Hello.

synchronization of wsus not work
there is such error

SoapException: Fault occurred
at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
   at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
   at Microsoft.UpdateServices.ServerSyncWebServices.ServerSync.ServerSyncProxy.GetUpdateData(Cookie cookie, UpdateIdentity[] updateIds)
   at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.WebserviceGetUpdateData(UpdateIdentity[] updateIds, List`1 allMetadata, List`1 allFileUrls, Boolean isForConfig)
   at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.GetUpdateDataInChunksAndImport(List`1 neededUpdates, List`1 allMetadata, List`1 allFileUrls, Boolean isConfigData)
   at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.ExecuteSyncProtocol(Boolean allowRedirect)

Hi,

I'm using WSUS server (2016) to install windows patches. I'm facing bit strange issue and PFB details.

Issue-  Aug2018 (KB4343887 & KB43438814) patch is not getting installed in few (16 out of 50)  windows 2016 standard edition servers. All these servers are in same network. Last patch success is June cumulative patch on these servers

• Patch getting detected in clients and installing 100%. While rebooting sever, its undoing the patches.
• I've tried to install manually and same issue. I've disabled local windows firewall and disabled Antivirus alsoe. still no luck.
• I've deregister and re-register the patch server & renamed SoftwareDistribution folder also. Still no luck.
• I've made  bits,cryptsvc,trustedinstaller services automatic and no luck.

We have done the patching in 3 slots. Slot-1 -- 10 server (100% Success), Slot-2 -- 15 servers (1 server failed) and slot-3 on Aug 30th -- 25 servers (16 failed).

I've attached error screenshots.  Please assist me to resolve the issue. Is it failing because any dependent (MAY18 patch is already installed in that sevrers) patch missing or on AUG 30th new patch got release, due to this..?

Error Code From logs: Installation Failure: Windows Failed to install the following update with Error 0x800F0922

Error details

SoapException: Fault occurred

at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
   at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
   at Microsoft.UpdateServices.ServerSyncWebServices.ServerSync.ServerSyncProxy.GetUpdateData(Cookie cookie, UpdateIdentity[] updateIds)
   at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.WebserviceGetUpdateData(UpdateIdentity[] updateIds, List`1 allMetadata, List`1 allFileUrls, List`1& updatesWithSecureFileData, Boolean isForConfig)
   at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.GetUpdateDataInChunksAndImport(List`1 neededUpdates, List`1 allMetadata, List`1 allFileUrls, Boolean isConfigData)
   at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.GetAndSaveUpdateMetadata(List`1 updates)
   at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.ExecuteSyncProtocol(Boolean allowRe

nranawaka@phts.com

Since 5 Sept 2018 our WSUS server has been failing to synchronise from MS update.  In the Synchronization Error details I see :

This server is configured to synchronise from MS update.

"The upstream server experienced an unexpected error.  Please try again at a later time."  in the detail I get:

Help would be appreciated ...

Is there a way to further diagnose and ultimately fix ....

Regards,

Hi,

My WSUS stopped syncing ,I noticed it when my sccm failed to sync the Software Updates ,here is the error message : 

SoapException: Fault occurredat System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)   at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)   at Microsoft.UpdateServices.ServerSyncWebServices.ServerSync.ServerSyncProxy.GetUpdateData(Cookie cookie, UpdateIdentity[] updateIds)   at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.WebserviceGetUpdateData(UpdateIdentity[] updateIds, List`1 allMetadata, List`1 allFileUrls, List`1& updatesWithSecureFileData, Boolean isForConfig)   at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.GetUpdateDataInChunksAndImport(List`1 neededUpdates, List`1 allMetadata, List`1 allFileUrls, Boolean isConfigData)   at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.ExecuteSyncProtocol(Boolean allowRedirect)

Any idea what could be the issue?

Hi Team,

Our WSUS upstream server synchronization failed since 8 Sept 2018.An Http error occured.

WebException: The operation has timed out
at System.Web.Services.Protocols.WebClientProtocol.GetWebResponse(WebRequest request)
   at Microsoft.UpdateServices.ServerSync.ServerSyncCompressionProxy.GetWebResponse(WebRequest webRequest)
   at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
   at Microsoft.UpdateServices.ServerSyncWebServices.ServerSync.ServerSyncProxy.GetRevisionIdList(Cookie cookie, ServerSyncFilter filter)
   at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.WebserviceGetRevisionIdList(ServerSyncFilter filter, Boolean isConfigData)
   at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.ExecuteSyncProtocol(Boolean allowRedirect)

I have all methods but problem not fixed yet.Please help if any one have any work around.

