Can't get more than 9 servers in WSUS

We are using Group Policy to get servers into our WSUS 3 Server on Windows
2003. At this point, we have nine servers showing up in the console, even
though there are 21 servers listed in the group policy. All 1700 client
computers appear successfully in WSUS. When I ran wuauclt.exe /detectnow on
one of the missing servers, it appeared in WSUS, but one of the existing
servers disappeared. On the disappeared server, I restarted the Windows
Update service (net stop/start wuauserv), and ran wuauclt /resetauthorization
/detectnow. The disappeared server reappeared in the console, and the newly
arrived server disappeared. Can you help? Thank you!

"Richard Roati" <> wrote in message
news:BD4A4BB2-F1E2-4739-B8CF-...
> We are using Group Policy to get servers into our WSUS 3 Server on Windows
> 2003. At this point, we have nine servers showing up in the console, even
> though there are 21 servers listed in the group policy.

> When I ran wuauclt.exe /detectnow on
> one of the missing servers, it appeared in WSUS, but one of the existing
> servers disappeared. On the disappeared server, I restarted the Windows
> Update service (net stop/start wuauserv), and ran wuauclt
> /resetauthorization
> /detectnow. The disappeared server reappeared in the console, and the
> newly
> arrived server disappeared. Can you help? Thank you!

This is a *classic* symptom of duplicated SusClientIDs caused by improperly
prepared master images.

On each of the systems not appearing in the WSUS Console, you will need to
delete the SusClientID and SusClientValidationID registry values from the
registry key at
HKLM\Software\Microsoft\Windows\CurrentVersion\Win dowsUpdate, and then
restart the Automatic Updates service.





--
Lawrence Garvin, M.S., MCITP:EA, MCDBA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)

MS WSUS Website: http://www.microsoft.com/wsus
My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin

On Wed, 9 Sep 2009 17:17:01 -0700, Richard Roati
<> wrote:

>We are using Group Policy to get servers into our WSUS 3 Server on Windows
>2003. At this point, we have nine servers showing up in the console, even
>though there are 21 servers listed in the group policy. All 1700 client
>computers appear successfully in WSUS. When I ran wuauclt.exe /detectnow on
>one of the missing servers, it appeared in WSUS, but one of the existing
>servers disappeared. On the disappeared server, I restarted the Windows
>Update service (net stop/start wuauserv), and ran wuauclt /resetauthorization
>/detectnow. The disappeared server reappeared in the console, and the newly
>arrived server disappeared. Can you help? Thank you!

Classic symptoms of a duplicate SUSClientID caused by creating the system by
cloning after the PC has bee in contact with the WSUS server.

Simple enough to fix. Just delete the registry keys as documented in
http://support.microsoft.com/default...b;EN-US;903262
--
Dave Mills
There are 10 types of people, those that understand binary and those that don't.

Thanks to you both for your responses. I confirmed we are using Sysprep on
our virtual servers, so this had the ring of truth for sure. I ran through
the commands in
http://support.microsoft.com/default...b;EN-US;903262 on three
servers that weren't showing up in the console and I confirmed that these
servers had new SusClientID's and SusClientValidationID's and that each was
unique. Unfortunately, none of the three servers I ran the commands on
appeared in the WSUS Console after an hour and a half of waiting. Perhaps
there is an additional issue here? I see 9 servers in the console that have
the specific policy - and lots of workstations that receive a different
policy.


