I am having problems with a small percentage of computers in my domain connecting to a WSUS server running on Windows Server 2012 R2. Out of roughly 100 PCs, we have 85 of them showing up in the WSUS console (about 5 Windows XP machines and the rest Windows 7 SP1, some Professional edition and some Ultimate edition). The other machines (all Windows 7) never show up in the console at all and will not update, all showing error 0x80072efe in the logs. None of our machines are built from images, so there should not be any duplicate IDs. There are 2 separate PC OUs (for 2 different locations) in AD, and the same group policy applies to both OUs. I have verified that the group policy is being applied to the problematic machines and that they are looking at the correct server address for updates. There is nothing that I can pinpoint to set any of these machines apart from the others.
To troubleshoot I have deleted registry keys, deleted the SoftwareDistribution folder, run gpupdate /force, researched the error code online numerous times, tried it with the firewall turned off, run WindowsUpdateDiagnostic.diagcab, and run MicrosofotFixit50123. I've verified that I can open a browser on the affected machine and download the wuident.cab file, and that is working from a browser although that seems to fail for the update process according to the logs. I even tried manually replacing the machine name with the WSUS server IP address in the registry, just to rule out DNS. I made a couple of tweaks to a script I found online in my research to do part of the above plus some, as follows:
REG Delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v SusClientId /f
REG Delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v SusClientIdValidation /f
REG Delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v PingID /f
REG Delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v AccountDomainSid /f
REG Delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Setup /v ServerId /f
REG Delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Setup /v SetupHandlerUpdateId /f
REG Delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Setup /v UpdateSessionId /f
REG Add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v WUServer /t REG_SZ /dhttps://wsus.mycompany.local:8531 /F
REG Add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v WUStatusServer /t REG_SZ /dhttps://wsus.mycompany.local:8531 /F
gpupdate /force
net stop wuauserv /y
net stop BITS /y
rd C:\WINDOWS\SoftwareDistribution /s /Q
del "c:\windows\windowsupdate.log"
regsvr32 WUAPI.DLL /s
regsvr32 WUAUENG.DLL /s
regsvr32 WUAUENG1.DLL /s
regsvr32 ATL.DLL /s
regsvr32 WUCLTUI.DLL /s
regsvr32 WUPS.DLL /s
regsvr32 WUPS2.DLL /s
regsvr32 WUWEB.DLL /s
regsvr32 msxml3.dll /s
net start wuauserv /y
wuauclt.exe /resetauthorization /detectnow
A typical log entry:
2014-10-15 11:25:07:285 528 8f0 AU #############
2014-10-15 11:25:07:285 528 8f0 AU ## START ## AU: Search for updates
2014-10-15 11:25:07:285 528 8f0 AU #########
2014-10-15 11:25:07:316 528 8f0 AU <<## SUBMITTED ## AU: Search for updates [CallId = {9699D5A5-AE16-4D17-841A-7A08266A542A}]
2014-10-15 11:25:07:316 528 bf0 Agent *************
2014-10-15 11:25:07:316 528 bf0 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
2014-10-15 11:25:07:316 528 bf0 Agent *********
2014-10-15 11:25:07:316 528 bf0 Agent * Online = Yes; Ignore download priority = No
2014-10-15 11:25:07:316 528 bf0 Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1
or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
2014-10-15 11:25:07:316 528 bf0 Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
2014-10-15 11:25:07:316 528 bf0 Agent * Search Scope = {Machine}
2014-10-15 11:25:07:332 528 bf0 Setup Checking for agent SelfUpdate
2014-10-15 11:25:07:332 528 bf0 Setup Client version: Core: 7.6.7600.320 Aux: 7.6.7600.320
2014-10-15 11:25:07:363 528 bf0 Misc WARNING: Send failed with hr = 80072efe.
2014-10-15 11:25:07:363 528 bf0 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2014-10-15 11:25:07:363 528 bf0 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <https://wsus.mycompany.local:8531/selfupdate/wuident.cab>. error
0x80072efe
2014-10-15 11:25:07:363 528 bf0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2014-10-15 11:25:07:363 528 bf0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2014-10-15 11:25:07:363 528 bf0 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2014-10-15 11:25:07:379 528 bf0 Misc WARNING: Send failed with hr = 80072efe.
2014-10-15 11:25:07:379 528 bf0 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2014-10-15 11:25:07:379 528 bf0 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <https://wsus.mycompany.local:8531/selfupdate/wuident.cab>. error
0x80072efe
2014-10-15 11:25:07:379 528 bf0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2014-10-15 11:25:07:379 528 bf0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2014-10-15 11:25:07:379 528 bf0 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2014-10-15 11:25:07:394 528 bf0 Misc WARNING: Send failed with hr = 80072efe.
2014-10-15 11:25:07:394 528 bf0 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2014-10-15 11:25:07:394 528 bf0 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <https://wsus.mycompany.local:8531/selfupdate/wuident.cab>. error
0x80072efe
2014-10-15 11:25:07:394 528 bf0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2014-10-15 11:25:07:394 528 bf0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2014-10-15 11:25:07:394 528 bf0 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2014-10-15 11:25:07:426 528 bf0 Misc WARNING: Send failed with hr = 80072efe.
