SCEP client not updating settings after policy retrieval

I have a computer assigned a SCEP policy, that seems to have been found and Applied fine by the SCCM Client, looking at the registry.
I find the policy in the regkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CCM\EPAgent\GeneratedPolicy, With the DWORD values
Just a test to my computer (Excluded)                   REG_DWORD         0x00000002 (2)
Just a test to my computer (Scan Schedule)          REG_DWORD         0x00000002 (2)
What I have configured in this test policy is just "Limit CPU usage during scan to: 10%" and "Start the scheduled scan only when my PC is on but not in use"
But the SCEP Client, in the settings, do not show the correct settings. The CPU limit setting is set to 20% and the "Start the scheduled scan" setting is unchecked, these settings come from the "Default Client Antimalware Policy"
The EndpointProtectionAgent.log says:
Endpoint is triggered by WMI notification. EndpointProtectionAgent 28.10.2014 16:54:39 3504 (0x0DB0)
EP State and Error Code didn't get changed, skip resend state message. EndpointProtectionAgent 28.10.2014 16:54:39 3504 (0x0DB0)
State 1, error code 0 and detail message are not changed, skip updating registry value EndpointProtectionAgent 28.10.2014 16:54:39 3504 (0x0DB0)
Previous state is same with current one: 1, skip notification. EndpointProtectionAgent 28.10.2014 16:54:39 3504 (0x0DB0)
File C:\Windows\ccmsetup\SCEPInstall.exe version is 4.5.216.0. EndpointProtectionAgent 28.10.2014 16:54:39 3504 (0x0DB0)
EP version 4.6.305.0 is already installed. EndpointProtectionAgent 28.10.2014 16:54:39 3504 (0x0DB0)
EP 4.6.305.0 is installed, version is higher than expected installer version 4.5.216.0. EndpointProtectionAgent 28.10.2014 16:54:39 3504 (0x0DB0)
The trigger 10 doesn't make ANY state change. EndpointProtectionAgent 28.10.2014 16:54:39 3504 (0x0DB0)
Handle EP AM policy. EndpointProtectionAgent 28.10.2014 16:54:39 3504 (0x0DB0)
Policy group lose, group name: Scan Schedule, settingKey: {d6961d76-070d-46af-b898-6d24562fb219}_201_201 EndpointProtectionAgent 28.10.2014 16:54:39 3504 (0x0DB0)
Policy deployment result: <?xml version="1.0"?><Group Name="Scan Schedule">    <Policy Name="Just a test to my computer" State=2/>    <Policy Name="Default Client Antimalware
Policy" State=1/></Group><Group Name="Threat Default Action">    <Policy Name="Default Client Antimalware Policy" State=2/></Group><Group Name="Excluded">
<Policy Name="Default Client Antimalware Policy" State=2/>    <Policy Name="Just a test to my computer" State=2/></Group><Group Name="Realtime Config">    <Policy Name="Default
Client Antimalware Policy" State=2/></Group><Group Name="Advance Setting">    <Policy Name="Default Client Antimalware Policy" State=2/></Group><Group Name="Spynet">
<Policy Name="Default Client Antimalware Policy" State=2/></Group><Group Name="Signature Update">    <Policy Name="Default Client Antimalware Policy" State=2/></Group><Group Name="Scan">
<Policy Name="Default Client Antimalware Policy" State=2/></Group> EndpointProtectionAgent 28.10.2014 16:54:39 3504 (0x0DB0)
Generate Policy XML successfully at C:\Windows\CCM\EPAMPolicy.xml EndpointProtectionAgent 28.10.2014 16:54:39 3504 (0x0DB0)
Generate AM Policy XML while EP is disabled. EndpointProtectionAgent 28.10.2014 16:54:39 3504 (0x0DB0)
Any idea what happened to the New settings?
Freddy

Antimalware Client Version: 4.6.305.0
Engine Version: 1.1.11104.0
Antivirus definition: 1.187.618.0
Antispyware definition: 1.187.618.0
Network Inspection System Engine Version: 2.1.11005.0
Network Inspection System Definition Version: 113.5.0.0
Policy Name: Antimalware Policy
Policy Applied: 02.09.2014 at 14:16
The above is information in "About"
This is the information about the Antimalware policies assigned to this computer
Name
Collection name      Priority   Policy Application state Last update time         Policy Application Return code
Default Client Antimalware Policy                                 10000
Succeeded                     02.09.2014 16:16:00     0x00000000
Just a test to my computer             VITN-SC-OSL-112 1
This tells me that there is no policy Application Return code for the custom policy i am testing, and that is something I would like to solve. Any ideas? Thank you

