Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

WSUS clients not receiving updates

832 views
Skip to first unread message

emh1010

unread,
May 10, 2006, 3:56:01 PM5/10/06
to
Just installed WSUS on Windows 2003 Server. I am using GPO to configure
clients and move into Groups on the WSUS server. The client affected by GPO
is showing on WSUS server in the appropriate group, but the updates are not
installing on the client, Erro: Agent failed detecting with reason:
0x80244018 If I try and access the server through WSUS Admin it works just
fine, but when I try and access URL for the updates (ex
http://WSUSservername:port(80)) I receive an under construction message in
the browser. Suggestions?

Dave Mills

unread,
May 10, 2006, 6:39:03 PM5/10/06
to
On Wed, 10 May 2006 12:56:01 -0700, emh1010 <emh...@discussions.microsoft.com>
wrote:

>Just installed WSUS on Windows 2003 Server. I am using GPO to configure
>clients and move into Groups on the WSUS server. The client affected by GPO
>is showing on WSUS server in the appropriate group, but the updates are not
>installing on the client, Erro: Agent failed detecting with reason:
>0x80244018

0x80244018 - SUS E PT HTTP STATUS FORBIDDEN
HTTP Status 403 - request forbidden

Are you running a Proxy. What does the Client Diags tool report.

>If I try and access the server through WSUS Admin it works just
>fine, but when I try and access URL for the updates (ex
>http://WSUSservername:port(80)) I receive an under construction message in
>the browser. Suggestions?

There is no web browser content so the above is normal
--
Dave Mills
There are 10 type of people, those that understand binary and those that don't.

emh1010

unread,
May 11, 2006, 9:21:02 AM5/11/06
to

"Dave Mills" wrote:

Here is the Client Diag Tools
WSUS Client Diagnostics Tool
Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is running. . . PASS
Wuaueng.dll version 5.8.0.2469. . . . . . . . . . . . . PASS
This version is WSUS 2.0

Checking AU Settings
AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
Option is from Policy settings

Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use

Checking Connection to WSUS/SUS Server
WUServer = http://WSUSabc:80
WUStatusServer = http://WSUSabc:80
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS

VerifyWUServerURL() failed with hr=0x80190193

The client does not have sufficient access rights to the requested server
object
.
Press Enter to Complete

I set all the permissions according to the WSUS install directions. Any
permissions in particular that I should look at that would affect the error
message above?

Dave Mills

unread,
May 11, 2006, 1:01:14 PM5/11/06
to
On Thu, 11 May 2006 06:21:02 -0700, emh1010 <emh...@discussions.microsoft.com>
wrote:

>
>
>"Dave Mills" wrote:
>
>> On Wed, 10 May 2006 12:56:01 -0700, emh1010 <emh...@discussions.microsoft.com>
>> wrote:
>>
>> >Just installed WSUS on Windows 2003 Server. I am using GPO to configure
>> >clients and move into Groups on the WSUS server. The client affected by GPO
>> >is showing on WSUS server in the appropriate group, but the updates are not
>> >installing on the client, Erro: Agent failed detecting with reason:
>> >0x80244018
>>
>> 0x80244018 - SUS E PT HTTP STATUS FORBIDDEN
>> HTTP Status 403 - request forbidden
>>
>> Are you running a Proxy. What does the Client Diags tool report.
>>
>>
>>
>> >If I try and access the server through WSUS Admin it works just
>> >fine, but when I try and access URL for the updates (ex
>> >http://WSUSservername:port(80)) I receive an under construction message in
>> >the browser. Suggestions?
>>
>> There is no web browser content so the above is normal
>> --
>> Dave Mills
>> There are 10 type of people, those that understand binary and those that don't.
>>
>Here is the Client Diag Tools

<snip...>

>Checking Connection to WSUS/SUS Server
> WUServer = http://WSUSabc:80
> WUStatusServer = http://WSUSabc:80
> UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
>
>VerifyWUServerURL() failed with hr=0x80190193
>
>The client does not have sufficient access rights to the requested server
>object

Is there a reason for adding :80 to the URL. I have never tried this, it should
be OK but !

Lawrence has the permissions documented at
http://wsusinfo.onsitechsolutions.com/articles/016.htm


Try accessing http://WSUSabc:80/selfupdate/iuident.cab in IE. It should offer a
download.

>.
>Press Enter to Complete
>
>I set all the permissions according to the WSUS install directions. Any
>permissions in particular that I should look at that would affect the error
>message above?

