Announcement

Collapse
No announcement yet.

Some PCs not updating from WSUS

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Some PCs not updating from WSUS

    Hi
    We have a WSUS server 6.2.9200 running on windows 2012 Standard and about 500 PCs using it for updates. WSUS details applied via group policy. About half of PCs updating fine but there are a lot with “Updates with errors” and/or “Updates needed”. If I check particular PC I find that number of failed updates on the PC is different from what it shows in WSUS.

    Also the policy is set to check for updates every day and install updates as soon as its downloaded but if I go to “Windows Updates” there are updates waiting to be installed (although should be installed automatically).

    On PCs with this issue I tried:
    recreating “C:\Windows\SoftwareDistribution\DataStore” and “C:\Windows\SoftwareDistribution\Download folders”,

    removing following reg values: "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Wi ndowsUpdate\ SusClientIdValidation", "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Wi ndowsUpdate\ SusClientId "

    and running “wuauclt /resetauthorization” and “wuauclt /detectnow”

    but updates on those PCs still not working.

    Is there any way to force re download and reinstall failed updates on PCs from the server or any other way remotely and centrally or sort this issue in any other way?
    Also is there any way to monitor windows update in real time on server side or any logs that would show what happens when PC connecting to WSUS for updates?

    Thanks

  • #2
    Are they all running the same operating version?
    Did you build them all or are they a hodge podge of different builds?
    Have you checked to see if the naughty machines have correctly applied the WSUS GPO?

    Comment


    • #3
      Originally posted by JJKing View Post
      Are they all running the same operating version?
      Did you build them all or are they a hodge podge of different builds?
      Have you checked to see if the naughty machines have correctly applied the WSUS GPO?
      All same version, just few different Dell models (same models built from same image).
      All PCs I have checked applied GPO correctly

      Comment


      • #4
        The WSUS options for update types don't necessarily include every update available from Microsoft, especially optional updates. Which update options for Classifications (under Products and Classifications), do you have selected? We have all except Hotfixes and Upgrades selected, and I see further updates available when initiating a manual check against Microsoft's online update catalog.

        Also, make sure that all the updates that have been downloaded are approved for installation. You can filter for approval status using the updates filter in the WSUS console.
        A recent poll suggests that 6 out of 7 dwarfs are not happy

        Comment


        • #5
          Originally posted by Blood View Post
          The WSUS options for update types don't necessarily include every update available from Microsoft, especially optional updates. Which update options for Classifications (under Products and Classifications), do you have selected? We have all except Hotfixes and Upgrades selected, and I see further updates available when initiating a manual check against Microsoft's online update catalog.

          Also, make sure that all the updates that have been downloaded are approved for installation. You can filter for approval status using the updates filter in the WSUS console.
          We synchronize Critical, Security, Definition Updates and Updates.
          All synchronized updates approved automatically.

          Comment


          • #6
            I have automatic approval set as well, but I still occasionally see updates requiring approval - this is why I suggested you check using the filter in the WSUS console.
            A recent poll suggests that 6 out of 7 dwarfs are not happy

            Comment


            • #7
              Originally posted by Blood View Post
              I have automatic approval set as well, but I still occasionally see updates requiring approval - this is why I suggested you check using the filter in the WSUS console.
              Ours seems ok, all synced updates are getting approved.

              Comment


              • #8
                Have a look at C:\Windows\WindowsUpdate.log on one of your affected clients.

                I have also had the occasional issue with failed updates, either through updates not installing or through the detection process taking ages. These were fixed by ensuring the staff log off when they leave work, before the WSUS install begins, and by installing the latest Windows Update Agent https://support.microsoft.com/en-gb/kb/949104.

                For the most stubborn machines I used WSUS Offline http://download.wsusoffline.net/
                A recent poll suggests that 6 out of 7 dwarfs are not happy

                Comment


                • #9
                  Originally posted by Blood View Post
                  Have a look at C:\Windows\WindowsUpdate.log on one of your affected clients.

