I have  Windows Server 2012 that went somewhat stale update-wise (the most recent installed update dates back to June 2016). I am trying to get it patched up. The problem is that for some reason Windows Update refuses to acquire new updates. When I click on "check for updates", it shows the green scrolling bar under "Checking for updates..." and it can sit there for hours doing nothing (there even seems to be no disk activity.)

In the Windows Update log, I see this (no idea if this is at all relevant)
  2017-03-01    16:14:40:211    5476    1688    CltUI    FATAL: CNetworkCostChangeHandler::RegisterForCostChangeNotifications: CoCreateInstance failed with error 80004002
  2017-03-01    16:14:40:212    5476    1688    CltUI    WARNING: RegisterNetworkCostChangeNotification: Error 80004002

and the last thing it ever writes before going idle is

  2017-03-01    16:14:44:015    1232    167c    AU    Triggering AU detection through DetectNow API
  2017-03-01    16:14:44:015    1232    167c    AU    Additional Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} with Approval type {Pre-install notify} added to AU services list
  2017-03-01    16:14:44:015    1232    167c    AU    Will do the detection after current detection completes

If I interrupt it after a while, it follows up with:

 2017-03-01    16:20:16:089    1232    1958    Agent      * WARNING: Failed to filter search results, error = 0x8024000B
 2017-03-01    16:20:16:089    1232    191c    AU    ###########  AU: Uninitializing Automatic Updates   ###########
 2017-03-01    16:20:16:105    1232    1958    Agent    *********
 2017-03-01    16:20:16:105    1232    1958    Agent    **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
 2017-03-01    16:20:16:105    1232    1958    Agent    *************
 2017-03-01    16:20:16:105    1232    1958    Agent    *************
 2017-03-01    16:20:16:105    1232    1958    Agent    ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
 2017-03-01    16:20:16:105    1232    1958    Agent    *********
 2017-03-01    16:20:16:105    1232    1958    Agent      * Online = No; Ignore download priority = No
 2017-03-01    16:20:16:105    1232    1958    Agent      * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
 2017-03-01    16:20:16:105    1232    1958    Agent      * ServiceID = {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} Third party service
 2017-03-01    16:20:16:105    1232    1958    Agent      * Search Scope = {Machine & All Users}
 2017-03-01    16:20:16:105    1232    1958    Agent      * Caller SID for Applicability: S-1-5-18
 2017-03-01    16:20:16:105    1232    1958    Agent      * WARNING: Exit code = 0x8024000B
 2017-03-01    16:20:16:105    1232    1958    Agent    *********
 2017-03-01    16:20:16:105    1232    1958    Agent    **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
 2017-03-01    16:20:16:105    1232    1958    Agent    *************
 2017-03-01    16:20:16:105    1232    1958    Agent    WARNING: WU client failed Searching for update with error 0x8024000b

I tried to roll back to a month-old backup and it seems to be broken already.

I tried to purge the Windows Update cache by stopping relevant services, deleting %WINDIR%/SoftwareDistribution and %WINDIR%/System32/catroot2, and restarting services. It still does not work, though this time log messages are different.

