We have about a half dozen PCs refusing to update our WSUS server or to download and install any updates. At the site we have a few WinXP PCs and they are fine. The only ones failing run Win7. This is a small site which we do not have a VPN to and as such we have them pointed to our wsusserver.company.com URL on a public IP. The site has a fairly slow DSL internet connection which I'd be quick to think is the culprit, except for the consistent success on the WinXP PCs.
We've searched and read many discussions about similar problems both here and elsewhere. We've tried the various prescribed resolutions without success.
The server runs Win2008 standard SP2 with WSUS 3.2.7600.226 and KB2720211 is installed. The PCs all show up in the WSUS console, properly for the WinXP ones, "Not yet reported" for the Win7 ones.
We have other WinXP and Win7 PCs at other locations also on DSL and similar internet connections communicating with the same WSUS server without issue. Only PCs in one physical location and only Win7 ones there.
Since an entire log file is too large to post here apparently, here are what I think are some of the highlights:
2012-11-1914:26:55:97710161528Misc=========== Logging initialized (build: 7.6.7600.256, tz: -0600) ===========
2012-11-1914:26:55:97710161528Misc = Process: C:\Windows\system32\svchost.exe
2012-11-1914:26:55:97710161528Misc = Module: c:\windows\system32\wuaueng.dll
2012-11-1914:26:55:97710161528Service*************
2012-11-1914:26:55:97710161528Service** START ** Service: Service startup
2012-11-1914:26:55:97710161528Service*********
2012-11-1914:26:56:01310161528Agent * WU client version 7.6.7600.256
2012-11-1914:26:56:01310161528Agent * Base directory: C:\Windows\SoftwareDistribution
2012-11-1914:26:56:01410161528Agent * Access type: No proxy
2012-11-1914:26:56:01410161528Agent * Network state: Connected
2012-11-1914:26:58:145101665cAgent * Windows Update access disabled: No
2012-11-1914:26:58:151101665cDnldMgrDownload manager restoring 0 downloads
2012-11-1914:26:58:27710161528AgentCreated new random SusClientId 76914f97-c8b9-47c7-8c02-7a1c63d9de0e. Old Id: none.
2012-11-1914:26:58:27710161528Report*********** Report: Initializing static reporting data ***********
2012-11-1914:26:58:317101665cAU # Scheduled install day/time: Every day at 11:00
2012-11-1914:26:58:317101665cAU # Auto-install minor updates: Yes (Policy)
2012-11-1914:26:58:318101665cAU # Will interact with non-admins (Non-admins are elevated (Policy))
2012-11-1914:26:58:318101665cAUSetting AU scheduled install time to 2012-11-20 17:00:00
2012-11-1914:26:58:391101665cAUSuccessfully wrote event for AU health state:1
2012-11-1914:26:58:392101665cServiceWARNING: GetUserTokenFromSessionId failed with error 800703f0 for session 0
^ that last warning at least 8 times throughout the rest of this attempt
2012-11-1914:27:05:64810161388MiscValidating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
2012-11-1914:27:05:67010161388MiscMicrosoft signed: Yes
2012-11-1914:27:05:81410161388SetupDetermining whether a new setup handler needs to be downloaded
2012-11-1914:27:05:81410161388SetupSelfUpdate handler is not found. It will be downloaded
2012-11-1914:27:05:81410161388SetupEvaluating applicability of setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.6.7600.256"
2012-11-1914:27:05:81710161388SetupSetup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.6.7600.256" is already installed.
