Greetings.

My server is 2008 R2. Several days ago WSUS told me that it has brand new Windows 10 ESDs (KB3012973) to be downloaded and handed to the PCs in my network, but it won't download these ESDs. It tries to download them over and over again, hogging the hetwork and spamming with Error Code 364 messages:

• Content file download failed. Reason: File cert verification failure. Source file: /c/upgr/2015/12/10586.0.151029-1700.th2_release_clientpro_ret_x64fre_ru-ru_f6475b8c1f29ef652d9e320557cbebaded19c7e1.esd Destination file: d:\WsusContent\E1\F6475B8C1F29EF652D9E320557CBEBADED19C7E1.esd.

• Content file download failed. Reason: File cert verification failure. Source file: /c/upgr/2015/12/10586.0.151029-1700.th2_release_clientprofessionalvl_vol_x86fre_ru-ru_90d3f72245f2b92932481664440c50cb9643dd7f.esd Destination file: d:\WsusContent\7F\90D3F72245F2B92932481664440C50CB9643DD7F.esd.

What should I do to fix it?

Windows 2003 server / yeah, I know....

Made the mistake of downloading Drivers for a time...I unchecked this category but now can't ever delete Unused Updates and Update Revisions....It always Times Out..."Lost connection to dataebase"..

I run the Delete Wizard every week or so but the first Option is the problem

Is there any way to fix this other than Wiping out the database and starting Over?

carl

Hello:

No one will admit to this, but guessing:  Sorted on Superseded. Highlighted first one. Selected All - Declined.

Now all updates are declined, over 15k of them. How to reset this WSUS server back to show "unapproved" and "failed or needed" so we don't have to pick them out one by one?

Have done a bit of looking.  Appears the best approach may be to uninstall WSUS, remove the database, reinstall and resync.  Hoping there is a better way.

Thanks for your attention.  Double-double thanks if you know a solution.  <g>

Larry Struckmeyer [MVP]-- --If your question is answered please mark the response as the answer so that others can benefit.

Hi guys,

I'm new to this forum and would like to ask about patching for these 2 KBs - KB3123040 and KB3119884. I did a search but didn't find any related discussion on these 2 KBs, so I'm opening a new one hopefully to get some help.

We have a disconnected server environment so auto-updater is out of the question here. "rvkroots.exe" seems to be able to solve KB3046310, KB2982792, and KB3050995(similar vulnerabilities), but, as for KB3123040 and KB3119884, i don't seems to find any solution for these 2 yet.

Is there any other method to patch KB3123040 and KB3119884?

Thanks,

Keo

Hi!  We have a single Wsus Server on premises in our Company.

Recently i've come across the problem of WSUS not synchronizing properly. Following the suggestions in this thread, all is working as expected again.

http://social.technet.microsoft.com/Forums/en/winserverwsus/thread/79f76bdf-83cc-47d1-8244-5d544fe7d21

Sadly the Wsus Snap in ins showing me 2 identical entries for the same Wsus server (all settings, updates lists etc)

did i miss something? I've already deleted the redundant entries in the Console and i checked the SSL bindings on the IIS.(all seems like before)

But when i open the Console again, it still presents me with :

Update Services

+ fqdn(.local)

+ fqdn(.local)

thx in advance

Hi All,

I am running wsus 3.0 sp2 on windows server 2003 sp2 , Since many days it was working fine and I was able to see the last report time in the console , Since from a week I am not seeing any system reporting or the date of last report is unchanged and all the systems are in the same network as they were before ,

Is deleting them from the console work , do they again come up in the console , works that can only be done from wsus system are more helpful .

Thanks in advance,

Sunil

I have WSUS running on Windows server 2003 but I am having trouble with some machines not reporting back to the WSUS server?

The majority of the desktop PC clients are reporting back daily but around about 20 or so are not?

After doing a bit of research I have ran various commands like wuauclt to try and force detection as well as resetting authorization but are still failing to report back?

I have also ran the solarwinds diagnostics tool which is indicating everything to be ok but there are some saying the following

"WSUS Server Connectivity
  clientwebservice/client.asmx:                      Error: ProxyAuthenticationRequired (Incorrect proxy credentials on client - use settings tab to test proxy configuration settings)"

What does it mean and how do I fix it?

Hi,

Im approving the Windows 10 1511 upgrades on WSUS - Server 2012R2.

Single WSUS server synching directly with MS and storing updates locally.

The Windows 10 upgrades keep failing to download though so i cant actually deploy them to my Windows 10 group for upgrade from Win 7.