2017-03-01    16:21:33:849    1232    438    Service    ** START **  Service: Service startup
2017-03-01    16:21:33:849    1232    438    Service    *********
2017-03-01    16:21:33:849    1232    438    Agent      * WU client version 7.8.9200.17185
2017-03-01    16:21:33:849    1232    438    Agent      * Base directory: C:\windows\SoftwareDistribution
2017-03-01    16:21:33:849    1232    438    Agent      * Access type: No proxy
2017-03-01    16:21:33:849    1232    438    Service    UpdateNetworkState Ipv6, cNetworkInterfaces = 4.
2017-03-01    16:21:33:849    1232    438    Service    UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
2017-03-01    16:21:33:849    1232    438    Agent      * Network state: Connected
2017-03-01    16:21:33:849    1232    438    Setup    WARNING: SelfUpdate is in an error state
2017-03-01    16:21:33:849    1232    438    Service    UpdateNetworkState Ipv6, cNetworkInterfaces = 4.
2017-03-01    16:21:33:849    1232    438    Service    UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
2017-03-01    16:21:34:068    1232    438    DtaStor    Default service for AU is {00000000-0000-0000-0000-000000000000}
2017-03-01    16:21:34:068    1232    438    DtaStor    Default service for AU is {9482F4B4-E343-43B6-B170-9A65BC822C77}
2017-03-01    16:21:34:068    1232    438    DtaStor    Data store successfully created
2017-03-01    16:21:34:068    1232    438    Agent    WARNING: Failed to add and register service 117cab2d-82b1-4b5a-a08c-4d62dbee7782 to the data store 0x8007007a
2017-03-01    16:21:34:068    1232    438    Agent    WARNING: Service Recovery: Attempting to add pending registration for service 117cab2d-82b1-4b5a-a08c-4d62dbee7782 to the data store
2017-03-01    16:21:34:068    1232    438    Agent    WARNING: Failed to add and register service 7971f918-a847-4430-9279-4a52d1efe18d to the data store 0x8007007a
2017-03-01    16:21:34:068    1232    438    Agent    WARNING: Service Recovery: Attempting to add pending registration for service 7971f918-a847-4430-9279-4a52d1efe18d to the data store
2017-03-01    16:21:34:068    1232    438    Agent    WARNING: Failed to add and register service 7971f918-a847-4430-9279-4a52d1efe18d to the data store 0x8007007a
2017-03-01    16:21:34:068    1232    438    Agent    WARNING: Service Recovery: Attempting to add pending registration for service 7971f918-a847-4430-9279-4a52d1efe18d to the data store
2017-03-01    16:21:34:068    1232    438    Agent    ***********  Agent: Initializing global settings cache  ***********
2017-03-01    16:21:34:068    1232    438    Agent      * Endpoint Provider: 00000000-0000-0000-0000-000000000000
2017-03-01    16:21:34:068    1232    438    Agent      * WSUS server: <NULL>
2017-03-01    16:21:34:068    1232    438    Agent      * WSUS status server: <NULL>
2017-03-01    16:21:34:068    1232    438    Agent      * Target group: (Unassigned Computers)
2017-03-01    16:21:34:068    1232    438    Agent      * Windows Update access disabled: No
(...snip...)
2017-03-01    16:21:42:576    5476    114c    CltUI    FATAL: CNetworkCostChangeHandler::RegisterForCostChangeNotifications: CoCreateInstance failed with error 80004002
2017-03-01    16:21:42:576    5476    114c    CltUI    WARNING: RegisterNetworkCostChangeNotification: Error 80004002
2017-03-01    16:21:44:686    1232    734    AU    Triggering AU detection through DetectNow API
2017-03-01    16:21:44:686    1232    734    AU    Additional Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} with Approval type {Pre-install notify} added to AU services list
2017-03-01    16:21:44:686    1232    734    AU    Piggybacking on an AU detection already in progress
2017-03-01    16:22:15:891    1232    80c    Misc    Validating signature for C:\windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab with dwProvFlags 0x00000080:
2017-03-01    16:22:15:891    1232    80c    Misc     Microsoft signed: NA
2017-03-01    16:22:15:891    1232    80c    Misc     Infrastructure signed: Yes
2017-03-01    16:22:15:953    1232    80c    Setup    Determining whether a new setup handler needs to be downloaded
2017-03-01    16:22:15:953    1232    80c    Setup    SelfUpdate handler is not found.  It will be downloaded
2017-03-01    16:22:15:953    1232    80c    Setup    Evaluating applicability of setup package "Package_for_KB2887537~31bf3856ad364e35~amd64~~6.2.1.6"
2017-03-01    16:22:15:969    1232    80c    Setup    Setup package "Package_for_KB2887537~31bf3856ad364e35~amd64~~6.2.1.6" is not applicable
2017-03-01    16:22:15:969    1232    80c    Setup    Evaluating applicability of setup package "Package_for_KB2887536~31bf3856ad364e35~amd64~~6.2.1.6"
