A few days ago I installed update 262 for the WSUS servers in my network.

Update went well besides one locked up database (on main server, restarting SQL and iisreset took care). But after approving the new updates and synchronization kicked in overnight I got serious complaints about slow Intranet network speed.

After some research it got obviously, that on all replicated downstream servers the checkbox to "Download files from Microsoft update, do not download from upstream server" was suddenly unchecked.

Is this a general bug in WSUS update installation routine to reset this setting?

Is there a way to enforce this setting to stick instead of having to verify this manually each time a new update for WSUS server needs to be installed?

Best greetings from Germany
Olaf

In the console of WSUS into a Windows server 2008 R2, i have any clients in different version XP, 7, 8 and now 8.1 but for this client version 8.1 WSUS report a wrong version Windows 6.3 like first with Windows 8 --> 6.2

Microsoft resolved the problem for wrong version in WSUS console for Windows 8 and 2012 server, but the problem appear again with 8.1 and 2012 R2.

I'm afroid because this issue is know since Windows 8.1 preview exist...

I think there is a bug that not resolved by Microsoft because i have installed the last KB for WSUS : Version
3.2.7600.262

Also i googlelised this problem during 1 hour but i find nothing on this issue ?!  If in a Deutsch forum but anyone find an answer...

Thanks for your help.

can a WSUS 2012 R2 install be an autonomous downstream host to to an existing 2008 R2 WSUS 3.0 SP2 installation or does the upstream server's WSUS engine version have to match the downstream server?

Hi,

My WSUS synchronization Progress struck at 0%. It was working fine till last week. Suddenly it synchronization not happening and  while manual synchronizing Progress struck at 0%. Firewall port is open.

Syed

Hi,

When trying to synchronize a WSUS 3.2 computer, it may not sync and progress may remain at 0%. When this occurs you may not see any obvious errors and the sync may never completely fail. Firewall port is open. When this occurs you may not see any obvious errors and the sync may never completely fail.

Syed

Hi,

i have installed KB2938066 on our Server 2008 R2 (WSUS 3.0 SP2) and the serverversion is 3.2.7600.274 (previously KB2720211 was installed).

But the console version still stays at .256 (already rebooted the server) and now i cannot use Wsus Package Publisher any more (must be the same version).

What do i have to do to update the console?

Regards

can anyone interpret this error? Server 2012 R2 is showing but not reporting status.

2nd, how can i see 2012 R2 in WSUS console as it shows like windows 6.3 I have already applied mentioned patch but same. any advise for this also?

WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered error = 0x80240037

thanks

SMF

When I try to install security patch KB2525694 and KB978542 on my Windows Server 2008 R2 machine, I get the message "The Update is Not Applicable To Your Computer".  I am using the following files:

Windows6.1-KB978542-x64 (KB978542)

Windows6.1-KB2525694-x64 (KB2525694)

I believe these are the correct files but no luck installing it.  Any help would be greatly appreciated!

Is it possible that wsus download 26 gb new updates after I am apply new rule for sql updates?

I was have for windows critical and security updates about 34 Gb of updates in content folder before I am apply new rule. After I am apply new rule for sql updates content folder is now about 60 Gb.

Is it normal?

We are using sce 2007 to install updates since short. SCE is using WSUS.

I have approved 5 updates for Windows 7 clients before i can install IE10, the so called prerequisites. The clients are checking every day at 03:00 to see if there are any updates on the server. If there are installing them.

When i test it on some clients and manual started Windows Update to check if there where updates every time Windows Update said there is 1 importend update, restart the machine and the update installed. But after that i run Windows Update again, then he says again one important update and installs it reboot and again one. After the last update again a check and then he sees IE10 NL (i had approved that update to).

Why is WSUS downloads and installs only one update at a time?

freddie

Hello,

I have defined several groups of computers for each OS. Let's say I have approved an update for Windows XP and deploy it on all computers. Will that update get installed on computers with OS windows 8 as well?

Rgds,

Ashley

Hello everyone

I moved (with no problems) my WSUS content to a bigger drive using

wsusutil.exe movecontent U:\WSUS\ U:\wsusmove.log

The move was successful, no errors in the log file. I then went and compared the 2 WSUS directories(old versus new).