I approve the update  "Upgrade to Windows 10 Pro, version 1511, 10586 - en-gb, Retail for my Windows 10 computer group.

It starts downloading then about 5 minutes later will come up with:

The files for this update failed to download. 
The update can be approved but will not be available to computers until the download is complete. Click retry download to start the download again.

The following is logged in the event log:

Content file download failed.
Reason: File cert verification failure. 
Source File: /d/upgr/2015/12/10586.0.151029-1700.th2_release_clientpro_ret_x64fre_en-gb_4609bbb28b8638ba63df922e68ae75a77434df64.esd 
Destination File: S:\WSUS Content\WsusContent\64\4609BBB28B8638BA63DF922E68AE75A77434DF64.esd

Ive tried rebooting the server and running the server clean up wizard but i cant clear the above error cycle.

Anybody any ideas?

Thanks

Hi,

i stuck on a reinstallation Problem of WSUS on Server 2008 R2.

The error message:



I tried nearly everthing from the other postings to nearly the same problems:

Reloard Performance Counters with "Loadctr /R"

Uninstall all WSUS Components and Windows Internal Database and try to reinstall, nothing helps.

Then i saw this path in the error message:

C:\Windows\Microsoft.Net\Framework64\v4.6.1055

This path doesnt exist at all, only v4.0.xx - Then i also installed the complete .Net 4.6 (because before only the Client component was present), but this doesn't help.

I also registered .Net v4.0 again with aspnet_regiis.exe -i and aspnet_aspnet_regbrowsers.exe -i, but this also doesn't help here.

Can somebody help me out here?

Thanks

Michael



Every few hours my WSUS keeps crashing. WSUS is installed alongside SCCM 2012 on server 2012 R2. It is using a database on a separate SQL server and has the WSUS data on another server.   I have IIS set to run as connected user so endpoints will get and run updates but the WSUS services do not seem to stay up long enough for many clients to get updates on their own.

Here is the error I copied to the clipboard:

The WSUS administration console was unable to connect to the WSUS Server via the remote API.

Verify that the Update Services service, IIS and SQL are running on the server. If the problem persists, try restarting IIS, SQL, and the Update Services Service.

The WSUS administration console has encountered an unexpected error. This may be a transient error; try restarting the administration console. If this error persists,

Try removing the persisted preferences for the console by deleting the wsus file under %appdata%\Microsoft\MMC\.

System.IO.IOException -- The handshake failed due to an unexpected packet format.

Source
System

Stack Trace:
   at System.Net.Security.SslState.StartReadFrame(Byte[] buffer, Int32 readBytes, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
   at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
   at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
   at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
   at System.Net.TlsStream.ProcessAuthentication(LazyAsyncResult result)
   at System.Net.TlsStream.Write(Byte[] buffer, Int32 offset, Int32 size)
   at System.Net.ConnectStream.WriteHeaders(Boolean async)
** this exception was nested inside of the following exception **

System.Net.WebException -- The underlying connection was closed: An unexpected error occurred on a send.

Source
Microsoft.UpdateServices.Administration

Stack Trace:
   at Microsoft.UpdateServices.Administration.AdminProxy.CreateUpdateServer(Object[] args)
   at Microsoft.UpdateServices.UI.AdminApiAccess.AdminApiTools.GetUpdateServer(String serverName, Boolean useSecureConnection, Int32 portNumber)
   at Microsoft.UpdateServices.UI.SnapIn.Scope.ServerSummaryScopeNode.ConnectToServer()
   at Microsoft.UpdateServices.UI.SnapIn.Scope.ServerSummaryScopeNode.get_ServerTools()

I am at a loss to what to begin checking to be honest.  I have gone through permissions on all the servers involved and I am pretty positive that they are adequate for WSUS to operate.   Please help point me in the right direction.   If I reboot the SCCM server I can access WSUS through the MMC for a short while up to a few hours and then it seems to crash again.

There is one strange Windows 7 machine on my test environment, I already configured it to report to my WSUS server but it just never report to WSUS server, instead it is checking updates against Microsoft update sites.

I double-checked the settings in local security policy, it is correctly configured.

I had done all the troubleshooting I can think of:

1. verify wuauserv running, bits running

2. Firewall not blocking 8530, telnet wsus at 8530 no problem

3. Removed SoftwareDistribution folder, removed catroot2 folder, regsvr32 all related dlls

4. Removed susclientid

5. installed Windows Update Agent 7.6.

The computer is in a domain, the WSUS server is in a workgroup. There are many other wsus clients on the network, some in domain, some in workgroup, none have this problem.

