Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Clients not registering.

386 views
Skip to first unread message

Mario McGuire

unread,
May 1, 2008, 12:38:54 PM5/1/08
to
I've done everything that the instructions asked, and my server meets all of
the specs.

This is my first WSUS server, its synchronized, and all the updates have
been downloaded. I created a Test group in AD and deployed a GPO that was
as the documentation suggested, but neither of the 2 machines will register.
the only other thing running on this server is IIS running our Intranet.

I would apprecieate any help.

Thank you,
Mairo McGuire


Lawrence Garvin [MVP]

unread,
May 1, 2008, 2:37:57 PM5/1/08
to

"Mario McGuire" <mariom...@theorsinigroup.com> wrote in message
news:eEnVbn6q...@TK2MSFTNGP02.phx.gbl...

Download and run the Client Diagnostic Tool on one or both of these two
machines and post the results.

http://download.microsoft.com/download/9/7/6/976d1084-d2fd-45a1-8c27-a467c768d8ef/WSUS%20Client%20Diagnostic%20Tool.EXE

--
Lawrence Garvin, M.S., MCITP, MCBMSP, MCTS(x4), MCP
Senior Data Architect, APQC, Houston, Texas
Microsoft MVP - Software Distribution (2005-2008)

MS WSUS Website: http://www.microsoft.com/wsus
My Websites: http://www.onsitechsolutions.com;
http://wsusinfo.onsitechsolutions.com
My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin

Mario McGuire

unread,
May 1, 2008, 3:38:06 PM5/1/08
to
This is what the diagnostics told me.


WSUS Client Diagnostics Tool

Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is not running. PASS
Wuaueng.dll version 7.1.6001.65 . . . . . . . . . . . . PASS
This version is WSUS 2.0

Checking AU Settings
AU Option is 3 : Notify Prior to Install. . . . . . . . PASS
Option is from Policy settings

Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use

Checking Connection to WSUS/SUS Server
WUServer = http://server5/Selfupdate
WUStatusServer = http://server5/Selfupdate
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
Client is pointed to SUS 1.0 Server
Connection to server. . . . . . . . . . . . . . . . . . PASS

WinHttpDownloadFileToMemory(szURLDest, NULL, 0, NULL, NULL, NULL,
&downloadBuffe
r) failed with hr=0x80190194

No Error description could be found

Press Enter to Complete

Thank you,
Mario McGuire


"Lawrence Garvin [MVP]" <ons...@postalias.news> wrote in message
news:B66D8CCB-30A3-4EFE...@microsoft.com...

Lawrence Garvin [MVP]

unread,
May 1, 2008, 7:19:11 PM5/1/08
to
"Mario McGuire" <mariom...@theorsinigroup.com> wrote in message
news:#jTCqL8q...@TK2MSFTNGP02.phx.gbl...

> Checking Connection to WSUS/SUS Server
> WUServer = http://server5/Selfupdate
> WUStatusServer = http://server5/Selfupdate
> UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
> Client is pointed to SUS 1.0 Server

Two things... both very common issues.. and both easily fixable with one
fix:

Your URL is incorrect, it should be http://server5:8530 or simply
http://server5
depending on where the WSUS server is actually installed.

[a] The URL "http://server5/Selfupdate" is incorrect, the "/Selfupdate" does
not belong, and
[b] The "Client is pointed to SUS 1.0 Server" means there's no =WSUS= Server
on the specified URL.

It's unfortunate that it says "...pointed to SUS..." server, because that's
an assumption of the CDT based on evidence without facts. What "..pointed to
SUS..." really means is "...NOT pointed to WSUS...".

This could simply be because of the erroneous trailing "/Selfupdate" on your
URL,
or it could be because the WSUS server is actually installed on port
8530.

Mario McGuire

unread,
May 2, 2008, 5:26:35 PM5/2/08
to
Im still getting an error, although I did seem to get further.

