Discussion:
Clients are not installing updates
(too old to reply)
Curt McNamee
2005-12-07 22:13:02 UTC
Permalink
Hello everyone,

I have WSUS on a Windows 2003 box with about 50 Windows XP SP2 & Windows
2000 SP4 clients. None of these clients are installing the downloaded
updates that I have approved for them to install. If I do a report showing
the status of the clients and they all show that all the updates are not
needed. This is a first for me, I have another WSUS server at another site
with about 40 clients that is virtually configured identically to this one
and that one works just fine.

I have tried resetting the client's authorization without any luck (tried
this command: C:\windows\system32\wuauclt.exe /resetauthorization
/detectnow).

Any one have a suggestion on what I could try? Thanks!
-Curt McNamee
Lawrence Garvin (MVP)
2005-12-08 05:35:16 UTC
Permalink
If the clients are reporting updates as "Not Needed" that you have marked
for approval, it could be that they are, in fact, not needed. It could also
be an indication that the client is not properly executing a detection and
is unaware that the updates have been approved. It could also be that you've
not approved the updates for the group the computer thinks it belongs to.

1. Download the Client Diagnostic Tool from
http://download.microsoft.com/download/9/7/6/976d1084-d2fd-45a1-8c27-a467c768d8ef/WSUS%20Client%20Diagnostic%20Tool.EXE
and post the results.

2. Restart the Automatic Updates service; wait 30 minutes; post the last 30
minutes of %windir%\WindowsUpdate.log
Post by Curt McNamee
Hello everyone,
I have WSUS on a Windows 2003 box with about 50 Windows XP SP2 & Windows
2000 SP4 clients. None of these clients are installing the downloaded
updates that I have approved for them to install. If I do a report showing
the status of the clients and they all show that all the updates are not
needed. This is a first for me, I have another WSUS server at another site
with about 40 clients that is virtually configured identically to this one
and that one works just fine.
I have tried resetting the client's authorization without any luck (tried
this command: C:\windows\system32\wuauclt.exe /resetauthorization
/detectnow).
Any one have a suggestion on what I could try? Thanks!
-Curt McNamee
Curt McNamee
2005-12-08 18:37:03 UTC
Permalink
You are correct the clients are reporting updates that I have approved for
installation as "Not Needed." All my clients are reporting this and if you
go to WindowsUpdate, they have a slew of updates they need to download, so I
am guessing the client is not executing the detection correctly (like you
suggested).

Here's the resutls of the Client Daig:
WSUS Client Diagnostics Tool

Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is running. . . PASS
Wuaueng.dll version 5.8.0.2469. . . . . . . . . . . . . PASS
This version is WSUS 2.0

Checking AU Settings
AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
Option is from Policy settings

Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use

Checking Connection to WSUS/SUS Server
WUServer = http://159.189.216.73
WUStatusServer = http://159.189.216.73
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
Connection to server. . . . . . . . . . . . . . . . . . PASS
SelfUpdate folder is present. . . . . . . . . . . . . . PASS

Press Enter to Complete

Here's the the last 30 minutes of %windir%\WindowsUpdate.log (there are only
entries for when I resetared the Automatic Update Service):
2005-12-08 09:51:59 1572 898 Service *********
2005-12-08 09:51:59 1572 898 Service ** END ** Service: Service exit
[Exit code = 0x240001]
2005-12-08 09:51:59 1572 898 Service *************
2005-12-08 09:52:02 1572 8b8 Misc =========== Logging initialized (build:
5.8.0.2469, tz: -0800) ===========
2005-12-08 09:52:02 1572 8b8 Misc = Process: C:\WINNT\System32\svchost.exe
2005-12-08 09:52:02 1572 8b8 Misc = Module: C:\WINNT\system32\wuaueng.dll
2005-12-08 09:52:02 1572 8b8 Service *************
2005-12-08 09:52:02 1572 8b8 Service ** START ** Service: Service startup
2005-12-08 09:52:02 1572 8b8 Service *********
2005-12-08 09:52:02 1572 8b8 Agent * WU client version 5.8.0.2469
2005-12-08 09:52:02 1572 8b8 Agent * SusClientId =
'4dcdb174-b2da-4b82-94db-a74c1e556290'
2005-12-08 09:52:02 1572 8b8 Agent * Base directory:
C:\WINNT\SoftwareDistribution
2005-12-08 09:52:02 1572 8b8 Agent * Access type: No proxy
2005-12-08 09:52:02 1572 8b8 Agent * Network state: Connected
2005-12-08 09:52:47 1572 8b8 Agent *********** Agent: Initializing Windows
Update Agent ***********
2005-12-08 09:52:47 1572 8b8 Agent *********** Agent: Initializing global
settings cache ***********
2005-12-08 09:52:47 1572 8b8 Agent * WSUS server: http://159.189.216.73
2005-12-08 09:52:47 1572 8b8 Agent * WSUS status server:
http://159.189.216.73
2005-12-08 09:52:47 1572 8b8 Agent * Target group: Servers
2005-12-08 09:52:47 1572 8b8 Agent * Windows Update access disabled: No
2005-12-08 09:52:48 1572 8b8 DnldMgr Download manager restoring 0 downloads
2005-12-08 09:52:48 1572 8b8 AU ########### AU: Initializing Automatic
Updates ###########
2005-12-08 09:52:48 1572 8b8 AU # WSUS server: http://159.189.216.73
2005-12-08 09:52:48 1572 8b8 AU # Detection frequency: 22
2005-12-08 09:52:48 1572 8b8 AU # Target group: Servers
2005-12-08 09:52:48 1572 8b8 AU # Approval type: Scheduled (Policy)
2005-12-08 09:52:48 1572 8b8 AU # Scheduled install day/time: Every day at
0:00
2005-12-08 09:52:48 1572 8b8 AU # Auto-install minor updates: Yes (User
preference)


Thanks for your help,
Curt
Post by Lawrence Garvin (MVP)
If the clients are reporting updates as "Not Needed" that you have marked
for approval, it could be that they are, in fact, not needed. It could also
be an indication that the client is not properly executing a detection and
is unaware that the updates have been approved. It could also be that you've
not approved the updates for the group the computer thinks it belongs to.
1. Download the Client Diagnostic Tool from
http://download.microsoft.com/download/9/7/6/976d1084-d2fd-45a1-8c27-a467c768d8ef/WSUS%20Client%20Diagnostic%20Tool.EXE
and post the results.
2. Restart the Automatic Updates service; wait 30 minutes; post the last 30
minutes of %windir%\WindowsUpdate.log
Post by Curt McNamee
Hello everyone,
I have WSUS on a Windows 2003 box with about 50 Windows XP SP2 & Windows
2000 SP4 clients. None of these clients are installing the downloaded
updates that I have approved for them to install. If I do a report showing
the status of the clients and they all show that all the updates are not
needed. This is a first for me, I have another WSUS server at another site
with about 40 clients that is virtually configured identically to this one
and that one works just fine.
I have tried resetting the client's authorization without any luck (tried
this command: C:\windows\system32\wuauclt.exe /resetauthorization
/detectnow).
Any one have a suggestion on what I could try? Thanks!
-Curt McNamee
Lawrence Garvin (MVP)
2005-12-09 01:04:22 UTC
Permalink
Post by Curt McNamee
Checking Connection to WSUS/SUS Server
WUServer = http://159.189.216.73
WUStatusServer = http://159.189.216.73
Why is your WSUS server addressed on a PUBLIC IP Address?

Second question I'll ask: If the log posted contains the entire 30 minutes
since you started the AU service, then your fundamental problem is that the
WUA is not doing anything. Did you notice the significant lack of activity
in the 30 minutes of log you posted?

The lack of activity in the log would suggest that your clients are not
reporting at all. What does the WSUS Admin Console report as the "Last
Contacted" and "Last Reported" times for this client. Retrieve the entries
from the WindowsUpdate.log for that time period, plus/minus 20 minutes, and
post that here.