Similar Messages

Can not update apps after IOS8 update on iPhone 4s

Can not update apps after IOS8 update on iPhone 4s
I can no longer update apps on my iPhone 4s after the IOS 8 update. The IOS 8 update took a very long time to complete, maybe 12 hours, and afterwards, it worked but updating packages were very slow. Package updates have since been problematic and about 4 days ago, it stopped being able to update any packages. I click on them to update and they never make any progress. I have 2.8 Gbytes free and I keep deleting more and more packages, pictures, etc. It seems like, from the amount of stuff that I have deleted, I should have more than 2.8 Gbytes free.
Is anyone else having this kind of problem?

16GB iPhone4: Go to Settings, scroll down to iTunes & App Stores and touch. At the top of the next page it shows: Apple ID. Touch this. Select Sign Out. Your Apple ID will go away. Re-enter Apple ID and password. Try App Store again.
Other solutions were to go to Settings:General:Date&Time and turn off auto-update, then change date to next year. This didn't work for me, nor a lot of other users on the forums. It took reading a lot of threads to find the log-out, log-in solution. Even on the official Apple Website all I saw was: Make sure your connection is working, battery is charged, desktop is plugged in when you try to sync. OK I exaggerate, but with all the users posting this problem, you'd think they'd post their solutions when they work with a Tech Help call.

Some Clients Not Updating. Reporting "Compliant." hr=8007000E Error in WindowsUpdate.log

I have a significant number (but not all) of my SCCM 2012 R2 CU3 clients not updating though my SCCM software updates. On these problem clients, I get this error in WindowsUpdate.log:
"COMAPI WARNING: ISusInternal::GetUpdateMetadata2 failed, hr=8007000E"
Then these machines report "Compliant" even though they don't install the updates. Almost all of our workstations are Windows 7 SP1 32bit. We are running SCCM 2012 R2 CU3. My site servers are running Windows 2008 R2.
I don't see much in WUAhandler.log or scanagent.log. These client are however, getting my SCEP definition updates just fine. (I have an ADR for those.) And when you go out to Microsoft for security updates it works. I have tried all of the usual Windows
Updates repair suggestions (re-register dlls, rename software distribution folder, etc.) And I tried un-installing and re-installing the SCCM client on a problem PC, to no avail. I also tried using a Software Update Group with fewer updates (<100) and targeting
a problem system with only that SUG, to no avail.
Any assistance would be greatly appreciated. Thank you.

Hi all,
One of the bigger nuissances of this particular bug is that it's hard to identify from a central location that you've fallen victim to it. Without spot-checking client machines you'd be none-the-wiser. This most likely results in a lot of shops out their
thar are completely unaware they have a security issue with a false sense of "fully patched" security.
I've create the following guidelines to identify whether you are indeed one of the victims.
create a script configuration item.
Select All Windows 7 32 bit as the supported platform
Use String as the data type
Choose powershell as your script language of choice
Paste the following text in the discovery script:select-string-pattern'GetWARNING:
ISusInternal::GetUpdateMetadata2 failed, hr=8007000E'-path"$env:windir\windowsupdate.log"
Add the configuration item to a Configuration baseline
Deploy the configuration baseline to All Windows 7 32bit machines
The report list of assets by compliance state for a given baseline is a good report to check the results.
!!!! Any machines reporting compliant to this baseline have a serious issue as they won't install any software updates, yet report compliant on all !!!!
Good luck
Hi, Does the configuration item need any kind of compliance rule setup to make it work?

SCEP standalone client not updating

Hi All
I have standalone SCEP installed clients which do not reboot, however I have noticed that the clients are not updating their definitions they have been sitting there 5 days now and no updates applied.
The policy is to look at a UNC path followed by Microsoft but the client does not. The Definition Update Policy is also set to check for definitions everyone 4 hours, my understanding was if it cannot find definitions at the UNC path then it should go to
Microsoft to receive the updates. I have also set it to force a definition update if the computer is offline for more than two consecutive scheduled updates.
Any ideas please ?

How did you deploy policy for them?
Are you sure policies been applied to these endpoints?
Try change priority to first check Microsoft Update website and then UNC and see whether it makes any different or not?