WSUS Client Diagnostics Tool

Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS

Background Intelligent Transfer Service is running. . . PASS
Wuaueng.dll version 7.0.6000.381. . . . . . . . . . . . PASS


This version is WSUS 2.0

Checking AU Settings
AU Option is 3 : Notify Prior to Install. . . . . . . . PASS
Option is from Policy settings

Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use

Checking Connection to WSUS/SUS Server
WUServer = http://server5:8530
WUStatusServer = http://server5:8530


UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS

VerifyWUServerURL() failed with hr=0x80072efd

A connection with the server could not be established

Thank you,
Mario


Press Enter to Complete


"Lawrence Garvin [MVP]" <ons...@postalias.news> wrote in message

news:03573789-D494-4D93...@microsoft.com...

Lawrence Garvin [MVP]

unread,
May 2, 2008, 8:02:20 PM5/2/08
to
"Mario McGuire" <mariom...@theorsinigroup.com> wrote in message
news:Oo352sJr...@TK2MSFTNGP04.phx.gbl...

> Checking Connection to WSUS/SUS Server
> WUServer = http://server5:8530
> WUStatusServer = http://server5:8530
> UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
>
> VerifyWUServerURL() failed with hr=0x80072efd
>
> A connection with the server could not be established

This is a "CANNOT CONNECT" error and it's an indication of a defect in the
network infrastructure.

Essentially the Agent logs the 0x80072efd error when it sends the request,
but the WSUS Server never responds.

This can happen for a dozen different reasons, but the most common (not
necessarily in any order) are:
[1] A firewall is blocking the port.
[2] A router is misconfigured and trashing the packets.
[3] DNS is returning an invalid/incorrect IP Address for the hostname.
[4] A proxy server actually does exist, but the client has not been
configured to use it.
[5] The web server is receiving the request, but it's getting lost on
the way back.
(Check the IIS logs to see if the client request packet was
received by IIS.)

Mario McGuire

unread,
May 5, 2008, 1:23:35 PM5/5/08
to
First, I want to thank you again for all your help,

but I guess I'm a little lost now.

[1]The IIS log shows this when I try my test machine.

xxx.xxx.xxx.xxx = Server
000.000.000.000 = client

2008-05-05 08:53:01 W3SVC1 xxx.xxx.xxx.xxx HEAD /selfupdate/wuident.cab
0805050852 8530 - 000.000.000.000 Windows-Update-Agent 401 2 2148074254
2008-05-05 08:53:01 W3SVC1 xxx.xxx.xxx.xxx HEAD /selfupdate/wuident.cab
0805050852 8530 ORSINI\EG006371$ 000.000.000.000 Windows-Update-Agent 200 0
64
2008-05-05 08:53:01 W3SVC1 xxx.xxx.xxx.xxx HEAD
/selfupdate/WSUS3/x86/Other/wsus3setup.cab 0805050852 8530 - 000.000.000.000
Windows-Update-Agent 401 2 2148074254
2008-05-05 08:53:01 W3SVC1 xxx.xxx.xxx.xxx HEAD
/selfupdate/WSUS3/x86/Other/wsus3setup.cab 0805050852 8530 ORSINI\EG006371$
000.000.000.000 Windows-Update-Agent 200 0 0
2008-05-05 08:53:01 W3SVC1 xxx.xxx.xxx.xxx GET
/selfupdate/WSUS3/x86/Other/wsus3setup.cab 0805050852 8530 - 000.000.000.000
Windows-Update-Agent 401 2 2148074254
2008-05-05 08:53:01 W3SVC1 xxx.xxx.xxx.xxx GET
/selfupdate/WSUS3/x86/Other/wsus3setup.cab 0805050852 8530 ORSINI\EG006371$
000.000.000.000 Windows-Update-Agent 200 0 0
2008-05-05 09:01:33 W3SVC1 xxx.xxx.xxx.xxx GET /selfupdate/iuident.cab -
80 - xxx.xxx.xxx.xxx - 401 2 2148074254

This is the same for each time it contacts the server, I compared the data.

[2] There is no firewall between this computer and the server.
[3] I can access the Intranet from this machine, which resides on the same
server.
[4] The IT Director says there is no Proxy on our network.

