Announcement

Collapse
No announcement yet.

Windows updates stopped working on 2 R2 Domain Controllers

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Windows updates stopped working on 2 R2 Domain Controllers

    Hi,

    I have 2 Windows 2008 R2 domain controllers,

    When running Windows Updates on both I'm getting the following message :

    "Windows could not search for new updates", "errors found : Code 80096001 Windows update encountered an unknown error"

    I've stopped AU service and clear "software distribution folder" , I've tried Microsoft Fix it 50528, and the problem persists, I've tried SFC and the problem persists,

    When trying to run windows update readiness tool (checksur.exe) I'm getting a message "Installer encountered an error 0x80096001, a system-level error occurred while verifying trust"

    The DCs GPO is linked to additional server (not DC) which is working fine,


    here is Windows updates log file :
    013-03-03 12:06:37:111 872 140 AU #############
    2013-03-03 12:06:37:111 872 140 AU ## START ## AU: Search for updates
    2013-03-03 12:06:37:111 872 140 AU #########
    2013-03-03 12:06:37:111 872 140 AU <<## SUBMITTED ## AU: Search for updates [CallId = {2E028A6E-FE91-4275-B88A-5F03826F1656}]
    2013-03-03 12:06:37:111 872 7d8 Agent *************
    2013-03-03 12:06:37:111 872 7d8 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
    2013-03-03 12:06:37:111 872 7d8 Agent *********
    2013-03-03 12:06:37:111 872 7d8 Agent * Online = Yes; Ignore download priority = No
    2013-03-03 12:06:37:111 872 7d8 Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
    2013-03-03 12:06:37:111 872 7d8 Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2013-03-03 12:06:37:111 872 7d8 Agent * Search Scope = {Machine}
    2013-03-03 12:06:37:111 872 7d8 Setup Checking for agent SelfUpdate
    2013-03-03 12:06:37:111 872 7d8 Setup Client version: Core: 7.6.7600.256 Aux: 7.6.7600.256
    2013-03-03 12:06:37:127 872 7d8 Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident .cab:
    2013-03-03 12:06:37:127 872 7d8 Misc WARNING: Error: 0x80096001 when verifying trust for C:\Windows\SoftwareDistribution\SelfUpdate\wuident .cab
    2013-03-03 12:06:37:127 872 7d8 Misc WARNING: Digital Signatures on file C:\Windows\SoftwareDistribution\SelfUpdate\wuident .cab are not trusted: Error 0x80096001
    2013-03-03 12:06:37:127 872 7d8 Setup WARNING: SelfUpdate check failed to download package information, error = 0x80096001
    2013-03-03 12:06:37:127 872 7d8 Setup FATAL: SelfUpdate check failed, err = 0x80096001
    2013-03-03 12:06:37:127 872 7d8 Agent * WARNING: Skipping scan, self-update check returned 0x80096001
    2013-03-03 12:06:37:127 872 7d8 Agent * WARNING: Exit code = 0x80096001
    2013-03-03 12:06:37:127 872 7d8 Agent *********
    2013-03-03 12:06:37:127 872 7d8 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
    2013-03-03 12:06:37:127 872 7d8 Agent *************
    2013-03-03 12:06:37:127 872 7d8 Agent WARNING: WU client failed Searching for update with error 0x80096001
    2013-03-03 12:06:37:127 872 ddc AU >>## RESUMED ## AU: Search for updates [CallId = {2E028A6E-FE91-4275-B88A-5F03826F1656}]
    2013-03-03 12:06:37:127 872 ddc AU # WARNING: Search callback failed, result = 0x80096001
    2013-03-03 12:06:37:127 872 ddc AU # WARNING: Failed to find updates with error code 80096001
    2013-03-03 12:06:37:127 872 ddc AU #########
    2013-03-03 12:06:37:127 872 ddc AU ## END ## AU: Search for updates [CallId = {2E028A6E-FE91-4275-B88A-5F03826F1656}]
    2013-03-03 12:06:37:127 872 ddc AU #############
    2013-03-03 12:06:37:127 872 ddc AU Need to show Unable to Detect notification
    2013-03-03 12:06:37:127 872 ddc AU Successfully wrote event for AU health state:1
    2013-03-03 12:06:37:127 872 ddc AU AU setting next detection timeout to 2013-03-03 15:06:37



    I'll be happy to get your advices,


    Thanks,
    Ohad.
    Last edited by Ohadfr2; 4th March 2013, 09:36.

  • #2
    Re: Windows updates stopped working on 2 R2 Domain Controllers

    Are you using WSUS or direct from Microsoft?