SCCM 2012 agent Deployed on clients SCEP in not update and shown inactive on cosole

Dear there are no of system in this state. SCCM client installed but SCEP is also installed but not getting update.
durranifaisal

OK, a couple of things for you. First off, if a client had not sent in Heartbeat DDR, then the console would not reflect "Yes" in the "Client" column. Yours does, so you have had at least one Heartbeat DDR received and processed by the client. If you want
to see when it was, you can view the Properties for that client, and in the Properties dialog, look at the AgentTime attribute. Very likely (always has been in my experience) it will be the very last time listed (you likely will have three or four 'agents'
that have discovered this client, and thus reported time.
The "Client Activity" column can be updated when you Refresh Client Status (on the Client Status node in the Monitoring workspace). It will happen automatically, but you can force it with this action.
Lastly, none of this has anything to do with the fact that the Endpoint Protection menu option is unavailable. I don't even have it enabled in my test site (the current snapshot that I'm testing on), and the menu item still appears. My guess there is that
you are logged on with a user that does not have rights to that action. So more likely a security issue rather than clients not reporting properly.
Wally Mead

Clients Not Updating After Migration from Server 10.7 to 10.8 (update to cashing server)

My school has been providing updates using Update Server on Lion. With the update to Mountain Lion Server we switched to Cashing Server for updates and I removed the WG Manager (please no lecutres on WGM, I am transitioning) setting that pointed to the Update Server. Some of my clients are not updating now. My guess is that they are still looking to my update server.
Is this an accurate diagnosis and how can I clear out this pointer?

My school has been providing updates using Update Server on Lion. With the update to Mountain Lion Server we switched to Cashing Server for updates and I removed the WG Manager (please no lecutres on WGM, I am transitioning) setting that pointed to the Update Server. Some of my clients are not updating now. My guess is that they are still looking to my update server.
Is this an accurate diagnosis and how can I clear out this pointer?

Smart playlists not updating live after 3.0 upgrade

I have a smart playlist: 'songs I've not played in a while'. Before the upgrade, if i had 100 songs in the playlist and played one, the playlist would update and the next time I'd access it I'd have 99 songs in it. however, after upgrading the playlist is not updating itself. It will stay at 100 songs and the only way to make it update itself is to sync with itunes. The placounts etc are all being remembered, but my playlist is no longer updating by itself.
Help! What can I do to fix this?

First, downgrading the firmware is not something that Apple will support, so if something does go wrong (not likely, but remotely possible) you could end up with a device that does not work.
Second, in order to downgrade to an earlier version of firmware, you have to already have it on your computer. If you never did a firmware update prior to installing 3.0, then you don't have a 2.x firmware on your computer to install. While you might be able to find a copy of 2.x, there have been reports of problems with the copies people are finding. But if you ever did a firmware update, say from 2.2 to 2.2.1 then you would have 2.2.1 on your computer already. If that's the case, then follow these instructions:
1- Connect your Touch to your computer and put it into "DFU mode" (Google that for instructions). Getting into DFU mode is a little tricky to get the timing just right, so pay attention to the instructions and what to look and listen for.
2- iTunes will tell you that the Touch needs to be restored to factory conditions (this is expected). Instead of clicking the Restore button, hold down the SHIFT key as you click Restore (on a Mac I think it's Option-Restore). You'll see a navigation window for you to locate the firmware. Navigate your way to where the firmware is stored on your computer, which on a PC is:
C:\Documents and Settings\(account name)\Application Data\Apple Computer\iTunes\iPod Software Updates
(on a Mac these files are located at: ~/Library/iTunes/iPhone Software Updates)
Select the proper .ipsw file for your device. For 2.2.1 the file is "iPod2,12.2.1_5H11aRestore.ipsw"
3- Your Touch will go through the Restore process. When you get to the point where you choose to re-load your last backup or set up the Touch as a new iPod, choose the new iPod selection since the backup contains 3.0-specific information that may not work with earlier firmware.
4- You'll then have to re-load your Touch's contents, including music, video, web links, settings preferences, etc.

Windows 8 clients not updating via SCCM?

I am running Windows Server 2012 R2 and SCCM 2012 R2 (v5.0.7958.1000) and am trying to deploy updates to a Windows 8.1 client but am not having any joy, I keep getting errors within the WindowsUpdate.log.
Can deploy updates to Windows 7 machines okay but not Windows 8.1.
An extract of the log can be found here http://1drv.ms/1aJm3VO
www.techielass.com

logs seems to be good .you can check other logs like wuahandler.log ,updatesdeployment.log . Read the blog post how to troubleshoot software update issues http://eskonr.com/2015/04/sccm-2012-troubleshoot-client-software-update-issues/
Eswar Koneti | Configmgr Blog: www.eskonr.com | Linkedin: Eswar Koneti
| Twitter: eskonr

