SUS not Working Help !!

KA Kueh

unread,

Jul 31, 2003, 9:00:50 PM7/31/03

to

Dear all,

I have installed SUS SP1 on a Windows 2K SP4 Domain. The client seems not
to be working. I am using GPO to deploy and I can see that all registry
entry are updated on the client but the client machine is not pulling down
the patches. What is wrong?.

Client machine Windows Update.log (Win XP SP1)

2002-05-23 16:45:29 Success IUCTL Starting
2002-05-23 16:45:29 Success IUCTL Shutting down
2002-05-23 17:00:15 Success CDM Starting
2002-05-23 17:00:15 Success CDM Shutting down
2002-05-23 17:00:56 Success CDM Starting
2002-05-23 17:00:56 Success CDM Shutting down
2002-05-23 17:01:20 Success CDM Starting
2002-05-23 17:01:20 Success CDM Shutting down
2002-05-23 17:01:30 Success CDM Starting
2002-05-23 17:01:30 Success CDM Shutting down
2002-05-25 16:04:31 Success CDM Starting
2002-05-25 16:04:31 Success CDM Shutting down
2002-05-25 16:06:08 Success CDM Starting
2002-05-25 16:06:08 Success CDM Shutting down
2002-05-25 16:06:42 Success CDM Starting
2002-05-25 16:06:42 Success CDM Shutting down
2002-05-25 16:08:08 Success CDM Starting
2002-05-25 16:08:08 Success CDM Shutting down
2003-07-30 14:12:50 06:12:50 Success IUCTL Starting
2003-07-30 14:12:50 06:12:50 Success IUCTL Downloaded
iuident.cab from http://mydomain to C:\Program Files\WindowsUpdate\V4
2003-07-30 14:12:51 06:12:51 Success IUCTL IUEngine on Server
is newer version (5.4.3630.2550)
2003-07-30 14:12:51 06:12:51 Success IUCTL Checking to see if
new version of Windows Update software available
2003-07-30 14:12:51 06:12:51 Success IUCTL Current iuctl.dll
version: 5.4.3630.1106
2003-07-30 14:12:51 06:12:51 Success IUCTL IUCtl needs update
to 5.4.3630.2550
2003-07-30 14:12:51 06:12:51 Success IUCTL Current
iuengine.dll version: 5.4.3630.1106
2003-07-30 14:12:51 06:12:51 Success IUENGINE Starting
2003-07-30 14:12:51 06:12:51 Success IUENGINE Shutting down

wfpdx [SUS MVP]

unread,

Aug 5, 2003, 2:39:17 PM8/5/03

to

Suggest reviewing this info:

http://www.susserver.com/FAQs/FAQ-IsYourSUSServerWorking.asp

"KA Kueh" <k...@ksm.com.my> wrote in message
news:OjCGHh8V...@TK2MSFTNGP11.phx.gbl...

KA Kueh

unread,

Aug 5, 2003, 9:34:06 PM8/5/03

to

Hi,

I have visited the site but have done everything possible but not of my
machine is updating. I have check the group policy and they are working,
the registry entries are all correct but not seems to be happening. FYI,
the installation is running for two weeks now and there are enough
logoff-login sequence to the update to run. What else could be wrong here?
Thanks.

Regards,
Kueh.

"wfpdx [SUS MVP]" <wayne...@DELETETHISyahoo.com> wrote in message
news:eQwShD4W...@TK2MSFTNGP11.phx.gbl...

Henrik Sjöström

unread,

Aug 7, 2003, 10:46:11 AM8/7/03

to

Just a thought, but have you installed URLScan on the SUS server?
In the default setting, this security tool disables .exe file downloads from
the server, so it might just be that. I had that exact problem myself :-( .

If you have installed urlscan, review the URLSCAN.INI file and delete the
line that prohibits .exe file downloads. (%SYSTEM32%\inetsrv\urlscan)
Look under the heading [DenyExtensions] in that file.
It probaly looks like this:

[DenyExtensions]

;
; Extensions listed here either run code directly on the server,
; are processed as scripts, or are static files that are
; generally not intended to be served out.
;
; Note that these entries are effective if "UseAllowExtensions=0"
; is set in the [Options] section above.
;

; Deny executables that could run on the server
.exe
.bat
.cmd
.com

Just delete or edit out the .exe line

As for the timing for when the automatic updates, I have also noted that
they happen randomly, according to the windowsupdate.log file. I've had
computers booting up after a week of down time, standing idle for two hours,
and not check for updates (which there were 2 of). Upon rebooting, the check
is sometime made immediatly, or not at all. Might happen the next day even.
And I have found no way to influence or change when clients check the sus
server for updates.

Cheers.
Henrik

"KA Kueh" <k...@ksm.com.my> wrote in message

news:u8j5xq7W...@TK2MSFTNGP10.phx.gbl...

Liyardi Wibowo

unread,

Aug 11, 2003, 1:10:52 PM8/11/03

to

Check the IIS log file (%System32%\logfiles\W3SVC1) on the server.
If you get a lot of error 80190194, check the IIS directory security
settings. Make sure you have allowed anonymous access on the server's
root folder and 'content' virtual folder.
If you have done that and still get the same error, run the SUS
installation on the server and choose 'Repair'.

Good luck,
Liyardi

"Henrik Sjöström" <henrik_m...@hotmail.com> wrote in message news:<OIEpfJPX...@TK2MSFTNGP10.phx.gbl>...