There is no Internet connection for all the wsus clients.

Windowsupdate.log:

2016-01-12 09:07:13:579 1248 267c Misc WARNING: Send failed with hr = 80072ee7.
2016-01-12 09:07:13:579 1248 267c Misc WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2016-01-12 09:07:13:579 1248 267c Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://fe2.update.microsoft.com/v11/2/windowsupdate/redir/v6-win7sp1-wuredir.cab>. error 0x8024402c
2016-01-12 09:07:13:579 1248 267c Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x8024402c
2016-01-12 09:07:13:579 1248 267c Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x8024402c
2016-01-12 09:07:13:579 1248 267c Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
2016-01-12 09:07:32:375 1248 267c Misc WARNING: Send failed with hr = 80072ee7.
2016-01-12 09:07:32:375 1248 267c Misc WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2016-01-12 09:07:32:375 1248 267c Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://fe2.update.microsoft.com/v11/2/windowsupdate/redir/v6-win7sp1-wuredir.cab>. error 0x8024402c
2016-01-12 09:07:32:375 1248 267c Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x8024402c
2016-01-12 09:07:32:375 1248 267c Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x8024402c
2016-01-12 09:07:32:375 1248 267c Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
2016-01-12 09:07:46:657 1248 267c Misc WARNING: Send failed with hr = 80072ee7.
2016-01-12 09:07:46:657 1248 267c Misc WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2016-01-12 09:07:46:657 1248 267c Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://fe2.update.microsoft.com/v11/2/windowsupdate/redir/v6-win7sp1-wuredir.cab>. error 0x8024402c
2016-01-12 09:07:46:657 1248 267c Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x8024402c
2016-01-12 09:07:46:657 1248 267c Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x8024402c
2016-01-12 09:07:46:657 1248 267c Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
2016-01-12 09:07:46:657 1248 267c Misc WARNING: DownloadFileInternal failed for http://fe2.update.microsoft.com/v11/2/windowsupdate/redir/v6-win7sp1-wuredir.cab: error 0x8024402c
2016-01-12 09:07:46:657 1248 267c Agent WARNING: Failed to obtain the authorization cab URLs, hr=0x8024402c
2016-01-12 09:07:46:657 1248 267c Agent   * WARNING: Online service registration/service ID resolution failed, hr=0x8024402C
2016-01-12 09:07:46:657 1248 267c Agent   * WARNING: Exit code = 0x8024402C
2016-01-12 09:07:46:657 1248 267c Agent *********
2016-01-12 09:07:46:657 1248 267c Agent **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
2016-01-12 09:07:46:657 1248 267c Agent *************
2016-01-12 09:07:46:657 1248 267c Agent WARNING: WU client failed Searching for update with error 0x8024402c
2016-01-12 09:07:46:657 1248 2680 AU >>##  RESUMED  ## AU: Search for updates [CallId = {BFBE5994-AE57-4C91-9E2F-9C55EE9A1F72}]
2016-01-12 09:07:46:657 1248 2680 AU   # WARNING: Search callback failed, result = 0x8024402C
2016-01-12 09:07:46:657 1248 2680 AU   # WARNING: Failed to find updates with error code 8024402C
2016-01-12 09:07:46:657 1248 2680 AU #########
2016-01-12 09:07:46:657 1248 2680 AU ##  END  ##  AU: Search for updates [CallId = {BFBE5994-AE57-4C91-9E2F-9C55EE9A1F72}]
2016-01-12 09:07:46:657 1248 2680 AU #############
2016-01-12 09:07:46:657 1248 2680 AU Need to show Unable to Detect notification
2016-01-12 09:07:46:657 1248 2680 AU Successfully wrote event for AU health state:1
2016-01-12 09:07:46:657 1248 2680 AU AU setting next detection timeout to 2016-01-12 06:07:46
2016-01-12 09:07:46:657 1248 2680 AU Setting AU scheduled install time to 2016-01-12 19:00:00
2016-01-12 09:07:46:657 1248 2680 AU Successfully wrote event for AU health state:1
2016-01-12 09:07:46:657 1248 2680 AU Successfully wrote event for AU health state:1
2016-01-12 09:07:51:657 1248 267c Report CWERReporter finishing event handling. (00000000)
2016-01-12 09:38:55:000 1248 2634 AU AU setting next sqm report timeout to 2016-01-13 01:38:55
2016-01-12 09:43:36:000 1248 2634 AU AU was unable to detect updates for more than 48 hours
2016-01-12 09:43:41:000 1248 2738 Report REPORT EVENT: {9600B6C8-179C-41F5-A0C8-0AE0C1BD220B} 2016-01-12 09:43:36:000+0800 1 149 102 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Failure Software Synchronization Unable to Connect: Windows is unable to connect to the automatic updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection.
2016-01-12 09:43:41:000 1248 2738 Report CWERReporter finishing event handling. (00000000)

Any help is appreciated.

