Hi all,

The Windows Update Group Policy we've applied to our Windows 10 machines is summarised below (there's a variety of versions from 1511 through to 1803, with some LTSB 2016 v1607 in the mix).  We want WSUS to handle updates, so to ensure Dual Scan is not enabled, the 'Defer Upgrades and Updates' policy is set to 'Not Configured', and both 'Turn off access to all Windows Update features' and 'Do not connect to any Windows Update Internet locations' are set to 'Enabled'.

However, some Windows 10 machines still seem to be going over the Internet to Windows Update, rather than getting their updates from our WSUS server.

We've checked the default update service being used on these problematic machines as follows:

$MUSM = New-Object -ComObject "Microsoft.Update.ServiceManager"

$MUSM.Services | select Name, IsDefaultAUService

... and the default service is showing as either 'Windows Update' or 'Microsoft Update'.  On the majority of Windows 10 machines (which have the same Group Policy applied), the default service shows as 'Windows Server Update Service'.

There is no consistency re: Windows 10 version of machines that have their default service showing as either 'Windows Update' or 'Microsoft Update'.

Does anyone know whether this is a problem with a Group Policy setting, or otherwise is there something on the Windows 10 machines that would be causing this issue?

Many thanks in advance,

TT1999

###############################################

COMPUTER CONFIGURATION/ADMINISTRATIVE TEMPLATES/SYSTEM/INTERNET COMMUNICATION MANAGEMENT/INTERNET COMMUNICATION SETTINGS

Turn off access to all Windows Update features

Enabled

COMPUTER CONFIGURATION/ADMINISTRATIVE TEMPLATES/WINDOWS COMPONENTS/WINDOWS UPDATE

Allow Automatic Updates immediate installation

Enabled

Allow non-administrators to receive update notifications

Enabled

Automatic Updates detection frequency

Enabled

- Check for updates at the following interval (hours): 22

Configure Automatic Updates

Enabled

- Configure automatic updating: 4 - Auto download and schedule the install

- Install during automatic maintenance  

- Scheduled install day: 0 - Every day

- Scheduled install time: 16:00

Do not connect to any Windows Update Internet locations

Enabled

Enable client-side targeting

Enabled

- Target group name for this computer: <targetgroupname>

No auto-restart with logged on users for scheduled automatic updates installations

Enabled

Reschedule Automatic Updates scheduled installations

Enabled

- Wait after system startup (minutes): 60

Specify intranet Microsoft update service location

Enabled

- Set the intranet update service for detecting updates: http://<wsusserver>:8530

- Set the intranet statistics server: http:// <wsusserver>:8530

###############################################

Hello.

I recently upgraded my WSUS host (WID) from Server 2012 to 2012R2.

After upgrade is finished I found, that WSUS Post-deployment configuration failed with the following error:

--------

Log file is located at C:\Users\xxx\AppData\Local\Temp\tmp7AA1.tmp
Post install is starting
Fatal Error: The system cannot find the path specified.

--------

I tried to launch postinstall using Powershell and got the same result.

I also checked if UpdateServices-Services.xml is placed in C:\Windows\System32\ServerManager\ComponentConfiguration folder and contains correct path to WSUS files - everything was OK.

There is the full log:

2014-05-12 15:40:17  Postinstall started
2014-05-12 15:40:17  Detected role services: Api, UI, WidDatabase, Services
2014-05-12 15:40:17  Start: LoadSettingsFromParameters
2014-05-12 15:40:17  Content local is: False
2014-05-12 15:40:17  SQL instname is:
2014-05-12 15:40:17  End: LoadSettingsFromParameters
2014-05-12 15:40:18  Start: Run
2014-05-12 15:40:18  Fetching WsusAdministratorsSid from registry store
2014-05-12 15:40:18  Value is S-1-5-21-3606383621-533361507-1611783712-1001
2014-05-12 15:40:18  Fetching WsusReportersSid from registry store
2014-05-12 15:40:18  Value is S-1-5-21-3606383621-533361507-1611783712-1002
2014-05-12 15:40:18  Configuring content directory...
2014-05-12 15:40:18  Configuring groups...
2014-05-12 15:40:18  Starting group configuration for WSUS Administrators...
2014-05-12 15:40:18  Found group in regsitry, attempting to use it...
2014-05-12 15:40:20  Writing group to registry...
2014-05-12 15:40:20  Finished group creation
2014-05-12 15:40:20  Starting group configuration for WSUS Reporters...
2014-05-12 15:40:20  Found group in regsitry, attempting to use it...
2014-05-12 15:40:20  Writing group to registry...
2014-05-12 15:40:20  Finished group creation
2014-05-12 15:40:20  Configuring permissions...
2014-05-12 15:40:20  Fetching content directory...
2014-05-12 15:40:20  Fetching ContentDir from registry store
2014-05-12 15:40:20  Value is D:\WSUS
2014-05-12 15:40:20  Fetching group SIDs...
2014-05-12 15:40:20  Fetching WsusAdministratorsSid from registry store
2014-05-12 15:40:20  Value is S-1-5-21-3606383621-533361507-1611783712-1001
2014-05-12 15:40:20  Fetching WsusReportersSid from registry store
2014-05-12 15:40:20  Value is S-1-5-21-3606383621-533361507-1611783712-1002
2014-05-12 15:40:20  Creating group principals...
2014-05-12 15:40:20  Granting directory permissions...
2014-05-12 15:40:21  Granting permissions on content directory...
2014-05-12 15:41:24  Granting registry permissions...
2014-05-12 15:41:24  Granting registry permissions...
2014-05-12 15:41:24  Granting registry permissions...
2014-05-12 15:41:24  Configuring shares...
2014-05-12 15:41:24  Configuring network shares...
2014-05-12 15:41:24  Fetching content directory...
2014-05-12 15:41:24  Fetching ContentDir from registry store
2014-05-12 15:41:24  Value is D:\WSUS
2014-05-12 15:41:24  Fetching WSUS admin SID...
2014-05-12 15:41:24  Fetching WsusAdministratorsSid from registry store
2014-05-12 15:41:24  Value is S-1-5-21-3606383621-533361507-1611783712-1001
2014-05-12 15:41:24  Content directory is local, creating content shares...
2014-05-12 15:41:24  Creating share "UpdateServicesPackages" with path "D:\WSUS\UpdateServicesPackages" and description "A network share to be used by client systems for collecting all software packages (usually applications) published on this WSUS system."
2014-05-12 15:41:24  Deleting existing share...
2014-05-12 15:41:24  Creating share...
2014-05-12 15:41:24  Share successfully created
2014-05-12 15:41:24  Creating share "WsusContent" with path "D:\WSUS\WsusContent" and description "A network share to be used by Local Publishing to place published content on this WSUS system."
2014-05-12 15:41:24  Deleting existing share...
2014-05-12 15:41:24  Creating share...
2014-05-12 15:41:24  Share successfully created
2014-05-12 15:41:24  Creating share "WSUSTemp" with path "C:\Program Files\Update Services\LogFiles\WSUSTemp" and description "A network share used by Local Publishing from a Remote WSUS Console Instance."
2014-05-12 15:41:24  Deleting existing share...
2014-05-12 15:41:24  Creating share...
2014-05-12 15:41:24  Share successfully created
2014-05-12 15:41:24  Finished creating content shares
2014-05-12 15:41:24  Stopping service WSUSService
2014-05-12 15:41:25  Stopping service W3SVC
2014-05-12 15:41:27  Configuring WID database...
2014-05-12 15:41:27  Configuring the database...
2014-05-12 15:41:27  Establishing DB connection...
2014-05-12 15:41:27  Checking to see if database exists...
2014-05-12 15:41:27  Database exists
2014-05-12 15:41:27  Switching database to single user mode...
2014-05-12 15:41:30  Loading install type query...
2014-05-12 15:41:30  DECLARE @currentDBVersion       int
DECLARE @scriptMajorVersion     int = (9600)
DECLARE @scriptMinorVersion     int = (16384)
DECLARE @databaseMajorVersion   int
DECLARE @databaseMinorVersion   int
DECLARE @databaseBuildNumber    nvarchar(10)
IF NOT EXISTS(SELECT * FROM sys.databases WHERE name='SUSDB')
BEGIN
    SELECT 1
END
ELSE
BEGIN
    SET @currentDBVersion = (SELECT SchemaVersion FROM SUSDB.dbo.tbSchemaVersion WHERE ComponentName = 'CoreDB')
    SET @databaseBuildNumber = (SELECT BuildNumber FROM SUSDB.dbo.tbSchemaVersion WHERE ComponentName = 'CoreDB')
    DECLARE @delimiterPosition INT = CHARINDEX('.', @databaseBuildNumber)
    IF (@delimiterPosition = 0)
    BEGIN
        RAISERROR('Invalid schema version number', 16, 1) with nowait
        return
    END
    SET @databaseMajorVersion = SUBSTRING(@databaseBuildNumber, 1, @delimiterPosition - 1)
    SET @databaseMinorVersion = SUBSTRING(@databaseBuildNumber, (@delimiterPosition + 1), (10 - @delimiterPosition))
    IF @currentDBVersion < 926
    BEGIN
        SELECT 3
    END
    ELSE
    BEGIN
        IF (@scriptMajorVersion > @databaseMajorVersion OR
           (@scriptMajorVersion = @databaseMajorVersion AND @scriptMinorVersion > @databaseMinorVersion))
        BEGIN
            SELECT 2
        END
        ELSE IF (@scriptMajorVersion = @databaseMajorVersion AND
                 @scriptMinorVersion = @databaseMinorVersion)
        BEGIN
            SELECT 0
        END
        ELSE
        BEGIN
            SELECT 4
        END
    END
END

2014-05-12 15:41:31  Install type is: Reinstall
2014-05-12 15:41:31  Creating logins...
2014-05-12 15:41:31  Fetching account info for S-1-5-20
2014-05-12 15:41:31  Found principal
2014-05-12 15:41:31  Found account
2014-05-12 15:41:31  Got binary SID
2014-05-12 15:41:31  Fetching WsusAdministratorsSid from registry store
2014-05-12 15:41:31  Value is S-1-5-21-3606383621-533361507-1611783712-1001
2014-05-12 15:41:31  Fetching account info for S-1-5-21-3606383621-533361507-1611783712-1001
2014-05-12 15:41:33  Found principal
2014-05-12 15:41:33  Found account
2014-05-12 15:41:33  Got binary SID
2014-05-12 15:41:33  Setting content location...
2014-05-12 15:41:33  Fetching ContentDir from registry store
2014-05-12 15:41:33  Value is D:\WSUS
2014-05-12 15:41:33  Swtching DB to multi-user mode......
2014-05-12 15:41:40  Finished setting multi-user mode
2014-05-12 15:41:40  Writing DB settings to registry...
2014-05-12 15:41:40  Marking PostInstall done for UpdateServices-WidDatabase in the registry...
2014-05-12 15:41:40  Starting service W3SVC
2014-05-12 15:41:40  Configuring IIS...
2014-05-12 15:41:40  Start: ConfigureWebsite
2014-05-12 15:41:41  System.Runtime.InteropServices.COMException (0x80070003): The system cannot find the path specified.