If that doesn't work, trace back in the WindowsUpdate.log to find the most
recent activity, and post it here.
Post by Curt McNamee
You are correct the clients are reporting updates that I have approved for
installation as "Not Needed." All my clients are reporting this and if you
go to WindowsUpdate, they have a slew of updates they need to download, so I
am guessing the client is not executing the detection correctly (like you
suggested).
WSUS Client Diagnostics Tool
Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is running. . . PASS
Wuaueng.dll version 5.8.0.2469. . . . . . . . . . . . . PASS
This version is WSUS 2.0
Checking AU Settings
AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
Option is from Policy settings
Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use
Checking Connection to WSUS/SUS Server
WUServer = http://159.189.216.73
WUStatusServer = http://159.189.216.73
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
Connection to server. . . . . . . . . . . . . . . . . . PASS
SelfUpdate folder is present. . . . . . . . . . . . . . PASS
Press Enter to Complete
Here's the the last 30 minutes of %windir%\WindowsUpdate.log (there are only
2005-12-08 09:51:59 1572 898 Service *********
2005-12-08 09:51:59 1572 898 Service ** END ** Service: Service exit
[Exit code = 0x240001]
2005-12-08 09:51:59 1572 898 Service *************
5.8.0.2469, tz: -0800) ===========
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\wuaueng.dll
2005-12-08 09:52:02 1572 8b8 Service *************
2005-12-08 09:52:02 1572 8b8 Service ** START ** Service: Service startup
2005-12-08 09:52:02 1572 8b8 Service *********
2005-12-08 09:52:02 1572 8b8 Agent * WU client version 5.8.0.2469
2005-12-08 09:52:02 1572 8b8 Agent * SusClientId =
'4dcdb174-b2da-4b82-94db-a74c1e556290'
C:\WINNT\SoftwareDistribution
2005-12-08 09:52:02 1572 8b8 Agent * Access type: No proxy
2005-12-08 09:52:02 1572 8b8 Agent * Network state: Connected
2005-12-08 09:52:47 1572 8b8 Agent *********** Agent: Initializing
Windows
Update Agent ***********
2005-12-08 09:52:47 1572 8b8 Agent *********** Agent: Initializing global
settings cache ***********
2005-12-08 09:52:47 1572 8b8 Agent * WSUS server: http://159.189.216.73
http://159.189.216.73
2005-12-08 09:52:47 1572 8b8 Agent * Target group: Servers
2005-12-08 09:52:47 1572 8b8 Agent * Windows Update access disabled: No
2005-12-08 09:52:48 1572 8b8 DnldMgr Download manager restoring 0
downloads
2005-12-08 09:52:48 1572 8b8 AU ########### AU: Initializing Automatic
Updates ###########
2005-12-08 09:52:48 1572 8b8 AU # WSUS server: http://159.189.216.73
2005-12-08 09:52:48 1572 8b8 AU # Detection frequency: 22
2005-12-08 09:52:48 1572 8b8 AU # Target group: Servers
2005-12-08 09:52:48 1572 8b8 AU # Approval type: Scheduled (Policy)
2005-12-08 09:52:48 1572 8b8 AU # Scheduled install day/time: Every day
at
0:00
2005-12-08 09:52:48 1572 8b8 AU # Auto-install minor updates: Yes (User
preference)
Thanks for your help,
Curt
Post by Lawrence Garvin (MVP)
If the clients are reporting updates as "Not Needed" that you have marked
for approval, it could be that they are, in fact, not needed. It could also
be an indication that the client is not properly executing a detection and
is unaware that the updates have been approved. It could also be that you've
not approved the updates for the group the computer thinks it belongs to.
1. Download the Client Diagnostic Tool from
http://download.microsoft.com/download/9/7/6/976d1084-d2fd-45a1-8c27-a467c768d8ef/WSUS%20Client%20Diagnostic%20Tool.EXE
and post the results.
2. Restart the Automatic Updates service; wait 30 minutes; post the last 30
minutes of %windir%\WindowsUpdate.log
Post by Curt McNamee
Hello everyone,
I have WSUS on a Windows 2003 box with about 50 Windows XP SP2 & Windows
2000 SP4 clients. None of these clients are installing the downloaded
updates that I have approved for them to install. If I do a report showing
the status of the clients and they all show that all the updates are not
needed. This is a first for me, I have another WSUS server at another site
with about 40 clients that is virtually configured identically to this one
and that one works just fine.
I have tried resetting the client's authorization without any luck (tried
this command: C:\windows\system32\wuauclt.exe /resetauthorization
/detectnow).
Any one have a suggestion on what I could try? Thanks!
-Curt McNamee
Curt McNamee
2005-12-09 20:32:02 UTC
Permalink
Hi there, thanks for your help on this.

I am not sure I understand you question. My WSUS server is on a public IP
because that's the subnet used at that site (we could use a private subnet,
but then we'd have to add that route). It's firewalled off by 3 layers of
firewalls (network security folks are anal).

I noticed the lack of activity and that was puzzling to me as well. The
WSUS Admin console reports the clients are reporting each and every morning
during the scheduled time. Last night this was reported in the
WindowsUpdate.log (it's the very next/last thing in the log file):

2005-12-08 22:49:34 1572 8b8 AU #############
2005-12-08 22:49:34 1572 8b8 AU ## START ## AU: Search for updates
2005-12-08 22:49:34 1572 8b8 AU #########
2005-12-08 22:49:34 1572 8b8 AU <<## SUBMITTED ## AU: Search for updates
[CallId = {676B5033-F7CF-480E-A682-7567E64F602B}]
2005-12-08 22:49:34 1572 6a8 Agent *************
2005-12-08 22:49:34 1572 6a8 Agent ** START ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2005-12-08 22:49:34 1572 6a8 Agent *********
2005-12-08 22:49:37 1572 6a8 Setup *********** Setup: Checking whether
self-update is required ***********
2005-12-08 22:49:37 1572 6a8 Setup * Inf file:
C:\WINNT\SoftwareDistribution\SelfUpdate\Default\wusetup.inf
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\cdm.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\iuengine.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuapi.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuauclt.exe: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuauclt1.exe: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuaucpl.cpl: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuaueng.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuaueng1.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wucltui.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wups.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wups2.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-08 22:49:38 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuweb.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-08 22:49:38 1572 6a8 Setup * IsUpdateRequired = No
2005-12-08 22:49:39 1572 6a8 PT +++++++++++ PT: Synchronizing server
updates +++++++++++
2005-12-08 22:49:39 1572 6a8 PT + ServiceId =
{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
http://159.189.216.73/ClientWebService/client.asmx
2005-12-08 22:49:41 1572 6a8 PT Initializing simple targeting cookie,
clientId = 4dcdb174-b2da-4b82-94db-a74c1e556290, target group = Servers, DNS
name = bogie.fresc.ad
2005-12-08 22:49:41 1572 6a8 PT Server URL =
http://159.189.216.73/SimpleAuthWebService/SimpleAuth.asmx
2005-12-08 22:50:02 1572 6a8 Agent * Found 0 updates and 5 categories in
search
2005-12-08 22:50:02 1572 6a8 Report *********** Report: Initializing static
reporting data ***********
2005-12-08 22:50:02 1572 6a8 Report * OS Version = 5.2.3790.1.0.196882
2005-12-08 22:50:02 1572 6a8 Report * Computer Brand = D815EA
2005-12-08 22:50:02 1572 6a8 Report * Computer Model = EA81510A
2005-12-08 22:50:02 1572 6a8 Report * Bios Revision =
EA81510A.86A.0051.P11.0106190714
2005-12-08 22:50:02 1572 6a8 Report * Bios Name = Default System BIOS
2005-12-08 22:50:02 1572 6a8 Report * Bios Release Date =
2001-06-19T00:00:00
2005-12-08 22:50:02 1572 6a8 Report * Locale ID = 1033
2005-12-08 22:50:03 1572 6a8 Agent *********
2005-12-08 22:50:03 1572 6a8 Agent ** END ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2005-12-08 22:50:03 1572 6a8 Agent *************
2005-12-08 22:50:03 1572 6a8 AU >>## RESUMED ## AU: Search for updates
[CallId = {676B5033-F7CF-480E-A682-7567E64F602B}]
2005-12-08 22:50:03 1572 6a8 AU # 0 updates detected
2005-12-08 22:50:03 1572 6a8 AU #########
2005-12-08 22:50:03 1572 6a8 AU ## END ## AU: Search for updates [CallId
= {676B5033-F7CF-480E-A682-7567E64F602B}]
2005-12-08 22:50:03 1572 6a8 AU #############
2005-12-08 22:50:03 1572 6a8 AU AU setting next detection timeout to
2005-12-10 01:31:48
2005-12-08 22:50:08 1572 6a8 Report REPORT EVENT:
{776568E0-AFB3-4689-B7FC-36EF9263DA65} 2005-12-08
22:50:02-0800 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Software Synchronization Agent has finished detecting items.
2005-12-08 22:50:08 1572 6a8 Report REPORT EVENT:
{5F8786AB-25F1-49B4-806E-E35EEA774669} 2005-12-08
22:50:02-0800 1 153 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Pre-Deployment Check Reporting client status.
2005-12-08 23:01:10 1572 6a8 Report Uploading 2 events using cached cookie,
reporting URL =
http://159.189.216.73/ReportingWebService/ReportingWebService.asmx
2005-12-08 23:01:16 1572 6a8 Report Reporter successfully uploaded 2 events.
2005-12-09 00:00:10 1572 8b8 AU Forced install timer expired for scheduled
install

I looked through the whole log file and I could be reading it wrong, but it
seems that only the WSUS server is contacting itself to find updates. I
posted the entire log file at:
http://oregonstate.edu/~mcnameec/WSUS/WindowsUpdate.log