                  I have also had the occasional issue with failed updates, either through updates not installing or through the detection process taking ages. These were fixed by ensuring the staff log off when they leave work, before the WSUS install begins, and by installing the latest Windows Update Agent https://support.microsoft.com/en-gb/kb/949104.

                  For the most stubborn machines I used WSUS Offline http://download.wsusoffline.net/
                  Appreciate your advise, but we already have latest agent on machines. And I know about WSUS offline - but we have about 100 PCs showing some updates errors/warnings and I dont feel like running it on each of those machines :/ .
                  I do not understand why it can not just work as it should :\

                  Comment


                  • #10
                    Any clues in the Windows Update log?
                    A recent poll suggests that 6 out of 7 dwarfs are not happy

                    Comment


                    • #11
                      Originally posted by Blood View Post
                      Any clues in the Windows Update log?
                      Not really.
                      For some reason cannot paste the whole log so will paste just warnings and errors I found :

                      2017-01-23 12:00:10:009 1080 e94 AU WARNING: Failed to change download properties of call, error = 0x80070057
                      2017-01-23 12:00:10:009 1080 e94 AU WARNING: Failed to change download properties of call, error = 0x80070057
                      2017-01-23 12:00:10:009 1080 e94 AU WARNING: Failed to change download properties of call, error = 0x80070057
                      2017-01-23 12:00:10:009 1080 e94 AU WARNING: Failed to change download properties of call, error = 0x80070057
                      2017-01-23 12:00:10:009 1080 e94 AU WARNING: Failed to change download properties of call, error = 0x80070057
                      2017-01-23 12:00:10:009 1080 e94 AU Setting AU scheduled install time to 2017-01-24 12:00:00
                      2017-01-23 12:00:10:009 1080 e94 AU Successfully wrote event for AU health state:0
                      2017-01-23 12:09:16:945 1080 1b14 AU AU checked download status and it changed: Downloading is not paused
                      2017-01-23 12:09:16:945 1080 1b14 AU AU setting pending client directive to 'Download Progress'
                      2017-01-23 12:09:31:959 1080 e94 AU WARNING: AU found no suitable session to launch client in
                      2017-01-23 12:34:17:012 1080 1b14 AU AU checked download status and it changed: Downloading is paused
                      2017-01-23 13:24:17:409 1080 4c8 AU AU checked download status and it changed: Downloading is not paused
                      2017-01-23 13:24:17:409 1080 4c8 AU AU setting pending client directive to 'Download Progress'
                      2017-01-23 13:24:32:416 1080 e94 AU WARNING: AU found no suitable session to launch client in
                      2017-01-23 13:49:17:505 1080 4c8 AU AU checked download status and it changed: Downloading is paused
                      2017-01-23 14:39:27:434 1080 d6c AU AU checked download status and it changed: Downloading is not paused
                      2017-01-23 14:39:27:434 1080 d6c AU AU setting pending client directive to 'Download Progress'
                      2017-01-23 14:39:42:441 1080 e94 AU WARNING: AU found no suitable session to launch client in
                      2017-01-23 15:04:27:503 1080 d6c AU AU checked download status and it changed: Downloading is paused
                      2017-01-23 15:54:33:357 1080 1a24 AU AU checked download status and it changed: Downloading is not paused
                      2017-01-23 15:54:33:357 1080 1a24 AU AU setting pending client directive to 'Download Progress'
                      2017-01-23 15:54:48:364 1080 e94 AU WARNING: AU found no suitable session to launch client in
                      2017-01-23 16:19:33:396 1080 1a24 AU AU checked download status and it changed: Downloading is paused

                      2017-01-23 17:02:10:161 1080 18ec Misc WARNING: Assert config failed, error = 800706B5
                      2017-01-23 17:02:10:161 1080 18ec Report WARNING: Unable to assert evt log config: 0x800706B5

                      2017-01-24 09:22:22:065 1088 1258 PT WARNING: Cached cookie has expired or new PID is available
                      2017-01-24 09:24:19:376 1088 44c Agent WARNING: could not delete Software\Microsoft\Windows\CurrentVersion\WindowsU pdate\Services\0024219e-70bd-43a3-bc3f-530dbb8eff4f service registry key 0x80070002
                      2017-01-24 09:24:19:376 1088 44c Agent WARNING: Failed to delete service from the backup store, error = 0x80070002

                      I have already done some research on these warnings and errors and all the suggestions I found I already tried (mentioned in the beginning )

                      Thanks
                      Last edited by Roman_k; 24th January 2017, 11:35.

