Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

My server won't report its own WSUS status - help please!

1,067 views
Skip to first unread message

Tony Josephs

unread,
Feb 8, 2006, 12:12:17 PM2/8/06
to
Over the weekend, I followed the step by step (version 2) white paper on
installing
WSUS on SBS2003 premium. All went well, the instructions are simple and
easy to follow. However, while two of my clients machines have "checked in"
their status with WSUS, the SBS server seems to be unable to check in its
own status, ie the SBS server hasn't reported to WSUS which patches it has
installed and therefore which ones it might need applying.

I get the error "Error: Agent failed detecting with reason: 0x80244021".

My simple diagnostics

- ISA 2004 allows updates through
- synchronisation works repeatedly
- have granted access to clientwebservices under IP address and domain name
restrictions
- GPO setting for Automatic Update have been set

Any thoughts?

TIA

Tony


Lawrence Garvin (MVP)

unread,
Feb 9, 2006, 1:27:04 AM2/9/06
to
The SBS server is housed in the "Domain Controllers" OU, and you need to be
sure to link a WSUS GPO to that OU. This is the most common cause for a
WSUS server to not register with itself.

However, your 0x80244021 error is an HTTP '502' error. You state that this
SBS2003 /Premium/ system also has ISA2004 installed So, you will need to
create an access rule that allows the "Local Host" to have access to the web
server on port 8530.

"Tony Josephs" <nocrap2to...@hotmail.com> wrote in message
news:%23nueULN...@TK2MSFTNGP11.phx.gbl...

Tony Josephs

unread,
Feb 10, 2006, 2:41:11 PM2/10/06
to
Lawrence

thank you for your help. Unfortunately, in my case this did not work. So I
did some more digging and found the following being reported in my
windowsupdate.log whenever I ran wuauclt.exe /detectnow or it ran itself on
the schedule setup by WSUS.

2006-02-10 16:39:40 1432 1734 AU #############
2006-02-10 16:39:40 1432 1734 AU ## START ## AU: Search for updates
2006-02-10 16:39:40 1432 1734 AU #########
2006-02-10 16:39:40 1432 1734 AU <<## SUBMITTED ## AU: Search for updates
[CallId = {9CBAEADF-094F-41F0-B3CF-93A0CCFCAF6E}]
2006-02-10 16:39:40 1432 5a8 Agent *************
2006-02-10 16:39:40 1432 5a8 Agent ** START ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2006-02-10 16:39:40 1432 5a8 Agent *********
2006-02-10 16:39:44 1432 5a8 Setup *********** Setup: Checking whether
self-update is required ***********
2006-02-10 16:39:44 1432 5a8 Setup * Inf file:
C:\WINNT\SoftwareDistribution\SelfUpdate\Default\wusetup.inf
2006-02-10 16:39:44 1432 5a8 Setup Update NOT required for
C:\WINNT\system32\cdm.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-02-10 16:39:44 1432 5a8 Setup Update NOT required for
C:\WINNT\system32\iuengine.dll: target version = 5.8.0.2469, required
version = 5.8.0.2469
2006-02-10 16:39:44 1432 5a8 Setup Update NOT required for
C:\WINNT\system32\wuapi.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-02-10 16:39:44 1432 5a8 Setup Update NOT required for
C:\WINNT\system32\wuauclt.exe: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-02-10 16:39:44 1432 5a8 Setup Update NOT required for
C:\WINNT\system32\wuauclt1.exe: target version = 5.8.0.2469, required
version = 5.8.0.2469
2006-02-10 16:39:44 1432 5a8 Setup Update NOT required for
C:\WINNT\system32\wuaucpl.cpl: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-02-10 16:39:44 1432 5a8 Setup Update NOT required for
C:\WINNT\system32\wuaueng.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-02-10 16:39:44 1432 5a8 Setup Update NOT required for
C:\WINNT\system32\wuaueng1.dll: target version = 5.8.0.2469, required
version = 5.8.0.2469
2006-02-10 16:39:44 1432 5a8 Setup Update NOT required for
C:\WINNT\system32\wucltui.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-02-10 16:39:44 1432 5a8 Setup Update NOT required for
C:\WINNT\system32\wups.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-02-10 16:39:44 1432 5a8 Setup Update NOT required for
C:\WINNT\system32\wups2.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-02-10 16:39:44 1432 5a8 Setup Update NOT required for
C:\WINNT\system32\wuweb.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-02-10 16:39:44 1432 5a8 Setup * IsUpdateRequired = No
2006-02-10 16:39:46 1432 5a8 PT +++++++++++ PT: Synchronizing server
updates +++++++++++
2006-02-10 16:39:46 1432 5a8 PT + ServiceId =
{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
http://myserver:8530/ClientWebService/client.asmx
2006-02-10 16:39:47 1432 5a8 PT Initializing simple targeting cookie,
clientId = 59342fb6-798e-4d7d-957d-c7015701f96c, target group = , DNS name =
myserver.domain.local
2006-02-10 16:39:47 1432 5a8 PT Server URL =
http://myserver:8530/SimpleAuthWebService/SimpleAuth.asmx
2006-02-10 16:40:03 1432 5a8 PT WARNING: GetCookie failure, error =
0x80244021, soap client error = 10, soap error code = 0, HTTP status code =
502
2006-02-10 16:40:03 1432 5a8 PT WARNING: Sync of Updates: 0x80244021
2006-02-10 16:40:03 1432 5a8 Agent * WARNING: Failed to synchronize, error
= 0x80244021
2006-02-10 16:40:03 1432 5a8 Agent * WARNING: Exit code = 0x80244021
2006-02-10 16:40:03 1432 5a8 Agent *********
2006-02-10 16:40:03 1432 5a8 Agent ** END ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2006-02-10 16:40:03 1432 5a8 Agent *************
2006-02-10 16:40:03 1432 5a8 Agent WARNING: WU client failed Searching for
update with error 0x80244021
2006-02-10 16:40:03 1432 5a8 AU >>## RESUMED ## AU: Search for updates
[CallId = {9CBAEADF-094F-41F0-B3CF-93A0CCFCAF6E}]
2006-02-10 16:40:03 1432 5a8 AU # WARNING: Search callback failed, result
= 0x80244021
2006-02-10 16:40:03 1432 5a8 AU #########
2006-02-10 16:40:03 1432 5a8 AU ## END ## AU: Search for updates [CallId
= {9CBAEADF-094F-41F0-B3CF-93A0CCFCAF6E}]
2006-02-10 16:40:03 1432 5a8 AU #############