Thanks again for your help,
Curt McNamee
Post by Lawrence Garvin (MVP)
Post by Curt McNamee
Checking Connection to WSUS/SUS Server
WUServer = http://159.189.216.73
WUStatusServer = http://159.189.216.73
Why is your WSUS server addressed on a PUBLIC IP Address?
Second question I'll ask: If the log posted contains the entire 30 minutes
since you started the AU service, then your fundamental problem is that the
WUA is not doing anything. Did you notice the significant lack of activity
in the 30 minutes of log you posted?
The lack of activity in the log would suggest that your clients are not
reporting at all. What does the WSUS Admin Console report as the "Last
Contacted" and "Last Reported" times for this client. Retrieve the entries
from the WindowsUpdate.log for that time period, plus/minus 20 minutes, and
post that here.
If that doesn't work, trace back in the WindowsUpdate.log to find the most
recent activity, and post it here.
Post by Curt McNamee
You are correct the clients are reporting updates that I have approved for
installation as "Not Needed." All my clients are reporting this and if you
go to WindowsUpdate, they have a slew of updates they need to download, so I
am guessing the client is not executing the detection correctly (like you
suggested).
WSUS Client Diagnostics Tool
Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is running. . . PASS
Wuaueng.dll version 5.8.0.2469. . . . . . . . . . . . . PASS
This version is WSUS 2.0
Checking AU Settings
AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
Option is from Policy settings
Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use
Checking Connection to WSUS/SUS Server
WUServer = http://159.189.216.73
WUStatusServer = http://159.189.216.73
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
Connection to server. . . . . . . . . . . . . . . . . . PASS
SelfUpdate folder is present. . . . . . . . . . . . . . PASS
Press Enter to Complete
Here's the the last 30 minutes of %windir%\WindowsUpdate.log (there are only
2005-12-08 09:51:59 1572 898 Service *********
2005-12-08 09:51:59 1572 898 Service ** END ** Service: Service exit
[Exit code = 0x240001]
2005-12-08 09:51:59 1572 898 Service *************
5.8.0.2469, tz: -0800) ===========
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\wuaueng.dll
2005-12-08 09:52:02 1572 8b8 Service *************
2005-12-08 09:52:02 1572 8b8 Service ** START ** Service: Service startup
2005-12-08 09:52:02 1572 8b8 Service *********
2005-12-08 09:52:02 1572 8b8 Agent * WU client version 5.8.0.2469
2005-12-08 09:52:02 1572 8b8 Agent * SusClientId =
'4dcdb174-b2da-4b82-94db-a74c1e556290'
C:\WINNT\SoftwareDistribution
2005-12-08 09:52:02 1572 8b8 Agent * Access type: No proxy
2005-12-08 09:52:02 1572 8b8 Agent * Network state: Connected
2005-12-08 09:52:47 1572 8b8 Agent *********** Agent: Initializing
Windows
Update Agent ***********
2005-12-08 09:52:47 1572 8b8 Agent *********** Agent: Initializing global
settings cache ***********
2005-12-08 09:52:47 1572 8b8 Agent * WSUS server: http://159.189.216.73
http://159.189.216.73
2005-12-08 09:52:47 1572 8b8 Agent * Target group: Servers
2005-12-08 09:52:47 1572 8b8 Agent * Windows Update access disabled: No
2005-12-08 09:52:48 1572 8b8 DnldMgr Download manager restoring 0
downloads
2005-12-08 09:52:48 1572 8b8 AU ########### AU: Initializing Automatic
Updates ###########
2005-12-08 09:52:48 1572 8b8 AU # WSUS server: http://159.189.216.73
2005-12-08 09:52:48 1572 8b8 AU # Detection frequency: 22
2005-12-08 09:52:48 1572 8b8 AU # Target group: Servers
2005-12-08 09:52:48 1572 8b8 AU # Approval type: Scheduled (Policy)
2005-12-08 09:52:48 1572 8b8 AU # Scheduled install day/time: Every day
at
0:00
2005-12-08 09:52:48 1572 8b8 AU # Auto-install minor updates: Yes (User
preference)
Thanks for your help,
Curt
Post by Lawrence Garvin (MVP)
If the clients are reporting updates as "Not Needed" that you have marked
for approval, it could be that they are, in fact, not needed. It could also
be an indication that the client is not properly executing a detection and
is unaware that the updates have been approved. It could also be that you've
not approved the updates for the group the computer thinks it belongs to.
1. Download the Client Diagnostic Tool from
http://download.microsoft.com/download/9/7/6/976d1084-d2fd-45a1-8c27-a467c768d8ef/WSUS%20Client%20Diagnostic%20Tool.EXE
and post the results.
2. Restart the Automatic Updates service; wait 30 minutes; post the last 30
minutes of %windir%\WindowsUpdate.log
Post by Curt McNamee
Hello everyone,
I have WSUS on a Windows 2003 box with about 50 Windows XP SP2 & Windows
2000 SP4 clients. None of these clients are installing the downloaded
updates that I have approved for them to install. If I do a report showing
the status of the clients and they all show that all the updates are not
needed. This is a first for me, I have another WSUS server at another site
with about 40 clients that is virtually configured identically to this one
and that one works just fine.
I have tried resetting the client's authorization without any luck (tried
this command: C:\windows\system32\wuauclt.exe /resetauthorization
/detectnow).
Any one have a suggestion on what I could try? Thanks!
-Curt McNamee
Lawrence Garvin (MVP)
2005-12-10 07:16:18 UTC
Permalink
Post by Curt McNamee
Hi there, thanks for your help on this.
I am not sure I understand you question. My WSUS server is on a public IP
because that's the subnet used at that site (we could use a private subnet,
but then we'd have to add that route).
You /SHOULD/ use a private subnet, because the users at that site will
/NEVER/ be able to access any Internet resources legitimately assigned to
the 159.189.216 Class C network.
Post by Curt McNamee
It's firewalled off by 3 layers of
firewalls (network security folks are anal).
Not anal enough, or they'd know better than to permit the use of PUBLIC IP
addresses on the internal network!
Post by Curt McNamee
I looked through the whole log file and I could be reading it wrong, but it
seems that only the WSUS server is contacting itself to find updates. I
http://oregonstate.edu/~mcnameec/WSUS/WindowsUpdate.log
Oregon State University ... huh?...I would have definitely thought someplace
like a state university would have better IP addressing policies than
allowing the use of public subnets on the internal network. :-)

I looked at the log file. The client is not installing the updates because
it is not detecting the updates. But they're definitely reporting at each
detection.
Post by Curt McNamee
2005-12-08 22:49:41 1572 6a8 PT Initializing simple targeting cookie,
clientId = 4dcdb174-b2da-4b82-94db-a74c1e556290,
target group = Servers, DNS name = bogie.fresc.ad
2005-12-08 22:50:02 1572 6a8 Report * OS Version = 5.2.3790.1.0.196882
2005-12-08 22:50:03 1572 6a8 AU # 0 updates detected
2005-12-08 23:01:10 1572 6a8 Report Uploading 2 events using cached cookie,
reporting URL =
http://159.189.216.73/ReportingWebService/ReportingWebService.asmx
2005-12-08 23:01:16 1572 6a8 Report Reporter successfully uploaded 2
events.
You have a Windows Server 2003 SP1 system, that is assigned to the target
group name "Servers", and is not detecting any approved updates for the
"Servers" target group.

Does the "Servers" target group appear on the WSUS Admin Console?
Is the machine 'bogie.fresc.ad' appearing in the "Servers" target group on
the WSUS Admin Console?
Are the desired updates marked "Approved" for the "Servers" target group on
the WSUS Admin Console?

Specifically which updates are "Approved" but not being detected by this
server?

Scan the logfile in %windir%\SoftwareDistribution\ReportingEvents.log
and review the list of updates shown in Add/Remove Programs (be sure to
enable the "Show Updates" checkbox)

to see if there are any references to the approved updates that appear to be
not working.