2014-10-15 11:25:07:426 528 bf0 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2014-10-15 11:25:07:426 528 bf0 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <https://wsus.mycompany.local:8531/selfupdate/wuident.cab>. error
0x80072efe
2014-10-15 11:25:07:426 528 bf0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2014-10-15 11:25:07:426 528 bf0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2014-10-15 11:25:07:426 528 bf0 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2014-10-15 11:25:07:426 528 bf0 Misc WARNING: DownloadFileInternal failed forhttps://wsus.mycompany.local:8531/selfupdate/wuident.cab: error 0x80072efe
2014-10-15 11:25:07:426 528 bf0 Setup FATAL: DownloadCab failed, err = 0x80072EFE
2014-10-15 11:25:07:426 528 bf0 Setup WARNING: SelfUpdate check failed to download package information, error = 0x80072EFE
2014-10-15 11:25:07:426 528 bf0 Setup FATAL: SelfUpdate check failed, err = 0x80072EFE
2014-10-15 11:25:07:426 528 bf0 Agent * WARNING: Skipping scan, self-update check returned 0x80072EFE
2014-10-15 11:25:07:426 528 bf0 Agent * WARNING: Exit code = 0x80072EFE
2014-10-15 11:25:07:426 528 bf0 Agent *********
2014-10-15 11:25:07:426 528 bf0 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
2014-10-15 11:25:07:426 528 bf0 Agent *************
2014-10-15 11:25:07:426 528 bf0 Agent WARNING: WU client failed Searching for update with error 0x80072efe
2014-10-15 11:25:07:426 528 ea0 AU >>## RESUMED ## AU: Search for updates [CallId = {9699D5A5-AE16-4D17-841A-7A08266A542A}]
2014-10-15 11:25:07:426 528 ea0 AU # WARNING: Search callback failed, result = 0x80072EFE
2014-10-15 11:25:07:426 528 ea0 AU # WARNING: Failed to find updates with error code 80072EFE
2014-10-15 11:25:07:426 528 ea0 AU #########
2014-10-15 11:25:07:426 528 ea0 AU ## END ## AU: Search for updates [CallId = {9699D5A5-AE16-4D17-841A-7A08266A542A}]
2014-10-15 11:25:07:426 528 ea0 AU #############
Also, one thing that makes me wonder - we don't use a proxy server, but in some logs we get entries like the following:
2014-10-15 09:03:18:379 1252 15a0 AU Successfully wrote event for AU health state:0
2014-10-15 09:03:18:382 1252 15a0 AU AU setting next detection timeout to 2014-10-15 13:53:46
2014-10-15 09:03:18:382 1252 15a0 AU Setting AU scheduled install time to 2014-10-16 07:00:00
2014-10-15 09:03:18:382 1252 15a0 AU Successfully wrote event for AU health state:0
2014-10-15 09:03:18:397 1252 15a0 AU Successfully wrote event for AU health state:0
2014-10-15 09:03:23:368 1252 30b0 Report REPORT EVENT: {95D7B3B3-05F2-4B9D-AF11-90FD4481DB6C} 2014-10-15 09:03:18:361-0400 1 148 101 {D67661EB-2423-451D-BF5D-13199E37DF28} 1 80072efe SelfUpdate Failure Software
Synchronization Windows Update Client failed to detect with error 0x80072efe.
2014-10-15 09:03:23:382 1252 30b0 Report CWERReporter::HandleEvents - WER report upload completed with status 0x8
2014-10-15 09:03:23:383 1252 30b0 Report WER Report sent: 7.6.7600.320 0x80072efe D67661EB-2423-451D-BF5D-13199E37DF28 Scan 101 Managed
2014-10-15 09:03:23:383 1252 30b0 Report CWERReporter finishing event handling. (00000000)
2014-10-15 09:16:39:512 1252 30b0 Misc WARNING: Send failed with hr = 80072efe.
2014-10-15 09:16:39:512 1252 30b0 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2014-10-15 09:16:39:512 1252 30b0 Misc FATAL: SOAP/WinHttp - SendRequest: SendRequestUsingProxy failed. error 0x80072efe
2014-10-15 09:16:39:512 1252 30b0 PT + Last proxy send request failed with hr = 0x80072EFE, HTTP status code = 0
2014-10-15 09:16:39:512 1252 30b0 PT + Caller provided credentials = No
2014-10-15 09:16:39:512 1252 30b0 PT + Impersonate flags = 0
2014-10-15 09:16:39:512 1252 30b0 PT + Possible authorization schemes used =
2014-10-15 09:16:39:513 1252 30b0 PT WARNING: GetConfig failure, error = 0x80072EFE, soap client error = 5, soap error code = 0, HTTP status code = 200
2014-10-15 09:16:39:513 1252 30b0 PT WARNING: PTError: 0x80072efe
2014-10-15 09:16:39:513 1252 30b0 PT WARNING: GetConfig_WithRecovery failed: 0x80072efe
2014-10-15 09:16:39:513 1252 30b0 PT WARNING: RefreshConfig failed: 0x80072efe
2014-10-15 09:16:39:513 1252 30b0 PT WARNING: RefreshPTState failed: 0x80072efe
2014-10-15 09:16:39:513 1252 30b0 PT WARNING: PTError: 0x80072efe
2014-10-15 09:16:39:513 1252 30b0 Report WARNING: Reporter failed to upload events with hr = 80072efe.
2014-10-15 09:31:23:207 1252 30b0 Misc WARNING: Send failed with hr = 80072efe.
2014-10-15 09:31:23:207 1252 30b0 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2014-10-15 09:31:23:207 1252 30b0 Misc FATAL: SOAP/WinHttp - SendRequest: SendRequestUsingProxy failed. error 0x80072efe
2014-10-15 09:31:23:207 1252 30b0 PT + Last proxy send request failed with hr = 0x80072EFE, HTTP status code = 0
Any ideas? I've run out.
Andy