Thanks in advance,

Thanks

Amar

Hi, 

since 3 days my WSUS synchronisation fails with this error: 

WebException: Timeout für Vorgang überschritten
bei System.Web.Services.Protocols.WebClientProtocol.GetWebResponse(WebRequest request)
   bei Microsoft.UpdateServices.ServerSync.ServerSyncCompressionProxy.GetWebResponse(WebRequest webRequest)
   bei System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
   bei Microsoft.UpdateServices.ServerSyncWebServices.ServerSync.ServerSyncProxy.GetRevisionIdList(Cookie cookie, ServerSyncFilter filter)
   bei Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.WebserviceGetRevisionIdList(ServerSyncFilter filter, Boolean isConfigData)
   bei Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.ExecuteSyncProtocol(Boolean allowRedirect)

I digged into this issue and find, WsusService.exe tries to contact the server https://sws.update.microsoft.com/ unfortunately the certificate for this server is not OK, Google Chrome reports: NET::ERR_CERTIFICATE_TRANSPARENCY_REQUIRED .

Environment: Server 2012R2 with all updates installed. 

Any ideas how to solve this issue? 

New Guy Here. I am Studying for my 70-411. I am playing with WSUS right now and I can't Figure out why the System won't Sync. I get the Follow error.

The Environment is a Hyper-v Lab and the Server has access to the internet using routing and remote access on the Hyper-v host. Hyper-v host acts as the default gateway for the Lab.

I have a Windows Server 2008 R2 installation that's getting both the August and September Malicious Software Removal Tool updates listed as Needed in WSUS. Every time I attempt to install I get an APPCRASH error for application name Windows-KB890830-x64-V5.51.exe.

I have already tried a Windows Update reset and an SFC Scan. The server does not run any antivirus software. I downloaded the September update from the MS update catalog and attempted to run it but got the same error.

How can I get this out of the list of needed updates for this machine?

So I decided to start upgrading to Server 2016, and start with a new WSUS server.

I followed all the steps for the install.. Basic install on a clean Server Core VM, (tried both WID and SQL), set full access permissions to NETWORK SERVICE in %windir%\Microsoft.Net\Framework\v4... (as well as Framework64 just in case), %windir%\Temp as the WSUS download path.

When I'm trying to run the initial synchronisation, it always stays at 0% with no progress, even if left to run for hours.

The log file is growing ridiculously fast with messages like this:

2016-10-31 10:36:04.674 UTCWarningWsusService.30DBConnection.ExecuteCommandNoResultSqlException occurred. Number 50000 and message invalid update identity in XML for update 002370D7-F7BE-4701-B9FE-85E2092C1B85\100

http://imgur.com/o7Via3Z.jpg

I've tried over and over again, and the issue is always the same. The VM is updated with the latest CU from Windows update. Any searches online didn't lead to anything remotely similar to this.

Something tells me that the database created by WSUS during the postinstall is missing something =/

Any ideas?

Hi

We have WSUS in our Windows 2008 R2 server installed and i have configured only for downloading updates for Windows 7 client systems.

I have add one system for trial to update.

So for wsus not downloading any updates from Microsoft.

I am not clear about auto approval.

Please explain about that, also how to configure WSUS to download the updates.

Thanks

Krishna

Dear Team,

We are facing a issue , we want to exclude server from wsus update please help me 

Hello,

When synchronizing WSUS following error occurs

Server - Windows 2012 standard R2

------------------------------------------------------------------------------------------------------------------------------------------------

Result: An error occurred in the upstream server.

Details..

SoapException: Fault occurred InvalidCookie
at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
   at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
   at Microsoft.UpdateServices.ServerSyncWebServices.ServerSync.ServerSyncProxy.GetUpdateData(Cookie cookie, UpdateIdentity[] updateIds)
   at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.WebserviceGetUpdateData(UpdateIdentity[] updateIds, List`1 allMetadata, List`1 allFileUrls, List`1& updatesWithSecureFileData, Boolean isForConfig)
   at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.GetUpdateDataInChunksAndImport(List`1 neededUpdates, List`1 allMetadata, List`1 allFileUrls, Boolean isConfigData)
   at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.ExecuteSyncProtocol(Boolean allowRedirect)

------------------------------------------------------------------------------------------------------------------------------------------------

I updated sevaral times. But same error happens.

Any idea ?

Thank you.

BR

Anuradha

technet

Hey fellas!

I'm pretty new to the whole WSUS thing, but I've got something that seemingly works, alas with some micromanagement involved. Currently I'm looking at the list of updates categorized undersecurity updates, and I'm seeing a whole lot of old Windows 10 Version 1709 updates.

We've recently upgraded every last one of our machines to 1803 and I'm unsure wether or not I just decline all the older updates or keep them as it is.

It's generally just a question as follows; Do I decline all updates older than 1803, if all our machines are running on 1803?