Also, look in %windir% to see if there is a corresponding KB######.log file,
or an $NTUninstallKB######$ hidden folder.
Post by Curt McNamee
I noticed the lack of activity and that was puzzling to me as well. The
WSUS Admin console reports the clients are reporting each and every morning
during the scheduled time. Last night this was reported in the
2005-12-08 22:49:34 1572 8b8 AU #############
2005-12-08 22:49:34 1572 8b8 AU ## START ## AU: Search for updates
2005-12-08 22:49:34 1572 8b8 AU #########
2005-12-08 22:49:34 1572 8b8 AU <<## SUBMITTED ## AU: Search for updates
[CallId = {676B5033-F7CF-480E-A682-7567E64F602B}]
2005-12-08 22:49:34 1572 6a8 Agent *************
2005-12-08 22:49:34 1572 6a8 Agent ** START ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2005-12-08 22:49:34 1572 6a8 Agent *********
2005-12-08 22:49:37 1572 6a8 Setup *********** Setup: Checking whether
self-update is required ***********
C:\WINNT\SoftwareDistribution\SelfUpdate\Default\wusetup.inf
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\cdm.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\iuengine.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuapi.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuauclt.exe: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuauclt1.exe: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuaucpl.cpl: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuaueng.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuaueng1.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wucltui.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wups.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wups2.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-08 22:49:38 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuweb.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-08 22:49:38 1572 6a8 Setup * IsUpdateRequired = No
2005-12-08 22:49:39 1572 6a8 PT +++++++++++ PT: Synchronizing server
updates +++++++++++
2005-12-08 22:49:39 1572 6a8 PT + ServiceId =
{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
http://159.189.216.73/ClientWebService/client.asmx
2005-12-08 22:49:41 1572 6a8 PT Initializing simple targeting cookie,
clientId = 4dcdb174-b2da-4b82-94db-a74c1e556290, target group = Servers, DNS
name = bogie.fresc.ad
2005-12-08 22:49:41 1572 6a8 PT Server URL =
http://159.189.216.73/SimpleAuthWebService/SimpleAuth.asmx
2005-12-08 22:50:02 1572 6a8 Agent * Found 0 updates and 5 categories in
search
2005-12-08 22:50:02 1572 6a8 Report *********** Report: Initializing
static
reporting data ***********
2005-12-08 22:50:02 1572 6a8 Report * OS Version = 5.2.3790.1.0.196882
2005-12-08 22:50:02 1572 6a8 Report * Computer Brand = D815EA
2005-12-08 22:50:02 1572 6a8 Report * Computer Model = EA81510A
2005-12-08 22:50:02 1572 6a8 Report * Bios Revision =
EA81510A.86A.0051.P11.0106190714
2005-12-08 22:50:02 1572 6a8 Report * Bios Name = Default System BIOS
2005-12-08 22:50:02 1572 6a8 Report * Bios Release Date =
2001-06-19T00:00:00
2005-12-08 22:50:02 1572 6a8 Report * Locale ID = 1033
2005-12-08 22:50:03 1572 6a8 Agent *********
2005-12-08 22:50:03 1572 6a8 Agent ** END ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2005-12-08 22:50:03 1572 6a8 Agent *************
2005-12-08 22:50:03 1572 6a8 AU >>## RESUMED ## AU: Search for updates
[CallId = {676B5033-F7CF-480E-A682-7567E64F602B}]
2005-12-08 22:50:03 1572 6a8 AU # 0 updates detected
2005-12-08 22:50:03 1572 6a8 AU #########
2005-12-08 22:50:03 1572 6a8 AU ## END ## AU: Search for updates
[CallId
= {676B5033-F7CF-480E-A682-7567E64F602B}]
2005-12-08 22:50:03 1572 6a8 AU #############
2005-12-08 22:50:03 1572 6a8 AU AU setting next detection timeout to
2005-12-10 01:31:48
{776568E0-AFB3-4689-B7FC-36EF9263DA65} 2005-12-08
22:50:02-0800 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0
AutomaticUpdates Success Software Synchronization Agent has finished
detecting items.
{5F8786AB-25F1-49B4-806E-E35EEA774669} 2005-12-08
22:50:02-0800 1 153 101 {00000000-0000-0000-0000-000000000000} 0 0
AutomaticUpdates Success Pre-Deployment Check Reporting client status.
2005-12-08 23:01:10 1572 6a8 Report Uploading 2 events using cached
cookie,
reporting URL =
http://159.189.216.73/ReportingWebService/ReportingWebService.asmx
2005-12-08 23:01:16 1572 6a8 Report Reporter successfully uploaded 2
events.
2005-12-09 00:00:10 1572 8b8 AU Forced install timer expired for scheduled
install
I looked through the whole log file and I could be reading it wrong, but it
seems that only the WSUS server is contacting itself to find updates. I
http://oregonstate.edu/~mcnameec/WSUS/WindowsUpdate.log
Thanks again for your help,
Curt McNamee
Post by Lawrence Garvin (MVP)
Post by Curt McNamee
Checking Connection to WSUS/SUS Server
WUServer = http://159.189.216.73
WUStatusServer = http://159.189.216.73
Why is your WSUS server addressed on a PUBLIC IP Address?
Second question I'll ask: If the log posted contains the entire 30 minutes
since you started the AU service, then your fundamental problem is that the
WUA is not doing anything. Did you notice the significant lack of activity
in the 30 minutes of log you posted?
The lack of activity in the log would suggest that your clients are not
reporting at all. What does the WSUS Admin Console report as the "Last
Contacted" and "Last Reported" times for this client. Retrieve the entries
from the WindowsUpdate.log for that time period, plus/minus 20 minutes, and
post that here.
If that doesn't work, trace back in the WindowsUpdate.log to find the most
recent activity, and post it here.
Post by Curt McNamee
You are correct the clients are reporting updates that I have approved for
installation as "Not Needed." All my clients are reporting this and if you
go to WindowsUpdate, they have a slew of updates they need to download,
so
I
am guessing the client is not executing the detection correctly (like you
suggested).
WSUS Client Diagnostics Tool
Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is running. . . PASS
Wuaueng.dll version 5.8.0.2469. . . . . . . . . . . . . PASS
This version is WSUS 2.0
Checking AU Settings
AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
Option is from Policy settings
Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use
Checking Connection to WSUS/SUS Server
WUServer = http://159.189.216.73
WUStatusServer = http://159.189.216.73
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
Connection to server. . . . . . . . . . . . . . . . . . PASS
SelfUpdate folder is present. . . . . . . . . . . . . . PASS
Press Enter to Complete
Here's the the last 30 minutes of %windir%\WindowsUpdate.log (there are only
2005-12-08 09:51:59 1572 898 Service *********
2005-12-08 09:51:59 1572 898 Service ** END ** Service: Service exit
[Exit code = 0x240001]
2005-12-08 09:51:59 1572 898 Service *************
5.8.0.2469, tz: -0800) ===========
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\wuaueng.dll
2005-12-08 09:52:02 1572 8b8 Service *************
2005-12-08 09:52:02 1572 8b8 Service ** START ** Service: Service startup
2005-12-08 09:52:02 1572 8b8 Service *********
2005-12-08 09:52:02 1572 8b8 Agent * WU client version 5.8.0.2469
2005-12-08 09:52:02 1572 8b8 Agent * SusClientId =
'4dcdb174-b2da-4b82-94db-a74c1e556290'
C:\WINNT\SoftwareDistribution
2005-12-08 09:52:02 1572 8b8 Agent * Access type: No proxy
2005-12-08 09:52:02 1572 8b8 Agent * Network state: Connected
2005-12-08 09:52:47 1572 8b8 Agent *********** Agent: Initializing
Windows
Update Agent ***********
2005-12-08 09:52:47 1572 8b8 Agent *********** Agent: Initializing global
settings cache ***********
http://159.189.216.73
http://159.189.216.73
2005-12-08 09:52:47 1572 8b8 Agent * Target group: Servers
2005-12-08 09:52:47 1572 8b8 Agent * Windows Update access disabled: No
2005-12-08 09:52:48 1572 8b8 DnldMgr Download manager restoring 0
downloads
2005-12-08 09:52:48 1572 8b8 AU ########### AU: Initializing Automatic
Updates ###########
2005-12-08 09:52:48 1572 8b8 AU # WSUS server: http://159.189.216.73
2005-12-08 09:52:48 1572 8b8 AU # Detection frequency: 22
2005-12-08 09:52:48 1572 8b8 AU # Target group: Servers
2005-12-08 09:52:48 1572 8b8 AU # Approval type: Scheduled (Policy)
2005-12-08 09:52:48 1572 8b8 AU # Scheduled install day/time: Every day
at
0:00
2005-12-08 09:52:48 1572 8b8 AU # Auto-install minor updates: Yes (User
preference)
Thanks for your help,
Curt
Post by Lawrence Garvin (MVP)
If the clients are reporting updates as "Not Needed" that you have marked
for approval, it could be that they are, in fact, not needed. It could also
be an indication that the client is not properly executing a detection and
is unaware that the updates have been approved. It could also be that you've
not approved the updates for the group the computer thinks it belongs to.
1. Download the Client Diagnostic Tool from
http://download.microsoft.com/download/9/7/6/976d1084-d2fd-45a1-8c27-a467c768d8ef/WSUS%20Client%20Diagnostic%20Tool.EXE
and post the results.
2. Restart the Automatic Updates service; wait 30 minutes; post the
last
30
minutes of %windir%\WindowsUpdate.log
Post by Curt McNamee
Hello everyone,
I have WSUS on a Windows 2003 box with about 50 Windows XP SP2 & Windows
2000 SP4 clients. None of these clients are installing the downloaded
updates that I have approved for them to install. If I do a report showing
the status of the clients and they all show that all the updates are not
needed. This is a first for me, I have another WSUS server at
another
site
with about 40 clients that is virtually configured identically to
this
one
and that one works just fine.
I have tried resetting the client's authorization without any luck (tried
this command: C:\windows\system32\wuauclt.exe /resetauthorization
/detectnow).
Any one have a suggestion on what I could try? Thanks!
-Curt McNamee
Curt McNamee
2005-12-12 19:16:03 UTC
Permalink
Hello again,

I appreciate your continued help on this. You make a valid point and in a
perfect world, a private subnet behind a firewall would be more secure than a
public network. For our situation this will not work, hence we have not done
so. I posted that logfile on some space I have with OSU, however that's not
where this server or these clients are located (OSU aslo uses public subnets
behind their border & departmental firewalls as do most universities).