Lawrence Garvin (MVP)

unread,
May 11, 2006, 7:07:55 PM5/11/06
to
"emh1010" <emh...@discussions.microsoft.com> wrote in message
news:F054574D-ED56-48E7...@microsoft.com...

>
>
> "Dave Mills" wrote:
>
>> On Wed, 10 May 2006 12:56:01 -0700, emh1010
>> <emh...@discussions.microsoft.com>
>> wrote:
>>
>> >Just installed WSUS on Windows 2003 Server. I am using GPO to configure
>> >clients and move into Groups on the WSUS server. The client affected
>> >by GPO
>> >is showing on WSUS server in the appropriate group, but the updates are
>> >not
>> >installing on the client, Erro: Agent failed detecting with reason:
>> >0x80244018
>>
>> 0x80244018 - SUS E PT HTTP STATUS FORBIDDEN
>> HTTP Status 403 - request forbidden
>>
>> Are you running a Proxy. What does the Client Diags tool report.

> Here is the Client Diag Tools

> Checking Proxy Configuration


> Checking for winhttp local machine Proxy settings . . . PASS
> Winhttp local machine access type
> <Direct Connection>
> Winhttp local machine Proxy. . . . . . . . . . NONE
> Winhttp local machine ProxyBypass. . . . . . . NONE
> Checking User IE Proxy settings . . . . . . . . . . . . PASS
> User IE Proxy. . . . . . . . . . . . . . . . . NONE
> User IE ProxyByPass. . . . . . . . . . . . . . NONE
> User IE AutoConfig URL Proxy . . . . . . . . . NONE
> User IE AutoDetect
> AutoDetect not in use
>
> Checking Connection to WSUS/SUS Server
> WUServer = http://WSUSabc:80
> WUStatusServer = http://WSUSabc:80
> UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
>
> VerifyWUServerURL() failed with hr=0x80190193

The 0x80244018 and 0x80190193 errors are the same:


HTTP Status 403 - request forbidden

Almost always, this the result of access being blocked by a proxy server, or
firewall.

Permissions failures on the web server itself would produce HTTP '401'
errors.
Missing resources or bad pathnames on the web server would produce HTTP
'404' errors.

> I set all the permissions according to the WSUS install directions. Any
> permissions in particular that I should look at that would affect the
> error
> message above?

This statement I must take significant exception to. There are /NO/
instructions in the WSUS installation instructions pertaining to setting
permissions EXCEPT to repair an issue caused by IISLockdown on a Windows
2000 Server system with regard to the .NET Framework execution of the C#
compiler (csc.exe).

However, it is possible that misconfiguring permissions could produce a
'403' error if the web server is not able to evaluate the request sufficient
to return a '401', '404', or the requested resource.


--
Lawrence Garvin, M.S., MVP-Software Distribution
Everything you need for WSUS is at
http://technet2.microsoft.com/windowsserver/en/technologies/featured/wsus/default.mspx
And, eveything else is at
http://wsusinfo.onsitechsolutions.com
...


emh1010

unread,
May 16, 2006, 5:11:02 PM5/16/06
to

"Lawrence Garvin (MVP)" wrote:

