Hello,
Within the past two months our WSUS Server started throwing error 13002, "Client computers are installing updates with a higher than 25 percent failure rate. This is not normal." We currently have 252 computers with errors in WSUS, and 33 updates with errors. We have never had issues up until two months ago. If you keep rebooting the machine, and keep running updates, they eventually all install. I believe I will see the machines with errors go away as the weekly scheduled WSUS install runs over and over, and the machines reboot.
- We have 300 clients, all running Windows 7 SP1 x64.
- Our WSUS server is running on Server 2008 R2. The WSUS build number is 3.2.7600.262.
- We created an alternate WSUS 4.0 server on Server 2012, and redownloaded all updates. We put one client on it and it is showing errors on 3 updates, KB890830, KB931125, and KB2917500.
- Clients are throwing errors 800F0902, 80242016, and 80070005.
- I've noticed something with the C:\Windows\SoftwareDistribution\Download folder on the clients. When an update runs and fails, there is a "Install" folder created inside this folder. If you try to open it after the failure you get"Access Denied" If you reboot the machine, the install folder goes away. (I assume this is a temp folder created to run updates). I've checked the permissions on this folder on various machines and all seems normal. I think this is the root of the problem, and why we need to keep rebooting to get all of the updates to run.
- I tried deleting the Software Distribution folder on a client after stopping the update service, then restarting the update service. The folder redownloads but the client still throws errors.
- I've gone through our Group Policies looking for anything that can cause this and found nothing. We've created a test OU blocking inheritance, and only applying a WSUS policy in it to make it get the updates internally. I then rebuilt multiple machines using Dell KACE, and still had failures.
- We run SEP 11 and 12 on our clients. I've tried removing the AV, making sure the firewall was off, etc. It still throws errors.
- I've spoken with our network team, and installed wireshark on a few clients looking for network errors and found nothing.
- I've tried various Dell KACE scripted installs on test machines (erasing and rebuilding the machines from scratch), after which I run Windows Updates from WSUS. They have thrown errors.
- I've rebuilt a machine using Dell KACE, undomained it, then ran updates externally from WSUS going to Microsoft's site, and I'm still getting errors.
- I've tried removing all software from the Dell KACE build to where it is just installing the OS and I'm still getting errors.
- I tried taking a plain Windows 7 x64 DVD and installing that on a test machine, then without domaining it and without installing any other software, running updates from Microsofts update site. This seems to work, althrough it does throw some errors but I believe those are related to having to reboot your machine in order to complete the updates (I can't remember that error code at the moment).
Has anyone else been experiencing this? Any suggestions as to how I can fix this?