The "Servers" group does appear int eh WSUS Admin Console, and
"bogie.fresc.ad" appears in the "Servers" group. You are correct, the
desired updates makred "Approved" for the "Servers" target goup on the WSUS
Admin Console.

Here are some specifics on some of the updates that should have been
installed, but were not as they are reported as "Not Needed" in the WSUS
Admin Console:
Security Update for Windows Server 2003 (KB902400)
Security Update for Windows Server 2003 (KB899589)
Security Update for Windows Server 2003 (KB901017)
Security Update for Windows Server 2003 (KB904706)
Cumulative Security Update for Internet Explorer for Windows Server 2003
(KB896688)
Security Update for Windows Server 2003 (KB900725)
Security Update for Windows Server 2003 (KB896424)

They are installed now, but that is because I did it manually on the
Microsoft Update site.

I checked out the sites reguarding that cookie error I posted without
success (I have no clients where the IsRegistered DB entry is not 1, and the
WMI is proptly working on the clients. Thanks for the help.

I don't really want to do this, but I am getting close to just removing WSUS
and reinstalling it and calling it good.

Thanks again for your help,
Curt McNamee
Post by Lawrence Garvin (MVP)
Post by Curt McNamee
Hi there, thanks for your help on this.
I am not sure I understand you question. My WSUS server is on a public IP
because that's the subnet used at that site (we could use a private subnet,
but then we'd have to add that route).
You /SHOULD/ use a private subnet, because the users at that site will
/NEVER/ be able to access any Internet resources legitimately assigned to
the 159.189.216 Class C network.
Post by Curt McNamee
It's firewalled off by 3 layers of
firewalls (network security folks are anal).
Not anal enough, or they'd know better than to permit the use of PUBLIC IP
addresses on the internal network!
Post by Curt McNamee
I looked through the whole log file and I could be reading it wrong, but it
seems that only the WSUS server is contacting itself to find updates. I
http://oregonstate.edu/~mcnameec/WSUS/WindowsUpdate.log
Oregon State University ... huh?...I would have definitely thought someplace
like a state university would have better IP addressing policies than
allowing the use of public subnets on the internal network. :-)
I looked at the log file. The client is not installing the updates because
it is not detecting the updates. But they're definitely reporting at each
detection.
Post by Curt McNamee
2005-12-08 22:49:41 1572 6a8 PT Initializing simple targeting cookie,
clientId = 4dcdb174-b2da-4b82-94db-a74c1e556290,
target group = Servers, DNS name = bogie.fresc.ad
2005-12-08 22:50:02 1572 6a8 Report * OS Version = 5.2.3790.1.0.196882
2005-12-08 22:50:03 1572 6a8 AU # 0 updates detected
2005-12-08 23:01:10 1572 6a8 Report Uploading 2 events using cached cookie,
reporting URL =
http://159.189.216.73/ReportingWebService/ReportingWebService.asmx
2005-12-08 23:01:16 1572 6a8 Report Reporter successfully uploaded 2
events.
You have a Windows Server 2003 SP1 system, that is assigned to the target
group name "Servers", and is not detecting any approved updates for the
"Servers" target group.
Does the "Servers" target group appear on the WSUS Admin Console?
Is the machine 'bogie.fresc.ad' appearing in the "Servers" target group on
the WSUS Admin Console?
Are the desired updates marked "Approved" for the "Servers" target group on
the WSUS Admin Console?
Specifically which updates are "Approved" but not being detected by this
server?
Scan the logfile in %windir%\SoftwareDistribution\ReportingEvents.log
and review the list of updates shown in Add/Remove Programs (be sure to
enable the "Show Updates" checkbox)
to see if there are any references to the approved updates that appear to be
not working.
Also, look in %windir% to see if there is a corresponding KB######.log file,
or an $NTUninstallKB######$ hidden folder.
Post by Curt McNamee
I noticed the lack of activity and that was puzzling to me as well. The
WSUS Admin console reports the clients are reporting each and every morning
during the scheduled time. Last night this was reported in the
2005-12-08 22:49:34 1572 8b8 AU #############
2005-12-08 22:49:34 1572 8b8 AU ## START ## AU: Search for updates
2005-12-08 22:49:34 1572 8b8 AU #########
2005-12-08 22:49:34 1572 8b8 AU <<## SUBMITTED ## AU: Search for updates
[CallId = {676B5033-F7CF-480E-A682-7567E64F602B}]
2005-12-08 22:49:34 1572 6a8 Agent *************
2005-12-08 22:49:34 1572 6a8 Agent ** START ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2005-12-08 22:49:34 1572 6a8 Agent *********
2005-12-08 22:49:37 1572 6a8 Setup *********** Setup: Checking whether
self-update is required ***********
C:\WINNT\SoftwareDistribution\SelfUpdate\Default\wusetup.inf
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\cdm.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\iuengine.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuapi.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuauclt.exe: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuauclt1.exe: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuaucpl.cpl: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuaueng.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuaueng1.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wucltui.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wups.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wups2.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-08 22:49:38 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuweb.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-08 22:49:38 1572 6a8 Setup * IsUpdateRequired = No
2005-12-08 22:49:39 1572 6a8 PT +++++++++++ PT: Synchronizing server
updates +++++++++++
2005-12-08 22:49:39 1572 6a8 PT + ServiceId =
{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
http://159.189.216.73/ClientWebService/client.asmx
2005-12-08 22:49:41 1572 6a8 PT Initializing simple targeting cookie,
clientId = 4dcdb174-b2da-4b82-94db-a74c1e556290, target group = Servers, DNS
name = bogie.fresc.ad
2005-12-08 22:49:41 1572 6a8 PT Server URL =
http://159.189.216.73/SimpleAuthWebService/SimpleAuth.asmx
2005-12-08 22:50:02 1572 6a8 Agent * Found 0 updates and 5 categories in
search
2005-12-08 22:50:02 1572 6a8 Report *********** Report: Initializing
static
reporting data ***********
2005-12-08 22:50:02 1572 6a8 Report * OS Version = 5.2.3790.1.0.196882
2005-12-08 22:50:02 1572 6a8 Report * Computer Brand = D815EA
2005-12-08 22:50:02 1572 6a8 Report * Computer Model = EA81510A
2005-12-08 22:50:02 1572 6a8 Report * Bios Revision =
EA81510A.86A.0051.P11.0106190714
2005-12-08 22:50:02 1572 6a8 Report * Bios Name = Default System BIOS
2005-12-08 22:50:02 1572 6a8 Report * Bios Release Date =
2001-06-19T00:00:00
2005-12-08 22:50:02 1572 6a8 Report * Locale ID = 1033
2005-12-08 22:50:03 1572 6a8 Agent *********
2005-12-08 22:50:03 1572 6a8 Agent ** END ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2005-12-08 22:50:03 1572 6a8 Agent *************
2005-12-08 22:50:03 1572 6a8 AU >>## RESUMED ## AU: Search for updates
[CallId = {676B5033-F7CF-480E-A682-7567E64F602B}]
2005-12-08 22:50:03 1572 6a8 AU # 0 updates detected
2005-12-08 22:50:03 1572 6a8 AU #########
2005-12-08 22:50:03 1572 6a8 AU ## END ## AU: Search for updates
[CallId
= {676B5033-F7CF-480E-A682-7567E64F602B}]
2005-12-08 22:50:03 1572 6a8 AU #############
2005-12-08 22:50:03 1572 6a8 AU AU setting next detection timeout to
2005-12-10 01:31:48
{776568E0-AFB3-4689-B7FC-36EF9263DA65} 2005-12-08
22:50:02-0800 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0
AutomaticUpdates Success Software Synchronization Agent has finished
detecting items.
{5F8786AB-25F1-49B4-806E-E35EEA774669} 2005-12-08
22:50:02-0800 1 153 101 {00000000-0000-0000-0000-000000000000} 0 0
AutomaticUpdates Success Pre-Deployment Check Reporting client status.
2005-12-08 23:01:10 1572 6a8 Report Uploading 2 events using cached cookie,
reporting URL =
http://159.189.216.73/ReportingWebService/ReportingWebService.asmx
2005-12-08 23:01:16 1572 6a8 Report Reporter successfully uploaded 2
events.
2005-12-09 00:00:10 1572 8b8 AU Forced install timer expired for scheduled
install
I looked through the whole log file and I could be reading it wrong, but it
seems that only the WSUS server is contacting itself to find updates. I
http://oregonstate.edu/~mcnameec/WSUS/WindowsUpdate.log
Thanks again for your help,
Curt McNamee
Post by Lawrence Garvin (MVP)
Post by Curt McNamee
Checking Connection to WSUS/SUS Server
WUServer = http://159.189.216.73
WUStatusServer = http://159.189.216.73
Why is your WSUS server addressed on a PUBLIC IP Address?
Second question I'll ask: If the log posted contains the entire 30 minutes
since you started the AU service, then your fundamental problem is that the
WUA is not doing anything. Did you notice the significant lack of activity
in the 30 minutes of log you posted?
The lack of activity in the log would suggest that your clients are not
reporting at all. What does the WSUS Admin Console report as the "Last
Contacted" and "Last Reported" times for this client. Retrieve the entries
from the WindowsUpdate.log for that time period, plus/minus 20 minutes, and
post that here.
If that doesn't work, trace back in the WindowsUpdate.log to find the most
recent activity, and post it here.
Post by Curt McNamee
You are correct the clients are reporting updates that I have approved for
installation as "Not Needed." All my clients are reporting this and if you
go to WindowsUpdate, they have a slew of updates they need to download,
so
I
am guessing the client is not executing the detection correctly (like you
suggested).
WSUS Client Diagnostics Tool
Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is running. . . PASS
Wuaueng.dll version 5.8.0.2469. . . . . . . . . . . . . PASS
This version is WSUS 2.0
Checking AU Settings
AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
Option is from Policy settings
Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use
Checking Connection to WSUS/SUS Server
WUServer = http://159.189.216.73
WUStatusServer = http://159.189.216.73
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
Connection to server. . . . . . . . . . . . . . . . . . PASS
SelfUpdate folder is present. . . . . . . . . . . . . . PASS
Press Enter to Complete
Here's the the last 30 minutes of %windir%\WindowsUpdate.log (there are only
2005-12-08 09:51:59 1572 898 Service *********
2005-12-08 09:51:59 1572 898 Service ** END ** Service: Service exit
[Exit code = 0x240001]
2005-12-08 09:51:59 1572 898 Service *************
5.8.0.2469, tz: -0800) ===========
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\wuaueng.dll
2005-12-08 09:52:02 1572 8b8 Service *************
2005-12-08 09:52:02 1572 8b8 Service ** START ** Service: Service startup
2005-12-08 09:52:02 1572 8b8 Service *********
2005-12-08 09:52:02 1572 8b8 Agent * WU client version 5.8.0.2469
Curt McNamee
2005-12-09 21:39:02 UTC
Permalink
I was looking some WindowsUpdate.log files on client PCs and they all seem to
have this:
+++++++++++ PT: Synchronizing server updates +++++++++++
+ ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
http://159.189.216.73/ClientWebService/client.asmx
Initializing simple targeting cookie, clientId =
1b6b41ed-d96a-4435-9da3-fe5b2db4758e, target group = Workstations, DNS name =
nagas.fresc.ad
Server URL = http://159.189.216.73/SimpleAuthWebService/SimpleAuth.asmx
WARNING: GetCookie failure, error = 0x8024400D, soap client error = 7, soap
error code = 300, HTTP status code = 200
WARNING: SOAP Fault: 0x00012c
WARNING: faultstring:Fault occurred
WARNING: ErrorCode:ConfigChanged(2)
WARNING: Message:
WARNING:
Method:"http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService/GetCookie"
WARNING: ID:755e258e-71fe-4529-813b-2b8e4829efd0
Initializing simple targeting cookie, clientId =
1b6b41ed-d96a-4435-9da3-fe5b2db4758e, target group = Workstations, DNS name =
nagas.fresc.ad
Server URL = http://159.189.216.73/SimpleAuthWebService/SimpleAuth.asmx