My warped brain saw "cookie error" and thought there must be something wrong
with IE on the server not being able to accept cookies. So I added my
http://myserver to IE on the "local intranet" security setting and it cured
the problem straight away.

2006-02-10 18:22:19 1432 1734 AU #############
2006-02-10 18:22:19 1432 1734 AU ## START ## AU: Search for updates
2006-02-10 18:22:19 1432 1734 AU #########
2006-02-10 18:22:19 1432 1734 AU <<## SUBMITTED ## AU: Search for updates
[CallId = {3B57D652-8602-4F38-8129-64797A20E491}]
2006-02-10 18:22:19 1432 5a8 Agent *************
2006-02-10 18:22:19 1432 5a8 Agent ** START ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2006-02-10 18:22:19 1432 5a8 Agent *********
2006-02-10 18:22:31 1432 5a8 Setup *********** Setup: Checking whether
self-update is required ***********
2006-02-10 18:22:31 1432 5a8 Setup * Inf file:
C:\WINNT\SoftwareDistribution\SelfUpdate\Default\wusetup.inf
2006-02-10 18:22:31 1432 5a8 Setup Update NOT required for
C:\WINNT\system32\cdm.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-02-10 18:22:31 1432 5a8 Setup Update NOT required for
C:\WINNT\system32\iuengine.dll: target version = 5.8.0.2469, required
version = 5.8.0.2469
2006-02-10 18:22:31 1432 5a8 Setup Update NOT required for
C:\WINNT\system32\wuapi.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-02-10 18:22:31 1432 5a8 Setup Update NOT required for
C:\WINNT\system32\wuauclt.exe: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-02-10 18:22:31 1432 5a8 Setup Update NOT required for
C:\WINNT\system32\wuauclt1.exe: target version = 5.8.0.2469, required
version = 5.8.0.2469
2006-02-10 18:22:31 1432 5a8 Setup Update NOT required for
C:\WINNT\system32\wuaucpl.cpl: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-02-10 18:22:31 1432 5a8 Setup Update NOT required for
C:\WINNT\system32\wuaueng.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-02-10 18:22:31 1432 5a8 Setup Update NOT required for
C:\WINNT\system32\wuaueng1.dll: target version = 5.8.0.2469, required
version = 5.8.0.2469
2006-02-10 18:22:31 1432 5a8 Setup Update NOT required for
C:\WINNT\system32\wucltui.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-02-10 18:22:31 1432 5a8 Setup Update NOT required for
C:\WINNT\system32\wups.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-02-10 18:22:31 1432 5a8 Setup Update NOT required for
C:\WINNT\system32\wups2.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-02-10 18:22:31 1432 5a8 Setup Update NOT required for
C:\WINNT\system32\wuweb.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-02-10 18:22:31 1432 5a8 Setup * IsUpdateRequired = No
2006-02-10 18:22:32 1432 5a8 PT +++++++++++ PT: Synchronizing server
updates +++++++++++
2006-02-10 18:22:32 1432 5a8 PT + ServiceId =
{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
http://myserver:8530/ClientWebService/client.asmx
2006-02-10 18:22:33 1432 5a8 PT Initializing simple targeting cookie,
clientId = 59342fb6-798e-4d7d-957d-c7015701f96c, target group = , DNS name =
myserver.domain.local
2006-02-10 18:22:33 1432 5a8 PT Server URL =
http://mysever:8530/SimpleAuthWebService/SimpleAuth.asmx
2006-02-10 18:22:50 1432 5a8 PT +++++++++++ PT: Synchronizing extended
update info +++++++++++
2006-02-10 18:22:50 1432 5a8 PT + ServiceId =
{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
http://myserver:8530/ClientWebService/client.asmx
2006-02-10 18:22:55 1432 5a8 Agent * Found 0 updates and 13 categories in
search
2006-02-10 18:22:55 1432 5a8 Agent *********
2006-02-10 18:22:55 1432 5a8 Agent ** END ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2006-02-10 18:22:55 1432 5a8 Agent *************
2006-02-10 18:22:55 1432 5a8 AU >>## RESUMED ## AU: Search for updates
[CallId = {3B57D652-8602-4F38-8129-64797A20E491}]
2006-02-10 18:22:55 1432 5a8 AU # 0 updates detected
2006-02-10 18:22:55 1432 5a8 AU #########
2006-02-10 18:22:55 1432 5a8 AU ## END ## AU: Search for updates [CallId
= {3B57D652-8602-4F38-8129-64797A20E491}]
2006-02-10 18:22:55 1432 5a8 AU #############