"Lawrence Garvin [MVP]" wrote:

> "Richard Roati" <> wrote in message
> news:BD4A4BB2-F1E2-4739-B8CF-...
> > We are using Group Policy to get servers into our WSUS 3 Server on Windows
> > 2003. At this point, we have nine servers showing up in the console, even
> > though there are 21 servers listed in the group policy.
>
> > When I ran wuauclt.exe /detectnow on
> > one of the missing servers, it appeared in WSUS, but one of the existing
> > servers disappeared. On the disappeared server, I restarted the Windows
> > Update service (net stop/start wuauserv), and ran wuauclt
> > /resetauthorization
> > /detectnow. The disappeared server reappeared in the console, and the
> > newly
> > arrived server disappeared. Can you help? Thank you!
>
> This is a *classic* symptom of duplicated SusClientIDs caused by improperly
> prepared master images.
>
> On each of the systems not appearing in the WSUS Console, you will need to
> delete the SusClientID and SusClientValidationID registry values from the
> registry key at
> HKLM\Software\Microsoft\Windows\CurrentVersion\Win dowsUpdate, and then
> restart the Automatic Updates service.
>
>
>
>
>
> --
> Lawrence Garvin, M.S., MCITP:EA, MCDBA
> Principal/CTO, Onsite Technology Solutions, Houston, Texas
> Microsoft MVP - Software Distribution (2005-2009)
>
> MS WSUS Website: http://www.microsoft.com/wsus
> My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin
>

"Richard Roati" <> wrote in message
news:3E721F09-6B1F-400C-9B6D-...
> Thanks to you both for your responses. I confirmed we are using Sysprep
> on
> our virtual servers, so this had the ring of truth for sure. I ran
> through
> the commands in
> http://support.microsoft.com/default...b;EN-US;903262 on three
> servers that weren't showing up in the console and I confirmed that these
> servers had new SusClientID's and SusClientValidationID's and that each
> was
> unique. Unfortunately, none of the three servers I ran the commands on
> appeared in the WSUS Console after an hour and a half of waiting. Perhaps
> there is an additional issue here?

Perhaps. It's entirely possible there is more than one issue to be
addressed, and resolving duplicate IDs is merely a stepping stone to the
next.

The next diagnostic steps would be this:

1. If these are 32-bit servers, run the Client Diagnostic Tool on one of
them, and post the output so we can confirm that the WUAgent is properly
configured and actually capable of communicating with the WSUS Server.

2. Following your completion of the procedure in KB903262, find the entries
in the WindowsUpdate.log on one of those three servers starting with the
"Service Startup" which should have been logged as a result of Step #7 in
the Method #1 procedure, and include all entries for the following 30
minutes, which should include a call to the ReportingEventWebService (but
may not if there are other issues at work).


--
Lawrence Garvin, M.S., MCITP:EA, MCDBA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)

MS WSUS Website: http://www.microsoft.com/wsus
My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin

Thanks so much Mr. Garvin.
Client Diagnostic Tool results:
WSUS Client Diagnostics Tool

Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is running. . . PASS
Wuaueng.dll version 7.2.6001.788. . . . . . . . . . . . PASS
This version is WSUS 2.0

Checking AU Settings
AU Option is 3 : Notify Prior to Install. . . . . . . . PASS
Option is from Control Panel

Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect in use

Checking Connection to WSUS/SUS Server
AU does not have Policy Set
AU does not have Policy Set
UseWuServer is disabled . . . . . . . . . . . . . . . . FAIL

WindowsUpdate.log on one of those three servers starting with the
> "Service Startup":