                      Comment


                      • #12
                        I would post in the WSUS forum here: https://social.technet.microsoft.com...=winserverwsus
                        Please post back with the solution if you fix it.
                        A recent poll suggests that 6 out of 7 dwarfs are not happy

                        Comment


                        • #13
                          Originally posted by Blood View Post
                          I would post in the WSUS forum here: https://social.technet.microsoft.com...=winserverwsus
                          Please post back with the solution if you fix it.
                          Thanks, just did it.
                          It was posted a while ago in https://social.msdn.microsoft.com/Fo...c-4235294c65b5 , no response at all :/

                          Comment


                          • #14
                            That's unusual. They have been quite prompt and helpful in my experience.
                            A recent poll suggests that 6 out of 7 dwarfs are not happy

                            Comment


                            • #15
                              In case anybody still having similar issue - I sorted mine by running following script on PC:
                              net stop BITS
                              net stop wuauserv
                              net stop appidsvc
                              net stop cryptsvc

                              Del "%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Downloader\qmgr*.dat"

                              reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Wi ndowsUpdate" /v SusClientId /f>nul
                              reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Wi ndowsUpdate" /v SusClientIdValidation /f>nul

                              Ren %systemroot%\SoftwareDistribution SoftwareDistribution.bak
                              Ren %systemroot%\system32\catroot2 catroot2.bak

                              sc.exe sdset bits DA;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRS DRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPD TLOCRRC;;;PU)
                              sc.exe sdset wuauserv DA;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRS DRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPD TLOCRRC;;;PU)


                              REM - reregister DLLs

                              cd /d %windir%\system32
                              regsvr32.exe /s atl.dll
                              regsvr32.exe /s urlmon.dll
                              regsvr32.exe /s mshtml.dll
                              regsvr32.exe /s shdocvw.dll
                              regsvr32.exe /s browseui.dll
                              regsvr32.exe /s jscript.dll
                              regsvr32.exe /s vbscript.dll
                              regsvr32.exe /s scrrun.dll
                              regsvr32.exe /s msxml.dll
                              regsvr32.exe /s msxml3.dll
                              regsvr32.exe /s msxml6.dll
                              regsvr32.exe /s actxprxy.dll
                              regsvr32.exe /s softpub.dll
                              regsvr32.exe /s wintrust.dll
                              regsvr32.exe /s dssenh.dll
                              regsvr32.exe /s rsaenh.dll
                              regsvr32.exe /s gpkcsp.dll
                              regsvr32.exe /s sccbase.dll
                              regsvr32.exe /s slbcsp.dll
                              regsvr32.exe /s cryptdlg.dll
                              regsvr32.exe /s oleaut32.dll
                              regsvr32.exe /s ole32.dll
                              regsvr32.exe /s shell32.dll
                              regsvr32.exe /s initpki.dll
                              regsvr32.exe /s wuapi.dll
                              regsvr32.exe /s wuaueng.dll
                              regsvr32.exe /s wuaueng1.dll
                              regsvr32.exe /s wucltui.dll
                              regsvr32.exe /s wups.dll
                              regsvr32.exe /s wups2.dll
                              regsvr32.exe /s wuweb.dll
                              regsvr32.exe /s qmgr.dll
                              regsvr32.exe /s qmgrprxy.dll
                              regsvr32.exe /s wucltux.dll
                              regsvr32.exe /s muweb.dll
                              regsvr32.exe /s wuwebv.dll

                              net start wuauserv
                              net start BITS
                              net start appidsvc
                              net start cryptsvc

                              wuauclt /resetauthorization

                              wuauclt /detectnow

                              Comment

                              Working...
                              X