Thank you very much,
Mairo McGuire


"Lawrence Garvin [MVP]" <ons...@postalias.news> wrote in message

news:EDE5F051-047E-4EBF...@microsoft.com...

Mario McGuire

unread,
May 5, 2008, 1:48:37 PM5/5/08
to
Also in addition I've verified these
> http://wsusservername/iuident.cab
> http://wsusservername/selfupdate/iuident.cab
> http://wsusservername/clientwebservi...verversion.xml
>
> http://wsusservername:8530/iuident.cab
> http://wsusservername:8530/selfupdate/iuident.cab
> http://wsusservername:8530/clientweb...verversion.xml
> http://wsusservername:8530/simpleaut...impleauth.asmx"

With success.

Mario

"Mario McGuire" <mariom...@theorsinigroup.com> wrote in message

news:e2YdETtr...@TK2MSFTNGP04.phx.gbl...

Lawrence Garvin [MVP]

unread,
May 5, 2008, 9:49:58 PM5/5/08
to
"Mario McGuire" <mariom...@theorsinigroup.com> wrote in message
news:e2YdETtr...@TK2MSFTNGP04.phx.gbl...

> [1]The IIS log shows this when I try my test machine.
>
> xxx.xxx.xxx.xxx = Server
> 000.000.000.000 = client

> 2008-05-05 08:53:01 W3SVC1 xxx.xxx.xxx.xxx HEAD /selfupdate/wuident.cab
> 0805050852 8530 - 000.000.000.000 Windows-Update-Agent 401 2 2148074254

HTTP '401' (Access Denied) to IP Address attempting to access
~/selfupdate/wuident.cab.

> 2008-05-05 08:53:01 W3SVC1 xxx.xxx.xxx.xxx HEAD /selfupdate/wuident.cab
> 0805050852 8530 ORSINI\EG006371$ 000.000.000.000 Windows-Update-Agent 200
> 0 64

HTTP '200' to MACHINE account ORSINI\EG006371 for /selfupdate/wuident.cab

> 2008-05-05 08:53:01 W3SVC1 xxx.xxx.xxx.xxx HEAD
> /selfupdate/WSUS3/x86/Other/wsus3setup.cab 0805050852 8530 -
> 000.000.000.000 Windows-Update-Agent 401 2 2148074254

HTTP '401' (Access Denied) to IP Address attempting to access
~/selfupdate/WSUS3/x86/Other/wsus3setup.cab


> 2008-05-05 08:53:01 W3SVC1 xxx.xxx.xxx.xxx HEAD
> /selfupdate/WSUS3/x86/Other/wsus3setup.cab 0805050852 8530
> ORSINI\EG006371$ 000.000.000.000 Windows-Update-Agent 200 0 0

HTTP '200' to MACHINE account ORSINI\EG006371 for
/selfupdate/WSUS3/x86/Other/wsus3setup.cab


The most likely cause of the above is that Anonymous Access is disabled on
the /selfupdate virtual directory, but since Integrated Authentication is
enabled and the client machine is a member of the same domain as the WSUS
Server, IIS is able to authenticate the =machine= via Active Directory.

Mario McGuire

unread,
May 6, 2008, 11:15:25 AM5/6/08
to
I've got to be honest, this is getting frustrating... I do really
apprecieate all of your suggestions.

The Diag tool comes back fine, also I changed my port back to 80 and as far
as I can tell this is working fine..

2008-05-06 14:43:22 W3SVC1 xxx.xxx.xxx.132 HEAD /selfupdate/wuident.cab
0805061443 80 - xxx.xxx.xxx.153 Windows-Update-Agent 200 0 0
2008-05-06 14:43:22 W3SVC1 xxx.xxx.xxx.132 HEAD
/selfupdate/WSUS3/x86/Other/wsus3setup.cab 0805061443 80 - xxx.xxx.xxx.153
Windows-Update-Agent 200 0 0
2008-05-06 14:43:22 W3SVC1 xxx.xxx.xxx.132 GET
/selfupdate/WSUS3/x86/Other/wsus3setup.cab 0805061443 80 - xxx.xxx.xxx.153
Windows-Update-Agent 200 0 0