2017-03-01    16:22:18:063    1232    80c    Setup    Setup package "Package_for_KB2887536~31bf3856ad364e35~amd64~~6.2.1.6" is not applicable
2017-03-01    16:22:18:063    1232    80c    Setup    Evaluating applicability of setup package "Package_for_KB2887535~31bf3856ad364e35~amd64~~6.2.1.10"
2017-03-01    16:22:19:422    1232    80c    Setup    Setup package "Package_for_KB2887535~31bf3856ad364e35~amd64~~6.2.1.10" is not applicable
2017-03-01    16:22:19:438    1232    80c    Setup    SelfUpdate check completed.  SelfUpdate is NOT required.
2017-03-01    16:22:19:578    1232    80c    PT    +++++++++++  PT: Synchronizing server updates  +++++++++++
2017-03-01    16:22:19:578    1232    80c    PT      + ServiceId = {7971F918-A847-4430-9279-4A52D1EFE18D}, Server URL = https://fe2.update.microsoft.com/v6/ClientWebService/client.asmx
2017-03-01    16:22:19:656    1232    80c    PT    WARNING: Cached cookie has expired or new PID is available
2017-03-01    16:22:19:719    1232    80c    Agent    Reading cached app categories using lifetime 604800 seconds
2017-03-01    16:22:19:719    1232    80c    Agent    Read 0 cached app categories
2017-03-01    16:30:44:365    1232    80c    Misc    WARNING: WinHttp: httpRead failed. error 0x80072ee2
2017-03-01    16:30:44:365    1232    80c    Misc    WARNING: WinHttp: DoFileDownload PerformDownload failed. error 0x80072ee2
2017-03-01    16:52:59:430    1232    80c    Misc    WARNING: WinHttp: httpRead failed. error 0x80072ee2
2017-03-01    16:52:59:430    1232    80c    Misc    WARNING: WinHttp: DoFileDownload PerformDownload failed. error 0x80072ee2
2017-03-01    16:55:24:131    1232    80c    Driver    Matched driver to device PCI\VEN_8086&DEV_8D3A&SUBSYS_35C88086&REV_05
2017-03-01    16:55:24:131    1232    80c    Driver    Status: 0x4180200a, ProblemNumber: 00000000
2017-03-01    16:55:24:131    1232    80c    Driver    Matched driver to device PCI\VEN_8086&DEV_6FD1&SUBSYS_6FD18086&REV_01
2017-03-01    16:55:24:131    1232    80c    Driver    Status: 0x1802000, ProblemNumber: 00000000
2017-03-01    16:55:24:131    1232    80c    Driver    Matched driver to device PCI\VEN_8086&DEV_6FD1&SUBSYS_6FD18086&REV_01
2017-03-01    16:55:24:131    1232    80c    Driver    Status: 0x1802000, ProblemNumber: 00000000
(...snip...)
2017-03-01    16:55:24:178    1232    80c    Driver    Status: 0x180200a, ProblemNumber: 00000000
2017-03-01    16:55:24:178    1232    80c    Driver    Matched driver to device PCI\VEN_8086&DEV_8D26&SUBSYS_35C88086&REV_05
2017-03-01    16:55:24:178    1232    80c    Driver    Status: 0x180200a, ProblemNumber: 00000000
2017-03-01    16:55:54:476    1232    80c    PT    +++++++++++  PT: Synchronizing extended update info  +++++++++++
2017-03-01    16:55:54:476    1232    80c    PT      + ServiceId = {7971F918-A847-4430-9279-4A52D1EFE18D}, Server URL = https://fe2.update.microsoft.com/v6/ClientWebService/client.asmx
2017-03-01    16:55:58:116    1232    80c    DtaStor    WARNING: Attempted to add URL http://download.windowsupdate.com/msdownload/update/common/2012/10/6077712_67539bbaa7052f0026b6e124063192bc96ea9e1d.cab for file Z1ObuqcFLwAmtuEkBjGSvJbqnh0= when file has not been previously added to the datastore
2017-03-01    16:55:58:116    1232    80c    DtaStor    WARNING: Attempted to add URL http://download.windowsupdate.com/msdownload/update/common/2012/04/4970296_ca03258c4140d420d28973ac55f091a93e1a9efd.cab for file ygMljEFA1CDSiXOsVfCRqT4anv0= when file has not been previously added to the datastore
2017-03-01    16:55:58:116    1232    80c    DtaStor    WARNING: Attempted to add URL http://download.windowsupdate.com/msdownload/update/common/2012/04/4967244_b9018351a069cc0f006a57879dcfb1c488f78621.cab for file uQGDUaBpzA8AaleHnc+xxIj3hiE= when file has not been previously added to the datastore
(...a few hundred more "DtaStor WARNING"s...)
2017-03-01    16:55:58:194    1232    80c    DtaStor    WARNING: Attempted to add URL http://download.windowsupdate.com/c/msdownload/update/others/2017/02/24214705_43024f1f23f8c8f93ea6c4b16759d1d643949e92.cab for file QwJPHyP4yPk+psSxZ1nR1kOUnpI= when file has not been previously added to the datastore
2017-03-01    16:55:58:194    1232    80c    DtaStor    WARNING: Attempted to add URL http://download.windowsupdate.com/c/msdownload/update/others/2017/02/24106723_b9df018bea94e879f8b03daf86c9e918ed3155fa.cab for file ud8Bi+qU6Hn4sD2vhsnpGO0xVfo= when file has not been previously added to the datastore
2017-03-01    20:01:47:783    5476    114c    CltUI    FATAL: CNetworkCostChangeHandler::RegisterForCostChangeNotifications: CoCreateInstance failed with error 80004002
2017-03-01    20:01:47:783    5476    114c    CltUI    WARNING: RegisterNetworkCostChangeNotification: Error 80004002

