Hi there, thanks for your help on this.
I am not sure I understand you question. My WSUS server is on a public IP
because that's the subnet used at that site (we could use a private subnet,
but then we'd have to add that route). It's firewalled off by 3 layers of
firewalls (network security folks are anal).
I noticed the lack of activity and that was puzzling to me as well. The
WSUS Admin console reports the clients are reporting each and every morning
during the scheduled time. Last night this was reported in the
WindowsUpdate.log (it's the very next/last thing in the log file):
2005-12-08 22:49:34 1572 8b8 AU #############
2005-12-08 22:49:34 1572 8b8 AU ## START ## AU: Search for updates
2005-12-08 22:49:34 1572 8b8 AU #########
2005-12-08 22:49:34 1572 8b8 AU <<## SUBMITTED ## AU: Search for updates
[CallId = {676B5033-F7CF-480E-A682-7567E64F602B}]
2005-12-08 22:49:34 1572 6a8 Agent *************
2005-12-08 22:49:34 1572 6a8 Agent ** START ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2005-12-08 22:49:34 1572 6a8 Agent *********
2005-12-08 22:49:37 1572 6a8 Setup *********** Setup: Checking whether
self-update is required ***********
2005-12-08 22:49:37 1572 6a8 Setup * Inf file:
C:\WINNT\SoftwareDistribution\SelfUpdate\Default\wusetup.inf
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\cdm.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\iuengine.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuapi.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuauclt.exe: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuauclt1.exe: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuaucpl.cpl: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuaueng.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuaueng1.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wucltui.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wups.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-08 22:49:37 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wups2.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-08 22:49:38 1572 6a8 Setup Update NOT required for
C:\WINNT\system32\wuweb.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-08 22:49:38 1572 6a8 Setup * IsUpdateRequired = No
2005-12-08 22:49:39 1572 6a8 PT +++++++++++ PT: Synchronizing server
updates +++++++++++
2005-12-08 22:49:39 1572 6a8 PT + ServiceId =
{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
http://159.189.216.73/ClientWebService/client.asmx
2005-12-08 22:49:41 1572 6a8 PT Initializing simple targeting cookie,
clientId = 4dcdb174-b2da-4b82-94db-a74c1e556290, target group = Servers, DNS
name = bogie.fresc.ad
2005-12-08 22:49:41 1572 6a8 PT Server URL =
http://159.189.216.73/SimpleAuthWebService/SimpleAuth.asmx
2005-12-08 22:50:02 1572 6a8 Agent * Found 0 updates and 5 categories in
search
2005-12-08 22:50:02 1572 6a8 Report *********** Report: Initializing static
reporting data ***********
2005-12-08 22:50:02 1572 6a8 Report * OS Version = 5.2.3790.1.0.196882
2005-12-08 22:50:02 1572 6a8 Report * Computer Brand = D815EA
2005-12-08 22:50:02 1572 6a8 Report * Computer Model = EA81510A
2005-12-08 22:50:02 1572 6a8 Report * Bios Revision =
EA81510A.86A.0051.P11.0106190714
2005-12-08 22:50:02 1572 6a8 Report * Bios Name = Default System BIOS
2005-12-08 22:50:02 1572 6a8 Report * Bios Release Date =
2001-06-19T00:00:00
2005-12-08 22:50:02 1572 6a8 Report * Locale ID = 1033
2005-12-08 22:50:03 1572 6a8 Agent *********
2005-12-08 22:50:03 1572 6a8 Agent ** END ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2005-12-08 22:50:03 1572 6a8 Agent *************
2005-12-08 22:50:03 1572 6a8 AU >>## RESUMED ## AU: Search for updates
[CallId = {676B5033-F7CF-480E-A682-7567E64F602B}]
2005-12-08 22:50:03 1572 6a8 AU # 0 updates detected
2005-12-08 22:50:03 1572 6a8 AU #########
2005-12-08 22:50:03 1572 6a8 AU ## END ## AU: Search for updates [CallId
= {676B5033-F7CF-480E-A682-7567E64F602B}]
2005-12-08 22:50:03 1572 6a8 AU #############
2005-12-08 22:50:03 1572 6a8 AU AU setting next detection timeout to
2005-12-10 01:31:48
2005-12-08 22:50:08 1572 6a8 Report REPORT EVENT:
{776568E0-AFB3-4689-B7FC-36EF9263DA65} 2005-12-08
22:50:02-0800 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Software Synchronization Agent has finished detecting items.
2005-12-08 22:50:08 1572 6a8 Report REPORT EVENT:
{5F8786AB-25F1-49B4-806E-E35EEA774669} 2005-12-08
22:50:02-0800 1 153 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Pre-Deployment Check Reporting client status.
2005-12-08 23:01:10 1572 6a8 Report Uploading 2 events using cached cookie,
reporting URL =
http://159.189.216.73/ReportingWebService/ReportingWebService.asmx
2005-12-08 23:01:16 1572 6a8 Report Reporter successfully uploaded 2 events.
2005-12-09 00:00:10 1572 8b8 AU Forced install timer expired for scheduled
install
I looked through the whole log file and I could be reading it wrong, but it
seems that only the WSUS server is contacting itself to find updates. I
posted the entire log file at:
http://oregonstate.edu/~mcnameec/WSUS/WindowsUpdate.log
Thanks again for your help,
Curt McNamee
Post by Lawrence Garvin (MVP)Post by Curt McNameeChecking Connection to WSUS/SUS Server
WUServer = http://159.189.216.73
WUStatusServer = http://159.189.216.73
Why is your WSUS server addressed on a PUBLIC IP Address?