The clients are setup to accept cookies, so I am not sure where the error is
here.

Any thoughts?
Thanks again!
-Curt
Post by Lawrence Garvin (MVP)
Post by Curt McNamee
Checking Connection to WSUS/SUS Server
WUServer = http://159.189.216.73
WUStatusServer = http://159.189.216.73
Why is your WSUS server addressed on a PUBLIC IP Address?
Second question I'll ask: If the log posted contains the entire 30 minutes
since you started the AU service, then your fundamental problem is that the
WUA is not doing anything. Did you notice the significant lack of activity
in the 30 minutes of log you posted?
The lack of activity in the log would suggest that your clients are not
reporting at all. What does the WSUS Admin Console report as the "Last
Contacted" and "Last Reported" times for this client. Retrieve the entries
from the WindowsUpdate.log for that time period, plus/minus 20 minutes, and
post that here.
If that doesn't work, trace back in the WindowsUpdate.log to find the most
recent activity, and post it here.
Post by Curt McNamee
You are correct the clients are reporting updates that I have approved for
installation as "Not Needed." All my clients are reporting this and if you
go to WindowsUpdate, they have a slew of updates they need to download, so I
am guessing the client is not executing the detection correctly (like you
suggested).
WSUS Client Diagnostics Tool
Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is running. . . PASS
Wuaueng.dll version 5.8.0.2469. . . . . . . . . . . . . PASS
This version is WSUS 2.0
Checking AU Settings
AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
Option is from Policy settings
Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use
Checking Connection to WSUS/SUS Server
WUServer = http://159.189.216.73
WUStatusServer = http://159.189.216.73
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
Connection to server. . . . . . . . . . . . . . . . . . PASS
SelfUpdate folder is present. . . . . . . . . . . . . . PASS
Press Enter to Complete
Here's the the last 30 minutes of %windir%\WindowsUpdate.log (there are only
2005-12-08 09:51:59 1572 898 Service *********
2005-12-08 09:51:59 1572 898 Service ** END ** Service: Service exit
[Exit code = 0x240001]
2005-12-08 09:51:59 1572 898 Service *************
5.8.0.2469, tz: -0800) ===========
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\wuaueng.dll
2005-12-08 09:52:02 1572 8b8 Service *************
2005-12-08 09:52:02 1572 8b8 Service ** START ** Service: Service startup
2005-12-08 09:52:02 1572 8b8 Service *********
2005-12-08 09:52:02 1572 8b8 Agent * WU client version 5.8.0.2469
2005-12-08 09:52:02 1572 8b8 Agent * SusClientId =
'4dcdb174-b2da-4b82-94db-a74c1e556290'
C:\WINNT\SoftwareDistribution
2005-12-08 09:52:02 1572 8b8 Agent * Access type: No proxy
2005-12-08 09:52:02 1572 8b8 Agent * Network state: Connected
2005-12-08 09:52:47 1572 8b8 Agent *********** Agent: Initializing
Windows
Update Agent ***********
2005-12-08 09:52:47 1572 8b8 Agent *********** Agent: Initializing global
settings cache ***********
2005-12-08 09:52:47 1572 8b8 Agent * WSUS server: http://159.189.216.73
http://159.189.216.73
2005-12-08 09:52:47 1572 8b8 Agent * Target group: Servers
2005-12-08 09:52:47 1572 8b8 Agent * Windows Update access disabled: No
2005-12-08 09:52:48 1572 8b8 DnldMgr Download manager restoring 0
downloads
2005-12-08 09:52:48 1572 8b8 AU ########### AU: Initializing Automatic
Updates ###########
2005-12-08 09:52:48 1572 8b8 AU # WSUS server: http://159.189.216.73
2005-12-08 09:52:48 1572 8b8 AU # Detection frequency: 22
2005-12-08 09:52:48 1572 8b8 AU # Target group: Servers
2005-12-08 09:52:48 1572 8b8 AU # Approval type: Scheduled (Policy)
2005-12-08 09:52:48 1572 8b8 AU # Scheduled install day/time: Every day
at
0:00
2005-12-08 09:52:48 1572 8b8 AU # Auto-install minor updates: Yes (User
preference)
Thanks for your help,
Curt
Post by Lawrence Garvin (MVP)
If the clients are reporting updates as "Not Needed" that you have marked
for approval, it could be that they are, in fact, not needed. It could also
be an indication that the client is not properly executing a detection and
is unaware that the updates have been approved. It could also be that you've
not approved the updates for the group the computer thinks it belongs to.
1. Download the Client Diagnostic Tool from
http://download.microsoft.com/download/9/7/6/976d1084-d2fd-45a1-8c27-a467c768d8ef/WSUS%20Client%20Diagnostic%20Tool.EXE
and post the results.
2. Restart the Automatic Updates service; wait 30 minutes; post the last 30
minutes of %windir%\WindowsUpdate.log
Post by Curt McNamee
Hello everyone,
I have WSUS on a Windows 2003 box with about 50 Windows XP SP2 & Windows
2000 SP4 clients. None of these clients are installing the downloaded
updates that I have approved for them to install. If I do a report showing
the status of the clients and they all show that all the updates are not
needed. This is a first for me, I have another WSUS server at another site
with about 40 clients that is virtually configured identically to this one
and that one works just fine.
I have tried resetting the client's authorization without any luck (tried
this command: C:\windows\system32\wuauclt.exe /resetauthorization
/detectnow).
Any one have a suggestion on what I could try? Thanks!
-Curt McNamee
Lawrence Garvin (MVP)
2005-12-10 07:21:26 UTC
Permalink
Different kind of cookie -- not related to IE cookies at all.

The 0x8024400D error is
0x8024400d - SUS E PT SOAP CLIENT
The message was malformed or incomplete

indicating that the client is sending defective information to the server.