2009-09-11 08:51:34:674 900 119c Service ** START ** Service: Service
startup
2009-09-11 08:51:34:674 900 119c Service *********
2009-09-11 08:51:34:690 900 119c Agent * WU client version 7.2.6001.788
2009-09-11 08:51:34:690 900 119c Agent * Base directory:
C:\WINDOWS\SoftwareDistribution
2009-09-11 08:51:34:705 900 119c Agent * Access type: No proxy
2009-09-11 08:51:34:705 900 119c Agent * Network state: Connected
2009-09-11 08:52:19:738 900 119c Agent *********** Agent: Initializing
Windows Update Agent ***********
2009-09-11 08:52:19:738 900 119c Agent *********** Agent: Initializing
global settings cache ***********
2009-09-11 08:52:19:738 900 119c Agent * WSUS server: <NULL>
2009-09-11 08:52:19:738 900 119c Agent * WSUS status server: <NULL>
2009-09-11 08:52:19:738 900 119c Agent * Target group: (Unassigned
Computers)
2009-09-11 08:52:19:738 900 119c Agent * Windows Update access disabled: No
2009-09-11 08:52:19:925 900 119c Agent * Found 1 persisted download calls
to restore
2009-09-11 08:52:19:956 900 119c DnldMgr Download manager restoring 1
downloads
2009-09-11 08:52:20:285 900 119c Agent * Successfully loaded 1 persisted
download calls.
2009-09-11 08:52:20:285 900 119c AU ########### AU: Initializing Automatic
Updates ###########
2009-09-11 08:52:20:300 900 119c AU # Approval type: Pre-install notify
(User preference)
2009-09-11 08:52:20:300 900 119c AU # Auto-install minor updates: No
(User preference)
2009-09-11 08:52:20:300 900 119c Agent Switching to hardware-verified
ClientId.
2009-09-11 08:52:20:566 900 119c AU # Reconnecting download for 1 updates
2009-09-11 08:52:20:566 900 119c AU # Reconnected 1 pending download calls
2009-09-11 08:52:20:566 900 119c AU AU setting pending client directive to
'Install Approval'
2009-09-11 08:52:20:566 900 119c AU AU finished delayed initialization
2009-09-11 08:52:21:082 900 119c Agent Created new random SusClientId
03721c47-8ec5-446d-995a-9effb0a59c03. Old Id: none.
2009-09-11 08:52:21:082 900 119c Report *********** Report: Initializing
static reporting data ***********
2009-09-11 08:52:21:082 900 119c Report * OS Version = 5.2.3790.2.0.196880
2009-09-11 08:52:21:191 900 119c Report * Computer Brand = Dell Inc.
2009-09-11 08:52:21:191 900 119c Report * Computer Model = PowerEdge 1950
2009-09-11 08:52:21:207 900 119c Report * Bios Revision = 1.5.1
2009-09-11 08:52:21:207 900 119c Report * Bios Name = Phoenix ROM BIOS
PLUS Version 1.10 1.5.1
2009-09-11 08:52:21:207 900 119c Report * Bios Release Date =
2007-08-10T00:00:00
2009-09-11 08:52:21:207 900 119c Report * Locale ID = 1033
2009-09-11 08:52:21:238 900 8e8 DnldMgr *********** DnldMgr: Regulation
Refresh [Svc: {7971F918-A847-4430-9279-4A52D1EFE18D}] ***********
2009-09-11 08:52:21:238 900 8e8 DnldMgr Contacting regulation server for 1
updates.
2009-09-11 08:52:21:238 900 8e8 Misc Validating signature for
C:\WINDOWS\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\wuredir.cab:
2009-09-11 08:52:21:253 900 8e8 Misc Microsoft signed: Yes
2009-09-11 08:52:21:253 900 8e8 DnldMgr Regulation server path:
http://update.microsoft.com/v6/Updat...egulation.asmx.
2009-09-11 08:52:21:503 900 8e8 DnldMgr Per-Update:
ab14ba6d-d5d5-423a-a374-42732f8e839a at rate 0
2009-09-11 08:52:21:503 900 8e8 DnldMgr * Regulation call complete.
0x00000000
2009-09-11 08:52:21:503 900 8e8 DnldMgr *********** DnldMgr: New download