   at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
   at System.DirectoryServices.DirectoryEntry.Bind()
   at System.DirectoryServices.DirectoryEntry.get_AdsObject()
   at System.DirectoryServices.PropertyValueCollection.PopulateList()
   at System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry entry, String propertyName)
   at System.DirectoryServices.PropertyCollection.get_Item(String propertyName)
   at Microsoft.UpdateServices.Administration.UseCustomWebSite..ctor()
   at Microsoft.UpdateServices.Administration.PostInstall.ConfigureWebsite(Int32 portNumber)
   at Microsoft.UpdateServices.Administration.PostInstall.Run()
   at Microsoft.UpdateServices.Administration.PostInstall.Execute(String[] arguments)

Could anyone please help with this issue?

Thank you.

Greetings,

Doing some testing on our test environment with the 1809 update. After the update the systems will not check the WSUS server for updates but instead will try to reach the internet. This system is not internet connected so it fails. Here is the log from the last run. Can anyone tell me where to start looking? 

I have tried to stop the services and rename the SoftwareDistribution folder but that didn't help either.

Any ideas?

2018/11/27 08:22:00.8405505 6132  8772  Shared          InitializeSus
2018/11/27 08:22:00.8410335 6132  8772  IdleTimer       Non-AoAc machine.  Aoac operations will be ignored.
2018/11/27 08:22:00.8411397 6132  8772  Agent           WU client version 10.0.17763.107
2018/11/27 08:22:00.8414541 6132  8772  Agent           SleepStudyTracker: Machine is non-AOAC. Sleep study tracker 

disabled.
2018/11/27 08:22:00.8415346 6132  8772  Agent           Base directory: C:\WINDOWS\SoftwareDistribution
2018/11/27 08:22:00.8451521 6132  8772  Agent           Datastore directory: C:\WINDOWS\SoftwareDistribution\DataStore

\DataStore.edb
2018/11/27 08:22:00.8461652 6132  8772  DataStore       JetEnableMultiInstance succeeded - applicable param count: 5, 

applied param count: 5
2018/11/27 08:22:01.3599102 6132  8772  DataStore       Service 3DA21691-E39D-4DA6-8A4B-B43877BCB1B7 added
2018/11/27 08:22:01.4069797 6132  8772  DataStore       Service 9482F4B4-E343-43B6-B170-9A65BC822C77 added
2018/11/27 08:22:01.4292586 6132  8772  DataStore       Data store successfully created
2018/11/27 08:22:01.4344485 6132  8772  Shared          UpdateNetworkState Ipv6, cNetworkInterfaces = 0.
2018/11/27 08:22:01.4350496 6132  8772  Shared          UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
2018/11/27 08:22:01.4396549 6132  8772  Shared          Network state: Connected
2018/11/27 08:22:01.8532419 6132  8772  Misc            *FAILED* [8024000C] LoadHistoryEventFromRegistry completed
2018/11/27 08:22:01.8534011 6132  8772  Shared          UpdateNetworkState Ipv6, cNetworkInterfaces = 0.
2018/11/27 08:22:01.8534088 6132  8772  Shared          UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
2018/11/27 08:22:01.8534180 6132  8772  Shared          Power status changed
2018/11/27 08:22:01.8580060 6132  8772  Agent           WU client refresh cache for DisableWUAccess policy: 1
2018/11/27 08:22:01.8580098 6132  8772  Agent           Initializing global settings cache
2018/11/27 08:22:01.8580112 6132  8772  Agent           WSUS server: http://WSUSSERVER:8530
2018/11/27 08:22:01.8580127 6132  8772  Agent           WSUS status server: http://WSUSSERVER:8530
2018/11/27 08:22:01.8580140 6132  8772  Agent           Alternate Download Server: http://WSUSSERVER:8530
2018/11/27 08:22:01.8580152 6132  8772  Agent           Fill Empty Content Urls: No
2018/11/27 08:22:01.8580163 6132  8772  Agent           Target group: Update Testing
2018/11/27 08:22:01.8580174 6132  8772  Agent           Windows Update access disabled: Yes
2018/11/27 08:22:01.8580187 6132  8772  Agent           Do not connect to Windows Update Internet locations: No
2018/11/27 08:22:01.8802420 6132  8772  Agent           Initializing Windows Update Agent
2018/11/27 08:22:01.8804247 6132  8772  Agent           CPersistentTimeoutScheduler | GetTimer, returned hr = 0x80248007
2018/11/27 08:22:01.8804356 6132  8772  Agent           CPersistentTimeoutEvent | Resubscribe, no existing/cached timer 

for Id=29A863E7-8609-4D1E-B7CD-5668F857F1DB.
2018/11/27 08:22:01.8804472 6132  8772  Agent           Adding timer: 
2018/11/27 08:22:01.8804538 6132  8772  Agent               Timer: 29A863E7-8609-4D1E-B7CD-5668F857F1DB, Expires 2018-11-