Adobe Lightroom 3 not updating thumbnails after Photoshop Save

Anyone know why Lightroom 3 will not update my thumbnails after I save changes in Photoshop CS5?
I tried to do a "save" (in lightroom) to update the metadata of the file, and the changes still never occurred.
I know that the changes held though because when I RE-open the file in photoshop the changes are there..
And once again, I save through photoshop, and it does not render the changes in Lightroom.
FRUSTRATING! HELP!
Thanks
April

seriously, I move through 20-30 images per day in post-production. I shoot around 6-800 in the studio. I rely on flags to get me through the photos quickly (hence why it exists)
You're telling me that I have to save each of these files first before opening - um, didn't have to do this in Lightroom 2.
Is Adobe EVER going to put out an update on this?
Beta exists for a reason - so that bugs like this don't appear once the disks hit the sales floor. How could they have missed that??
Anyway - this isn't really helpful to me. The save are slow too.
Thanks for your help tho.
Best,
A

Table record is not updated correctly after navigate back from detail page

I have 2 jspx pages one (page A) has a table displaying the employee record, another one (page B) is used to update the selected employee record. On page A, when selecting a record and clicking the 'Details' button I can be navigaed to pag B on which I can modify the record information in a form component. I have one table column 'teamName' which is binding to a LOV at VO layer and on pageB I am using <af:inputComboboxListOfValues> to show a editable LOV list for this attribute, when I input a new value here and save it, I can go back to page A but the team name for this record shows empty, by querying the database I do find the record updated successfully with the changed value. And when I reloaded the page the record can show the new team name value. Why it is not updated in the employee table when immediately navigating back from page B? I have set the table iterator refresh attribut to "always" but still failed. Can anyone help on this issue? Thanks!!
BTW, for other columns (not LOV) they are ok, the table can show the changed value correctly.
Edited by: user774592 on Jul 14, 2011 7:56 PM
Edited by: user774592 on Jul 14, 2011 9:59 PM

Thanks for reply!
I did exactly the same as what you said. I d&d the data control Commit operation on page B to generate a 'Save' commandToolbarButton with the action attribute set to 'save' which is the from outcome for navigating back to page A. Is there any business logic I need to write here? Currently I have no.
Note: In this case I used an editable LOV, I have a requirment that besides selecting a existing value from the lov, user can also input a new value in the LOV. When going back to page A, I do find the LOV list is updated to contain the new vaule. Just the record in the table shows an empty value instead of the new value. Still do not know why.

My iPad 2 will not update apps after upgrading to the new ios

MMy apps will not update nor can I install new apps. Anyone have a solution?

Um are you logged in and connected to the internet?

OC4j10.1.2CMP bean not updating field after creating a record in the table.