As of this writing, the last entry is 4 hours old and the service has not been doing anything all this time. Judging by timestamps, last thing it did was to download an EULA for Silverlight, at 16:56.

It is not apparent to me what exactly is going wrong and how to get it all fixed, short of a clean reinstall.

Any suggestions?

Windows Server 2016 with latest updates. No .NET Framework 4.7 installed.
Fresh installation under local Administrator account failed.
The same with domain account with local administrator permissions.
Same error after complete removal of WSUS role and repeated installation.
C:\wsus folder created by installer.
Many forums threads suggest granting Network Service full access to c:\wsus and c:\wsus\WsusContent - it did not help.

2019-04-25 07:48:03  Granting directory permissions...
2019-04-25 07:48:03  System.UnauthorizedAccessException: Attempted to perform an unauthorized operation.
   at System.Security.AccessControl.Win32.SetSecurityInfo(ResourceType type, String name, SafeHandle handle, SecurityInfos securityInformation, SecurityIdentifier owner, SecurityIdentifier group, GenericAcl sacl, GenericAcl dacl)
   at System.Security.AccessControl.NativeObjectSecurity.Persist(String name, SafeHandle handle, AccessControlSections includeSections, Object exceptionContext)
   at System.Security.AccessControl.NativeObjectSecurity.Persist(String name, AccessControlSections includeSections, Object exceptionContext)
   at System.Security.AccessControl.FileSystemSecurity.Persist(String fullPath)
   at Microsoft.UpdateServices.Administration.ConfigurePermissions.GrantDirectoryPermissions()
   at Microsoft.UpdateServices.Administration.ConfigurePermissions.Configure()
   at Microsoft.UpdateServices.Administration.PostInstall.Run()
   at Microsoft.UpdateServices.Administration.PostInstall.Execute(String[] arguments)
Fatal Error: Attempted to perform an unauthorized operation.

Hello,

I have a disconnected WSUS server. So I import updates from a online WSUS server to my disconnected server.

For a while clients can't update anymore. I tried to put new updates to see if my WSUS needs an important update.

But I can't import metadatas anymore. When I do so, it says there is an "unexpected error" and it can't import metadatas due to this error.