FYI https://myserver was already under the "local intranet" setting. I
suspect that if I had set up WSUS to work under https and SSL as the front
page of WSUS keeps telling me to, I would not have seen this problem.

PS my server was already linked to the WSUS GPO thoughe the "Enterprise
Domain Controllers" OU.

Thank you for your help. Hope this helps some others.


Tony


"Lawrence Garvin (MVP)" <onsi...@news.postalias> wrote in message
news:OqJ7fHUL...@TK2MSFTNGP12.phx.gbl...

Lawrence Garvin (MVP)

unread,
Feb 13, 2006, 6:02:09 PM2/13/06
to
2006-02-10 16:40:03 1432 5a8 PT WARNING: GetCookie failure, error =
0x80244021, soap client error = 10, soap error code = 0, HTTP status code =
502

It's still an 0x80244021 error code, and the cause has not changed.
HTTP '502', and there's a pretty short list of causes.

"Tony Josephs" <nocrap2to...@hotmail.com> wrote in message

news:OG2P2nnL...@TK2MSFTNGP09.phx.gbl...

Tony Josephs

unread,
Feb 17, 2006, 5:39:47 AM2/17/06
to
Lawrence


that you for your email and guess what? the 0x80244021 error has reoccurred
again.

So I am back in your hands. I have done two things since we last spoke

1 installed ISA 2004 SP2 and created the WSUS cache rule as directed
2 reinstated what I think is the correct implementation of the local host
rule you mentioned before where I added http://myservername:8530 in the "TO"
of the SBS localhost access rule. Is this correct?

Also, since my server is unable to check in with WSUS I have had to apply
the recent updates directly from the windows update site. This is
successful just waiting for a reboot window now.


Can you direct me to a list of thee likely causes for the 502 so I might try
to solve the problem.

PS all my (other ) 8 XP clients are checking in, and being updated by WSUS.
So no problem there.


TIA


Tony

"Lawrence Garvin (MVP)" <onsi...@news.postalias> wrote in message

news:ukEzFGPM...@TK2MSFTNGP12.phx.gbl...

Tony Josephs

unread,
Feb 17, 2006, 12:04:20 PM2/17/06
to
Lawrence

here is my clientdiag file output, it might help

WSUS Client Diagnostics Tool

Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is running. . . PASS
Wuaueng.dll version 5.8.0.2469. . . . . . . . . . . . . PASS
This version is WSUS 2.0

Checking AU Settings
AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
Option is from Policy settings

Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Using Proxy>
Winhttp local machine Proxy
MYSERVER:8080
Winhttp local machine ProxyBypass. . . . . . . PASS
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy
MYSERVER:8080
User IE ProxyByPass
*.fif.org.uk;*.amazonpr.co.uk;*.enterpriseforall.info;<local>
User IE AutoConfig URL Proxy . . . . . . . . . PASS
User IE AutoDetect
AutoDetect not in use

Checking Connection to WSUS/SUS Server
WUServer = http://myserver:8530
WUStatusServer = http://myserver:8530
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
Connection to server. . . . . . . . . . . . . . . . . . PASS
SelfUpdate folder is present. . . . . . . . . . . . . . PASS


"Tony Josephs" <nocrap2to...@hotmail.com> wrote in message

news:OK9L%2356MG...@TK2MSFTNGP15.phx.gbl...

Lawrence Garvin

unread,
Feb 17, 2006, 7:57:10 PM2/17/06
to
Two things of interest here, Tony.