28 13:22:01, not idle-only, not network-only
2018/11/27 08:22:01.8821476 6132  8772  IdleTimer       IdleTimer::NetworkStateChanged. Network connected? Yes
2018/11/27 08:22:01.9130973 6132  3044  DownloadManager Received power state change notification: Old: <unknown>; New: AC.
2018/11/27 08:22:01.9130995 6132  3044  DownloadManager Power state changed from <unknown> to AC.
2018/11/27 08:22:32.1551466 6068  644   ComApi          IUpdateServiceManager::AddService2
2018/11/27 08:22:32.1551509 6068  644   ComApi          Service ID = {7971f918-a847-4430-9279-4a52d1efe18d}
2018/11/27 08:22:32.1551547 6068  644   ComApi          Allow pending registration = Yes; Allow online registration = Yes; 

Register service with AU = Yes
2018/11/27 08:22:32.1695762 6132  5316  Agent           *FAILED* [80248014] GetServiceObject couldn't find service 

'117CAB2D-82B1-4B5A-A08C-4D62DBEE7782'.
2018/11/27 08:22:32.1695836 6132  5316  Agent           *FAILED* [80248014] Method failed 

[CAgentServiceManager::GetServiceObject:1902]
2018/11/27 08:22:32.1695913 6132  5316  Agent           *FAILED* [80248014] GetServiceObject couldn't find service 

'855E8A7C-ECB4-4CA3-B045-1DFA50104289'.
2018/11/27 08:22:32.1695958 6132  5316  Agent           *FAILED* [80248014] Method failed 

[CAgentServiceManager::GetServiceObject:1902]
2018/11/27 08:22:32.1696030 6132  5316  Agent           *FAILED* [80248014] GetServiceObject couldn't find service 

'7971F918-A847-4430-9279-4A52D1EFE18D'.
2018/11/27 08:22:32.1696072 6132  5316  Agent           *FAILED* [80248014] Method failed 

[CAgentServiceManager::GetServiceObject:1902]
2018/11/27 08:22:32.2112812 6132  5316  SLS             Get response for service 117CAB2D-82B1-4B5A-A08C-4D62DBEE7782 - 

forceExpire[False] asyncRefreshOnExpiry[False]
2018/11/27 08:22:32.2113895 6132  5316  SLS             Retrieving SLS response from server...
2018/11/27 08:22:32.2122669 6132  5316  SLS             Making request with URL HTTPS://sls.update.microsoft.com/SLS/

{117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}/x64/10.0.17763.107/0?CH=765&L=en-US&P=&PT=0x30&WUA=10.0.17763.107&MK=Dell+Inc.&MD=Latitude+E5540 and send SLS events.
2018/11/27 08:22:43.2776497 6132  5316  Misc            *FAILED* [80072EE7] Send request
2018/11/27 08:22:43.2778084 6132  5316  Misc            *FAILED* [8024402C] WinHttp: SendRequestToServerForFileInformation 

(retrying with default proxy)
2018/11/27 08:22:54.3387187 6132  5316  Misc            *FAILED* [80072EE7] Send request
2018/11/27 08:22:54.3388610 6132  5316  Misc            *FAILED* [8024402C] Library download error. Will retry. Retry 

Counter:0
2018/11/27 08:23:05.4082514 6132  5316  Misc            *FAILED* [80072EE7] Send request
2018/11/27 08:23:05.4082755 6132  5316  Misc            *FAILED* [8024402C] WinHttp: SendRequestToServerForFileInformation 

(retrying with default proxy)
2018/11/27 08:23:16.4895818 6132  5316  Misc            *FAILED* [80072EE7] Send request
2018/11/27 08:23:16.4896129 6132  5316  Misc            *FAILED* [8024402C] Library download error. Will retry. Retry 

Counter:1
2018/11/27 08:23:27.5883974 6132  5316  Misc            *FAILED* [80072EE7] Send request
2018/11/27 08:23:27.5884365 6132  5316  Misc            *FAILED* [8024402C] WinHttp: SendRequestToServerForFileInformation 

(retrying with default proxy)
2018/11/27 08:23:38.6812111 6132  5316  Misc            *FAILED* [80072EE7] Send request
2018/11/27 08:23:38.6812414 6132  5316  Misc            *FAILED* [8024402C] Library download error. Will retry. Retry 

Counter:2
2018/11/27 08:23:49.7840964 6132  5316  Misc            *FAILED* [80072EE7] Send request
2018/11/27 08:23:49.7841295 6132  5316  Misc            *FAILED* [8024402C] WinHttp: SendRequestToServerForFileInformation 

(retrying with default proxy)
2018/11/27 08:24:00.8383570 6132  5316  Misc            *FAILED* [80072EE7] Send request
2018/11/27 08:24:00.8383975 6132  5316  SLS             Complete the request URL HTTPS://sls.update.microsoft.com/SLS/