Valuable skills are not learned, learned skills aren't valuable.

i have server 2012 r2 wsus (6.3.9600.16384) installed in my production

clients are reported to wsus server, its showing needed updates etc but not fetching any updates from wsus

recent changes : wsus server was in one hyper-v i just import and migrated to different host

This is to update the Lync client to Skype for Business.  I approved this update, as well as it's perquisites below.

KB2850036 - Office 2013 SP1

KB3054853

KB2889853

KB2817427 - can't find in WSUS or the Windows Update Catalog

2817427 is not needed however if you installed KB3055014, which I approved.

The thing is none of them seem to be installing.  In particular, Office 2013 SP1 shows Not Applicable, and I'm not sure why.  Has anyone approved this and have any advice.

Hi,

(posted this in the consumer section and got pointed in this direction)

We were having an issue with the Windows 10 upgrade MS recently released to WSUS server on our domain. To put a long story short the issue is in IIS and NOT WSUS per say. After some testing it turns out IIS was not serving the .esd file (this is the main update file) due to the mime type not being set. To rectify the issue:

under IIS Admin->WSUS Administration->Content-> Click on "Mime Types"-> Add

File Mame Extention:  = .esd

MIME type:     application/vnd.ms-cab-compressed

If you have already tried to pull the W10 update you may need to clear your SoftwareDistribution Download Cache under the Windows Dir and clear out the hidden $WINDOWS.~BT

EDIT:

The actual mime type for esd, accordion to http://www.filesuffix.com/en/extension/esd, is "application/octet-stream".

The following is just to help people find this post:

Hello.

There seems to be a problem with the setup if you choose the option not to store updates locally. When you choose to store updates on a local path, everything goes fine in the setup process. But if you decide not to store the updates locally which apparently you can do, the problems are as follows:

• The initial configuration stage (the link you click on as post-install steps after installing the role) gives a message that configuring the WSUS server had a fatal error
• It then opens the regular WSUS MMC console which starts up a config wizard
• If you go through the steps of that wizard everything goes fine until you get to the section for product classifications where it just hangs with an hourglass forever.
• If you then click on "All Classifications" just to move things along, it tells you the selection you have made is not valid and will not be saved.
• You can finish the wizard without any more problems but when a synchronisation takes place no updates are synchronised.
• When you go back into the Options section in the MMC and then go to Products and Classifications it appears to open with a dialog box with two tabs, and then the dialog box disappears and you get a message box which says "Something you just attempted to use has been removed from the database by another party. The snap-in is being refreshed to fix this issue."

At this point the server installation is unusable. 

It would appear there is some significant issue in using the WSUS server at this point that makes it unusable with this non-storage setting.

The base server was set up with 2012R2 and has not had any updates installed.

TIA

Hi

Our WSUS server is 2008 R2. I've enabled Windows 10 from within options, Products and classifications. I've then synchronized but i cant find any updates by KB number. Ive added a Win 10 machine to my domain and Im aware 2008 R2 has an issue with them showing as vista machines, but no updates show for windows 10.

Have i missed something?

Any help is appricated

Thanks



Hi,

I try to install wsus on a remote sql server AND on a different Port

Is this possible ???

I try a lot of possibility with wsusutil ...

but a dont find the "good write" for the sql_instance_name

PS C:\Program Files\Update Services\Tools>
.\WsusUtil.exe postinstall SQL_INSTANCE_NAME="sql.xxx.xxx.xx,1451" CONTENT_DIR=D:\WSUS

.\WsusUtil.exe postinstall SQL_INSTANCE_NAME="sql.xxx.xxx.xx;1451" CONTENT_DIR=D:\WSUS

.\WsusUtil.exe postinstall SQL_INSTANCE_NAME="sql.xxx.xxx.xx:1451" CONTENT_DIR=D:\WSUS

.\WsusUtil.exe postinstall SQL_INSTANCE_NAME="sql.xxx.xxx.xx,1451\wsus" CONTENT_DIR=D:\WSUS

i need to set my db on the sql.xxx.xxx.xx sql server but on the port 1451, the instance name are wsus

the sql server don't browse all the instance name ...

can anybody help me to make my postinstall ???