One, the WUA/CDT is not having a problem talking to your WSUS Server on port
8530, as evidenced by these results from the CDT:


> Checking Connection to WSUS/SUS Server
> WUServer = http://myserver:8530
> WUStatusServer = http://myserver:8530
> UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
> Connection to server. . . . . . . . . . . . . . . . . . PASS
> SelfUpdate folder is present. . . . . . . . . . . . . . PASS

The second is an inconsistency in your proxy configuration. In your IE proxy
configuration, you have bypasses configured for <local>, and specified
domains.


> Checking User IE Proxy settings . . . . . . . . . . . . PASS
> User IE Proxy
> MYSERVER:8080
> User IE ProxyByPass
> *.fif.org.uk;*.amazonpr.co.uk;*.enterpriseforall.info;<local>
> User IE AutoConfig URL Proxy . . . . . . . . . PASS
> User IE AutoDetect
> AutoDetect not in use

However, the WinHTTP proxy does not have any bypasses configured.


> Checking Proxy Configuration
> Checking for winhttp local machine Proxy settings . . . PASS
> Winhttp local machine access type
> <Using Proxy>
> Winhttp local machine Proxy
> MYSERVER:8080
> Winhttp local machine ProxyBypass. . . . . . . PASS

I suspect that the WUA is sending the requests to your proxy server, and the
proxy server either doesn't know, or won't permit, access to the WSUS
server.

Try cloning your IE configuration to WinHTTP using the command
'proxycfg -u', and then initiate another detection cycle and monitor the log
output.


"Tony Josephs" <nocrap2to...@hotmail.com> wrote in message

news:%23%23A40Q%23MGH...@tk2msftngp13.phx.gbl...

Tony Josephs

unread,
Feb 18, 2006, 3:49:31 AM2/18/06
to
Lawrence

first thank you for your patience, the MVPs do an excellent job and are
definitely appreciated by all us users. I did the proxycfg -u as suggested
and I got the following :


WSUS Client Diagnostics Tool

Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is running. . . PASS
Wuaueng.dll version 5.8.0.2469. . . . . . . . . . . . . PASS
This version is WSUS 2.0

Checking AU Settings
AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
Option is from Policy settings

Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Using Proxy>
Winhttp local machine Proxy
MYSERVER:8080
Winhttp local machine ProxyBypass

*.fif.org.uk;*.amazonpr.co.uk;*.enterpriseforall.info;<local>


Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy
MYSERVER:8080
User IE ProxyByPass
*.fif.org.uk;*.amazonpr.co.uk;*.enterpriseforall.info;<local>
User IE AutoConfig URL Proxy . . . . . . . . . PASS
User IE AutoDetect
AutoDetect not in use

Checking Connection to WSUS/SUS Server

WUServer = http://MYSERVER:8530
WUStatusServer = http://MYSERVER:8530


UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
Connection to server. . . . . . . . . . . . . . . . . . PASS
SelfUpdate folder is present. . . . . . . . . . . . . . PASS

Which looks much better in the consistencies of the Winhttp and IE proxy
settings. I then ran the wuauclt /detectnow and got the following from the
log


2006-02-18 08:28:54 1612 1904 AU Triggering AU detection through DetectNow
API
2006-02-18 08:28:54 1612 1018 AU #############
2006-02-18 08:28:54 1612 1018 AU ## START ## AU: Search for updates
2006-02-18 08:28:54 1612 1018 AU #########
2006-02-18 08:28:54 1612 1018 AU <<## SUBMITTED ## AU: Search for updates
[CallId = {11E43C96-DFF3-4963-B9AB-C7DD34C73994}]
2006-02-18 08:28:54 1612 1e08 Agent *************
2006-02-18 08:28:54 1612 1e08 Agent ** START ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2006-02-18 08:28:54 1612 1e08 Agent *********
2006-02-18 08:28:54 1612 1e08 Setup *********** Setup: Checking whether
self-update is required ***********
2006-02-18 08:28:54 1612 1e08 Setup * Inf file:

C:\WINNT\SoftwareDistribution\SelfUpdate\Default\wusetup.inf

2006-02-18 08:28:54 1612 1e08 Setup Update NOT required for

C:\WINNT\system32\cdm.dll: target version = 5.8.0.2469, required version =
5.8.0.2469

2006-02-18 08:28:54 1612 1e08 Setup Update NOT required for

C:\WINNT\system32\iuengine.dll: target version = 5.8.0.2469, required
version = 5.8.0.2469

2006-02-18 08:28:54 1612 1e08 Setup Update NOT required for

C:\WINNT\system32\wuapi.dll: target version = 5.8.0.2469, required version =
5.8.0.2469

2006-02-18 08:28:54 1612 1e08 Setup Update NOT required for

C:\WINNT\system32\wuauclt.exe: target version = 5.8.0.2469, required version
= 5.8.0.2469