{117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}/x64/10.0.17763.107/0?CH=765&L=en-US&P=&PT=0x30&WUA=10.0.17763.107&MK=Dell+Inc.&MD=Latitude+E5540 with [8024402C] and http status code[0] and send SLS events.
2018/11/27 08:24:00.8384340 6132  5316  SLS             *FAILED* [8024402C] GetDownloadedOnWeakSSLCert
2018/11/27 08:24:00.8385510 6132  5316  SLS             *FAILED* [8024402C] Method failed [CSLSClient::GetResponse:622]
2018/11/27 08:24:00.8385767 6132  5316  Agent           Failed to retrieve SLS response data for service 117cab2d-82b1-

4b5a-a08c-4d62dbee7782, error = 0x8024402c
2018/11/27 08:24:00.8386132 6132  5316  Agent           *FAILED* [8024402C] Caller Service Recovery failed to opt in to 

service 117cab2d-82b1-4b5a-a08c-4d62dbee7782 (cV: 06PYBxxVUUCkfiBT.1)
2018/11/27 08:24:00.9255258 6132  5316  SLS             Get response for service 855E8A7C-ECB4-4CA3-B045-1DFA50104289 - 

forceExpire[False] asyncRefreshOnExpiry[False]
2018/11/27 08:24:00.9256829 6132  5316  SLS             Retrieving SLS response from server...
2018/11/27 08:24:00.9263204 6132  5316  SLS             Making request with URL HTTPS://sls.update.microsoft.com/SLS/

{855E8A7C-ECB4-4CA3-B045-1DFA50104289}/x64/10.0.17763.107/0?CH=765&L=en-US&P=&PT=0x30&WUA=10.0.17763.107&MK=Dell+Inc.&MD=Latitude+E5540 and send SLS events.
2018/11/27 08:24:12.0005654 6132  5316  Misc            *FAILED* [80072EE7] Send request
2018/11/27 08:24:12.0005943 6132  5316  Misc            *FAILED* [8024402C] WinHttp: SendRequestToServerForFileInformation 

(retrying with default proxy)
2018/11/27 08:24:23.0594036 6132  5316  Misc            *FAILED* [80072EE7] Send request
2018/11/27 08:24:23.0594343 6132  5316  Misc            *FAILED* [8024402C] Library download error. Will retry. Retry 

Counter:0
2018/11/27 08:24:34.1679051 6132  5316  Misc            *FAILED* [80072EE7] Send request
2018/11/27 08:24:34.1679337 6132  5316  Misc            *FAILED* [8024402C] WinHttp: SendRequestToServerForFileInformation 

(retrying with default proxy)
2018/11/27 08:24:45.2300423 6132  5316  Misc            *FAILED* [80072EE7] Send request
2018/11/27 08:24:45.2300919 6132  5316  Misc            *FAILED* [8024402C] Library download error. Will retry. Retry 

Counter:1
2018/11/27 08:24:56.2883156 6132  5316  Misc            *FAILED* [80072EE7] Send request
2018/11/27 08:24:56.2883299 6132  5316  Misc            *FAILED* [8024402C] WinHttp: SendRequestToServerForFileInformation 

(retrying with default proxy)
2018/11/27 08:25:07.3589530 6132  5316  Misc            *FAILED* [80072EE7] Send request
2018/11/27 08:25:07.3589838 6132  5316  Misc            *FAILED* [8024402C] Library download error. Will retry. Retry 

Counter:2
2018/11/27 08:25:18.4192188 6132  5316  Misc            *FAILED* [80072EE7] Send request
2018/11/27 08:25:18.4193169 6132  5316  Misc            *FAILED* [8024402C] WinHttp: SendRequestToServerForFileInformation 

(retrying with default proxy)
2018/11/27 08:25:29.4799506 6132  5316  Misc            *FAILED* [80072EE7] Send request
2018/11/27 08:25:29.4799969 6132  5316  SLS             Complete the request URL HTTPS://sls.update.microsoft.com/SLS/

{855E8A7C-ECB4-4CA3-B045-1DFA50104289}/x64/10.0.17763.107/0?CH=765&L=en-US&P=&PT=0x30&WUA=10.0.17763.107&MK=Dell+Inc.&MD=Latitude+E5540 with [8024402C] and http status code[0] and send SLS events.
2018/11/27 08:25:29.4800215 6132  5316  SLS             *FAILED* [8024402C] GetDownloadedOnWeakSSLCert
2018/11/27 08:25:29.4801658 6132  5316  SLS             *FAILED* [8024402C] Method failed [CSLSClient::GetResponse:622]
2018/11/27 08:25:29.4801887 6132  5316  Agent           Failed to retrieve SLS response data for service 855e8a7c-ecb4-

4ca3-b045-1dfa50104289, error = 0x8024402c
2018/11/27 08:25:29.4802182 6132  5316  Agent           *FAILED* [8024402C] Caller Service Recovery failed to opt in to 

service 855e8a7c-ecb4-4ca3-b045-1dfa50104289 (cV: 06PYBxxVUUCkfiBT.2)
2018/11/27 08:25:29.5743735 6132  5316  SLS             Get response for service 7971F918-A847-4430-9279-4A52D1EFE18D - 

forceExpire[False] asyncRefreshOnExpiry[True]
2018/11/27 08:25:29.5745969 6132  5316  SLS             Retrieving SLS response from server...
2018/11/27 08:25:29.5758309 6132  5316  SLS             Making request with URL HTTPS://sls.update.microsoft.com/SLS/

