUx=1, HasDeadline=0, IsMinor=0
    2014-05-13 20:45:13:220  900 126c AU Auto-approving update for download, updateId = {FA04F2A3-4DB5-4903-A08C-ADDFCF93EE28}.201, ForUx=1, IsOwnerUx=1, HasDeadline=0, IsMinor=0
    2014-05-13 20:45:13:220  900 126c AU Auto-approving update for download, updateId = {7E8ACCAD-2892-4F2D-9549-1FF8BE44AAD1}.203, ForUx=1, IsOwnerUx=1, HasDeadline=0, IsMinor=0
    2014-05-13 20:45:13:220  900 126c AU Auto-approving update for download, updateId = {99C920B7-65AB-4ACD-A4AD-C4F522E4D7A9}.201, ForUx=1, IsOwnerUx=1, HasDeadline=0, IsMinor=0
    2014-05-13 20:45:13:220  900 126c AU Auto-approving update for download, updateId = {EDE986B7-03CE-4B0C-8891-AF09113CB0DB}.200, ForUx=1, IsOwnerUx=1, HasDeadline=0, IsMinor=0
    2014-05-13 20:45:13:220  900 126c AU Auto-approving update for download, updateId = {338B46CC-C71E-4294-A9D3-DF943FFEF642}.201, ForUx=1, IsOwnerUx=1, HasDeadline=0, IsMinor=0
    2014-05-13 20:45:13:220  900 126c AU Auto-approved 13 update(s) for download (for Ux)
    2014-05-13 20:45:13:220  900 126c AU UpdateDownloadProperties: 0 download(s) are still in progress.
    2014-05-13 20:45:13:220  900 126c AU #############
    2014-05-13 20:45:13:220  900 126c AU ## START ##  AU: Download updates
    2014-05-13 20:45:13:220  900 126c AU #########
    2014-05-13 20:45:13:220  900 126c AU   # Approved updates = 13
    2014-05-13 20:45:13:222  900 126c AU AU initiated download, updateId = {1B127611-D28E-4167-A1DC-243A51BC528F}.203, callId = {AE497400-C1FA-434C-96A2-442420AD7155}
    2014-05-13 20:45:13:225  900 1384 DnldMgr *************
    2014-05-13 20:45:13:225  900 126c AU AU initiated download, updateId = {C750962E-9D5E-45CE-9967-AE2D67115966}.202, callId = {10C2CAD4-1000-4CFF-B414-F762841CC51D}
    2014-05-13 20:45:13:225  900 1384 DnldMgr ** START **  DnldMgr: Downloading updates [CallerId = AutomaticUpdatesWuApp]
    2014-05-13 20:45:13:225  900 1384 DnldMgr *********
    2014-05-13 20:45:13:226  900 1384 DnldMgr   * Call ID = {AE497400-C1FA-434C-96A2-442420AD7155}
    2014-05-13 20:45:13:226  900 1384 DnldMgr   * Priority = 3, Interactive = 1, Owner is system = 1, Explicit proxy = 0, Proxy session id = 2, ServiceId = {9482F4B4-E343-43B6-B170-9A65BC822C77}
    2014-05-13 20:45:13:226  900 1384 DnldMgr   * Updates to download = 1
    2014-05-13 20:45:13:226  900 1384 Agent   *   Title = Security Update for Windows Server 2008 R2 x64 Edition (KB2868626)
    2014-05-13 20:45:13:226  900 1384 Agent   *   UpdateId = {1B127611-D28E-4167-A1DC-243A51BC528F}.203
    2014-05-13 20:45:13:226  900 1384 Agent   *     Bundles 1 updates:
    2014-05-13 20:45:13:226  900 1384 Agent   *       {7E051B49-3C92-45B0-9138-97BEDCE52225}.201
    2014-05-13 20:45:13:229  900 1384 DnldMgr ***********  DnldMgr: New download job [UpdateId = {7E051B49-3C92-45B0-9138-97BEDCE52225}.201]  ***********
    2014-05-13 20:45:13:229  900 1384 DnldMgr   * Queueing update for download handler request generation.
    2014-05-13 20:45:13:229  900 1384 DnldMgr Generating download request for update {7E051B49-3C92-45B0-9138-97BEDCE52225}.201
    2014-05-13 20:45:13:239  900 1384 Handler Generating request for CBS update 7E051B49-3C92-45B0-9138-97BEDCE52225 in sandbox C:\Windows\SoftwareDistribution\Download\b29165aeaa9b7c6358a11fe608ad59db
    2014-05-13 20:45:13:239  900 1384 Handler Selected payload type is ptExpress
    2014-05-13 20:45:13:240  900 126c AU AU initiated download, updateId = {332AA342-7AC4-4FB4-9C27-C2C9F4EAE6C0}.201, callId = {C6D9C785-32FE-4AD7-9DEB-C7105A3C1262}
    2014-05-13 20:45:13:240  900 1384 Handler UH: DpxRestoreJob returned 0x80070002
    2014-05-13 20:45:13:240  900 1384 Handler Detected download state is dsHavePackage