See this article for a possible solution...
http://www.wsuswiki.com/AgentFailedDetecting0x8024400d

Also check http://www.wsuswiki.com/SOAPFault0x00012c
but that issue was supposed to have been fixed in the "gold" code
but we have no confirmation that it was
and a few other instances of this '400d'/SOAP 12c error have been seen since
the code went "gold".
Post by Curt McNamee
I was looking some WindowsUpdate.log files on client PCs and they all seem to
+++++++++++ PT: Synchronizing server updates +++++++++++
+ ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
http://159.189.216.73/ClientWebService/client.asmx
Initializing simple targeting cookie, clientId =
1b6b41ed-d96a-4435-9da3-fe5b2db4758e, target group = Workstations, DNS name =
nagas.fresc.ad
Server URL = http://159.189.216.73/SimpleAuthWebService/SimpleAuth.asmx
WARNING: GetCookie failure, error = 0x8024400D, soap client error = 7, soap
error code = 300, HTTP status code = 200
WARNING: SOAP Fault: 0x00012c
WARNING: faultstring:Fault occurred
WARNING: ErrorCode:ConfigChanged(2)
Method:"http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService/GetCookie"
WARNING: ID:755e258e-71fe-4529-813b-2b8e4829efd0
Initializing simple targeting cookie, clientId =
1b6b41ed-d96a-4435-9da3-fe5b2db4758e, target group = Workstations, DNS name =
nagas.fresc.ad
Server URL = http://159.189.216.73/SimpleAuthWebService/SimpleAuth.asmx
The clients are setup to accept cookies, so I am not sure where the error is
here.
Any thoughts?
Thanks again!
-Curt
Post by Lawrence Garvin (MVP)
Post by Curt McNamee
Checking Connection to WSUS/SUS Server
WUServer = http://159.189.216.73
WUStatusServer = http://159.189.216.73
Why is your WSUS server addressed on a PUBLIC IP Address?
Second question I'll ask: If the log posted contains the entire 30 minutes
since you started the AU service, then your fundamental problem is that the
WUA is not doing anything. Did you notice the significant lack of activity
in the 30 minutes of log you posted?
The lack of activity in the log would suggest that your clients are not
reporting at all. What does the WSUS Admin Console report as the "Last
Contacted" and "Last Reported" times for this client. Retrieve the entries
from the WindowsUpdate.log for that time period, plus/minus 20 minutes, and
post that here.
If that doesn't work, trace back in the WindowsUpdate.log to find the most
recent activity, and post it here.
Post by Curt McNamee
You are correct the clients are reporting updates that I have approved for
installation as "Not Needed." All my clients are reporting this and if you
go to WindowsUpdate, they have a slew of updates they need to download,
so
I
am guessing the client is not executing the detection correctly (like you
suggested).
WSUS Client Diagnostics Tool
Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is running. . . PASS
Wuaueng.dll version 5.8.0.2469. . . . . . . . . . . . . PASS
This version is WSUS 2.0
Checking AU Settings
AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
Option is from Policy settings
Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use
Checking Connection to WSUS/SUS Server
WUServer = http://159.189.216.73
WUStatusServer = http://159.189.216.73
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
Connection to server. . . . . . . . . . . . . . . . . . PASS
SelfUpdate folder is present. . . . . . . . . . . . . . PASS
Press Enter to Complete
Here's the the last 30 minutes of %windir%\WindowsUpdate.log (there are only
2005-12-08 09:51:59 1572 898 Service *********
2005-12-08 09:51:59 1572 898 Service ** END ** Service: Service exit
[Exit code = 0x240001]
2005-12-08 09:51:59 1572 898 Service *************
5.8.0.2469, tz: -0800) ===========
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\wuaueng.dll
2005-12-08 09:52:02 1572 8b8 Service *************
2005-12-08 09:52:02 1572 8b8 Service ** START ** Service: Service startup
2005-12-08 09:52:02 1572 8b8 Service *********
2005-12-08 09:52:02 1572 8b8 Agent * WU client version 5.8.0.2469
2005-12-08 09:52:02 1572 8b8 Agent * SusClientId =
'4dcdb174-b2da-4b82-94db-a74c1e556290'
C:\WINNT\SoftwareDistribution
2005-12-08 09:52:02 1572 8b8 Agent * Access type: No proxy
2005-12-08 09:52:02 1572 8b8 Agent * Network state: Connected
2005-12-08 09:52:47 1572 8b8 Agent *********** Agent: Initializing
Windows
Update Agent ***********
2005-12-08 09:52:47 1572 8b8 Agent *********** Agent: Initializing global
settings cache ***********
http://159.189.216.73
http://159.189.216.73
2005-12-08 09:52:47 1572 8b8 Agent * Target group: Servers
2005-12-08 09:52:47 1572 8b8 Agent * Windows Update access disabled: No
2005-12-08 09:52:48 1572 8b8 DnldMgr Download manager restoring 0
downloads
2005-12-08 09:52:48 1572 8b8 AU ########### AU: Initializing Automatic
Updates ###########
2005-12-08 09:52:48 1572 8b8 AU # WSUS server: http://159.189.216.73
2005-12-08 09:52:48 1572 8b8 AU # Detection frequency: 22
2005-12-08 09:52:48 1572 8b8 AU # Target group: Servers
2005-12-08 09:52:48 1572 8b8 AU # Approval type: Scheduled (Policy)
2005-12-08 09:52:48 1572 8b8 AU # Scheduled install day/time: Every day
at
0:00
2005-12-08 09:52:48 1572 8b8 AU # Auto-install minor updates: Yes (User
preference)
Thanks for your help,
Curt
Post by Lawrence Garvin (MVP)
If the clients are reporting updates as "Not Needed" that you have marked
for approval, it could be that they are, in fact, not needed. It could also
be an indication that the client is not properly executing a detection and
is unaware that the updates have been approved. It could also be that you've
not approved the updates for the group the computer thinks it belongs to.
1. Download the Client Diagnostic Tool from
http://download.microsoft.com/download/9/7/6/976d1084-d2fd-45a1-8c27-a467c768d8ef/WSUS%20Client%20Diagnostic%20Tool.EXE
and post the results.
2. Restart the Automatic Updates service; wait 30 minutes; post the
last
30
minutes of %windir%\WindowsUpdate.log
Post by Curt McNamee
Hello everyone,
I have WSUS on a Windows 2003 box with about 50 Windows XP SP2 & Windows
2000 SP4 clients. None of these clients are installing the downloaded
updates that I have approved for them to install. If I do a report showing
the status of the clients and they all show that all the updates are not
needed. This is a first for me, I have another WSUS server at
another
site
with about 40 clients that is virtually configured identically to
this
one
and that one works just fine.
I have tried resetting the client's authorization without any luck (tried
this command: C:\windows\system32\wuauclt.exe /resetauthorization
/detectnow).
Any one have a suggestion on what I could try? Thanks!
-Curt McNamee
Curt McNamee
2005-12-09 21:58:03 UTC
Permalink
I've been doing some other research and I see that MS recognizes a problem
like this in KB905422 and points to a hotfix in KB898708. Any chance I could
that hotfix? I'll take it anyway I can get it, download, email, etc.