{7971F918-A847-4430-9279-4A52D1EFE18D}/x64/10.0.17763.107/0?CH=765&L=en-US&P=&PT=0x30&WUA=10.0.17763.107&MK=Dell+Inc.&MD=Latitude+E5540 and send SLS events.
2018/11/27 08:25:40.6231711 6132  5316  Misc            *FAILED* [80072EE7] Send request
2018/11/27 08:25:40.6231954 6132  5316  Misc            *FAILED* [8024402C] WinHttp: SendRequestToServerForFileInformation 

(retrying with default proxy)
2018/11/27 08:25:51.6776217 6132  5316  Misc            *FAILED* [80072EE7] Send request
2018/11/27 08:25:51.6777224 6132  5316  Misc            *FAILED* [8024402C] Library download error. Will retry. Retry 

Counter:0
2018/11/27 08:26:00.1852773 6132  5316  Misc            *FAILED* [80072EE7] Send request
2018/11/27 08:26:00.1853026 6132  5316  Misc            *FAILED* [8024402C] WinHttp: SendRequestToServerForFileInformation 

(retrying with default proxy)
2018/11/27 08:26:11.2338180 6132  5316  Misc            *FAILED* [80072EE7] Send request
2018/11/27 08:26:11.2338557 6132  5316  Misc            *FAILED* [8024402C] Library download error. Will retry. Retry 

Counter:1
2018/11/27 08:26:22.3356747 6132  5316  Misc            *FAILED* [80072EE7] Send request
2018/11/27 08:26:22.3356988 6132  5316  Misc            *FAILED* [8024402C] WinHttp: SendRequestToServerForFileInformation 

(retrying with default proxy)
2018/11/27 08:26:33.4030335 6132  5316  Misc            *FAILED* [80072EE7] Send request
2018/11/27 08:26:33.4030651 6132  5316  Misc            *FAILED* [8024402C] Library download error. Will retry. Retry 

Counter:2
2018/11/27 08:26:44.5042011 6132  5316  Misc            *FAILED* [80072EE7] Send request
2018/11/27 08:26:44.5043573 6132  5316  Misc            *FAILED* [8024402C] WinHttp: SendRequestToServerForFileInformation 

(retrying with default proxy)
2018/11/27 08:26:55.5571490 6132  5316  Misc            *FAILED* [80072EE7] Send request
2018/11/27 08:26:55.5571883 6132  5316  SLS             Complete the request URL HTTPS://sls.update.microsoft.com/SLS/

{7971F918-A847-4430-9279-4A52D1EFE18D}/x64/10.0.17763.107/0?CH=765&L=en-US&P=&PT=0x30&WUA=10.0.17763.107&MK=Dell+Inc.&MD=Latitude+E5540 with [8024402C] and http status code[0] and send SLS events.
2018/11/27 08:26:55.5572060 6132  5316  SLS             *FAILED* [8024402C] GetDownloadedOnWeakSSLCert

Hello,

I have done the patching for the second month and again the server does not restart by itself after the patching.

Where to look for clues?

I have another server "identical" which restart by itself each & every month without any issue.

Thanks,

Dom

Security / System Center Configuration Manager Current Branch / SQL

Hello,

I have two servers which were supposed to be identical but one is giving an error:

An error occurred while trying to create the UDP endpoint for WDSTFTP provider on interface 10.5.20.101:62121. This can happen if the network interface was disabled or changed, or some other application is already using the port. The provider  will not be able to receive requests on this interface. 
 Error Information: 0x2741 

where to look ?

Windows Server 2016 Standard.

This is happening on several port in the same range.

Log Name:      Application
Source:        WDSServer
Date:          1/28/2019 8:48:31 PM
Event ID:      772
Task Category: WDSServer
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      SMHSCCMDP01.ad
Description:
An error occurred while trying to create the UDP endpoint for WDSTFTP provider on interface 10.5.20.101:62117. This can happen if the network interface was disabled or changed, or some other application is already using the port. The provider  will not be able to receive requests on this interface. 
 Error Information: 0x2741 

Thanks,

Dom

Security / System Center Configuration Manager Current Branch / SQL

although we use WSUS for patch deployment we have been installing the updates manually on the server (physical or virtual).  getting more and more servers (VMWare).  Manual process is no longer a good option.  Looking for advice.  3rd party tool (on-pre or cloud) is fine.  Hope the tool also can let me know if the server is at low disk space for patching because we have many servers lacking free space on C:.

Thanks in advance.

Hi,

I'm trying to REINSTALL WSUS 3.0 in RODC (windows 2012). But I can't past the post installation and always getting the error:

2019-01-24 14:38:43  Postinstall started

2019-01-24 14:38:43  Detected role services: UI, WidDatabase, Services

2019-01-24 14:38:43  Start: LoadSettingsFromParameters

2019-01-24 14:38:43  Content local is: True

2019-01-24 14:38:43  Content directory is: c:\WSUS

2019-01-24 14:38:43  SQL instname is:

2019-01-24 14:38:43  End: LoadSettingsFromParameters

2019-01-24 14:38:43  Start: Run

2019-01-24 14:38:43  Configuring content directory...

2019-01-24 14:38:43  Configuring groups...

2019-01-24 14:38:43  Starting group configuration for WSUS Administrators...

2019-01-24 14:38:43  Group does not already exist in the registry

2019-01-24 14:38:43  Searching for existing group...

2019-01-24 14:40:28  Group was not fount attempt to create it...

2019-01-24 14:40:28  System.DirectoryServices.AccountManagement.PrincipalOperationException: The group already exists.