    2014-05-13 20:45:13:243  900 126c AU AU initiated download, updateId = {3732354D-3DAE-4E71-B82C-61A12C300F72}.201, callId = {F055F0F1-9AE5-433A-A2BD-03D142912DA1}
    2014-05-13 20:45:13:247  900 126c AU AU initiated download, updateId = {A0689F68-807A-4D39-8112-8F931F8D0D85}.202, callId = {326F2698-90E8-421E-B5B1-2A64797E7842}
    2014-05-13 20:45:13:250  900 126c AU AU initiated download, updateId = {88126772-A2FD-490A-8C84-787E94DAFE65}.201, callId = {065E2D23-EF67-47E1-8C87-440BD7137483}
    2014-05-13 20:45:13:253  900 126c AU AU initiated download, updateId = {DFAA6388-FE05-49D7-A410-71B92D1C1B37}.202, callId = {606C3C01-D996-4932-A142-30A8B192F2C0}
    2014-05-13 20:45:13:256  900 126c AU AU initiated download, updateId = {E2186FA0-D10C-4E1D-9619-A4FEB1ECF00B}.201, callId = {4805FBCE-4AB1-4751-A8AE-0847B69EA142}
    2014-05-13 20:45:13:259  900 126c AU AU initiated download, updateId = {FA04F2A3-4DB5-4903-A08C-ADDFCF93EE28}.201, callId = {04DDA2A9-B6C8-47F0-BE70-B0F50D7A6BA2}
    2014-05-13 20:45:13:262  900 126c AU AU initiated download, updateId = {7E8ACCAD-2892-4F2D-9549-1FF8BE44AAD1}.203, callId = {E0241A77-09F1-4498-97A6-DDD57483954E}
    2014-05-13 20:45:13:266  900 126c AU AU initiated download, updateId = {99C920B7-65AB-4ACD-A4AD-C4F522E4D7A9}.201, callId = {52A53948-0632-4E15-A14A-841FB5C95F61}
    2014-05-13 20:45:13:269  900 126c AU AU initiated download, updateId = {EDE986B7-03CE-4B0C-8891-AF09113CB0DB}.200, callId = {AB354496-CB3D-4A07-9F3C-1069C43C61E1}
    2014-05-13 20:45:13:272  900 126c AU AU initiated download, updateId = {338B46CC-C71E-4294-A9D3-DF943FFEF642}.201, callId = {E7AB48E8-5603-48BD-A051-1CCA7DFF4652}
    2014-05-13 20:45:13:272  900 126c AU   # Pending download calls = 13
    2014-05-13 20:45:13:272  900 126c AU <<## SUBMITTED ## AU: Download updates
    2014-05-13 20:45:13:279  900 f84 AU Getting featured update notifications.  fIncludeDismissed = true
    2014-05-13 20:45:13:279  900 f84 AU No featured updates available.
    2014-05-13 20:45:17:040  900 f84 Handler FATAL: CBS called Error with 0x80073712,
    2014-05-13 20:45:17:041  900 1384 Handler FATAL: UH: 0x80073712: Async stage operation failed in CUHCbsHandler::StageCbsPackage
    2014-05-13 20:45:17:056  900 1384 Handler FATAL: Request generation for CBS update complete with hr=0x80073712 and pfResetSandbox=0
    2014-05-13 20:45:17:056  900 1384 Handler FATAL: Error source is 106.
    2014-05-13 20:45:17:056  900 1384 DnldMgr FATAL: DM:CAgentDownloadManager::GenerateAllDownloadRequests: GenerateDownloadRequest failed with 0x80073712.
    2014-05-13 20:45:17:056  900 1384 DnldMgr Error 0x80073712 occurred while downloading update; notifying dependent calls.
    2014-05-13 20:45:17:254  900 1384 Agent *********
    2014-05-13 20:45:17:254  900 12d0 AU >>##  RESUMED  ## AU: Download update [UpdateId = {1B127611-D28E-4167-A1DC-243A51BC528F}]
    2014-05-13 20:45:17:254  900 1384 Agent **  END  **  Agent: Downloading updates [CallerId = AutomaticUpdatesWuApp]
    2014-05-13 20:45:17:254  900 12d0 AU   # WARNING: Download failed, error = 0x80073712
    2014-05-13 20:45:17:254  900 1384 Agent *************
    2014-05-13 20:45:17:259  900 1384 DnldMgr *************
    2014-05-13 20:45:17:259  900 1384 DnldMgr ** START **  DnldMgr: Downloading updates [CallerId = AutomaticUpdatesWuApp]
    2014-05-13 20:45:17:259  900 1384 DnldMgr *********
    2014-05-13 20:45:17:259  900 1384 DnldMgr   * Call ID = {10C2CAD4-1000-4CFF-B414-F762841CC51D}
    2014-05-13 20:45:17:259  900 1384 DnldMgr   * Priority = 3, Interactive = 1, Owner is system = 1, Explicit proxy = 0, Proxy session id = 2, ServiceId = {9482F4B4-E343-43B6-B170-9A65BC822C77}
    2014-05-13 20:45:17:259  900 1384 DnldMgr   * Updates to download = 1
    2014-05-13 20:45:17:259  900 1384 Agent   *   Title = Security Update for Windows Server 2008 R2 x64 Edition (KB2872339)