I have a simple table in Oracle 9i database:
SQL> desc temp_tbl
Name Null? Type
OPER_ID NOT NULL NUMBER(5)
OPER_STS_TM_DT NOT NULL DATE
OPER_STS_CD NUMBER(2)
First 2 fields are the Primary Key. last field is standalone. No FK references.
I generate a CMP bean using Jdeveloper 10.1.2 for this table.
Then I try to insert a record into this table and update the oper_sts_cd field.
Problem: CMP inserts the record correctly, but does not update the field: oper_sts_cd, even though trace indicates that the field has been updated.
( shown in pgm below).
THE SAME CODE WORKED in OC4J9.0.4 Container.
Since we upgraded to 10g Rel2 ( OC4J10.1.2) , it does not.
Code:
Session Bean:
package model;
import java.rmi.RemoteException;
import java.sql.Timestamp;
import java.util.Calendar;
import javax.ejb.CreateException;
import javax.ejb.FinderException;
import javax.ejb.SessionBean;
import javax.ejb.SessionContext;
import javax.naming.InitialContext;
import javax.naming.NamingException;
public class SessionEJBBean implements SessionBean
public void ejbCreate()
public void ejbActivate()
public void ejbPassivate()
public void ejbRemove()
public void setSessionContext(SessionContext ctx)
private TempTblLocalHome getTempTblLocalHome() throws NamingException
final InitialContext context = new InitialContext();
return (TempTblLocalHome)context.lookup("java:comp/env/ejb/local/TempTbl");
public void createOperation() throws RemoteException
try
TempTblLocalHome tempHome = (TempTblLocalHome) this.getTempTblLocalHome();
System.out.println("Succcess loading Temp Entity EJB");
Timestamp currDate = new Timestamp(Calendar.getInstance()
.getTimeInMillis());
TempTblLocal tempLocal = tempHome.create(new Long("1294"),currDate,new Long("1") );
System.out.println("created Temp Op=" + tempLocal.getOperId() + " date=" + tempLocal.getOperStsTmDt() );
//tempLocal.setOperStsCd(new Long("" + 1) );
Long stsTypeCd = new Long("1");
System.out.println("Putting long value in db=" + stsTypeCd + "-");
tempLocal.setOperStsCd(stsTypeCd);
System.out.println("Stored value in db=" + tempLocal.getOperStsCd() );
catch( NamingException ne)
throw new RemoteException(ne.getMessage());
catch(CreateException ce)
throw new RemoteException(ce.getMessage());
ejb-jar (generated)
<entity>
<description>Entity Bean ( CMP )</description>
<display-name>TempTbl</display-name>
<ejb-name>TempTbl</ejb-name>
<local-home>model.TempTblLocalHome</local-home>
<local>model.TempTblLocal</local>
<ejb-class>model.TempTblBean</ejb-class>
<persistence-type>Container</persistence-type>
<prim-key-class>model.TempTblPK</prim-key-class>
<reentrant>False</reentrant>
<cmp-version>2.x</cmp-version>
<abstract-schema-name>TempTbl</abstract-schema-name>
<cmp-field>
<field-name>operId</field-name>
</cmp-field>
<cmp-field>
<field-name>operStsTmDt</field-name>
</cmp-field>
<cmp-field>
<field-name>operStsCd</field-name>
</cmp-field>
<query>
<query-method>
<method-name>findAll</method-name>
<method-params/>
</query-method>
<ejb-ql>select object(o) from TempTbl o</ejb-ql>
</query>
</entity>
<container-transaction>
<method>
<ejb-name>TempTbl</ejb-name>
<method-name>*</method-name>
</method>
<trans-attribute>Supports</trans-attribute>
</container-transaction>
orion-ejb-jar.xml (generated):
<entity-deployment name="TempTbl" data-source="jdbc/Marcs_DS" table="MARCS.TEMP_TBL">
<primkey-mapping>
<cmp-field-mapping>
<fields>
<cmp-field-mapping name="operId" persistence-name="OPER_ID" persistence-type="NUMBER(5)"/>
<cmp-field-mapping name="operStsTmDt" persistence-name="OPER_STS_TM_DT" persistence-type="DATE"/>
</fields>
</cmp-field-mapping>
</primkey-mapping>
<cmp-field-mapping name="operId" persistence-name="OPER_ID" persistence-type="NUMBER(5)"/>
<cmp-field-mapping name="operStsTmDt" persistence-name="OPER_STS_TM_DT" persistence-type="DATE"/>
<cmp-field-mapping name="operStsCd" persistence-name="OPER_STS_CD" persistence-type="NUMBER(2)"/>
</entity-deployment>

>
Srini.r wrote:
> I have added a new field in IT0006
> Srini R
Have you done this through PM01?
~Suresh

Endpoint policy is applied but client not reflecting settings

Hi
We have setup SCCM 2012 SP1 (post the 2012 SP1 republish) and i'm having issues with the SCEP policy applying.
Basically the policies are setup within the config manager console and are distributing out to the clients, the config manager console displays the correctly assigned policy and discovering the various policies applid via checking registry or powershell
commands also reflects this from the client end.
the endpointprotectionagent.log is telling me that the EPAMPolicy.xml policy has been successfully applied and the contents of EPAMPolicy.xml correctly reflects the settings i have defined via config manager.
yet when i open the actual client it does not reflect any of these settings and appears to just have the default settings.
any suggestions?

Hi,
I don't know if you managed to resolve this. But I had similar issues and after some detective work this was being caused by another group Group policy setting preventing the processing of local group policies. Specifically, the offending setting and explanation
is listed below:
Setting Path:
Computer Configuration/Administrative Templates/System/Group Policy
Setting: Turn off Local Group Policy objects processing: Enabled
Explanation
This policy setting prevents Local Group Policy objects (Local GPOs) from being applied.
By default, the policy settings in Local GPOs are applied before any domain-based GPO policy settings. These policy settings can apply to both users and the local computer. You can disable the processing and application of all Local GPOs to ensure that only
domain-based GPOs are applied.
If you enable this policy setting, the system will not process and apply any Local GPOs.
If you disable or do not configure this policy setting, Local GPOs will continue to be applied.
Note: For computers joined to a domain, it is strongly recommended that you only configure this policy setting in domain-based GPOs. This setting will be ignored on computers that are joined to a workgroup.
Make sure the setting is either set to disable or not configured.
The image below shows a RSoP on a computer where policies are applying successfully. As you can see, antimalware settings are being applied as local group policy settings
Hope this helps