2006-02-18 08:28:54 1612 1e08 Setup Update NOT required for

C:\WINNT\system32\wuauclt1.exe: target version = 5.8.0.2469, required
version = 5.8.0.2469

2006-02-18 08:28:54 1612 1e08 Setup Update NOT required for

C:\WINNT\system32\wuaucpl.cpl: target version = 5.8.0.2469, required version
= 5.8.0.2469

2006-02-18 08:28:54 1612 1e08 Setup Update NOT required for

C:\WINNT\system32\wuaueng.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469

2006-02-18 08:28:54 1612 1e08 Setup Update NOT required for

C:\WINNT\system32\wuaueng1.dll: target version = 5.8.0.2469, required
version = 5.8.0.2469

2006-02-18 08:28:54 1612 1e08 Setup Update NOT required for

C:\WINNT\system32\wucltui.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469

2006-02-18 08:28:54 1612 1e08 Setup Update NOT required for

C:\WINNT\system32\wups.dll: target version = 5.8.0.2469, required version =
5.8.0.2469

2006-02-18 08:28:54 1612 1e08 Setup Update NOT required for

C:\WINNT\system32\wups2.dll: target version = 5.8.0.2469, required version =
5.8.0.2469

2006-02-18 08:28:54 1612 1e08 Setup Update NOT required for

C:\WINNT\system32\wuweb.dll: target version = 5.8.0.2469, required version =
5.8.0.2469

2006-02-18 08:28:54 1612 1e08 Setup * IsUpdateRequired = No
2006-02-18 08:28:56 1612 1e08 PT +++++++++++ PT: Synchronizing server
updates +++++++++++
2006-02-18 08:28:56 1612 1e08 PT + ServiceId =

{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =

http://MYSERVER:8530/ClientWebService/client.asmx
2006-02-18 08:28:57 1612 1e08 PT Initializing simple targeting cookie,

clientId = 59342fb6-798e-4d7d-957d-c7015701f96c, target group = , DNS name =

MYSERVER.MYDOMAIN.local
2006-02-18 08:28:57 1612 1e08 PT Server URL =
http://MYSERVER:8530/SimpleAuthWebService/SimpleAuth.asmx
2006-02-18 08:29:01 1612 1e08 PT +++++++++++ PT: Synchronizing extended
update info +++++++++++
2006-02-18 08:29:01 1612 1e08 PT + ServiceId =

{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =

http://MYSERVER:8530/ClientWebService/client.asmx
2006-02-18 08:29:02 1612 1e08 Agent * Added update
{4B0F3F28-6DB6-4BF1-87B1-693E51AC7F3A}.100 to search result
2006-02-18 08:29:02 1612 1e08 Agent * Found 1 updates and 16 categories in
search
2006-02-18 08:29:02 1612 1e08 Report *********** Report: Initializing
static reporting data ***********
2006-02-18 08:29:02 1612 1e08 Report * OS Version = 5.2.3790.1.0.131377
2006-02-18 08:29:02 1612 1e08 Report * Computer Brand = Dell Computer
Corporation
2006-02-18 08:29:02 1612 1e08 Report * Computer Model = PowerEdge 1600SC
2006-02-18 08:29:02 1612 1e08 Report * Bios Revision = A12
2006-02-18 08:29:02 1612 1e08 Report * Bios Name = Phoenix ROM BIOS PLUS
Version 1.10 A12
2006-02-18 08:29:02 1612 1e08 Report * Bios Release Date =
2004-10-19T00:00:00
2006-02-18 08:29:02 1612 1e08 Report * Locale ID = 1033
2006-02-18 08:29:02 1612 1e08 Agent *********
2006-02-18 08:29:02 1612 1e08 Agent ** END ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2006-02-18 08:29:02 1612 1e08 Agent *************
2006-02-18 08:29:02 1612 1e08 AU >>## RESUMED ## AU: Search for updates
[CallId = {11E43C96-DFF3-4963-B9AB-C7DD34C73994}]
2006-02-18 08:29:02 1612 1e08 AU # 1 updates detected
2006-02-18 08:29:02 1612 1e08 AU #########
2006-02-18 08:29:02 1612 1e08 AU ## END ## AU: Search for updates [CallId
= {11E43C96-DFF3-4963-B9AB-C7DD34C73994}]
2006-02-18 08:29:02 1612 1e08 AU #############
2006-02-18 08:29:02 1612 1e08 AU AU setting next detection timeout to
2006-02-19 04:20:05
2006-02-18 08:29:02 1612 1e08 AU #############
2006-02-18 08:29:02 1612 1e08 AU ## START ## AU: Download updates
2006-02-18 08:29:02 1612 1e08 AU #########
2006-02-18 08:29:02 1612 1e08 AU # Approved updates = 1
2006-02-18 08:29:02 1612 1e08 AU AU initiated download, updateId =
{4B0F3F28-6DB6-4BF1-87B1-693E51AC7F3A}.100, callId =
{33147351-A6C0-4B8E-8B46-5CDD0FC0EB8D}
2006-02-18 08:29:02 1612 1e08 AU AU setting pending client directive to
'Download Progress'
2006-02-18 08:29:02 1612 1fa8 DnldMgr *************
2006-02-18 08:29:02 1612 1fa8 DnldMgr ** START ** DnldMgr: Downloading
updates [CallerId = AutomaticUpdates]
2006-02-18 08:29:02 1612 1fa8 DnldMgr *********
2006-02-18 08:29:02 1612 1fa8 DnldMgr * Priority = 2, ServiceId =
{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}
2006-02-18 08:29:02 1612 1fa8 DnldMgr * Updates to download = 1
2006-02-18 08:29:02 1612 1fa8 Agent * Title = Update for Windows Server
2003 (KB908521)
2006-02-18 08:29:02 1612 1fa8 Agent * UpdateId =
{4B0F3F28-6DB6-4BF1-87B1-693E51AC7F3A}.100
2006-02-18 08:29:02 1612 1fa8 Agent * Bundles 1 updates:
2006-02-18 08:29:02 1612 1fa8 Agent *
{7649730C-66FF-434B-92B1-EE00E9AAE679}.100
2006-02-18 08:29:02 1612 1e08 AU # Pending download calls = 1
2006-02-18 08:29:02 1612 1e08 AU <<## SUBMITTED ## AU: Download updates
2006-02-18 08:29:02 1612 1fa8 PT +++++++++++ PT: Synchronizing file
locations +++++++++++
2006-02-18 08:29:02 1612 1fa8 PT + ServiceId =