The old WSUS directory has 3 folders inside: UpdateServicesDbFiles, UpdateServicesPackages and WsusContent but the new one has 2 folders inside:UpdateServicesPackages and WsusContent.

My question is: why the UpdateServicesDbFiles did not get copied?

Also can someone please let me know if it is OK to delete the old WSUS directory?

This is my wsusmove.log:

14-07-11T10:23:28 Successfully stopped WsusService.
2014-07-11T10:23:28 Beginning content file location change to U:\wsus
2014-07-11T12:26:46 Successfully copied content files.
2014-07-11T12:26:46 Successfully copied application files.
2014-07-11T12:26:47 Successfully changed WUS configuration.
2014-07-11T12:26:48 Successfully changed IIS virtual directory path.
2014-07-11T12:26:48 Successfully removed existing local content network shares.
2014-07-11T12:26:48 Successfully created local content network shares.
2014-07-11T12:26:48 Successfully changed registry value for content store directory.
2014-07-11T12:26:48 Successfully changed content file location.
2014-07-11T12:26:51 Successfully started WsusService.
2014-07-11T12:26:51 Content integrity check and repair...
2014-07-11T12:26:51 Initiated content integrity check and repair.

Many thanks

I've gone through several forums and Technet posts about how to resolve this issue.  I've finally resolved to just create a new VM to handle the WSUS service in hopes to stop the hemorrhaging every Microsoft Tuesday in disk space.

To my dismay, even with a brand new installation of WSUS, we still have a massive amount of space taken up, and before anyone suggests checking the obvious:

• We have no downstream servers setup
• We only have one language selected:  English
• We are not downloading express installation files
• I run the server cleanup-wizard monthly

We are synchronizing only on the following products:

• Office 2007
• Office 2010
• Office 2013
• SQL Server 2012
• SQL Server 2008 R2
• SQL Server 2008
• SQL Server 2005
• Systems Management Server 2003
• Windows 7
• Windows 8.1
• Windows Server 2003
• Windows Server 2008 R2
• Windows Server 2008 Server Manager Dynamic Installer
• Windows Server 2008
• Windows Server 2012 R2
• Windows Server 2012
• Windows Server Manager - Windows Server Update Services (WSUS) Dynamic Installer

Syncing and auto-approving the following classifications:

• Critical Updates
• Definition Updates
• Security Updates

And this is our WSUS environment:

• Windows Server 2008 R2 SP1
• Update Services v3.2.7600.226

With all of that said, the wsuscontent folder is taking up 84.9 GB.  Before this last MS Tuesday it was ~80 GB.

Any suggestions would be appreciated.

Should configure WSUS in a high security environment. We have a WSUS Server in a DMZ that is not domain joined. a WSUS replica server in the LAN should pull updates and approvals from the WSUS server in the DMZ over SSL.

Technet, http://technet.microsoft.com/en-us/library/hh852346.aspx states that "Clients and downstream servers that are configured to use Transport Layer Security (TLS) or HTTPS must also be configured to use a fully qualified domain name (FQDN) for their upstream WSUS server."

Our upstream WSUS server is a stanalone server without a FQDN. There is no DNS suffix configured. My question: Is it possible to encrypt the traffic between the upstream and downstrem WSUS server in this case?

Thank you in advance for any help.

Franz

Recently migrated from 2008R2 WSUS to 2012R2 WSUS via a very troublesome migration (see this thread for details:  http://community.spiceworks.com/topic/535378-wsus-replica-no-computers-updates-listed?page=1#entry-3541584 ).  But I was finally able to get the migration to work, db moved and set up, sync'd w/MS, etc.  Yet for some reason none of my 2008R2 servers or Win7 machines connect to the new WSUS server.  Also, which is puzzling, is the actual WSUS server itself doesn't connect in to itself.