I tried to reimport old metadatas that are on the WSUS but it didn't work either, but it worked few weeks ago with the same metdata file.

I think my WSUS Database is broken, what do you think?

To solve this problem I think I will remake my WSUS.

Do you know how a WSUS database can broke ? Is this a random error ? Or is this maybe an old bad import of metadatas?

PS: When I import new metadatas, I delete the old .cab file and import new metadatas with the WSUSTools command line.

What report can I run to show all the installed updates on a server please?

I have someone that needs to check the updates on various servers against a vulnerability scanner is report so they just need to know whats installed/KB's.

Hello Team

While deploying Windows update using WSUS we received below alert.

Few minutes show in console after execute this commands:

net stop wuauserv
del "C:\Windows\SoftwareDistribution\*.*" /F /Q
net start wuauserv

wuauclt.exe /resetauthorization
wuauclt.exe /r /detectnow
wuauclt.exe /reportnow

Then it is invisible workstation is WSUS console. Can't found! Few computers is visible, but more don't visible!

Where is error?

Thanks!

Hi,

I have several Windows 2012 R2 servers that keep trying to reinstall the same patch. KB4493446. 2019 - 04 Security Monthly Quality Rollup. (This is being install Via a Wsus server.)

The history actually shows that the patch install successfully, and there is no rollback. Yet every time I check for updates it keeps trying to reinstall. I have tried delete the SoftwareDistribution folder. 

I have download the Patch and tried a manual installation but it still tries to reinstall. It was stopping other patches from installing but after I installed all the other patches separably they installed. 

I assume that because its a security patch that it should be installed. 

I did read that there may be an old "Trigger" patch that need to be installed but I don't know what this patch is. See link

https://community.spiceworks.com/topic/2031124-server-2012-r2-windows-updates-installing-then-same-updates-re-installing

If anyone know a solution it would be great to hear it?

Thanks 

Craig 

Craig G

Hello, 

I am trying to get a WSUS server up and running on Server 2016.  I have two PC clients and one test server set up to test it out.  WSUS sees those clients, and has updates that I have approved to install on them.  However, when I click on any of the approved updates, there is an informational message stating that the files for this update have not yet been downloaded.  The event log has no errors, so I am not sure how to trouble shoot this.  Anyone have any ideas?

Thanks,

Scott

i am having issues with getting updates from my wsus server.

I have specified the FQDN in GPO and 8530. all firewall is off and all my device gets this same error code.

please advise what is it i am doing wrong?

I have a Server 2019 standard enviroment and am trying to setup WSUS.

I have installed the Role and post restart attempt to launch the post installation task to configure however this fails.

I get errors relating to various services not working:

The DSS Authentication Web Service is not working.

The SimpleAuth Web Service is not working.

The Client Web Service is not working.

The Server Synchronization Web Service is not working.

The API Remoting Web Service is not working.

The Reporting Web Service is not working.

Does anyone have any ideas?

Hello,

For W2016 WSUS using port 8530, are there needed Enterprise firewall inbound to client zone exceptions needed that were not needed in previous WSUS versions using port 80.  I'm getting (0x8024401c) no connection error from clients. 

I tested access to the server via a W10 client with URL http://my.server.com:8530/selfupdate/wuident.cab and I am not prompted to accept the download.  I can initiate the download prompt when calling that URL from the server's browser, and I see Wireshark TCP and TLS1.2 traffic between my test client and the Server but only SYN packets and no SYN/ACK.  Windows firewall is deactivated by a GPO and Symantec Firewall is used instead.  However, I've deactivated it while testing.  I've also uninstalled WSUS and reinstalled it through the server management console (it retained the computer groups and update info).

I read someone else's stack exchange post that "The IANA/RFC specifies ephemeral ports TCP 49152 through 65535 open for WSUS to be able to connect back to clients from a W2016 Server, so open that port range from the WSUS server to the client subnet object".  Is this true?  If this is not the issue, I could use some good troubleshooting tips

Thanks

Hi

I've just setup the WSUS role on our W2016 server and all other clients are synching w/o problems except for the WSUS server itself.  Also, the v4 IP address is showing as "::1".  What are the best steps to troubleshoot this?