2008-05-06 14:42:59 W3SVC1 xxx.xxx.xxx.132 HEAD /selfupdate/wuident.cab
0805061442 80 - xxx.xxx.xxx.170 Windows-Update-Agent 200 0 0
2008-05-06 14:42:59 W3SVC1 xxx.xxx.xxx.132 HEAD
/selfupdate/WSUS3/x86/Other/wsus3setup.cab 0805061442 80 - xxx.xxx.xxx.170
Windows-Update-Agent 200 0 0
2008-05-06 14:42:59 W3SVC1 xxx.xxx.xxx.132 GET
/selfupdate/WSUS3/x86/Other/wsus3setup.cab 0805061442 80 - xxx.xxx.xxx.170
Windows-Update-Agent 200 0 0


WSUS Client Diagnostics Tool

Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is running. . . PASS

Wuaueng.dll version 7.1.6001.65 . . . . . . . . . . . . PASS


This version is WSUS 2.0

Checking AU Settings
AU Option is 3 : Notify Prior to Install. . . . . . . . PASS
Option is from Policy settings

Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect

AutoDetect in use

Checking Connection to WSUS/SUS Server

WUServer = http://server5:80
WUStatusServer = http://server5:80


UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS

Connection to server. . . . . . . . . . . . . . . . . . PASS
SelfUpdate folder is present. . . . . . . . . . . . . . PASS

Press Enter to Complete


2 different computers are contacting the server just fine. and yet no
registration.

Thank you again,
Mario Mcguire

"Lawrence Garvin [MVP]" <ons...@postalias.news> wrote in message

news:e$UN$txrIH...@TK2MSFTNGP03.phx.gbl...

Mario McGuire

unread,
May 6, 2008, 3:19:50 PM5/6/08
to
Also, I did check the windows update log.

2008-05-06 14:16:16:828 1104 358 PT +++++++++++ PT: Synchronizing server
updates +++++++++++
2008-05-06 14:16:16:828 1104 358 PT + ServiceId =
{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
http://server5:80/ClientWebService/client.asmx
2008-05-06 14:17:17:359 1104 358 Misc WARNING: Send failed with hr =
80072ee2.
2008-05-06 14:17:17:359 1104 358 Misc WARNING: SendRequest failed with hr =
80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes
used : <>
2008-05-06 14:17:17:359 1104 358 PT + Last proxy send request failed with
hr = 0x80072EE2, HTTP status code = 0
2008-05-06 14:17:17:359 1104 358 PT + Caller provided credentials = No
2008-05-06 14:17:17:359 1104 358 PT + Impersonate flags = 0
2008-05-06 14:17:17:359 1104 358 PT + Possible authorization schemes used
=
2008-05-06 14:17:17:359 1104 358 PT WARNING: GetConfig failure, error =
0x80072EE2, soap client error = 5, soap error code = 0, HTTP status code =
200
2008-05-06 14:17:17:359 1104 358 PT WARNING: PTError: 0x80072ee2
2008-05-06 14:17:17:359 1104 358 PT WARNING: GetConfig_WithRecovery failed:
0x80072ee2
2008-05-06 14:17:17:359 1104 358 PT WARNING: RefreshConfig failed:
0x80072ee2
2008-05-06 14:17:17:359 1104 358 PT WARNING: RefreshPTState failed:
0x80072ee2
2008-05-06 14:17:17:359 1104 358 PT WARNING: Sync of Updates: 0x80072ee2
2008-05-06 14:17:17:359 1104 358 PT WARNING: SyncServerUpdatesInternal
failed: 0x80072ee2
2008-05-06 14:17:17:359 1104 358 Agent * WARNING: Failed to synchronize,
error = 0x80072EE2
2008-05-06 14:17:17:421 1104 358 Agent * WARNING: Exit code = 0x80072EE2
2008-05-06 14:17:17:421 1104 358 Agent *********
2008-05-06 14:17:17:421 1104 358 Agent ** END ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2008-05-06 14:17:17:421 1104 358 Agent *************
2008-05-06 14:17:17:421 1104 358 Agent WARNING: WU client failed Searching
for update with error 0x80072ee2
2008-05-06 14:17:17:421 1104 220 AU >>## RESUMED ## AU: Search for updates
[CallId = {1AF16421-9DDC-4B66-B9A9-2AB0BD33820E}]
2008-05-06 14:17:17:421 1104 220 AU # WARNING: Search callback failed,
result = 0x80072EE2
2008-05-06 14:17:17:421 1104 220 AU # WARNING: Failed to find updates with
error code 80072EE2
2008-05-06 14:17:17:421 1104 220 AU #########
2008-05-06 14:17:17:421 1104 220 AU ## END ## AU: Search for updates
[CallId = {1AF16421-9DDC-4B66-B9A9-2AB0BD33820E}]
2008-05-06 14:17:17:421 1104 220 AU #############
2008-05-06 14:17:17:421 1104 220 AU AU setting next detection timeout to
2008-05-06 20:15:38