2014-07-14 05:48:12:681 1112 2448 AU #############

2014-07-14 05:48:12:681 1112 2448 AU ## START ## AU: Search for updates

2014-07-14 05:48:12:681 1112 2448 AU #########

2014-07-14 05:48:12:683 1112 2448 AU <<## SUBMITTED ## AU: Search for updates [CallId = {E426BB1C-410A-4B3C-B37F-CAD668BA88CF}]

2014-07-14 05:48:12:683 1112 20fc Agent *************

2014-07-14 05:48:12:683 1112 20fc Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]

2014-07-14 05:48:12:683 1112 20fc Agent *********

2014-07-14 05:48:12:683 1112 20fc Agent * Online = Yes; Ignore download priority = No

2014-07-14 05:48:12:684 1112 20fc Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"

2014-07-14 05:48:12:684 1112 20fc Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed

2014-07-14 05:48:12:684 1112 20fc Agent * Search Scope = {Machine}

2014-07-14 05:48:12:758 1112 20fc Setup Checking for agent SelfUpdate

2014-07-14 05:48:12:759 1112 20fc Setup Client version: Core: 7.6.7600.256 Aux: 7.6.7600.256

2014-07-14 05:48:12:759 1112 20fc Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:

2014-07-14 05:48:12:789 1112 20fc Misc Microsoft signed: Yes

2014-07-14 05:48:15:056 1112 20fc Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:

2014-07-14 05:48:15:063 1112 20fc Misc Microsoft signed: Yes

2014-07-14 05:48:15:067 1112 20fc Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:

2014-07-14 05:48:15:082 1112 20fc Misc Microsoft signed: Yes

2014-07-14 05:48:15:085 1112 20fc Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80190194

2014-07-14 05:48:15:085 1112 20fc Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80190194

2014-07-14 05:48:15:085 1112 20fc Misc WARNING: DownloadFileInternal failed for http://ServerName-01:8530/selfupdate/WSUS3/x64/Win7SP1/wsus3setup.cab: error 0x80190194

2014-07-14 05:48:15:085 1112 20fc Setup WARNING: SelfUpdate check failed to download package information, error = 0x80244019

2014-07-14 05:48:15:085 1112 20fc Setup FATAL: SelfUpdate check failed, err = 0x80244019

2014-07-14 05:48:15:085 1112 20fc Agent * WARNING: Skipping scan, self-update check returned 0x80244019

2014-07-14 05:48:15:115 1112 20fc Agent * WARNING: Exit code = 0x80244019

2014-07-14 05:48:15:115 1112 20fc Agent *********

2014-07-14 05:48:15:115 1112 20fc Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]

2014-07-14 05:48:15:115 1112 20fc Agent *************

2014-07-14 05:48:15:115 1112 20fc Agent WARNING: WU client failed Searching for update with error 0x80244019

2014-07-14 05:48:15:116 1112 1658 AU >>## RESUMED ## AU: Search for updates [CallId = {E426BB1C-410A-4B3C-B37F-CAD668BA88CF}]

2014-07-14 05:48:15:116 1112 1658 AU # WARNING: Search callback failed, result = 0x80244019

2014-07-14 05:48:15:116 1112 1658 AU # WARNING: Failed to find updates with error code 80244019

2014-07-14 05:48:15:116 1112 1658 AU #########

2014-07-14 05:48:15:116 1112 1658 AU ## END ## AU: Search for updates [CallId = {E426BB1C-410A-4B3C-B37F-CAD668BA88CF}]

2014-07-14 05:48:15:116 1112 1658 AU #############

2014-07-14 05:48:15:116 1112 1658 AU Successfully wrote event for AU health state:0

2014-07-14 05:48:15:117 1112 1658 AU AU setting next detection timeout to 2014-07-14 17:48:15

2014-07-14 05:48:15:117 1112 1658 AU Successfully wrote event for AU health state:0

2014-07-14 05:48:15:131 1112 1658 AU Successfully wrote event for AU health state:0

2014-07-14 05:48:20:085 1112 20fc Report REPORT EVENT: {46204AF0-1316-4901-8710-817B9064F3D9} 2014-07-14 05:48:15:085-0700 1 148 101 {D67661EB-2423-451D-BF5D-13199E37DF28} 1 80244019 SelfUpdate Failure Software Synchronization Windows Update Client failed to detect with error 0x80244019.