Tnx

Why would WSUS show an update is needed, but the client successfully checking in does not.

WSUS version 2016

I have deleted the server from WSUS, and it comes back.  The update client reports no updates needed.  Update is specifically "''Updates' Update Rollup for Skype for Business Server 2015, SmartSetup (KB3061064)"

BlankMonkey

When viewing 2016 WSUS through the MMC, I'm I want to export what I see as a .csv or xlsx.

.

For example, if I'm looking at 10000 computers objects with the columns Name, Operating System, Version, Last Contact, Make, Model, Firmware I want to export those results to a .csv or .xlsx . 

Unable to sync with upstream server... using 

Synchronize from Microsoft updates

Result: An http error occurred 

WebException: The request failed with the error message:
--
<html><head><title>Object moved</title></head><body>
<h2>Object moved to <a href="%2fmicrosoftupdate%2fv6%2ferrorinformation.aspx%3ferror%3d15">here</a>.</h2>
</body></html>

--.
at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
   at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
   at Microsoft.UpdateServices.ServerSyncWebServices.ServerSync.ServerSyncProxy.GetAuthConfig()
   at Microsoft.UpdateServices.ServerSync.ServerSyncLib.InternetGetServerAuthConfig(ServerSyncProxy proxy, WebServiceCommunicationHelper webServiceHelper)
   at Microsoft.UpdateServices.ServerSync.ServerSyncLib.Authenticate(AuthorizationManager authorizationManager, Boolean checkExpiration, ServerSyncProxy proxy, Cookie cookie, WebServiceCommunicationHelper webServiceHelper)
   at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.SyncConfigUpdatesFromUSS()
   at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.ExecuteSyncProtocol(Boolean allowRedirect)

Please advise....

Hi,

We started to test some Windows Server 2019 computers in our organization.

One of our tests is to configure the machine to WSUS and have the ability to make updates using the WSUS and Windows Update agent but we could not see the Windows Server 2019 computers in the "All Computers" group in WSUS.

After seeing a video* we compared the "Products" that WSUS support. In the video we saw that Windows Server 2019 is a Product in the products list for getting updates using the WSUS (18:28) but we don't see it in our environment.

The WSUS installed in the video is on Windows Server 2019.

This fact lead us to question:

Is the WSUS needs to be installed on Windows Server 2019 if we wish it to support Windows Server 2019 computers?

I could not find any answers on the web...

Our WSUS is installed on Windows Server 2012 R2. Updates Services is in version "6.3.9600.16384" with Microsoft Management Console 3.0 (version 6.3 build 9600)

* - I can't add the video because my account needs to be verified. go to Youtube and search for "Windows Server 2019 Training 15 - How to Install and Configure WSUS Server on Windows Server 2019"

Hi,

In the beginning we have all servers (AD and member) were windows 2008 r2. We have created WSUS group policy on Windows 2008r2 DC. We also have Windows 2008 r2 as WSUS server. After some time, we had added Windows 2012 in our server environment as additional DC and member servers. WSUS GPO applied to all Windows 2008 r2 and Windows 2012 server and windows update from WSUS server. Now we have added Windows 2016 servers as additional DC and member server. WSUS GPO are not applying on Windows 2016 servers. how to troubleshoot this. I want all Windows 2016 servers to update via WSUS server, Do I need to create different GPO for Windows 2016 servers? If yes, then How?

I need immediate help as I need to finish this project within two days.

Thanks.

After public holiday, first business day Client connect to ...tlu.dl.delivery.mp.microsoft.com ,officecdn.microsoft.com are very high bandwidth

Client : Win10 + Office 2013 

we are deeply WSUS, 

Chinese Forums: https://social.technet.microsoft.com/Forums/en-US/7bca6400-6dd7-41ac-98d3-47a2d9298dd3/2405032147371973262220102wsus3699626159?forum=winserver2012zhtw