Without reading further at this point, unless you performed this unreported
Step2a
2a. Completed uninstallation of SUS 1.0
> 4 Server removed from Domain & joined to workgroup
> 5 WSUS 3.0 stopped working
Actually... it's likely that WSUS 3.0 was never working at all.
> 6 Tried to reinstall WSUS 3.0. Program tried to uninstall but failed.
> Could not do anything else after that.
Basically a result of the failure to fully uninstall SUS 1.0.
> 9 Did fresh installation of OS with SP2, IIS & WSUS 3.0
Thus eliminating the remnants of the SUS 1.0 installation...
> 10 Server successfully synchs with upstream and downstream servers. Local
> clients howerver are getting 0x80244008 errors.
> {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
> http://tcoslsadmin/ClientWebService/client.asmx
> 11/7/2007 15:08:11:109 884 a18 PT WARNING: SyncUpdates failure, error =
> 0x80244008, soap client error = 8, soap error code = 0, HTTP status code =
> 200
0x80244008 - SUS E PT SOAPCLIENT PARSEFAULT
> 11 When I change the Windows Update Intranet server on TCOSLSADMIN to
> Go-SL-MSUPD, its upstream server, it successfully communicates to this
> server
> without the above error.
Suggesting there is a fault in the TCOSLSADMIN server installation, since a
fault anywhere else would continue to manifest this error.
And... based on your "...upstream and downstream servers..." statement
above... did you mean downstream CLIENTS,
or is TCOSLSADMIN a mid-stream server in a three-server-deep heirarchy?
> 11/7/2007 14:55:51:890 884 f74 PT Initializing simple targeting cookie,
> clientId = a7670531-144d-4bae-b927-382f9f18f061, target group = , DNS name
> =
> tcoslsadmin
Oh.... you forgot to mention that the *CLIENT* and the *SERVER* are the same
system!
At least, that's where the logfile seems to have come from.
Is TCOSLSADMIN a *replica* of GO-SL-MSUPD, or just an autonomous downstream
server?
Please reset the URLs to http://tcoslsadmin and run the Client Diagnostic
Tool on TCOSLSADMIN
and post the results.
--
Lawrence Garvin, M.S., MCTS, MCP
MVP - Software Distribution (2005-2007)
MS WSUS Website: http://www.microsoft.com/wsus
My Websites: http://www.onsitechsolutions.com;
http://wsusinfo.onsitechsolutions.com
My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
I did look at the registry keys to see if any residual SUS 1.0 keys were
left over but I did not see any. I also look to see if I could find any
documentation on what a fresh installation of WSUS 3.0 registry keys should
contain but could not find any online. I did verify that the IIS
Permissions, Scripts, directory security, etc. were in accordance with the
docmumentation provided for WSUS 3.0, except for the APIReporting30 directory
which appears to have changed since the docuementation was created.
I worked with Microsoft Tech Support last Friday trying everything short of
flattening the box and rebuilding it from scratch, blowing out WSUS 3.0 with
the MSI deinstallation tool, R&R IIS, .NET 2.0, etc. and reinstalling
everything from scratch and running the .NET verifier tool, MSREPORTS tool
and anthing else we could think of that might point us in the right
direction. We believe that something got corrupted during the 'system state'
restore and subsequent repair of the OS that isn't showing up in any
diagnostic routines that we can pinpoint.
After all this we are back to where we were. The box syncs fine with its
upstream and downstream servers but not with its clients. This is a bit
better than where it was when it didn't work at all...but not much.
Our next plan of action is to 'flatten' the system drive and do a complete
fresh installation unless someone can think of another method we can try that
may resolve the issue.
Excellent -- although the symptoms reported contradict this. :-\
> Our next plan of action is to 'flatten' the system drive and do a complete
> fresh installation unless someone can think of another method we can try
> that
> may resolve the issue.
The truth is that the SUS 1.0 uninstaller fails to remove the SUS 1.0
catalog from the root of the DWS, and the presence of that catalog file
appears to have caused issues with successfully upgrading to WSUS 3.0 in at
least one other incident I can recall.