2014-07-14 05:48:20:107 1112 20fc Report CWERReporter::HandleEvents - WER report upload completed with status 0x8

2014-07-14 05:48:20:107 1112 20fc Report WER Report sent: 7.6.7600.256 0x80244019 D67661EB-2423-451D-BF5D-13199E37DF28 Scan 101 Managed

2014-07-14 05:48:20:107 1112 20fc Report CWERReporter finishing event handling. (00000000)

2014-07-14 05:59:19:092 1112 20fc PT WARNING: Cached cookie has expired or new PID is available

2014-07-14 05:59:19:092 1112 20fc PT Initializing simple targeting cookie, clientId = be5336c9-d649-431a-91b6-d4f8ac2cbbe5, target group = , DNS name = ComputerName.domain.local

2014-07-14 05:59:19:092 1112 20fc PT Server URL = http://ServerName-01:8530/SimpleAuthWebService/SimpleAuth.asmx

2014-07-14 05:59:19:104 1112 20fc Report Uploading 1 events using cached cookie, reporting URL = http://ServerName-01:8530/ReportingWebService/ReportingWebService.asmx

2014-07-14 05:59:19:106 1112 20fc Report Reporter successfully uploaded 1 events.

I'm also seeing a bunch of MSSQL$MICROSOFT##WID errors in event viewer.  They all are talking about the susdb file thatWAS initially associated with the WSUS install.  That was prior to my changing over to SQL2014express to get things to work...it looks as if it never fully cleared itself out.  That file is no longer in the Windows\WID folder, yet there are still other files in there...is there a way to remove MSSQL$MICROSOFT##WID and this association with susdb file?

I think this is also the reason my SBE backup jobs are failing on my Hyper-V server...because there are backup job errors on this server referencing the SQL##WID account...

Any and all help is greatly appreciated.

Thanks

Hi Guys

I have been searching for a resolution regarding a server 2008 SP2 updates failing.

I get an error 80246001. There is no WSUS server in domain and GPO has been configured for it to go to MS servers to get update.

I have searched most of the solutions and applied but no luck.

I have applied registry fixes, proxy, and MS' own update tool fix but same error. Ran all sorts of malware, virus and root kit checks. Ran hijackme, AVG, MS' malicious detector, Kaspersky, and various other things came back clean.

Please, if anyone has any other ideas on how to fix this please let me know.

Hi everyone,

I ran into a problem in our WSUS environment after installing the latest hotfix KB2938066.

We have WS2008R2 SP1 (fully patched) for WSUS-Upstream server and couple of the same servers for WSUS-Downstream.

Previous functional version of WSUS was 3.2.7600.256.

After installing KB2938066 (v3.2.7600.274) the WU/MU clients updated, but on some machines, mostly on servers with WS2008R2 SP1 (RADIUS and Domain Controllers), they now have problems installing updates.

The error I see in '0xC000000D', which is something peculiar and not well searchable on the internet.

Here is part of the WindowsUpdate log.

I would appreciate any advice. Thx, John.

Agent *************
Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
Agent *********
Agent * Online = Yes; Ignore download priority = No
Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
Agent * Search Scope = {Machine}
Setup Checking for agent SelfUpdate
Setup Client version: Core: 7.6.7600.320 Aux: 7.6.7600.320
Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab with dwProvFlags 0x00000080:
Misc Microsoft signed: NA
Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\TMPC435.tmp with dwProvFlags 0x00000080:
Misc FATAL: Error: 0xc000000d when verifying trust for C:\Windows\SoftwareDistribution\SelfUpdate\TMPC435.tmp
Misc WARNING: Digital Signatures on file C:\Windows\SoftwareDistribution\SelfUpdate\TMPC435.tmp are not trusted: Error 0xc000000d
Setup FATAL: Ident cab verification failed with error 0XC000000D
Setup WARNING: SelfUpdate check failed to download package information, error = 0xC000000D
Setup FATAL: SelfUpdate check failed, err = 0xC000000D
Agent * WARNING: Skipping scan, self-update check returned 0xC000000D
Agent * WARNING: Exit code = 0xC000000D
Agent *********
Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
Agent *************
Agent WARNING: WU client failed Searching for update with error 0xc000000d
AU >>## RESUMED ## AU: Search for updates [CallId = {9CD5DB56-3B59-4481-90D0-FD1E34D65233}]
AU # WARNING: Search callback failed, result = 0xC000000D
AU # WARNING: Failed to find updates with error code C000000D
AU #########
AU ## END ## AU: Search for updates [CallId = {9CD5DB56-3B59-4481-90D0-FD1E34D65233}]
AU #############