2012-11-1914:27:06:25610161388PT+++++++++++ PT: Synchronizing server updates +++++++++++
2012-11-1914:27:06:25610161388PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://wsusserver.ourdomain.com/ClientWebService/client.asmx
2012-11-1914:27:06:26610161388PTWARNING: Cached cookie has expired or new PID is available
2012-11-1914:27:06:26610161388PTInitializing simple targeting cookie, clientId = 76914f97-c8b9-47c7-8c02-7a1c63d9de0e, target group = group.notarealtld, DNS name = pcname.group.notarealtld
2012-11-1914:27:06:26710161388PT Server URL = http://wsusserver.ourdomain.com/SimpleAuthWebService/SimpleAuth.asmx
2012-11-1914:27:06:52210161388PTWARNING: GetCookie failure, error = 0x8024400D, soap client error = 7, soap error code = 300, HTTP status code = 200
2012-11-1914:27:06:52310161388PTWARNING: SOAP Fault: 0x00012c
2012-11-1914:27:06:52310161388PTWARNING: faultstring:Fault occurred
2012-11-1914:27:06:52310161388PTWARNING: ErrorCode:ServerChanged(4)
2012-11-1914:27:06:52310161388PTWARNING: Message:Server rolled back since last call to GetCookie
2012-11-1914:27:06:52310161388PTWARNING: Method:"http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService/GetCookie"
2012-11-1914:27:06:52310161388PTWARNING: ID:d0897ea6-f3f1-4938-a97e-764f3c7b7715
2012-11-1914:27:06:52310161388PTWARNING: PTError: 0x80244015
2012-11-1914:27:06:52310161388PTWARNING: GetCookie_WithRecovery failed : 0x80244015
2012-11-1914:27:06:52310161388PTWARNING: RefreshCookie failed: 0x80244015
2012-11-1914:27:06:52310161388PTWARNING: RefreshPTState failed: 0x80244015
2012-11-1914:27:06:52310161388PTWARNING: Sync of Updates: 0x80244015
2012-11-1914:27:06:63910161388PTWARNING: Cached cookie has expired or new PID is available
2012-11-1914:27:06:63910161388PTInitializing simple targeting cookie, clientId = 76914f97-c8b9-47c7-8c02-7a1c63d9de0e, target group = group.notarealtld, DNS name = pcname.group.notarealtld
2012-11-1914:27:06:63910161388PT Server URL = http://wsusserver.ourdomain.com/SimpleAuthWebService/SimpleAuth.asmx
2012-11-1914:28:10:01010161388MiscWARNING: Send failed with hr = 80072ee2.
2012-11-1914:28:10:01010161388MiscWARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-11-1914:28:10:01010161388PT + Last proxy send request failed with hr = 0x80072EE2, HTTP status code = 0
2012-11-1914:28:10:01110161388PT + Caller provided credentials = No
2012-11-1914:28:10:01110161388PT + Impersonate flags = 0
2012-11-1914:28:10:01110161388PT + Possible authorization schemes used =
2012-11-1914:28:10:01110161388PTWARNING: RefreshCache failure, error = 0x80072EE2, soap client error = 5, soap error code = 0, HTTP status code = 200
2012-11-1914:28:10:01110161388PTWARNING: PTError: 0x80072ee2
2012-11-1914:28:10:01110161388PTWARNING: RefreshCache_WithRecovery failed: 0x80072ee2
2012-11-1914:28:10:01110161388PTWARNING: SyncCache: Emergency cleanup of the ServerUpdateInfo due to failure in RefreshCache
2012-11-1914:28:10:09210161388PTWARNING: SyncCache failed : 0x80072ee2
2012-11-1914:28:10:09210161388PTWARNING: SyncServerUpdatesInternal failed: 0x80072ee2
2012-11-1914:28:10:09210161388Agent * WARNING: Failed to synchronize, error = 0x80072EE2
2012-11-1914:28:10:16410161388Agent * WARNING: Exit code = 0x80072EE2
2012-11-1914:28:10:16410161388Agent*********
2012-11-1914:28:10:16410161388Agent** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
2012-11-1914:28:10:16410161388Agent*************
2012-11-1914:28:10:16410161388AgentWARNING: WU client failed Searching for update with error 0x80072ee2