    2014-05-13 20:45:17:259  900 1384 Agent   *   UpdateId = {C750962E-9D5E-45CE-9967-AE2D67115966}.202
    2014-05-13 20:45:17:259  900 1384 Agent   *     Bundles 2 updates:
    2014-05-13 20:45:17:259  900 1384 Agent   *       {45AFABD9-B938-457D-95EA-A32C2FA19D37}.202
    2014-05-13 20:45:17:259  900 1384 Agent   *       {1E81D165-A493-4813-8526-04D8F35C37D8}.202
    2014-05-13 20:45:17:262  900 1384 DnldMgr ***********  DnldMgr: New download job [UpdateId = {45AFABD9-B938-457D-95EA-A32C2FA19D37}.202]  ***********
    2014-05-13 20:45:17:263  900 1384 DnldMgr   * All files for update were already downloaded and are valid.
    2014-05-13 20:45:17:263  900 1384 DnldMgr ***********  DnldMgr: New download job [UpdateId = {1E81D165-A493-4813-8526-04D8F35C37D8}.202]  ***********
    2014-05-13 20:45:17:263  900 1384 DnldMgr   * Queueing update for download handler request generation.
    2014-05-13 20:45:17:263  900 1384 DnldMgr Generating download request for update {1E81D165-A493-4813-8526-04D8F35C37D8}.202
    2014-05-13 20:45:17:269  900 1384 Handler Generating request for CBS update 1E81D165-A493-4813-8526-04D8F35C37D8 in sandbox C:\Windows\SoftwareDistribution\Download\371b4bee540898fe91c5fa6958cf73cc
    2014-05-13 20:45:17:270  900 1384 Handler Selected payload type is ptExpress
    2014-05-13 20:45:17:271  900 1384 Handler UH: DpxRestoreJob returned 0x80070002
    2014-05-13 20:45:17:271  900 1384 Handler Detected download state is dsHavePackage
    2014-05-13 20:45:18:265  900 f84 Handler FATAL: CBS called Error with 0x80073712,
    2014-05-13 20:45:18:266  900 1384 Handler FATAL: UH: 0x80073712: Async stage operation failed in CUHCbsHandler::StageCbsPackage
    2014-05-13 20:45:18:267  900 1384 Handler FATAL: Request generation for CBS update complete with hr=0x80073712 and pfResetSandbox=0
    2014-05-13 20:45:18:267  900 1384 Handler FATAL: Error source is 106.
    2014-05-13 20:45:18:267  900 1384 DnldMgr FATAL: DM:CAgentDownloadManager::GenerateAllDownloadRequests: GenerateDownloadRequest failed with 0x80073712.
    2014-05-13 20:45:18:267  900 1384 DnldMgr Error 0x80073712 occurred while downloading update; notifying dependent calls.
    2014-05-13 20:45:18:307  900 1384 Agent *********
    2014-05-13 20:45:18:307  900 12d0 AU >>##  RESUMED  ## AU: Download update [UpdateId = {C750962E-9D5E-45CE-9967-AE2D67115966}]
    2014-05-13 20:45:18:307  900 1384 Agent **  END  **  Agent: Downloading updates [CallerId = AutomaticUpdatesWuApp]
    2014-05-13 20:45:18:307  900 12d0 AU   # WARNING: Download failed, error = 0x80073712
    2014-05-13 20:45:18:307  900 1384 Agent *************
    2014-05-13 20:45:18:310  900 1384 DnldMgr *************
    2014-05-13 20:45:18:310  900 1384 DnldMgr ** START **  DnldMgr: Downloading updates [CallerId = AutomaticUpdatesWuApp]
    2014-05-13 20:45:18:310  900 1384 DnldMgr *********
    2014-05-13 20:45:18:310  900 1384 DnldMgr   * Call ID = {C6D9C785-32FE-4AD7-9DEB-C7105A3C1262}
    2014-05-13 20:45:18:310  900 1384 DnldMgr   * Priority = 3, Interactive = 1, Owner is system = 1, Explicit proxy = 0, Proxy session id = 2, ServiceId = {9482F4B4-E343-43B6-B170-9A65BC822C77}
    2014-05-13 20:45:18:310  900 1384 DnldMgr   * Updates to download = 1
    2014-05-13 20:45:18:310  900 1384 Agent   *   Title = Security Update for Windows Server 2008 R2 x64 Edition (KB2839894)
    2014-05-13 20:45:18:310  900 1384 Agent   *   UpdateId = {332AA342-7AC4-4FB4-9C27-C2C9F4EAE6C0}.201
    2014-05-13 20:45:18:310  900 1384 Agent   *     Bundles 1 updates:
    2014-05-13 20:45:18:310  900 1384 Agent   *       {B4DB0FFF-81FE-4D1D-BF01-D59B829303FC}.201
    2014-05-13 20:45:18:314  900 1384 DnldMgr ***********  DnldMgr: New download job [UpdateId = {B4DB0FFF-81FE-4D1D-BF01-D59B829303FC}.201]  ***********