> ....
>
>
> Sorry for the delay traveling for work. Whenever I mentioned the WSUS install doc I meant the same link that Dave mentioned above. I double checked all permissions according to the above link twice and the client still does not downlaod updates. It is registered on the WSUS server in the appropriate group. Here is a piece of the Windows Update log from the client: Thank you.
2006-05-16 16:47:38 884 4d8 AU #############
2006-05-16 16:47:38 884 4d8 AU AU setting next detection timeout to
2006-05-16 21:44:39
2006-05-16 16:47:39 884 730 PT Initializing simple targeting cookie,
clientId = 04405055-d7c5-487b-9433-097e69adf83b, target group = Test, DNS
name = it-test.abc.com
2006-05-16 16:47:39 884 730 PT Server URL =
http://WSUSabc:80/SimpleAuthWebService/SimpleAuth.asmx
2006-05-16 16:47:39 884 730 PT WARNING: GetAuthorizationCookie failure,
error = 0x80244018, soap client error = 10, soap error code = 0, HTTP status
code = 403
2006-05-16 16:47:39 884 730 Report WARNING: Reporter failed to upload
events with hr = 80244018.
2006-05-16 16:47:43 884 730 Report REPORT EVENT:
{7812CC6C-039E-4BE6-AEE4-62BAC04C53E3} 2006-05-16
16:47:38-0400 1 148 101 {00000000-0000-0000-0000-000000000000} 0 80244018 AutomaticUpdates Failure Software
Synchronization Error: Agent failed detecting with reason: 0x80244018
2006-05-16 16:57:26 884 c30 AU AU Restart required....
2006-05-16 16:57:30 884 708 AU FATAL: Failed to get session from datastore,
error = 0x80004002
2006-05-16 16:57:30 884 708 AU ########### AU: Initializing Automatic
Updates ###########
2006-05-16 16:57:30 884 708 AU # AU is not configured yet
2006-05-16 16:57:30 884 708 AU # AU is paused, not initializing any
handlers
2006-05-16 16:57:30 884 708 Service *********
2006-05-16 16:57:30 884 708 Service ** END ** Service: Service exit
[Exit code = 0x240001]
2006-05-16 16:57:30 884 708 Service *************
2006-05-16 16:58:07 884 6e4 Misc =========== Logging initialized (build:
5.8.0.2469, tz: -0400) ===========
2006-05-16 16:58:07 884 6e4 Misc = Process: C:\WINDOWS\System32\svchost.exe
2006-05-16 16:58:07 884 6e4 Misc = Module: C:\WINDOWS\system32\wuaueng.dll
2006-05-16 16:58:07 884 6e4 Service *************
2006-05-16 16:58:07 884 6e4 Service ** START ** Service: Service startup
2006-05-16 16:58:07 884 6e4 Service *********
2006-05-16 16:58:07 884 6e4 Agent * WU client version 5.8.0.2469
2006-05-16 16:58:07 884 6e4 Agent * SusClientId =
'04405055-d7c5-487b-9433-097e69adf83b'
2006-05-16 16:58:07 884 6e4 Agent * Base directory:
C:\WINDOWS\SoftwareDistribution
2006-05-16 16:58:07 884 6e4 Agent * Access type: No proxy
2006-05-16 16:58:07 884 6e4 Agent * Network state: Connected
2006-05-16 16:58:56 884 6e4 Agent *********** Agent: Initializing Windows
Update Agent ***********
2006-05-16 16:58:56 884 6e4 Agent *********** Agent: Initializing global
settings cache ***********
2006-05-16 16:58:56 884 6e4 Agent * WSUS server: http://WSUSabc:80
2006-05-16 16:58:56 884 6e4 Agent * WSUS status server: http://WSUSabc:80
2006-05-16 16:58:56 884 6e4 Agent * Target group: Test
2006-05-16 16:58:56 884 6e4 Agent * Windows Update access disabled: No
2006-05-16 16:58:56 884 6e4 DnldMgr Download manager restoring 0 downloads
2006-05-16 16:58:56 884 6e4 AU ########### AU: Initializing Automatic
Updates ###########
2006-05-16 16:58:56 884 6e4 AU # WSUS server: http://WSUSabc:80
2006-05-16 16:58:56 884 6e4 AU # Detection frequency: 1
2006-05-16 16:58:56 884 6e4 AU # Target group: Test
2006-05-16 16:58:56 884 6e4 AU # Approval type: Scheduled (Policy)
2006-05-16 16:58:56 884 6e4 AU # Scheduled install day/time: Wednesday at
13:00
2006-05-16 16:58:56 884 6e4 AU # Auto-install minor updates: Yes (Policy)
2006-05-16 16:58:58 884 548 PT Initializing simple targeting cookie,
clientId = 04405055-d7c5-487b-9433-097e69adf83b, target group = Test, DNS
name = it-test.abc.com
2006-05-16 16:58:58 884 548 PT Server URL =
http://WSUSabc:80/SimpleAuthWebService/SimpleAuth.asmx
2006-05-16 16:59:11 884 548 PT WARNING: GetAuthorizationCookie failure,
error = 0x80244018, soap client error = 10, soap error code = 0, HTTP status
code = 403
2006-05-16 16:59:11 884 548 Report WARNING: Reporter failed to upload
events with hr = 80244018.
2006-05-16 16:59:11 884 548 PT Initializing simple targeting cookie,
clientId = 04405055-d7c5-487b-9433-097e69adf83b, target group = Test, DNS
name = it-test.abc.com
2006-05-16 16:59:11 884 548 PT Server URL =
http://WSUSabc:80/SimpleAuthWebService/SimpleAuth.asmx
2006-05-16 16:59:11 884 548 PT WARNING: GetAuthorizationCookie failure,
error = 0x80244018, soap client error = 10, soap error code = 0, HTTP status
code = 403
2006-05-16 16:59:11 884 548 Report WARNING: Reporter failed to upload
events with hr = 80244018.
>
>

0 new messages