{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =

http://MYSERVER:8530/ClientWebService/client.asmx
2006-02-18 08:29:02 1612 1fa8 DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-02-18 08:29:02 1612 1fa8 DnldMgr *********** DnldMgr: New download job
[UpdateId = {7649730C-66FF-434B-92B1-EE00E9AAE679}.100] ***********
2006-02-18 08:29:02 1612 1fa8 DnldMgr * Queueing update for download
handler request generation.
2006-02-18 08:29:02 1612 1fa8 DnldMgr Generating download request for update
{7649730C-66FF-434B-92B1-EE00E9AAE679}.100
2006-02-18 08:29:02 1612 1fa8 Handler Windows Patch download for UpdateId =
{7649730C-66FF-434B-92B1-EE00E9AAE679}: selected action is download
full-file.
2006-02-18 08:29:02 1612 1fa8 DnldMgr *********** DnldMgr: New download job
[UpdateId = {7649730C-66FF-434B-92B1-EE00E9AAE679}.100] ***********
2006-02-18 08:29:02 1612 1fa8 DnldMgr * BITS job initialized, JobId =
{FC69A680-49AD-432A-BD41-409AA675176F}
2006-02-18 08:29:02 1612 1fa8 DnldMgr BITS job
{FC69A680-49AD-432A-BD41-409AA675176F} using proxy = MYSERVER:8080, bypass =
*.fif.org.uk;*.amazonpr.co.uk;*.enterpriseforall.info;<local>
2006-02-18 08:29:02 1612 1fa8 DnldMgr * Downloading from
http://MYSERVER:8530/Content/C6/1ECC47A854C36D42B964D60A71300DD94E4E70C6.exe
to
C:\WINNT\SoftwareDistribution\Download\S-1-5-18\e42833de3ec61a7358e3a7c8bf5a87f2\WindowsServer2003-KB908521-x86-ENU.exe
(full file).
2006-02-18 08:29:03 1612 1fa8 Agent *********
2006-02-18 08:29:03 1612 1fa8 Agent ** END ** Agent: Downloading updates
[CallerId = AutomaticUpdates]
2006-02-18 08:29:03 1612 1fa8 Agent *************
2006-02-18 08:29:07 1612 1fa8 Report REPORT EVENT:
{E4C847F0-15A6-48B3-A22B-353CF03BA4EE} 2006-02-18 08:29:02-0000 1 147 101
{00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Software
Synchronization Agent has finished detecting items.
2006-02-18 08:29:07 1612 1fa8 Report REPORT EVENT:
{7AA2E223-2B21-4310-9B29-E6BDF4175F96} 2006-02-18 08:29:02-0000 1 153 101
{00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success
Pre-Deployment Check Reporting client status.
2006-02-18 08:29:16 1612 1018 AU AU found 1 sessions to launch client into
2006-02-18 08:29:16 1612 1018 AU Launched new AU client for directive
'Download Progress', session id = 0x1
2006-02-18 08:29:16 7136 19ac Misc =========== Logging initialized (build:
5.8.0.2469, tz: -0000) ===========
2006-02-18 08:29:16 7136 19ac Misc = Process:
C:\WINNT\system32\wuauclt.exe
2006-02-18 08:29:16 7136 19ac AUClnt Launched Client UI process
2006-02-18 08:29:16 7136 19ac AUClnt AU client got new directive = 'Download
Progress', serviceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, return =
0x00000000
2006-02-18 08:29:16 7136 19ac AUClnt AU client creating default WU/WSUS UI
plugin
2006-02-18 08:29:16 1612 1964 AU AU setting client response for sessionId
0x1 to 'Pending'
2006-02-18 08:29:21 1612 1eb8 DnldMgr BITS job
{FC69A680-49AD-432A-BD41-409AA675176F} completed successfully
2006-02-18 08:29:22 1612 1eb8 DnldMgr Download job bytes total = 832240,
bytes transferred = 0
2006-02-18 08:29:22 1612 1eb8 DnldMgr *********** DnldMgr: New download job
[UpdateId = {7649730C-66FF-434B-92B1-EE00E9AAE679}.100] ***********
2006-02-18 08:29:22 1612 1eb8 DnldMgr * Queueing update for download
handler request generation.
2006-02-18 08:29:22 1612 1eb8 DnldMgr Generating download request for update