Windows not retaining settings after 10.4.11 update

Hello everyone,
I just updated my PowerBook G4/667 Titanium to Mac OS X 10.4.11 (from 10.4.1) and everything is working fine but there is one annoying problem. Every time I restart, when I open some of the windows on my computer, they do not retain their settings - settings like the list view and window size, for example. Some folders DO retain their settings when I open them and some don't (like the Applications folder and the Macintosh HD folder/window which I have to reset every time I restart).
I have to keep setting them to list view every time after a restart. How can I fix this so that they stay the same all the time? Does this have anything to do with the invisible .DS_store files? I don't understand why some windows retain their settings and why some don't.
I've repaired permissions numerous times. Cleared cache files. Tried setting the "global" view from the Finder > View > Show View Options to "All Windows". Tried everything I know.
Can someone please tell me what I can do to fix this?
Thanks so much,
Gerard

Hi Gerard, and a warm welcome to the forums!
Safe Boot , (holding Shift key down at bootup), use Disk Utility from there to Repair Permissions, move these files to the Desktop.
/Users/YourUserName/Library/Preferences/com.apple.finder.plist
/Users/YourUserName/Library/Preferences/com.apple.desktop.plist
Then reboot once more.

Client not updating - Error Code # 0x80244023 and 0x801901f8

Hello All,
We have a Windows server (2008) which is not pulling updates from WSUS server. It has two NICs - one is public and another is configured with
172.x.x.x range for Admin use (this is for WSUS communication with no DNS setup).
See logs below,
2014-05-07        13:05:50:089     916      1410     Misc
=========== Logging initialized (build: 7.6.7600.256, tz: +0800) ===========
2014-05-07        13:05:50:089     916      1410     Misc
= Process: C:\Windows\system32\svchost.exe
2014-05-07        13:05:50:089     916      1410     Misc
= Module: c:\windows\system32\wuaueng.dll
2014-05-07        13:05:50:089     916      1410     Service *************
2014-05-07        13:05:50:089     916      1410     Service ** START
** Service: Service startup
2014-05-07        13:05:50:089     916      1410     Service *********
2014-05-07        13:05:50:091     916      1410     Agent
* WU client version 7.6.7600.256
2014-05-07        13:05:50:092     916      1410     Agent
* Base directory: C:\Windows\SoftwareDistribution
2014-05-07        13:05:50:092     916      1410     Agent
* Access type: Named proxy
2014-05-07        13:05:50:092     916      1410     Agent
* Default proxy: proxy:8083
2014-05-07        13:05:50:093     916      1410     Agent
* Network state: Connected
2014-05-07        13:05:50:520     916      1410     DtaStor Default service
for AU is {00000000-0000-0000-0000-000000000000}
2014-05-07        13:05:50:531     916      1410     DtaStor Default service
for AU is {9482F4B4-E343-43B6-B170-9A65BC822C77}
2014-05-07        13:05:50:539     916      1410     Agent
WARNING: Failed to read the service id for re-registration 0x80070002
2014-05-07        13:05:50:539     916      1410     Agent
WARNING: Missing service entry in the backup data store; cleaning up
2014-05-07        13:06:01:251     916      1594     Report
CWERReporter::Init succeeded
2014-05-07        13:06:01:251     916      1594     Agent
*********** Agent: Initializing Windows Update Agent ***********
2014-05-07        13:06:01:253     916      1594     Agent
*********** Agent: Initializing global settings cache ***********
2014-05-07        13:06:01:253     916      1594     Agent
* WSUS server: http://172.16.74.28
2014-05-07        13:06:01:253     916      1594     Agent
* WSUS status server: http://172.16.74.28
2014-05-07        13:06:01:253     916      1594     Agent
* Target group: (Unassigned Computers)
2014-05-07        13:06:01:253     916      1594     Agent
* Windows Update access disabled: No
2014-05-07        13:06:01:253     916      1410     Report
*********** Report: Initializing static reporting data ***********
2014-05-07        13:06:01:253     916      1410     Report
* OS Version = 6.1.7601.1.0.196626
2014-05-07        13:06:01:253     916      1594     DnldMgr
Download manager restoring 0 downloads
2014-05-07        13:06:01:253     916      1410     Report
* OS Product Type = 0x0000000A
2014-05-07        13:06:01:260     916      1594     AU
########### AU: Initializing Automatic Updates ###########
2014-05-07        13:06:01:261     916      1594     AU
# WSUS server: http://172.16.74.28
2014-05-07        13:06:01:261     916      1594     AU
# Detection frequency: 1
2014-05-07        13:06:01:261     916      1594     AU
# Approval type: Pre-install notify (Policy)
2014-05-07        13:06:01:261     916      1594     AU
# Auto-install minor updates: Yes (Policy)
2014-05-07        13:06:01:261     916      1594     AU
# Will interact with non-admins (Non-admins are elevated (Policy))
2014-05-07        13:06:01:384     916      1410     Report
* Computer Brand = VMware, Inc.
2014-05-07        13:06:01:384     916      1410     Report
* Computer Model = VMware Virtual Platform
2014-05-07        13:06:01:390     916      1410     Report
* Bios Revision = 6.00
2014-05-07        13:06:01:390     916      1410     Report
* Bios Name = PhoenixBIOS 4.0 Release 6.0
2014-05-07        13:06:01:390     916      1410     Report
* Bios Release Date = 2012-07-09T00:00:00
2014-05-07        13:06:01:390     916      1410     Report
* Locale ID = 1033
2014-05-07        13:06:01:392     916      1594     AU
Successfully wrote event for AU health state:0
2014-05-07        13:06:01:392     916      1594     AU
Initializing featured updates
2014-05-07        13:06:01:392     916      1594     AU
Found 0 cached featured updates
2014-05-07        13:06:01:392     916      1594     AU
Successfully wrote event for AU health state:0
2014-05-07        13:06:01:395     916      1714     Report