does this help?


"Mario McGuire" <mariom...@theorsinigroup.com> wrote in message

news:OVyZFw4r...@TK2MSFTNGP03.phx.gbl...

DaveMills

unread,
May 9, 2008, 1:40:12 AM5/9/08
to
As this is an "intranet" IIS check the NTFS permissions on the INETPUP folder
tree have not been set to "Users" instead of "Authenticated Users" (or
Everyone). This would allow people access but not computers.

Dave Mills
There are 10 type of people, those that understand binary and those that don't.

Lawrence Garvin [MVP]

unread,
May 10, 2008, 2:03:27 PM5/10/08
to
"Mario McGuire" <mariom...@theorsinigroup.com> wrote in message
news:OVyZFw4r...@TK2MSFTNGP03.phx.gbl...

>>> 2008-05-05 08:53:01 W3SVC1 xxx.xxx.xxx.xxx HEAD /selfupdate/wuident.cab
>>> 0805050852 8530 - 000.000.000.000 Windows-Update-Agent 401 2 2148074254

>> HTTP '401' (Access Denied) to IP Address attempting to access
>> ~/selfupdate/wuident.cab.

>>> 2008-05-05 08:53:01 W3SVC1 xxx.xxx.xxx.xxx HEAD

>>> /selfupdate/WSUS3/x86/Other/wsus3setup.cab 0805050852 8530 -
>>> 000.000.000.000 Windows-Update-Agent 401 2 2148074254

>> HTTP '401' (Access Denied) to IP Address attempting to access
>> ~/selfupdate/WSUS3/x86/Other/wsus3setup.cab

>> The most likely cause of the above is that Anonymous Access is disabled

>> on the /selfupdate virtual directory, but since Integrated Authentication
>> is enabled and the client machine is a member of the same domain as the
>> WSUS Server, IIS is able to authenticate the =machine= via Active
>> Directory.

> I've got to be honest, this is getting frustrating... I do really
> apprecieate all of your suggestions.
>
> The Diag tool comes back fine, also I changed my port back to 80 and as
> far as I can tell this is working fine..

> Checking Connection to WSUS/SUS Server


> WUServer = http://server5:80
> WUStatusServer = http://server5:80
> UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
> Connection to server. . . . . . . . . . . . . . . . . . PASS
> SelfUpdate folder is present. . . . . . . . . . . . . . PASS


That's great! Did you enable Anonymous Access on the "WSUS Administration"
/selfupdate virtual directory like I suggested?

Mario McGuire

unread,
May 12, 2008, 4:15:45 PM5/12/08
to
I reinstalled WSUS again but I made a virtual Website, and it worked
like a charm, It must have been trying to share something with my intranet.
All is well now, the machines are updating, now I just need to figure out
the GP to make it install automatically.

Thank you again for all of your help and suggestions.

Mario McGuire

"Mario McGuire" <mariom...@theorsinigroup.com> wrote in message

news:eEnVbn6q...@TK2MSFTNGP02.phx.gbl...

0 new messages