job [UpdateId = {AB14BA6D-D5D5-423A-A374-42732F8E839A}.100] ***********
2009-09-11 08:52:21:503 900 8e8 DnldMgr Regulation:
{7971F918-A847-4430-9279-4A52D1EFE18D} - Update
AB14BA6D-D5D5-423A-A374-42732F8E839A is "PerUpdate" regulated and can NOT
download. Sequence 1600 vs AcceptRate 0.
2009-09-11 08:52:21:503 900 8e8 DnldMgr * Update is not allowed to
download due to regulation.
2009-09-11 08:52:21:503 900 8e8 DnldMgr Regulation:
{7971F918-A847-4430-9279-4A52D1EFE18D} - Update
AB14BA6D-D5D5-423A-A374-42732F8E839A is "PerUpdate" regulated and can NOT
download. Sequence 1600 vs AcceptRate 0.
2009-09-11 08:52:21:503 900 16bc AU AU checked download status and it
changed: Downloading is paused
2009-09-11 08:52:35:566 900 119c AU Launched new AU client for directive
'Install Approval', session id = 0x1
2009-09-11 08:52:35:613 4352 640 Misc =========== Logging initialized
(build: 7.2.6001.788, tz: -0700) ===========
2009-09-11 08:52:35:613 4352 640 Misc = Process:
C:\WINDOWS\system32\wuauclt.exe
2009-09-11 08:52:35:613 4352 640 AUClnt Launched Client UI process
2009-09-11 08:52:35:676 4352 640 Misc =========== Logging initialized
(build: 7.2.6001.788, tz: -0700) ===========
2009-09-11 08:52:35:676 4352 640 Misc = Process:
C:\WINDOWS\system32\wuauclt.exe
2009-09-11 08:52:35:676 4352 640 Misc = Module:
C:\WINDOWS\system32\wucltui.dll
2009-09-11 08:52:35:676 4352 640 CltUI AU client got new directive =
'Install Approval', serviceId = {7971F918-A847-4430-9279-4A52D1EFE18D},
return = 0x00000000
2009-09-11 08:52:35:676 4352 640 CltUI AU client creating UI plugin,
clsid={3809920F-B9D4-42DA-92E0-E26265E0FB89}
2009-09-11 08:54:35:663 900 1158 AU Triggering AU detection through
DetectNow API
2009-09-11 08:54:35:663 900 1158 AU Triggering Online detection
(non-interactive)
2009-09-11 08:54:35:663 900 119c AU #############
2009-09-11 08:54:35:663 900 119c AU ## START ## AU: Search for updates
2009-09-11 08:54:35:663 900 119c AU #########
2009-09-11 08:54:35:663 900 119c AU <<## SUBMITTED ## AU: Search for
updates [CallId = {47EFE9CF-5697-4E81-B127-5A7B248AF3E4}]
2009-09-11 08:54:35:663 900 8e8 Agent *************
2009-09-11 08:54:35:663 900 8e8 Agent ** START ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2009-09-11 08:54:35:663 900 8e8 Agent *********
2009-09-11 08:54:35:663 900 8e8 Agent * Online = Yes; Ignore download
priority = No
2009-09-11 08:54:35:663 900 8e8 Agent * Criteria = "IsHidden=0 and
IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or
IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and
IsAssigned=1 or IsHidden=0 and IsInstalled=1 and
DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or
IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and
IsAssigned=1 and RebootRequired=1"
2009-09-11 08:54:35:663 900 8e8 Agent * ServiceID =
{7971F918-A847-4430-9279-4A52D1EFE18D}
2009-09-11 08:54:35:663 900 8e8 Agent * Search Scope = {Machine}
2009-09-11 08:54:35:663 900 8e8 Misc Validating signature for
C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv3wuredir.cab:
2009-09-11 08:54:35:679 900 8e8 Misc Microsoft signed: Yes
2009-09-11 08:54:35:835 900 8e8 Misc Validating signature for
C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv3wuredir.cab:
2009-09-11 08:54:35:851 900 8e8 Misc Microsoft signed: Yes
2009-09-11 08:54:35:851 900 8e8 Misc Validating signature for
C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default \wuident.cab:
2009-09-11 08:54:35:866 900 8e8 Misc Microsoft signed: Yes
2009-09-11 08:54:35:960 900 8e8 Misc Validating signature for
C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default \wuident.cab:
2009-09-11 08:54:35:976 900 8e8 Misc Microsoft signed: Yes
2009-09-11 08:54:36:085 900 8e8 Misc Validating signature for
C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default \wsus3setup.cab:
2009-09-11 08:54:36:101 900 8e8 Misc Microsoft signed: Yes
2009-09-11 08:54:36:101 900 8e8 Setup *********** Setup: Checking whether
self-update is required ***********
2009-09-11 08:54:36:101 900 8e8 Setup * Inf file:
C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default \wsus3setup.inf
2009-09-11 08:54:36:116 900 8e8 Setup Update NOT required for
C:\WINDOWS\system32\cdm.dll: target version = 7.2.6001.788, required version
= 7.2.6001.788
2009-09-11 08:54:36:116 900 8e8 Setup Update NOT required for
C:\WINDOWS\system32\wuapi.dll: target version = 7.2.6001.788, required
version = 7.2.6001.788
2009-09-11 08:54:36:132 900 8e8 Setup Update NOT required for
C:\WINDOWS\system32\wuapi.dll.mui: target version = 7.2.6001.788, required
version = 7.2.6001.788
2009-09-11 08:54:36:132 900 8e8 Setup Update NOT required for
C:\WINDOWS\system32\wuauclt.exe: target version = 7.2.6001.788, required
version = 7.2.6001.788
2009-09-11 08:54:36:132 900 8e8 Setup Update NOT required for
C:\WINDOWS\system32\wuaucpl.cpl: target version = 7.2.6001.788, required
version = 7.2.6001.788
2009-09-11 08:54:36:132 900 8e8 Setup Update NOT required for
C:\WINDOWS\system32\wuaucpl.cpl.mui: target version = 7.2.6001.788, required
version = 7.2.6001.788
2009-09-11 08:54:36:132 900 8e8 Setup Update NOT required for
C:\WINDOWS\system32\wuaueng.dll: target version = 7.2.6001.788, required
version = 7.2.6001.788
2009-09-11 08:54:36:147 900 8e8 Setup Update NOT required for
C:\WINDOWS\system32\wuaueng.dll.mui: target version = 7.2.6001.788, required
version = 7.2.6001.788
2009-09-11 08:54:36:147 900 8e8 Setup Update NOT required for
C:\WINDOWS\system32\wucltui.dll: target version = 7.2.6001.788, required
version = 7.2.6001.788
2009-09-11 08:54:36:147 900 8e8 Setup Update NOT required for
C:\WINDOWS\system32\wucltui.dll.mui: target version = 7.2.6001.788, required
version = 7.2.6001.788
2009-09-11 08:54:36:147 900 8e8 Setup Update NOT required for
C:\WINDOWS\system32\wups.dll: target version = 7.2.6001.788, required version
= 7.2.6001.788
2009-09-11 08:54:36:147 900 8e8 Setup Update NOT required for
C:\WINDOWS\system32\wups2.dll: target version = 7.2.6001.788, required
version = 7.2.6001.788
2009-09-11 08:54:36:163 900 8e8 Setup Update NOT required for
C:\WINDOWS\system32\wuweb.dll: target version = 7.2.6001.788, required
version = 7.2.6001.788
2009-09-11 08:54:36:163 900 8e8 Setup * IsUpdateRequired = No
2009-09-11 08:54:36:163 900 8e8 Setup Found non-managed non-WU Service
registered with AU
2009-09-11 08:54:36:163 900 8e8 Misc Validating signature for
C:\WINDOWS\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\muv3muredir.cab:
2009-09-11 08:54:36:179 900 8e8 Misc Microsoft signed: Yes
2009-09-11 08:54:36:210 900 8e8 Misc Validating signature for
C:\WINDOWS\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\muv3muredir.cab:
2009-09-11 08:54:36:210 900 8e8 Misc Microsoft signed: Yes
2009-09-11 08:54:36:210 900 8e8 Misc Validating signature for