Any help would be appreciated, thanks in advance guys'n gals. :D

Hello Community,

our wsus makes us very hard problems. Everytime when a bigger update comes out like from 1703 to 1709 or 1709 to 1803 all Updates on our clients getting failed.

If you click "search for updates" on a client PC it say's "0%" for many hours, and after that you will get an Error. In the last year we have to install the Updates manually via USB stick on every single client. (200 PC's)

We also reseted our WSUS completly and installed it completely new but there are the exact same problems as before.

Normal updates like security updates and so on works perfectly fine.

Hopefully someone can help me by solving this problem.

Server Version: Windows Server 2012 R2

WSUS Version: 6.3.9600.18694

We have been fighting issues with WSUS for almost a year now.

We got so frustrated we spun up a new VM and installed everything from scratch.  Still we are consistently seeing 100% of all resources in use for days at a time.

Current specs on the WSUS Server itself: Server 2012 R2, 12gb RAM, quad core 2.4Ghz Xeon

This is fully patched with all the latest updates.  So all the previous hotfixes for previous high CPU issues appear to have been included in these hotfixes.

Database is on a separate server running SQL 2016.  The SQL server is not showing any issues or stress.

SCCM Site Server (which is on its own VM) is Build 1710.  We have ~29,000 endpoints, all on the local network.

IIS WSUS application pool is set with a Queue Length of 25,000, Failure interval 30, Maximum Failures 60, Private Memory 11010048 (just short of the systems maximum, we found it we put to unlimited that we then couldn't do anything to troubleshoot on the server as there were no more resources left).

I ran "exec spGetObsoleteUpdatesToCleanup" on the SQL server and it found none.  Its a brand new database so we wouldn't expect to have much clutter at all at this point.

Last time I opened a support case on this MS simply said to throw more resources at it.  Our VM Infrastructure Admins are resistant to do so because in their opinion it shouldn't be necessary and Microsoft's own documentation for WSUS indicates it shouldn't be either. 

What else can we try?  Has anyone else come across this at all?  When looking at number of current connections to the server it can vary between 40-4,000 at a time.  I have found that even when the connections dropped to ~40 we were still seeing 100% CPU utilization.

Let me know if any additional configuration data is needed.  Thanks.

Hello guys, It used to work normally, and now its showing the error:

and the log shows:

I tried a LOT of solutions, txr directory clean it, including the following pwershell script:

Write-Host"1. Stopping Windows Update Services..."

Stop-Service -Name BITS
Stop-Service -Name wuauserv
Stop-Service -Name appidsvc
Stop-Service -Name cryptsvc

Write-Host "2. Remove QMGR Data file..."
Remove-Item "$env:allusersprofile\Application Data\Microsoft\Network\Downloader\qmgr*.dat" -ErrorAction SilentlyContinue

Write-Host "3. Renaming the Software Distribution and CatRoot Folder..."
Rename-Item $env:systemroot\SoftwareDistribution SoftwareDistribution.bak -ErrorAction SilentlyContinue
Rename-Item $env:systemroot\System32\Catroot2 catroot2.bak -ErrorAction SilentlyContinue

Write-Host "4. Removing old Windows Update log..."
Remove-Item $env:systemroot\WindowsUpdate.log -ErrorAction SilentlyContinue

Write-Host "5. Resetting the Windows Update Services to defualt settings..."
"sc.exe sdset bits D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)"
"sc.exe sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)"

Set-Location $env:systemroot\system32

Write-Host "6. Registering some DLLs..."
regsvr32.exe /s atl.dll
regsvr32.exe /s urlmon.dll
regsvr32.exe /s mshtml.dll
regsvr32.exe /s shdocvw.dll
regsvr32.exe /s browseui.dll
regsvr32.exe /s jscript.dll
regsvr32.exe /s vbscript.dll
regsvr32.exe /s scrrun.dll
regsvr32.exe /s msxml.dll
regsvr32.exe /s msxml3.dll
regsvr32.exe /s msxml6.dll
regsvr32.exe /s actxprxy.dll
regsvr32.exe /s softpub.dll
regsvr32.exe /s wintrust.dll
regsvr32.exe /s dssenh.dll
regsvr32.exe /s rsaenh.dll
regsvr32.exe /s gpkcsp.dll
regsvr32.exe /s sccbase.dll
regsvr32.exe /s slbcsp.dll
regsvr32.exe /s cryptdlg.dll
regsvr32.exe /s oleaut32.dll
regsvr32.exe /s ole32.dll
regsvr32.exe /s shell32.dll
regsvr32.exe /s initpki.dll
regsvr32.exe /s wuapi.dll
regsvr32.exe /s wuaueng.dll
regsvr32.exe /s wuaueng1.dll
regsvr32.exe /s wucltui.dll
regsvr32.exe /s wups.dll
regsvr32.exe /s wups2.dll
regsvr32.exe /s wuweb.dll
regsvr32.exe /s qmgr.dll
regsvr32.exe /s qmgrprxy.dll
regsvr32.exe /s wucltux.dll
regsvr32.exe /s muweb.dll
regsvr32.exe /s wuwebv.dll