{7649730C-66FF-434B-92B1-EE00E9AAE679}.100
2006-02-18 08:29:22 1612 1eb8 Handler Windows Patch download for UpdateId =
{7649730C-66FF-434B-92B1-EE00E9AAE679}: selected action is download
full-file.
2006-02-18 08:29:23 1612 1eb8 DnldMgr *********** DnldMgr: New download job
[UpdateId = {7649730C-66FF-434B-92B1-EE00E9AAE679}.100] ***********
2006-02-18 08:29:23 1612 1eb8 DnldMgr * All files for update were already
downloaded and are valid.
2006-02-18 08:29:23 1612 1eb8 DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-02-18 08:29:23 1612 1e08 AU >>## RESUMED ## AU: Download update
[UpdateId = {4B0F3F28-6DB6-4BF1-87B1-693E51AC7F3A}, succeeded]
2006-02-18 08:29:23 1612 1e08 AU #########
2006-02-18 08:29:23 1612 1e08 AU ## END ## AU: Download updates
2006-02-18 08:29:23 1612 1e08 AU #############
2006-02-18 08:29:23 1612 1e08 AU AU setting pending client directive to
'Install Approval'
2006-02-18 08:29:23 1612 1e08 AU Changing existing AU client directive from
'Download Progress' to 'Install Approval', session id = 0x1
2006-02-18 08:29:23 7136 19ac AUClnt AU client got new directive = 'Install
Approval', serviceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, return =
0x00000000
2006-02-18 08:29:23 7136 19ac AUClnt AU client creating default WU/WSUS UI
plugin
2006-02-18 08:29:23 1612 1964 AU AU setting client response for sessionId
0x1 to 'Pending'
2006-02-18 08:29:28 1612 1e08 Report REPORT EVENT:
{D81E8952-A4BD-405C-AC98-A6B6673EDB09} 2006-02-18 08:29:23-0000 1 162 101
{4B0F3F28-6DB6-4BF1-87B1-693E51AC7F3A} 100 0 AutomaticUpdates Success
Content Download Download succeeded.
2006-02-18 08:29:28 1612 1e08 Report REPORT EVENT:
{E121A177-C64D-4FF0-9514-891C3EF2EB4B} 2006-02-18 08:29:23-0000 1 188 102
{00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Content
Install Installation Ready: The following updates are downloaded and ready
for installation. This computer is currently scheduled to install these
updates on Saturday, February 18, 2006 at 12:00 PM: - Update for Windows
Server 2003 (KB908521)
2006-02-18 08:32:23 1612 1018 AU AU setting pending client directive to
'Install Approval'
2006-02-18 08:32:23 7136 19ac AUClnt AU client got new directive =
'Shutdown', serviceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, return =
0x00000000
2006-02-18 08:32:37 1612 1018 AU WARNING: AU found no suitable session to
launch client in
2006-02-18 08:36:00 1612 1018 AU AU found 1 sessions to launch client into
2006-02-18 08:36:00 1612 1018 AU Launched new AU client for directive
'Install Approval', session id = 0x1
2006-02-18 08:36:00 4488 1308 Misc =========== Logging initialized (build:
5.8.0.2469, tz: -0000) ===========
2006-02-18 08:36:00 4488 1308 Misc = Process:
C:\WINNT\system32\wuauclt.exe
2006-02-18 08:36:00 4488 1308 AUClnt Launched Client UI process
2006-02-18 08:36:00 4488 1308 AUClnt AU client got new directive = 'Install
Approval', serviceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, return =
0x00000000
2006-02-18 08:36:00 4488 1308 AUClnt AU client creating default WU/WSUS UI
plugin
2006-02-18 08:36:01 1612 12c0 AU AU setting client response for sessionId
0x1 to 'Pending'

I now have a server checking in to WSUS correctly and an update pending
installation. Superb. I think my next step might be to have a separate
download only GPO for the server so that I can install its updates under
control (details are in the SBS newsgroup).