2012-11-1914:28:10:16710161230AU>>## RESUMED ## AU: Search for updates [CallId = {A2451715-24CA-44CB-B97D-227D233C39E1}]
2012-11-1914:28:10:16810161230AU # WARNING: Search callback failed, result = 0x80072EE2
2012-11-1914:28:10:16810161230AU # WARNING: Failed to find updates with error code 80072EE2
2012-11-1914:28:10:16810161230AU#########
2012-11-1914:28:10:16810161230AU## END ## AU: Search for updates [CallId = {A2451715-24CA-44CB-B97D-227D233C39E1}]
2012-11-1914:28:10:16810161230AU#############
2012-11-1914:28:10:16910161230AUNeed to show Unable to Detect notification
2012-11-1914:28:10:17010161230AUSuccessfully wrote event for AU health state:1
2012-11-1914:28:10:17110161230AUAU setting next detection timeout to 2012-11-20 01:28:10
2012-11-1914:28:10:17110161230AUSetting AU scheduled install time to 2012-11-20 17:00:00
2012-11-1914:28:10:17110161230AUSuccessfully wrote event for AU health state:1
2012-11-1914:28:10:17310161230AUSuccessfully wrote event for AU health state:1
2012-11-1914:28:10:19010161388ReportCWERReporter finishing event handling. (00000000)
2012-11-1914:28:10:19110161388ReportREPORT EVENT: {63C96C4A-FBF8-4F18-9AA1-9887F257EB73}2012-11-19 14:28:10:163-06001148101{00000000-0000-0000-0000-000000000000}080072ee2AutomaticUpdatesFailureSoftware SynchronizationWindows Update Client failed to detect with error 0x80072ee2.
2012-11-1914:28:10:33010161388ReportCWERReporter::HandleEvents - WER report upload completed with status 0x8
2012-11-1914:28:10:44410161388PTInitializing simple targeting cookie, clientId = 76914f97-c8b9-47c7-8c02-7a1c63d9de0e, target group = group.notarealtld, DNS name = pcname.group.notarealtld
2012-11-1914:28:10:44410161388PT Server URL = http://wsusserver.ourdomain.com/SimpleAuthWebService/SimpleAuth.asmx
2012-11-1914:28:14:02310161388PTWARNING: GetCookie failure, error = 0x8024400D, soap client error = 7, soap error code = 300, HTTP status code = 200
2012-11-1914:28:14:02310161388PTWARNING: SOAP Fault: 0x00012c
2012-11-1914:28:14:02310161388PTWARNING: faultstring:Fault occurred
2012-11-1914:28:14:02310161388PTWARNING: ErrorCode:ServerChanged(4)
2012-11-1914:28:14:02410161388PTWARNING: Message:Server rolled back since last call to GetCookie
2012-11-1914:28:14:02410161388PTWARNING: Method:"http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService/GetCookie"
2012-11-1914:28:14:02410161388PTWARNING: ID:fe25adf8-2594-4f2d-945e-e1877ede0a87
2012-11-1914:28:14:02410161388PTWARNING: PTError: 0x80244015
2012-11-1914:28:14:02410161388PTWARNING: GetCookie_WithRecovery failed : 0x80244015
2012-11-1914:28:14:02410161388PTWARNING: RefreshCookie failed: 0x80244015
2012-11-1914:28:14:02410161388PTWARNING: RefreshPTState failed: 0x80244015
2012-11-1914:28:14:67410161388PTWARNING: Cached cookie has expired or new PID is available
2012-11-1914:28:14:67410161388PTInitializing simple targeting cookie, clientId = 76914f97-c8b9-47c7-8c02-7a1c63d9de0e, target group = group.notarealtld, DNS name = pcname.group.notarealtld
2012-11-1914:28:14:67410161388PT Server URL = http://wsusserver.ourdomain.com/SimpleAuthWebService/SimpleAuth.asmx
2012-11-1914:28:19:38510161388PTWARNING: No updates found from server; serverID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}
2012-11-1914:28:21:76010161388ReportUploading 1 events using cached cookie, reporting URL = http://wsusserver.ourdomain.com/ReportingWebService/ReportingWebService.asmx
2012-11-1914:28:24:21010161388ReportReporter successfully uploaded 1 events.
2012-11-1914:28:24:21310161388ReportCWERReporter finishing event handling. (00000000)
Thanks.