WARNING: Failed to open event cache file at C:\Windows\SoftwareDistribution\EventCache\{1EDE8AC5-7759-45EC-9747-C62989CBAEF4}.bin for reading with hr = 80070002.
2014-05-07        13:06:01:396     916      1714     Report
WARNING: Failed to open event cache file at C:\Windows\SoftwareDistribution\EventCache\{EEE2278A-AE78-4886-96CF-5C5946BA8699}.bin for reading with hr = 80070002.
2014-05-07        13:06:01:396     916      1594     AU
Successfully wrote event for AU health state:0
2014-05-07        13:06:01:396     916      1594     AU
AU finished delayed initialization
2014-05-07        13:06:01:397     916      1594     AU
Triggering AU detection through DetectNow API
2014-05-07        13:06:01:397     916      1594     AU
Triggering Online detection (non-interactive)
2014-05-07        13:06:01:397     916      1410     AU
2014-05-07        13:06:01:397     916      1410     AU
## START ## AU: Search for updates
2014-05-07        13:06:01:397     916      1410     AU
2014-05-07        13:06:01:399     916      1410     AU
<<## SUBMITTED ## AU: Search for updates [CallId = {177B400D-42A5-46EB-8588-A6F107FF3C77}]
2014-05-07        13:06:01:399     916      1714     Agent
2014-05-07        13:06:01:399     916      1714     Agent
** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
2014-05-07        13:06:01:399     916      1714     Agent
2014-05-07        13:06:01:399     916      1714     Agent
* Online = Yes; Ignore download priority = No
2014-05-07        13:06:01:399     916      1714     Agent
* Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation'
and RebootRequired=1"
2014-05-07        13:06:01:399     916      1714     Agent
* ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
2014-05-07        13:06:01:399     916      1714     Agent
* Search Scope = {Machine}
2014-05-07        13:06:01:399     916      1714     Setup
Checking for agent SelfUpdate
2014-05-07        13:06:01:400     916      1714     Setup
Client version: Core: 7.6.7600.256 Aux: 7.6.7600.256
2014-05-07        13:07:03:952     916      1714     Misc
WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x801901f8
2014-05-07        13:07:03:952     916      1714     Misc
WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x801901f8
2014-05-07        13:07:22:828     916      1714     Misc
WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x801901f8
2014-05-07        13:07:22:828     916      1714     Misc
WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x801901f8
2014-05-07        13:09:02:845     916      1714     Misc
WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x801901f8
2014-05-07        13:09:02:845     916      1714     Misc
WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x801901f8
2014-05-07        13:10:02:451     916      1714     Misc
WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x801901f8
2014-05-07        13:10:02:451     916      1714     Misc
WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x801901f8
2014-05-07        13:10:02:451     916      1714     Misc
WARNING: DownloadFileInternal failed for http://172.16.74.28/selfupdate/wuident.cab: error 0x801901f8
2014-05-07        13:10:02:452     916      1714     Setup
WARNING: SelfUpdate check failed to download package information, error = 0x80244023
2014-05-07        13:10:02:452     916      1714     Setup
FATAL: SelfUpdate check failed, err = 0x80244023
2014-05-07        13:10:02:452     916      1714     Agent
* WARNING: Skipping scan, self-update check returned 0x80244023
2014-05-07        13:10:02:452     916      1714     Agent
* WARNING: Exit code = 0x80244023
2014-05-07        13:10:02:452     916      1714     Agent
2014-05-07        13:10:02:452     916      1714     Agent
** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
2014-05-07        13:10:02:452     916      1714     Agent
2014-05-07        13:10:02:452     916      1714     Agent
WARNING: WU client failed Searching for update with error 0x80244023
2014-05-07        13:10:02:453     916      ae8       AU
>>## RESUMED ## AU: Search for updates [CallId = {177B400D-42A5-46EB-8588-A6F107FF3C77}]
2014-05-07        13:10:02:453     916      ae8       AU
# WARNING: Search callback failed, result = 0x80244023
2014-05-07        13:10:02:453     916      ae8       AU
# WARNING: Failed to find updates with error code 80244023
2014-05-07        13:10:02:453     916      ae8       AU
2014-05-07        13:10:02:454     916      ae8       AU
## END ## AU: Search for updates [CallId = {177B400D-42A5-46EB-8588-A6F107FF3C77}]
2014-05-07        13:10:02:454     916      ae8       AU
2014-05-07        13:10:02:457     916      ae8       AU
Successfully wrote event for AU health state:0
2014-05-07        13:10:02:457     916      ae8       AU
AU setting next detection timeout to 2014-05-07 06:08:08
2014-05-07        13:10:02:457     916      ae8       AU
Successfully wrote event for AU health state:0
2014-05-07        13:10:02:458     916      ae8       AU
Successfully wrote event for AU health state:0
2014-05-07        13:10:02:463     916      1714     Report
CWERReporter finishing event handling. (00000000)
2014-05-07        13:10:07:452     916      1714     Report
REPORT EVENT: {E1B169E2-C0FC-4D33-A70B-41F76CB362B9}            2014-05-07 13:10:02:452+0800 1          148       101
{D67661EB-2423-451D-BF5D-13199E37DF28}      1            80244023          SelfUpdate
Failure   Software Synchronization            Windows Update Client failed to detect with error 0x80244023.
2014-05-07        13:10:07:462     916      1714     Report
CWERReporter::HandleEvents - WER report upload completed with status 0x8
2014-05-07        13:10:07:463     916      1714     Report
WER Report sent: 7.6.7600.256 0x80244023 D67661EB-2423-451D-BF5D-13199E37DF28 Scan 101 Managed
2014-05-07        13:10:07:463     916      1714     Report
CWERReporter finishing event handling. (00000000)
I verified through Nslookup and found WSUS server IP and name does not resolved. However, the download manager window is opening up while accessing
- http://172.16.74.28/selfupdate/wuident.cab from server browser.
Please help.