---> System.Runtime.InteropServices.COMException: The group already exists.

   at System.DirectoryServices.DirectoryEntry.CommitChanges()

   at System.DirectoryServices.AccountManagement.SDSUtils.ApplyChangesToDirectory(Principal p, StoreCtx storeCtx, GroupMembershipUpdater updateGroupMembership, NetCred credentials, AuthenticationTypes authTypes)

   --- End of inner exception stack trace ---

   at System.DirectoryServices.AccountManagement.SDSUtils.ApplyChangesToDirectory(Principal p, StoreCtx storeCtx, GroupMembershipUpdater updateGroupMembership, NetCred credentials, AuthenticationTypes authTypes)

   at System.DirectoryServices.AccountManagement.SDSUtils.InsertPrincipal(Principal p, StoreCtx storeCtx, GroupMembershipUpdater updateGroupMembership, NetCred credentials, AuthenticationTypes authTypes, Boolean needToSetPassword)

   at System.DirectoryServices.AccountManagement.SAMStoreCtx.Insert(Principal p)

   at Microsoft.UpdateServices.Administration.ConfigureGroups.FetchOrCreateGroup(PrincipalContext context, String name, String description)

   at Microsoft.UpdateServices.Administration.ConfigureGroups.SetupGroup(PrincipalContext context, String groupName, String description, String registryValue)

   at Microsoft.UpdateServices.Administration.ConfigureGroups.Run(Action`1 logWriter)

   at Microsoft.UpdateServices.Administration.PostInstall.Run()

   at Microsoft.UpdateServices.Administration.PostInstall.Execute(String[] arguments)

I already have the groups needed in RWDC.

1.      SQLServer2005MSFTEUser$Servername$Microsoft##SSEE

2.      SQLServer2005MSSQLUser$Servername$Microsoft##SSEE

3.      WSUS Administrators

4.      WSUS  Reporters

Already uninstalled IIS and WSUS, still no luck. Can some help me figure out this or send me step by step configuration for this. Thanks in advance.

what is the proper solution to get the reports from client to WSUS Server?

I tried to run this Cmnd " wuauclt /reportnow" , but no luck.

FOR MICROSOFT:

Hello,

today after installation of  KB4480970 (automatically by Windows Update as Important) to our Windows 2008 R2 Standard Server the server stopped serve Clients by shared storage (haven't tried anything else).  The Client has issued an error Invalid handle and couldn't connect (tried on Windows 7 Pro SP1 clients with installed KB4480970 only). After uninstallation it started work again, so the problem is positively in the KB4480970. Pls stop distribute the KB4480970 to the Windows 2008 R2 Server and correct the behavior. Thank You in advance.

FOR MICROSOFT:

Hello,

KB4480970 breaks the connection between Microsoft Threat management Gateway 2010 and SQL Server 2008 SP4, which is used for TMG's logging database.

Neither patch KB4487345, or the registry fix highlighted below resolve this issue.

reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system /v LocalAccountTokenFilterPolicy /t REG_DWORD /d 1 /f

Only the removal of KB4480970 currently resolves it.

I am fully aware that TMG 2010 is no longer supported, however this will likely also affect other applications that are.

Could we therefore please have a fix for this issue as soon as possible!

Thank you in advance.

I noticed c:\Windows\SoftwareDistribution folder is taking a lot of space.

I run dism.exe /online /Cleanup-Image /StartComponentCleanup but the task results with error6824:

Error: 6824
The operation cannot be performed because another transaction is depending on the fact that this property will not change.

I found this errors in dism.log:

2019-01-30 14:23:39, Error     DISM   DISM Package Manager: PID=14284 TID=8850 Failed finalizing changes. - CDISMPackageManager::Internal_Finalize(hr:0x80071aa8)
2019-01-30 14:23:39, Error     DISM   DISM Package Manager: PID=14284 TID=8850 Failed processing package changes - CDISMPackageManager::StartComponentCleanupEx(hr:0x80071aa8)
2019-01-30 14:23:39, Error     DISM   DISM Package Manager: PID=14284 TID=8850 Failed to start component cleanup. - CPackageManagerCLIHandler::ProcessCmdLine_CleanupImage(hr:0x80071aa8)
2019-01-30 14:23:39, Error     DISM   DISM Package Manager: PID=14284 TID=8850 Failed while processing command cleanup-image. - CPackageManagerCLIHandler::ExecuteCmdLine(hr:0x80071aa8)
2019-01-30 14:23:39, Error     DISM   DISM.EXE: DISM Package Manager processed the command line but failed. HRESULT=80071AA8

and this error in CBS.log:

2019-01-30 14:23:39, Error CBS Session: 30718140_2841436248 failed to perform Synchronous Cleanup operation [HRESULT = 0x80071aa8 - ERROR_CANT_BREAK_TRANSACTIONAL_DEPENDENCY]

I also noticed that the server tried to install 2018-06 CU many times today which doesn't make sense since the 2019-01 CU was successfully installed last week.

Please advise how to troubleshoot this.