Thanks!
-Curt
Post by Lawrence Garvin (MVP)
Post by Curt McNamee
Checking Connection to WSUS/SUS Server
WUServer = http://159.189.216.73
WUStatusServer = http://159.189.216.73
Why is your WSUS server addressed on a PUBLIC IP Address?
Second question I'll ask: If the log posted contains the entire 30 minutes
since you started the AU service, then your fundamental problem is that the
WUA is not doing anything. Did you notice the significant lack of activity
in the 30 minutes of log you posted?
The lack of activity in the log would suggest that your clients are not
reporting at all. What does the WSUS Admin Console report as the "Last
Contacted" and "Last Reported" times for this client. Retrieve the entries
from the WindowsUpdate.log for that time period, plus/minus 20 minutes, and
post that here.
If that doesn't work, trace back in the WindowsUpdate.log to find the most
recent activity, and post it here.
Post by Curt McNamee
You are correct the clients are reporting updates that I have approved for
installation as "Not Needed." All my clients are reporting this and if you
go to WindowsUpdate, they have a slew of updates they need to download, so I
am guessing the client is not executing the detection correctly (like you
suggested).
WSUS Client Diagnostics Tool
Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is running. . . PASS
Wuaueng.dll version 5.8.0.2469. . . . . . . . . . . . . PASS
This version is WSUS 2.0
Checking AU Settings
AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
Option is from Policy settings
Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use
Checking Connection to WSUS/SUS Server
WUServer = http://159.189.216.73
WUStatusServer = http://159.189.216.73
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
Connection to server. . . . . . . . . . . . . . . . . . PASS
SelfUpdate folder is present. . . . . . . . . . . . . . PASS
Press Enter to Complete
Here's the the last 30 minutes of %windir%\WindowsUpdate.log (there are only
2005-12-08 09:51:59 1572 898 Service *********
2005-12-08 09:51:59 1572 898 Service ** END ** Service: Service exit
[Exit code = 0x240001]
2005-12-08 09:51:59 1572 898 Service *************
5.8.0.2469, tz: -0800) ===========
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\wuaueng.dll
2005-12-08 09:52:02 1572 8b8 Service *************
2005-12-08 09:52:02 1572 8b8 Service ** START ** Service: Service startup
2005-12-08 09:52:02 1572 8b8 Service *********
2005-12-08 09:52:02 1572 8b8 Agent * WU client version 5.8.0.2469
2005-12-08 09:52:02 1572 8b8 Agent * SusClientId =
'4dcdb174-b2da-4b82-94db-a74c1e556290'
C:\WINNT\SoftwareDistribution
2005-12-08 09:52:02 1572 8b8 Agent * Access type: No proxy
2005-12-08 09:52:02 1572 8b8 Agent * Network state: Connected
2005-12-08 09:52:47 1572 8b8 Agent *********** Agent: Initializing
Windows
Update Agent ***********
2005-12-08 09:52:47 1572 8b8 Agent *********** Agent: Initializing global
settings cache ***********
2005-12-08 09:52:47 1572 8b8 Agent * WSUS server: http://159.189.216.73
http://159.189.216.73
2005-12-08 09:52:47 1572 8b8 Agent * Target group: Servers
2005-12-08 09:52:47 1572 8b8 Agent * Windows Update access disabled: No
2005-12-08 09:52:48 1572 8b8 DnldMgr Download manager restoring 0
downloads
2005-12-08 09:52:48 1572 8b8 AU ########### AU: Initializing Automatic
Updates ###########
2005-12-08 09:52:48 1572 8b8 AU # WSUS server: http://159.189.216.73
2005-12-08 09:52:48 1572 8b8 AU # Detection frequency: 22
2005-12-08 09:52:48 1572 8b8 AU # Target group: Servers
2005-12-08 09:52:48 1572 8b8 AU # Approval type: Scheduled (Policy)
2005-12-08 09:52:48 1572 8b8 AU # Scheduled install day/time: Every day
at
0:00
2005-12-08 09:52:48 1572 8b8 AU # Auto-install minor updates: Yes (User
preference)
Thanks for your help,
Curt
Post by Lawrence Garvin (MVP)
If the clients are reporting updates as "Not Needed" that you have marked
for approval, it could be that they are, in fact, not needed. It could also
be an indication that the client is not properly executing a detection and
is unaware that the updates have been approved. It could also be that you've
not approved the updates for the group the computer thinks it belongs to.
1. Download the Client Diagnostic Tool from
http://download.microsoft.com/download/9/7/6/976d1084-d2fd-45a1-8c27-a467c768d8ef/WSUS%20Client%20Diagnostic%20Tool.EXE
and post the results.
2. Restart the Automatic Updates service; wait 30 minutes; post the last 30
minutes of %windir%\WindowsUpdate.log
Post by Curt McNamee
Hello everyone,
I have WSUS on a Windows 2003 box with about 50 Windows XP SP2 & Windows
2000 SP4 clients. None of these clients are installing the downloaded
updates that I have approved for them to install. If I do a report showing
the status of the clients and they all show that all the updates are not
needed. This is a first for me, I have another WSUS server at another site
with about 40 clients that is virtually configured identically to this one
and that one works just fine.
I have tried resetting the client's authorization without any luck (tried
this command: C:\windows\system32\wuauclt.exe /resetauthorization
/detectnow).
Any one have a suggestion on what I could try? Thanks!
-Curt McNamee
Lawrence Garvin (MVP)
2005-12-10 07:22:18 UTC
Permalink
Hotfixes require a telephone call to PSS, as noted in the KB article.

If the 'hotfix' is downloadable (and rarely is that the case), there will be
a link in the KB article.
Post by Curt McNamee
I've been doing some other research and I see that MS recognizes a problem
like this in KB905422 and points to a hotfix in KB898708. Any chance I could
that hotfix? I'll take it anyway I can get it, download, email, etc.
Thanks!
-Curt
Post by Lawrence Garvin (MVP)
Post by Curt McNamee
Checking Connection to WSUS/SUS Server
WUServer = http://159.189.216.73
WUStatusServer = http://159.189.216.73
Why is your WSUS server addressed on a PUBLIC IP Address?
Second question I'll ask: If the log posted contains the entire 30 minutes
since you started the AU service, then your fundamental problem is that the
WUA is not doing anything. Did you notice the significant lack of activity
in the 30 minutes of log you posted?
The lack of activity in the log would suggest that your clients are not
reporting at all. What does the WSUS Admin Console report as the "Last
Contacted" and "Last Reported" times for this client. Retrieve the entries
from the WindowsUpdate.log for that time period, plus/minus 20 minutes, and
post that here.
If that doesn't work, trace back in the WindowsUpdate.log to find the most
recent activity, and post it here.
Post by Curt McNamee
You are correct the clients are reporting updates that I have approved for
installation as "Not Needed." All my clients are reporting this and if you
go to WindowsUpdate, they have a slew of updates they need to download,
so
I
am guessing the client is not executing the detection correctly (like you
suggested).
WSUS Client Diagnostics Tool
Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is running. . . PASS
Wuaueng.dll version 5.8.0.2469. . . . . . . . . . . . . PASS
This version is WSUS 2.0
Checking AU Settings
AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
Option is from Policy settings
Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use
Checking Connection to WSUS/SUS Server
WUServer = http://159.189.216.73
WUStatusServer = http://159.189.216.73
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
Connection to server. . . . . . . . . . . . . . . . . . PASS
SelfUpdate folder is present. . . . . . . . . . . . . . PASS
Press Enter to Complete
Here's the the last 30 minutes of %windir%\WindowsUpdate.log (there are only
2005-12-08 09:51:59 1572 898 Service *********
2005-12-08 09:51:59 1572 898 Service ** END ** Service: Service exit
[Exit code = 0x240001]
2005-12-08 09:51:59 1572 898 Service *************
5.8.0.2469, tz: -0800) ===========
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\wuaueng.dll
2005-12-08 09:52:02 1572 8b8 Service *************
2005-12-08 09:52:02 1572 8b8 Service ** START ** Service: Service startup
2005-12-08 09:52:02 1572 8b8 Service *********
2005-12-08 09:52:02 1572 8b8 Agent * WU client version 5.8.0.2469
2005-12-08 09:52:02 1572 8b8 Agent * SusClientId =
'4dcdb174-b2da-4b82-94db-a74c1e556290'
C:\WINNT\SoftwareDistribution
2005-12-08 09:52:02 1572 8b8 Agent * Access type: No proxy
2005-12-08 09:52:02 1572 8b8 Agent * Network state: Connected
2005-12-08 09:52:47 1572 8b8 Agent *********** Agent: Initializing
Windows
Update Agent ***********
2005-12-08 09:52:47 1572 8b8 Agent *********** Agent: Initializing global
settings cache ***********
http://159.189.216.73
http://159.189.216.73
2005-12-08 09:52:47 1572 8b8 Agent * Target group: Servers
2005-12-08 09:52:47 1572 8b8 Agent * Windows Update access disabled: No
2005-12-08 09:52:48 1572 8b8 DnldMgr Download manager restoring 0
downloads
2005-12-08 09:52:48 1572 8b8 AU ########### AU: Initializing Automatic
Updates ###########
2005-12-08 09:52:48 1572 8b8 AU # WSUS server: http://159.189.216.73
2005-12-08 09:52:48 1572 8b8 AU # Detection frequency: 22
2005-12-08 09:52:48 1572 8b8 AU # Target group: Servers
2005-12-08 09:52:48 1572 8b8 AU # Approval type: Scheduled (Policy)
2005-12-08 09:52:48 1572 8b8 AU # Scheduled install day/time: Every day
at
0:00
2005-12-08 09:52:48 1572 8b8 AU # Auto-install minor updates: Yes (User
preference)
Thanks for your help,
Curt
Post by Lawrence Garvin (MVP)
If the clients are reporting updates as "Not Needed" that you have marked
for approval, it could be that they are, in fact, not needed. It could also
be an indication that the client is not properly executing a detection and
is unaware that the updates have been approved. It could also be that you've
not approved the updates for the group the computer thinks it belongs to.
1. Download the Client Diagnostic Tool from
http://download.microsoft.com/download/9/7/6/976d1084-d2fd-45a1-8c27-a467c768d8ef/WSUS%20Client%20Diagnostic%20Tool.EXE
and post the results.
2. Restart the Automatic Updates service; wait 30 minutes; post the
last
30
minutes of %windir%\WindowsUpdate.log
Post by Curt McNamee
Hello everyone,
I have WSUS on a Windows 2003 box with about 50 Windows XP SP2 & Windows
2000 SP4 clients. None of these clients are installing the downloaded
updates that I have approved for them to install. If I do a report showing
the status of the clients and they all show that all the updates are not
needed. This is a first for me, I have another WSUS server at
another
site
with about 40 clients that is virtually configured identically to
this
one
and that one works just fine.
I have tried resetting the client's authorization without any luck (tried
this command: C:\windows\system32\wuauclt.exe /resetauthorization
/detectnow).
Any one have a suggestion on what I could try? Thanks!
-Curt McNamee
Loading...