Second question I'll ask: If the log posted contains the entire 30 minutes
since you started the AU service, then your fundamental problem is that the
WUA is not doing anything. Did you notice the significant lack of activity
in the 30 minutes of log you posted?
The lack of activity in the log would suggest that your clients are not
reporting at all. What does the WSUS Admin Console report as the "Last
Contacted" and "Last Reported" times for this client. Retrieve the entries
from the WindowsUpdate.log for that time period, plus/minus 20 minutes, and
post that here.
If that doesn't work, trace back in the WindowsUpdate.log to find the most
recent activity, and post it here.
Post by Curt McNameeYou are correct the clients are reporting updates that I have approved for
installation as "Not Needed." All my clients are reporting this and if you
go to WindowsUpdate, they have a slew of updates they need to download, so I
am guessing the client is not executing the detection correctly (like you
suggested).
WSUS Client Diagnostics Tool
Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is running. . . PASS
Wuaueng.dll version 5.8.0.2469. . . . . . . . . . . . . PASS
This version is WSUS 2.0
Checking AU Settings
AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
Option is from Policy settings
Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use
Checking Connection to WSUS/SUS Server
WUServer = http://159.189.216.73
WUStatusServer = http://159.189.216.73
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
Connection to server. . . . . . . . . . . . . . . . . . PASS
SelfUpdate folder is present. . . . . . . . . . . . . . PASS
Press Enter to Complete
Here's the the last 30 minutes of %windir%\WindowsUpdate.log (there are only
2005-12-08 09:51:59 1572 898 Service *********
2005-12-08 09:51:59 1572 898 Service ** END ** Service: Service exit
[Exit code = 0x240001]
2005-12-08 09:51:59 1572 898 Service *************
5.8.0.2469, tz: -0800) ===========
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\wuaueng.dll
2005-12-08 09:52:02 1572 8b8 Service *************
2005-12-08 09:52:02 1572 8b8 Service ** START ** Service: Service startup
2005-12-08 09:52:02 1572 8b8 Service *********
2005-12-08 09:52:02 1572 8b8 Agent * WU client version 5.8.0.2469
2005-12-08 09:52:02 1572 8b8 Agent * SusClientId =
'4dcdb174-b2da-4b82-94db-a74c1e556290'
C:\WINNT\SoftwareDistribution
2005-12-08 09:52:02 1572 8b8 Agent * Access type: No proxy
2005-12-08 09:52:02 1572 8b8 Agent * Network state: Connected
2005-12-08 09:52:47 1572 8b8 Agent *********** Agent: Initializing
Windows
Update Agent ***********
2005-12-08 09:52:47 1572 8b8 Agent *********** Agent: Initializing global
settings cache ***********
2005-12-08 09:52:47 1572 8b8 Agent * WSUS server: http://159.189.216.73
http://159.189.216.73
2005-12-08 09:52:47 1572 8b8 Agent * Target group: Servers
2005-12-08 09:52:47 1572 8b8 Agent * Windows Update access disabled: No
2005-12-08 09:52:48 1572 8b8 DnldMgr Download manager restoring 0
downloads
2005-12-08 09:52:48 1572 8b8 AU ########### AU: Initializing Automatic
Updates ###########
2005-12-08 09:52:48 1572 8b8 AU # WSUS server: http://159.189.216.73
2005-12-08 09:52:48 1572 8b8 AU # Detection frequency: 22
2005-12-08 09:52:48 1572 8b8 AU # Target group: Servers
2005-12-08 09:52:48 1572 8b8 AU # Approval type: Scheduled (Policy)
2005-12-08 09:52:48 1572 8b8 AU # Scheduled install day/time: Every day
at
0:00
2005-12-08 09:52:48 1572 8b8 AU # Auto-install minor updates: Yes (User
preference)
Thanks for your help,
Curt
Post by Lawrence Garvin (MVP)If the clients are reporting updates as "Not Needed" that you have marked
for approval, it could be that they are, in fact, not needed. It could also
be an indication that the client is not properly executing a detection and
is unaware that the updates have been approved. It could also be that you've
not approved the updates for the group the computer thinks it belongs to.
1. Download the Client Diagnostic Tool from
http://download.microsoft.com/download/9/7/6/976d1084-d2fd-45a1-8c27-a467c768d8ef/WSUS%20Client%20Diagnostic%20Tool.EXE
and post the results.
2. Restart the Automatic Updates service; wait 30 minutes; post the last 30
minutes of %windir%\WindowsUpdate.log
Post by Curt McNameeHello everyone,
I have WSUS on a Windows 2003 box with about 50 Windows XP SP2 & Windows
2000 SP4 clients. None of these clients are installing the downloaded
updates that I have approved for them to install. If I do a report showing
the status of the clients and they all show that all the updates are not
needed. This is a first for me, I have another WSUS server at another site
with about 40 clients that is virtually configured identically to this one
and that one works just fine.
I have tried resetting the client's authorization without any luck (tried
this command: C:\windows\system32\wuauclt.exe /resetauthorization
/detectnow).
Any one have a suggestion on what I could try? Thanks!
-Curt McNamee