With reference to your other SBS gotcha's

1 GPO link to SBS server - OK
2 Proxy config - now OK, thanks to you
3 ISA2004 localhost rule - WSUS on same server as SBS so I don't think I
need this bit.

Let me know if you spot anything else. Thank you once again.

Tony

"Lawrence Garvin" <onsitech...@news.postalias> wrote in message
news:uDcTbcCN...@TK2MSFTNGP14.phx.gbl...

Lawrence Garvin

unread,
Feb 18, 2006, 1:04:06 PM2/18/06
to

"Tony Josephs" <nocrap2to...@hotmail.com> wrote in message
news:e0v2$gGNGH...@TK2MSFTNGP11.phx.gbl...

> Lawrence
>
> first thank you for your patience, the MVPs do an excellent job and are
> definitely appreciated by all us users. I did the proxycfg -u as
> suggested and I got the following :

<CDT Output Deleted>

> Which looks much better in the consistencies of the Winhttp and IE proxy
> settings. I then ran the wuauclt /detectnow and got the following from
> the log

<WindowsUpdate.log deleted>

> I now have a server checking in to WSUS correctly and an update pending
> installation. Superb.

Congratulations!

> I think my next step might be to have a separate download only GPO for
> the server so that I can install its updates under control (details are in
> the SBS newsgroup).

Absolutely. The general consensus is that the best configuration for servers
is to use Option #3, and install the updates under supervision of an
administrator via the local console (actually I use RDC to manage all of my
servers -- that works well.)

> With reference to your other SBS gotcha's
>
> 1 GPO link to SBS server - OK
> 2 Proxy config - now OK, thanks to you
> 3 ISA2004 localhost rule - WSUS on same server as SBS so I don't think
> I need this bit.

No, if WSUS is on the SBS2003 system, the ISA rule is not needed. The rule
is only needed if the SBS needs to access a resource 'external' to the SBS
system.

> Let me know if you spot anything else. Thank you once again.

Looks good to me, Tony. I'm happy that I could help.

Lawrence Garvin (MVP)

unread,
Feb 18, 2006, 3:48:07 PM2/18/06
to

"Tony Josephs" <nocrap2to...@hotmail.com> wrote in message
news:OK9L%2356MG...@TK2MSFTNGP15.phx.gbl...

> 2 reinstated what I think is the correct implementation of the local
> host rule you mentioned before where I added http://myservername:8530 in
> the "TO" of the SBS localhost access rule. Is this correct?

Following up on loose strings....

To address the configuration of the local host rule, no this is not correct,
Tony.

But in your previous message you noted that WSUS was installed on the SBS
system, so this rule is really not needed. I had misunderstood that point
when we first started this subthread.

However, for future reference, the benefit of other readers, and to get this
information in the Google archives (as well as provide a text base for an
article to be re-posted to my website):

To configure a "Local Host" rule to allow an ISA Server to access a WSUS
server:

What you'll need to do is create a Custom Protocol definition in the task
pane of the ISA server. Select the Toolbox, Protocols, User-Defined, and add
a new protocol for port 8530. I call mine "WSUS".

Then, in the access rule for the Local Host, the From will be "Local Host",
the To will be the IP Address of the WSUS server (however you wish to
configure this, directly, or via a pre-defined computer), and the Protocols
will be the user-defined protocol you created for port 8530.

Tony Josephs

unread,
Feb 19, 2006, 5:22:50 AM2/19/06
to
Lawrence

I have made the following assumptions (this is all in ISA 2004 SP2 by the
way)

- the new "WSUS" protocol is outbound on 8530
- the new "SBS Localhost WSUS access rule" is configured FROM Localhost and
TO the entry in the ISA "Domain Name Set" that I created previously for my
WSUS Localhost access rule ie, http://MYSERVER:8530
- I have now removed the WSUS bits that I added previously to my default
Localhost access rule

OK?


Tony


"Lawrence Garvin (MVP)" <onsi...@news.postalias> wrote in message

news:OQf9myMN...@TK2MSFTNGP14.phx.gbl...

Lawrence Garvin (MVP)

unread,
Feb 19, 2006, 4:29:56 PM2/19/06
to
The ISA rule is irrelevant if WSUS is installed on the SBS2003 server, since
the "Local Host" can always communicate with resources contained on the
"Local Host".

I was merely following up for the benefit of anybody who might actually need
to configure an ISA rule to allow the SBS server (or an ISA server) to
access a WSUS server hosted on another physical machine.

"Tony Josephs" <nocrap2to...@hotmail.com> wrote in message

news:%23KY%23s7TNG...@TK2MSFTNGP11.phx.gbl...

0 new messages