Here is the WER file, which appeared in the application event log as information:

Hello,

I just set up a new WSUS on my domain, I used the Server Manger to install it and all seemed to install without issue, but when I open the WSUS Console I get the following screen:

I already checked the eventvwr and found the following errors:

Log Name:      Application
Source:        Windows Server Update Services
Date:          15.07.2014 08:52:12
Event ID:      12002
Task Category: 9
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      ANBK01.andex.local
Description:
The Reporting Web Service is not working.
Event Xml:<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"><System><Provider Name="Windows Server Update Services" /><EventID Qualifiers="0">12002</EventID><Level>2</Level><Task>9</Task><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime="2014-07-15T06:52:12.000Z" /><EventRecordID>1253894276</EventRecordID><Channel>Application</Channel><Computer>ANBK01.andex.local</Computer><Security /></System><EventData><Data>The Reporting Web Service is not working.</Data></EventData></Event>

Log Name:      Application
Source:        Windows Server Update Services
Date:          15.07.2014 08:52:12
Event ID:      12012
Task Category: 9
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      ANBK01.andex.local
Description:
The API Remoting Web Service is not working.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"><System><Provider Name="Windows Server Update Services" /><EventID Qualifiers="0">12012</EventID><Level>2</Level><Task>9</Task><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime="2014-07-15T06:52:12.000Z" /><EventRecordID>1253894277</EventRecordID><Channel>Application</Channel><Computer>ANBK01.andex.local</Computer><Security /></System><EventData><Data>The API Remoting Web Service is not working.</Data></EventData></Event>

Log Name:      Application
Source:        Windows Server Update Services
Date:          15.07.2014 08:52:12
Event ID:      12022
Task Category: 9
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      ANBK01.andex.local
Description:
The Client Web Service is not working.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"><System><Provider Name="Windows Server Update Services" /><EventID Qualifiers="0">12022</EventID><Level>2</Level><Task>9</Task><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime="2014-07-15T06:52:12.000Z" /><EventRecordID>1253894278</EventRecordID><Channel>Application</Channel><Computer>ANBK01.andex.local</Computer><Security /></System><EventData><Data>The Client Web Service is not working.</Data></EventData></Event>

Log Name:      Application
Source:        Windows Server Update Services
Date:          15.07.2014 08:52:12
Event ID:      12042
Task Category: 9
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      ANBK01.andex.local
Description:
The SimpleAuth Web Service is not working.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"><System><Provider Name="Windows Server Update Services" /><EventID Qualifiers="0">12042</EventID><Level>2</Level><Task>9</Task><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime="2014-07-15T06:52:12.000Z" /><EventRecordID>1253894279</EventRecordID><Channel>Application</Channel><Computer>ANBK01.andex.local</Computer><Security /></System><EventData><Data>The SimpleAuth Web Service is not working.</Data></EventData></Event>

Log Name:      Application
Source:        Windows Server Update Services
Date:          15.07.2014 08:52:12
Event ID:      12052
Task Category: 9
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      ANBK01.andex.local
Description:
The DSS Authentication Web Service is not working.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"><System><Provider Name="Windows Server Update Services" /><EventID Qualifiers="0">12052</EventID><Level>2</Level><Task>9</Task><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime="2014-07-15T06:52:12.000Z" /><EventRecordID>1253894280</EventRecordID><Channel>Application</Channel><Computer>ANBK01.andex.local</Computer><Security /></System><EventData><Data>The DSS Authentication Web Service is not working.</Data></EventData></Event>

I found multiple forum entries on the problem concerning permission issues I used the following MS article and checked and set the permissions according to it, but the problem still persists:

http://social.technet.microsoft.com/wiki/contents/articles/512.troubleshooting-guide-for-issues-where-wsus-clients-are-not-reporting-in.aspx

Can someone help me with this issue.

Thanks ion advance

Paul