    2014-05-13 20:45:18:314  900 1384 DnldMgr   * Queueing update for download handler request generation.
    2014-05-13 20:45:18:314  900 1384 DnldMgr Generating download request for update {B4DB0FFF-81FE-4D1D-BF01-D59B829303FC}.201
    2014-05-13 20:45:18:321  900 1384 Handler Generating request for CBS update B4DB0FFF-81FE-4D1D-BF01-D59B829303FC in sandbox C:\Windows\SoftwareDistribution\Download\7d02b28581a54bc209cde32aa0661586
    2014-05-13 20:45:18:321  900 1384 Handler Selected payload type is ptExpress
    2014-05-13 20:45:18:322  900 1384 Handler UH: DpxRestoreJob returned 0x80070002
    2014-05-13 20:45:18:322  900 1384 Handler Detected download state is dsHavePackage
    2014-05-13 20:45:18:655  900 f84 Handler FATAL: CBS called Error with 0x80073712,
    2014-05-13 20:45:18:655  900 1384 Handler FATAL: UH: 0x80073712: Async stage operation failed in CUHCbsHandler::StageCbsPackage
    2014-05-13 20:45:18:656  900 1384 Handler FATAL: Request generation for CBS update complete with hr=0x80073712 and pfResetSandbox=0
    2014-05-13 20:45:18:656  900 1384 Handler FATAL: Error source is 106.
    2014-05-13 20:45:18:656  900 1384 DnldMgr FATAL: DM:CAgentDownloadManager::GenerateAllDownloadRequests: GenerateDownloadRequest failed with 0x80073712.
    2014-05-13 20:45:18:656  900 1384 DnldMgr Error 0x80073712 occurred while downloading update; notifying dependent calls.
    2014-05-13 20:45:18:680  900 1384 Agent *********
    2014-05-13 20:45:18:680  900 12d0 AU >>##  RESUMED  ## AU: Download update [UpdateId = {332AA342-7AC4-4FB4-9C27-C2C9F4EAE6C0}]
    2014-05-13 20:45:18:680  900 1384 Agent **  END  **  Agent: Downloading updates [CallerId = AutomaticUpdatesWuApp]
    2014-05-13 20:45:18:680  900 12d0 AU   # WARNING: Download failed, error = 0x80073712
    2014-05-13 20:45:18:680  900 1384 Agent *************
    2014-05-13 20:45:18:684  900 1384 DnldMgr *************
    2014-05-13 20:45:18:684  900 1384 DnldMgr ** START **  DnldMgr: Downloading updates [CallerId = AutomaticUpdatesWuApp]
    2014-05-13 20:45:18:684  900 1384 DnldMgr *********
    2014-05-13 20:45:18:684  900 1384 DnldMgr   * Call ID = {F055F0F1-9AE5-433A-A2BD-03D142912DA1}
    2014-05-13 20:45:18:684  900 1384 DnldMgr   * Priority = 3, Interactive = 1, Owner is system = 1, Explicit proxy = 0, Proxy session id = 2, ServiceId = {9482F4B4-E343-43B6-B170-9A65BC822C77}
    2014-05-13 20:45:18:684  900 1384 DnldMgr   * Updates to download = 1
    2014-05-13 20:45:18:684  900 1384 Agent   *   Title = Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 SP1 for x64-based Systems (KB2742599)
    2014-05-13 20:45:18:684  900 1384 Agent   *   UpdateId = {3732354D-3DAE-4E71-B82C-61A12C300F72}.201
    2014-05-13 20:45:18:684  900 1384 Agent   *     Bundles 1 updates:
    2014-05-13 20:45:18:684  900 1384 Agent   *       {D7F10B98-0B4D-402C-B0A5-FF2135F8620C}.201
    2014-05-13 20:45:18:687  900 1384 DnldMgr ***********  DnldMgr: New download job [UpdateId = {D7F10B98-0B4D-402C-B0A5-FF2135F8620C}.201]  ***********
    2014-05-13 20:45:18:687  900 1384 DnldMgr   * Queueing update for download handler request generation.
    2014-05-13 20:45:18:687  900 1384 DnldMgr Generating download request for update {D7F10B98-0B4D-402C-B0A5-FF2135F8620C}.201
    2014-05-13 20:45:19:325  900 1384 Handler Generating request for CBS update D7F10B98-0B4D-402C-B0A5-FF2135F8620C in sandbox C:\Windows\SoftwareDistribution\Download\44b836e953f10e780a421d6fb4995a79
    2014-05-13 20:45:19:325  900 1384 Handler Selected payload type is ptExpress
    2014-05-13 20:45:19:326  900 1384 Handler UH: DpxRestoreJob returned 0x80070002
    2014-05-13 20:45:19:326  900 1384 Handler Detected download stat
    M Tipler