Getting this error on attempt to synchronize.  Started in late December.  Have tried unchecking various products as other posts have mentioned with no luck.  Reran the setup wizard and it reports a successful synchronization that took zero time on that step, but when I actually manually run or schedule a synchronization it fails with the following:

The error type is unknown.  Details.  Under the details link is the following information:

InvalidOperationException: There is an error in XML document (1, 547361). ---> System.IO.IOException: Unable to read data from the transport connection: An existing connection was forcibly closed by the remote host.
at System.Xml.Serialization.XmlSerializer.Deserialize(XmlReader xmlReader, String encodingStyle, XmlDeserializationEvents events)
   at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
   at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
   at Microsoft.UpdateServices.ServerSyncWebServices.ServerSync.ServerSyncProxy.GetUpdateData(Cookie cookie, UpdateIdentity[] updateIds)
   at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.WebserviceGetUpdateData(UpdateIdentity[] updateIds, List`1 allMetadata, List`1 allFileUrls, List`1& updatesWithSecureFileData, Boolean isForConfig)
   at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.GetUpdateDataInChunksAndImport(List`1 neededUpdates, List`1 allMetadata, List`1 allFileUrls, Boolean isConfigData)
   at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.Execut

No new updates are visible for approval since Dec 19 releases.

Hello, I have installed wsus on windows server 2016 ...
This is normal I can access the link http://my_server:8530/ClientWebService/Client.asmx?singleWsdl

But when entering windows update it presents the error message 0x80070057.


In log windows update client

2017-06-21 21: 26: 47: 972-0300 21: 26: 47: 972-0300 1 148 [AGENT_DETECTION_FAILED] 101 {00000000-0000-0000-0000-000000000000} 0 80070057 UpdateOrchestrator Failure Software Synchronization Windows Update Client failed to detect with error 0x80070057.
2017-06-21 21: 26: 50: 305-0300 21: 26: 50: 305-0300 1 148 [AGENT_DETECTION_FAILED] 101 {00000000-0000-0000-0000-000000000000} 0 80070057 UpdateOrchestrator Failure Software Synchronization Windows Update Client failed to detect with error 0x80070057.

any computer update...

Windows 10 CU in clients PC. and cloned. but report normal in WSUS...

in screen windows update says erro 0x80070057

Hello,

I think there might be an issue with downstream servers in server wsus 2019.

First I did update my main WSUS to 2019. All Downstream were 2016. After that I was not able to view the complete computer list on the main server. As soon as you choose the “All Computers” or a computer group that is from a downstream server the console crashes. When you delete the downstream server from the “Downstream Servers” section I am able to browse the list again.

After that I decided to reinstall all WSUS Servers with server 2019 even including the main one. And I did again get the error.

Tried it via Powershell gives me the following error.

$wsusserver = "localhost"
[reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration")
$wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer($wsusserver,$False)
$computerScope = New-object Microsoft.UpdateServices.Administration.ComputerTargetScope
$computerScope.IncludeDownstreamComputerTargets = $true
$wsus.GetComputerTargets($computerScope)

Exception calling "GetComputerTargets" with "1" argument(s):"Unable to cast object of type 'System.Guid' to type 'System.String'."

At line:1 char:1

If I choose to not include Downstream Computer Targets it works.

Hi everyone

Since i've deploy 1803 on computers, i've seen On Demand Features are empty I can't add any thing but i've to deploy XPS viewver.

After some reseach, i've found a registry key to break the link from computer to WSUS and it works, but I don't want to do this manipulation on each workstation neither by GPO.

Is it possible to have a WSUS and deploy OnDemand features ?

Edit : I'm on a 2012 R2 server for my WSUS

Thank you !

We have a 2016 WSUS server functioning well for all clients except some of our 2016 servers. We have GPO setup up to auto download and notify for install.

I have verified Group Policy is applying to these servers and validated the correct registry entries are present. If i run SCONFIG, I see option 5 set as Download only.

The issue is when I go into the windows update settings on the affected server(s). It shows the server has checked in but no updates are available. It also says updates will be downloaded and installed automatically. If I click Check for updates, it checks and automatically installs the updates then tells me it will reboot outside of active hours.

Some other 2016 servers in the same OU with the exact same policies work like they should. They download the updates automatically but tell me I need to install them.

I have done everything possible to try and resolve this issue from stopping the Windows update service, deleted all windows update registry entries, deleted the software distribution folder and rebooted

I have compared registry entries on good\bad servers and they are identical

I have removed and re-added them to the domain with no luck

There are no local group policies applied only domain level policies

This seems like a bug but I can't confirm it. Any thoughts?

If this is not a bug, is there a fix?

Russ

So I'm currently trying to get my 2016 WSUS server to update manually, via "Start>Settings>Windows Update" I have gone through a plethora of google searches attempting to figure out why I cannot download updates. Currently the error I'm getting is this:

"There were problems installing some updates, but we'll try again later. If you keep seeing this and want to search the web or contact support for more information, this may help:"

Then it gives me two of the updates I'm trying to install (which were approved via WSUS but not installing automatically or manually) and Error 0x80244019.

On top of that, ALL of my 2016 servers are not pulling updates from WSUS. All approved updates are showing "Install" under status and yet none of them are actually installing. I'm assuming it has something to do with the above. As I've tried manually updating some other test servers and get similar errors, but same end result of no updates.

Only thing that seemed to work on the test machines was to add the following to the registry:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Update

DisableWindowsUpdateAccess

DoNotConnectToWindowsUpdateInternetLocations

Both keys set to 0 allowed me to manually download updates.

Any help would be appreciated and hopefully save my hair from being ripped out further.

Jeremiah

Hi,

/SaiTech