2014-05-07        13:06:01:395     916      1714     Report   WARNING: Failed to open event cache file at C:\Windows\SoftwareDistribution\EventCache\{1EDE8AC5-7759-45EC-9747-C62989CBAEF4}.bin
for reading with hr = 80070002.
This type of error is quite often symptomatic of a corrupted WUA datastore.
2014-05-07        13:07:03:952     916      1714     Misc      WARNING: WinHttp: SendRequestToServerForFileInformation failed with
0x801901f8
The 0x801901F8 is an HTTP 504 -- "request timed out waiting on a gateway".
2014-05-07        13:06:01:253     916      1594     Agent    * Target group: (Unassigned Computers)
2014-05-07        13:06:01:261     916      1594     AU        # Detection frequency: 1
When using Server-Side Targeting, this value should be at least 2 hours. Based on the above three observations, I recommend the following response:
Verify that the routing table is correct and that requests for 172.16/16 are actually leaving on the correct NIC.
Change the Detection Frequency to at least 2 hours (until you fix the communication issue it might as well be 22 hours!).
Run wuauclt /resetauthorization /detectnow.
If the 0x80070002 error persists, do the following:
Stop the Windows Update service.
Rename %windir%\SoftwareDistribution to SoftwareDistribution.OLD.
Start the Windows Update service.
Run wuauclt /resetauthorization /detectnow and observe the results. If the issue is resolved, copy the ReportingEvents.log from SoftwareDistribution.OLD back to the new SoftwareDistribution.
If the issue is not resolved, post that detection event for further analysis.
Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
SolarWinds Head Geek
Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
http://www.solarwinds.com/gotmicrosoft
The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

SCEP client not updating settings after policy retrieval

Similar Messages

Maybe you are looking for