    Unfortunately that made no difference - the updates still won't install and the checksur.log file still contains the same data...
    =================================
    Checking System Update Readiness.
    Binary Version 6.1.7601.22471
    Package Version 25.0
    2014-05-14 08:15
    Checking Windows Servicing Packages
    Checking Package Manifests and Catalogs
    Checking Package Watchlist
    Checking Component Watchlist
    Checking Packages
    Checking Component Store
    (f)    CSI Missing Winning Component Key    0x00000000    amd64_microsoft-windows-csrsrv_31bf3856ad364e35_6.1.7601.18113_none_27ac1dcabbfe37b8        
    (f)    CSI Missing Winning Component Key    0x00000000    amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18113_none_0a5f8ec22fd235a9        
    (f)    CSI Missing Winning Component Key    0x00000000    wow64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18113_none_14b439146432f7a4        
    (f)    CSI Missing Winning Component Key    0x00000000    wow64_microsoft-windows-csrsrv_31bf3856ad364e35_6.1.7601.18113_none_3200c81cf05ef9b3        
    Summary:
    Seconds executed: 446
     Found 4 errors
      CSI Missing Winning Component Key Total count: 4
    (w)    Unable to get system disk properties    0x0000045D    IOCTL_STORAGE_QUERY_PROPERTY    Disk Cache    
    Looks like a repair install is required. I'll keep you updated.
    M Tipler