    Has anything changed recently?
    Tom Jones
    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
    PhD, MSc, FIAP, MIITT
    IT Trainer / Consultant
    Ossian Ltd
    Scotland

    ** Remember to give credit where credit is due and leave reputation points where appropriate **

    Comment


    • #3
      Re: Windows updates stopped working on 2 R2 Domain Controllers

      Hi,

      I've used Wsus on both servers and lately deleted them from the Wsus server's view,

      I've tried to re enter one of the server, I can see it now with an updated status but sill can't run updates,

      additional detail that can assist : I've tried to follow kb250997

      When trying to rename C:\Windows\winsxs\pending.xml

      I got a message that the file does not exist,

      I've done some auditing changes in Winsxs folder, as pending.xml is in this folder maybe something happen during this change


      Thanks,
      Ohad.

      Comment


      • #4
        Re: Windows updates stopped working on 2 R2 Domain Controllers

        Originally posted by Ohadfr2 View Post
        Hi,

        I have 2 Windows 2008 R2 domain controllers,

        When running Windows Updates on both I'm getting the following message :

        "Windows could not search for new updates", "errors found : Code 80096001 Windows update encountered an unknown error"

        I've stopped AU service and clear "software distribution folder" , I've tried Microsoft Fix it 50528, and the problem persists, I've tried SFC and the problem persists,

        When trying to run windows update readiness tool (checksur.exe) I'm getting a message "Installer encountered an error 0x80096001, a system-level error occurred while verifying trust"

        The DCs GPO is linked to additional server (not DC) which is working fine,


        here is Windows updates log file :
        013-03-03 12:06:37:111 872 140 AU #############
        2013-03-03 12:06:37:111 872 140 AU ## START ## AU: Search for updates
        2013-03-03 12:06:37:111 872 140 AU #########
        2013-03-03 12:06:37:111 872 140 AU <<## SUBMITTED ## AU: Search for updates [CallId = {2E028A6E-FE91-4275-B88A-5F03826F1656}]
        2013-03-03 12:06:37:111 872 7d8 Agent *************
        2013-03-03 12:06:37:111 872 7d8 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
        2013-03-03 12:06:37:111 872 7d8 Agent *********
        2013-03-03 12:06:37:111 872 7d8 Agent * Online = Yes; Ignore download priority = No
        2013-03-03 12:06:37:111 872 7d8 Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
        2013-03-03 12:06:37:111 872 7d8 Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
        2013-03-03 12:06:37:111 872 7d8 Agent * Search Scope = {Machine}
        2013-03-03 12:06:37:111 872 7d8 Setup Checking for agent SelfUpdate
        2013-03-03 12:06:37:111 872 7d8 Setup Client version: Core: 7.6.7600.256 Aux: 7.6.7600.256
        2013-03-03 12:06:37:127 872 7d8 Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident .cab:
        2013-03-03 12:06:37:127 872 7d8 Misc WARNING: Error: 0x80096001 when verifying trust for C:\Windows\SoftwareDistribution\SelfUpdate\wuident .cab
        2013-03-03 12:06:37:127 872 7d8 Misc WARNING: Digital Signatures on file C:\Windows\SoftwareDistribution\SelfUpdate\wuident .cab are not trusted: Error 0x80096001
        2013-03-03 12:06:37:127 872 7d8 Setup WARNING: SelfUpdate check failed to download package information, error = 0x80096001
        2013-03-03 12:06:37:127 872 7d8 Setup FATAL: SelfUpdate check failed, err = 0x80096001
        2013-03-03 12:06:37:127 872 7d8 Agent * WARNING: Skipping scan, self-update check returned 0x80096001
        2013-03-03 12:06:37:127 872 7d8 Agent * WARNING: Exit code = 0x80096001
        2013-03-03 12:06:37:127 872 7d8 Agent *********
        2013-03-03 12:06:37:127 872 7d8 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
        2013-03-03 12:06:37:127 872 7d8 Agent *************
        2013-03-03 12:06:37:127 872 7d8 Agent WARNING: WU client failed Searching for update with error 0x80096001
        2013-03-03 12:06:37:127 872 ddc AU >>## RESUMED ## AU: Search for updates [CallId = {2E028A6E-FE91-4275-B88A-5F03826F1656}]
        2013-03-03 12:06:37:127 872 ddc AU # WARNING: Search callback failed, result = 0x80096001
        2013-03-03 12:06:37:127 872 ddc AU # WARNING: Failed to find updates with error code 80096001
        2013-03-03 12:06:37:127 872 ddc AU #########
        2013-03-03 12:06:37:127 872 ddc AU ## END ## AU: Search for updates [CallId = {2E028A6E-FE91-4275-B88A-5F03826F1656}]
        2013-03-03 12:06:37:127 872 ddc AU #############
        2013-03-03 12:06:37:127 872 ddc AU Need to show Unable to Detect notification
        2013-03-03 12:06:37:127 872 ddc AU Successfully wrote event for AU health state:1
        2013-03-03 12:06:37:127 872 ddc AU AU setting next detection timeout to 2013-03-03 15:06:37



        I'll be happy to get your advices,


        Thanks,
        Ohad.
        Seems like some corruption somewhere since it is unable to verify it.

        Comment

        Working...
        X