Could you please inventory the list of filenames in the root of the Default
Web Server and post them here. (I can't remember the specific name of the
file(s), but I'll recognize them when I see them, if they're still there.)
--
Lawrence Garvin, M.S., MCTS, MCP
Senior Data Architect, APQC, Houston, Texas
C:\Program Files\Update Services\Tools>clientdiag
WSUS Client Diagnostics Tool
Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is running. . . PASS
Wuaueng.dll version 7.0.6000.381. . . . . . . . . . . . PASS
This version is WSUS 2.0
Checking AU Settings
AU Option is 3 : Notify Prior to Install. . . . . . . . PASS
Option is from Policy settings
Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use
Checking Connection to WSUS/SUS Server
WUServer = http://tcoslsadmin
WUStatusServer = http://tcoslsadmin
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
Connection to server. . . . . . . . . . . . . . . . . . PASS
SelfUpdate folder is present. . . . . . . . . . . . . . PASS
Press Enter to Complete
The following client diagnostic is from a 2nd client machine
C:\Program Files>clientdiag
WSUS Client Diagnostics Tool
Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is running. . . PASS
Wuaueng.dll version 7.0.6000.374. . . . . . . . . . . . PASS
This version is WSUS 2.0
Checking AU Settings
AU Option is 3 : Notify Prior to Install. . . . . . . . PASS
Option is from Policy settings
Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use
Checking Connection to WSUS/SUS Server
WUServer = http://tcoslsadmin
WUStatusServer = http://tcoslsadmin
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
Connection to server. . . . . . . . . . . . . . . . . . PASS
SelfUpdate folder is present. . . . . . . . . . . . . . PASS
Press Enter to Complete
C:\Program Files>
Yes.. this is a non-sequiter -- ignore this anomaly. The CDT was written for
the WUA v5.x product. It is totally obliviuos to version numbers beyond 5.x.
All it knows is if the version number is < 5.4.3790.1000 then "The version
is SUS 1.0"; otherwise it reports all newer versions as "WSUS 2.0".
As noted, there is no flaw with the CDT output on the server, nor this
client machine.
This confirms that nothing in the =configuration= of the WUA, or the WSUS
Server, appears to be at fault.
However, if you're still receiving 0x80244008 errors, then you'll want to
chase down that error code.
A Google search on the code shows one possible error is that the
ClientWebService virtual directory does not have the correct application
configuration settings.
Open IIS - Click Default Web Site - Right Click Client Web Service -
Properties - In the Application Settings, In the Application name, click
Create.
Test this url:
http://tcoslsadmin/clientwebservice/client.asmx
You should get back a simple web page listing the services available.
Another case example involves the WSUS Server being configured to use
complex passwords, which may interfere with the proper creation of
WSUS-required accounts and/or group membership assignments, specifically the
ASPNET machine account.
See this thread for details on the above two items:
http://www.wsus.info/forums/lofiversion/index.php?t5896.html
Other notes suggest that proxy servers and firewalls could impact the WUA
talking to WU/MU, so it makes sense that it could also impact the WUA trying
to talk to a WSUS Server. The WUA uses anonymous access to use the HTTP
resources on the WSUS Server. If the proxy server/firewall requires
authentication for HTTP requests, this connection could fail.
And, in general, if there's been any customization of the ASP.NET
environment on the WSUS Server, that could be a contributing factor.
--
Lawrence Garvin, M.S., MCTS, MCP
Senior Data Architect, APQC, Houston, Texas
I ran the .NET 2.0 verifier program against the box to ensure it has the
latest versions and hotfixes. Even removed and reinstalled .NET and .ASP
portions per Microsofts guidelines.
There are no Proxy machines in this environment as all clients connect on
the same subnet to the WSUS server. I verified the Anonymous Access was
configured per the MS guidelines for WSUS 3.0.
So I ended up rebuiliding the OS portion of this server and then
reinstalling the WSUS 3.0 services from scratch which has resolved the
problem.
I appreciate you willingness to share your vast knowlege on this product and
have gain some valuable insight into this product. Thanks.