  • Lync and applying Windows Updates to Mirrored SQL Servers 2012

    Hi
    I would like to apply windows updates to our mirrored sql servers 2012 for Lync. A consultant installed Lync 2013 and the mirrored environment. According to him he states, 'Lync is actively managing that mirror opposed to standard mirror configuration'.
    Can anyone give me insight into what this means when I would like to apply windows updates to these sql servers?
    Thanks
    Kathy

    Hi,
    Based on my knowledge, if the Windows Update applys to your system, then you are able to install it without issue, you may follow the KB article for the update, there may be some action we need to do to make the update work.
    You may open control panel, find Windows Updates to check your Windows update settings.
    And this forum focuses on SCOM related issues, you may also post in Windows Server or SQL server forums.
    If there is any misunderstanding, please feel free to let me know.
    Regards,
    Yan Li
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • Manually downloading and installing Windows Updates for WinServer 2012

    Hello There,
    I got couple of WinServer 2012 which are in DMZ and doesnt have internet access at all.
    I would like to download Windows updates  on my machine and install these on the servers manually please suggest.
    Regards,
    Maqsood
    Maqsood Mohammed Senior Systems Engineer MCITP-Enterprise Admin & ITILv3 Foundation Certified

    Hi Maqsood,
    To download the update manually, we can visit the web site below,
    http://catalog.update.microsoft.com/v7/site/Home.aspx
    We can download the updates to a removable disk, then copy the updates to these servers.
    Best Regards.
    Steven Lee
    TechNet Community Support

  • Basic Deployment problem, SQL Server 2000 and wanna create setup

    I have just finished making a small app using Java and using JDBC driver to connect to an SQL Server 2000 that is installed on my PC.
    I now want to create a setup (using NSIS) of this app and distribute among friends. But my problem is that I have created the database on my PC on the SQL Server 2000. Do all the people who want to use my app have to have Sql Server 2000 installed ?? How do they get the data from the database if they dont have Sql Server installed??
    I really havent tried much of apps that use databases...soo dont know much, but then any help would be appreciated!!

    They have to connect to an instance of SQL Server 2000 that has the database and schema that your app requires, so the host machine has to be visible in their network, with SQL Server installed, listening on the port in your URL connection string (default is 1433), with a username and password that you've set up for a user with the appropriate permissions GRANTed.
    As you can see, it's not trivial.
    If all the people you're distributing the program to can see your machine's IP address, they can simply connect to your database.
    If not, you should provide all the scripts necessary to create the database and create the tables, set up the permissions, and populate the data.
    %

  • SCCM and Cluster Aware Updating

    Hi All,
    I have installed a Hyper-v 2012 r2 Cluster and would like to utilise the cluster aware updating mechanism and also use SCCM 2012 SP1 to manage the deployment of updates.  I have checked online and the following article seems to suggest that both can
    live together.
    http://technet.microsoft.com/en-us/library/hh831367.aspx
    My question is... has anybody got this working as yet? I have delivered the updates to the hosts but when I check to see what is available in the CAU tool it picks up nothing.
    Cheers
    Chris

    Despite what the article says I would use any interoperability with extreme caution.
    Gerry Hampson | Blog:
    www.gerryhampsoncm.blogspot.ie | LinkedIn:
    Gerry Hampson | Twitter:
    @gerryhampson

  • Server Logon and Restricting Windows Explorer

    Hello
    We have a server 2008 R2 (32) which is a domain controller, we recently switched from open storage (6 raid-5 drives in the server) to closed storage (removing the drive) every night.
    I do not want staff pulling the power on a domain controller every night to remove the drives, so I looked in the GPO "log on locally' and 'allow shut down'.
    This works, however, the temptation is there to 'look around', see what we can see, etc.
    Is there a way, either a security setting or a batch file that staff without admin right can log onto a server, down the server correctly, but not open windows explore.
    I am thinking some way to write a script "IF logon server = \\DCSERVER then noaccess browsing" something like that, that is your are not an admin, and log onto a server,
    your Windows Explorer rights are limited.  I have created a group, so, the group name can be used
    Thanks.

    Hi,
    I agree with the others that we should not grant common domain user physical access to Domain Controller as DC is the most important and sensitive component in a domain .
    The is no way in AD (through permissions or group policies) to prevent users from browsing the Internet after they have logged on to the computer, if you are seeking for a scripting solution, I suggest you refer
    to the experts on the Official Scripting Guys forum as below:
    http://social.technet.microsoft.com/Forums/scriptcenter/en-US/home?forum=ITCG
    More information for you:
    Establishing Secure Domain Controller Build Practices
    http://technet.microsoft.com/en-us/library/cc755494(v=WS.10).aspx
    Securing the Domain Controller Build Environment
    http://technet.microsoft.com/en-us/library/cc755339(v=WS.10).aspx
    Best Regards,
    Amy Wang

Maybe you are looking for