Write-Host "7) Removing WSUS client settings..."
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v AccountDomainSid /f
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v PingID /f
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v SusClientId /f

Write-Host "8) Resetting the WinSock..."
netsh winsock reset
netsh winhttp reset proxy

Write-Host "9) Delete all BITS jobs..."
Get-BitsTransfer | Remove-BitsTransfer

Write-Host "10) Attempting to install the Windows Update Agent..."
if($arch -eq 64){
    wusa Windows8-RT-KB2937636-x64 /quiet
}
else{
    wusa Windows8-RT-KB2937636-x86 /quiet
}

Write-Host "11) Starting Windows Update Services..."
Start-Service -Name BITS
Start-Service -Name wuauserv
Start-Service -Name appidsvc
Start-Service -Name cryptsvc

Write-Host "12) Forcing discovery..."
wuauclt /resetauthorization /detectnow

I tried all those commands, (and those are the solutions that you find anywhere about this matter) ONE BY ONE and BY SCRIPT AUTOMATICALLY, nothing works, always same error.

ON foruns out there they speak about WSUS, but we dont have wsus (this computer never had), so its nothing related, but i dont know sometimes windows is (thinking) there is wsus, if you have another try to clean on this computer anything related to wsus too i could try.

Someone have any ideas on this specific error on log?

THank you

Andre j.

I have about 35 servers that need updates.  My goal is to setup up something mostly automated, then I check in to verify it finished before manually rebooting.  At my last job I used GPO's along with a weekly reboot script and the combination of the 2 kept the servers up to date.  Due to the 24/7 nature of this job I can't set auto update policies on the servers here as the default.

Before I began I'm using Win 2008 R2, Win 2012 Server Core, Win 2012 R2, Win 2016 Server Core, and Win 2016 for various servers.  I've had issues where the PS Windows Update module will work fine on 2016, but not on Server Core 2012.  I would like something that works for 2012 and up.  The 2008 servers I don't expect to work like the newer ones and can do them manually since there's only a few left.

I've tried the 3 below items:

1. I setup a OU in AD so I can drag and drop the servers I want to update.  The only problem is that it's a computer GPO. so I have to manually update the policy on every server for it to take affect.  Even then only about 50% of the servers download their updates, none of them installed them, and none of them rebooted at their scheduled time.  During my test of this option I updated the server policies 12 hours before I came in for maintenance and verified the policies applied on each server after running gpupdate/force.  If the pickup rate for windows updates is going to be this low then this option isn't very useful.

2. I found out about a PS module called PSWindowsUpdate.  On 2016 servers it will approve, download, and install but on server core it will only approve and there appears to be no way to force it to download and install.  I was hoping this script would work for me but unless I can get it to work with all versions 2012 and up then it's not going to work.

3. There's a vb script called WUA_SearchDownloadInstall.vbs which I've seen referenced on several forums now.  At first the script looked promising until it locked my test server up.  Now I can't run Windows Updates at all.  The test server I'm using is running Server 2012 Hyper-V Core.  Rebooting it hasn't helped and I'm not sure what to do to get Windows Update to start working again. I'm going to let this go for now as it's just a test server but it's not looking good if the script runs once, then I can't run updates at all.

I'm looking for any information anyone may have on automating windows updates for their servers.  If I can get any of the 3 options (GPO, Powershell, Scheduled Tasks) I mentioned above, or another option working, I will gladly try it.  I really just need to find a good way to manage this so that the updates run at a set time and all I do is check in to verify and reboot.

Here's the error verbatim:

WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond 40.77.232.92:443
at System.Net.HttpWebRequest.GetRequestStream(TransportContext& context)
   at System.Net.HttpWebRequest.GetRequestStream()
   at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
   at Microsoft.UpdateServices.ServerSyncWebServices.ServerSync.ServerSyncProxy.GetAuthConfig()
   at Microsoft.UpdateServices.ServerSync.ServerSyncLib.InternetGetServerAuthConfig(ServerSyncProxy proxy, WebServiceCommunicationHelper webServiceHelper)
   at Microsoft.UpdateServices.ServerSync.ServerSyncLib.Authenticate(AuthorizationManager authorizationManager, Boolean checkExpiration, ServerSyncProxy proxy, Cookie cookie, WebServiceCommunicationHelper webServiceHelper)
   at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.SyncConfigUpdatesFromUSS()
   at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.ExecuteSyncProtocol(Boolean allowRedirect)

So I entered the web address manually on my PC:

My browser claims the certificate is invalid.  Any help is appreciated.