Internet Explorer 7 Keeps Failing from WSUS

[Carito]

I have update (Windows Internet Explorer 7 for Windows XP) KB940767 approved
to deploy.

It appears to be failing quite a lot with an error of "Download Fialed". If
I go to any of the computers and goto the %systemRoot%\windowsupdate.log and
search for the update, I can cut and paste the download link it uses into run
line and it will run it from the server. So I know the link is good and
update exists on server. But it appears as though when I look in the
\\%systemroot%\SoftwareDistribution\Download that the actual folder does not
exist that relates to the download location in the windowsupdate.log file.

Does anyone know how else I can troubleshoot this? Some are windows 2k
machines upgraded to XP, some are native XP machines, all have SP3 on them.

The only error in the log file of WSUS for each client is "Download Failed".

Here is a snip from one of the windowsupdate.log files related to only this
issue.
--------------------------------------
2009-10-01 00:45:54:799 816 b44 DnldMgr * Updates to download = 1
2009-10-01 00:45:54:799 816 b44 Agent * Title = Windows Internet
Explorer 7 for Windows XP
2009-10-01 00:45:54:799 816 b44 Agent * UpdateId =
{83A56F7C-B154-4269-B665-42BB483C80C2}.102
2009-10-01 00:45:54:799 816 b44 Agent * Bundles 1 updates:
2009-10-01 00:45:54:799 816 b44 Agent *
{CFAC6A65-2A92-499B-933C-AB4B034AE58E}.102
2009-10-01 00:45:54:799 816 b44 DnldMgr *********** DnldMgr: New download
job [UpdateId = {CFAC6A65-2A92-499B-933C-AB4B034AE58E}.102] ***********
2009-10-01 00:45:55:221 816 b44 DnldMgr * BITS job initialized, JobId =
{5517F7C4-3BBF-42FC-BF2F-6C5E88C122CB}
2009-10-01 00:45:55:362 816 b44 DnldMgr * Downloading from
http://patchsvr.mhghpf.com:8530/Content/26/D39B89C360FBAA9706B5181AE4718100687A5326.exe
to
C:\WINNT\SoftwareDistribution\Download\2449abaa965f28258b006979384ff8c9\d39b89c360fbaa9706b5181ae4718100687a5326 (full file).
2009-10-01 00:45:55:424 816 70 AU AU checked download status and it
changed: Downloading is paused
2009-10-01 00:45:55:440 816 b44 Agent *********
2009-10-01 00:45:55:440 816 b44 Agent ** END ** Agent: Downloading
updates [CallerId = AutomaticUpdates]
2009-10-01 00:45:55:440 816 b44 Agent *************
2009-10-01 00:45:55:440 816 70 AU AU checked download status and it
changed: Downloading is not paused
2009-10-01 00:45:55:440 816 70 AU AU setting pending client directive to
'Download Progress'
2009-10-01 00:45:59:752 816 b44 Report REPORT EVENT:
{46709FFB-5B7C-4B75-B144-53D2E9AA80F8} 2009-10-01
00:45:54:753-0500 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Software
Synchronization Windows Update Client successfully detected 1 updates.
2009-10-01 00:45:59:752 816 b44 Report REPORT EVENT:
{380A08F9-9098-4CE8-8537-77F66477DE13} 2009-10-01
00:45:54:753-0500 1 156 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Pre-Deployment Check Reporting client status.
2009-10-01 00:46:02:612 816 760 DnldMgr BITS job
{5517F7C4-3BBF-42FC-BF2F-6C5E88C122CB} completed successfully
2009-10-01 00:46:03:284 816 760 Misc Validating signature for
C:\WINNT\SoftwareDistribution\Download\2449abaa965f28258b006979384ff8c9\d39b89c360fbaa9706b5181ae4718100687a5326:
2009-10-01 00:46:03:393 816 760 Misc WARNING: Error: 0x800b0111 when
verifying trust for
C:\WINNT\SoftwareDistribution\Download\2449abaa965f28258b006979384ff8c9\d39b89c360fbaa9706b5181ae4718100687a5326
2009-10-01 00:46:03:393 816 760 Misc WARNING: Digital Signatures on file
C:\WINNT\SoftwareDistribution\Download\2449abaa965f28258b006979384ff8c9\d39b89c360fbaa9706b5181ae4718100687a5326 are not trusted: Error 0x800b0111
2009-10-01 00:46:03:393 816 760 DnldMgr WARNING: File failed
postprocessing, error = 800b0111
2009-10-01 00:46:03:393 816 760 DnldMgr Failed file: URL =
'http://patchsvr.mhghpf.com:8530/Content/26/D39B89C360FBAA9706B5181AE4718100687A5326.exe',
Local path =
'C:\WINNT\SoftwareDistribution\Download\2449abaa965f28258b006979384ff8c9\d39b89c360fbaa9706b5181ae4718100687a5326'
2009-10-01 00:46:03:393 816 760 DnldMgr Error 0x800b0111 occurred while
downloading update; notifying dependent calls.
2009-10-01 00:46:03:440 816 70 AU >>## RESUMED ## AU: Download update
[UpdateId = {83A56F7C-B154-4269-B665-42BB483C80C2}]
2009-10-01 00:46:03:440 816 70 AU # WARNING: Download failed, error =
0x800B0111
2009-10-01 00:46:03:440 816 70 AU #########
2009-10-01 00:46:03:440 816 70 AU ## END ## AU: Download updates
2009-10-01 00:46:03:440 816 70 AU #############

[Ǝиçεl]

Hello Carito,

0x800b0111

You could check to see if any certificates are blocking access to Windows
Update.

In Internet Explorer, Go to tools, internet options, content, certificates.
Then go to the tab “untrusted publishers”
Remove the items containing "Microsoft".

Now you can refresh the windows update page.

Source:
<http://taurarian.mvps.org/WU_XP/miscellaneous.htm#0x800b0111>

Ǝиçεl
◕‿◕
-=-
10/01/09 02:22:31 pm

[PA Bear [MS MVP]]

Post here instead: microsoft.public.windows.server.update_services

[Carito]

Thanks. I actually found that on another site. I did check three different
machines and there were two Microsoft Certs in the untrusted which the site
did say would be there. I removed them and am waiting to see if the updates
check.

PA Bear if I need to continue this thread does it need to be moved to the
location you mentioned to continue posting or should I start a new thread
there. Hopefully the cert issue is the problem.

If this is the issues how can I automate removing these two certs on about a
hundred machines.

[Carito]

I also looked at the date on these two Microsoft Certs in the untrusted and
they expired in 2002. With them being that old, can they actually still be
blocking the IE7 update?