C:\WINDOWS\SoftwareDistribution\SelfUpdate\Registe red\muident.cab:
2009-09-11 08:54:36:226 900 8e8 Misc Microsoft signed: Yes
2009-09-11 08:54:36:272 900 8e8 Misc Validating signature for
C:\WINDOWS\SoftwareDistribution\SelfUpdate\Registe red\muident.cab:
2009-09-11 08:54:36:272 900 8e8 Misc Microsoft signed: Yes
2009-09-11 08:54:36:616 900 8e8 Misc Validating signature for
C:\WINDOWS\SoftwareDistribution\SelfUpdate\Registe red\musetup.cab:
2009-09-11 08:54:36:632 900 8e8 Misc Microsoft signed: Yes
2009-09-11 08:54:36:632 900 8e8 Setup *********** Setup: Checking whether
self-update is required ***********
2009-09-11 08:54:36:632 900 8e8 Setup * Inf file:
C:\WINDOWS\SoftwareDistribution\SelfUpdate\Registe red\musetup.inf
2009-09-11 08:54:36:632 900 8e8 Setup Update NOT required for
C:\WINDOWS\system32\mucltui.dll: target version = 7.2.6001.788, required
version = 7.2.6001.788
2009-09-11 08:54:36:632 900 8e8 Setup Update NOT required for
C:\WINDOWS\system32\mucltui.dll.mui: target version = 7.2.6001.788, required
version = 7.2.6001.788
2009-09-11 08:54:36:647 900 8e8 Setup Update NOT required for
C:\WINDOWS\system32\muweb.dll: target version = 7.2.6001.788, required
version = 7.2.6001.788
2009-09-11 08:54:36:647 900 8e8 Setup * IsUpdateRequired = No
2009-09-11 08:54:36:647 900 8e8 Misc Validating signature for
C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv3wuredir.cab:
2009-09-11 08:54:36:663 900 8e8 Misc Microsoft signed: Yes
2009-09-11 08:54:36:679 900 8e8 Misc Validating signature for
C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv3wuredir.cab:
2009-09-11 08:54:36:694 900 8e8 Misc Microsoft signed: Yes
2009-09-11 08:54:36:710 900 8e8 Agent Checking for updated auth cab for
service 7971f918-a847-4430-9279-4a52d1efe18d at
http://update.microsoft.com/v8/micro...dir/MUAuth.cab
2009-09-11 08:54:36:710 900 8e8 Misc Validating signature for
C:\WINDOWS\SoftwareDistribution\AuthCabs\authcab.c ab:
2009-09-11 08:54:36:710 900 8e8 Misc Microsoft signed: Yes
2009-09-11 08:54:36:757 900 8e8 Misc Validating signature for
C:\WINDOWS\SoftwareDistribution\AuthCabs\authcab.c ab:
2009-09-11 08:54:36:772 900 8e8 Misc Microsoft signed: Yes
2009-09-11 08:54:38:616 900 8e8 Misc Validating signature for
C:\WINDOWS\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\muv3muredir.cab:
2009-09-11 08:54:38:616 900 8e8 Misc Microsoft signed: Yes
2009-09-11 08:54:38:648 900 8e8 Misc Validating signature for
C:\WINDOWS\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\muv3muredir.cab:
2009-09-11 08:54:38:648 900 8e8 Misc Microsoft signed: Yes
2009-09-11 08:54:38:663 900 8e8 PT +++++++++++ PT: Synchronizing server
updates +++++++++++
2009-09-11 08:54:38:663 900 8e8 PT + ServiceId =
{7971F918-A847-4430-9279-4A52D1EFE18D}, Server URL =
https://update.microsoft.com/v6/Clie...ce/client.asmx
2009-09-11 08:54:42:726 900 8e8 Misc Validating signature for
C:\WINDOWS\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\muv3muredir.cab:
2009-09-11 08:54:42:726 900 8e8 Misc Microsoft signed: Yes
2009-09-11 08:54:42:788 900 8e8 Misc Validating signature for
C:\WINDOWS\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\muv3muredir.cab:
2009-09-11 08:54:42:788 900 8e8 Misc Microsoft signed: Yes
2009-09-11 08:54:42:788 900 8e8 PT +++++++++++ PT: Synchronizing extended
update info +++++++++++
2009-09-11 08:54:42:788 900 8e8 PT + ServiceId =
{7971F918-A847-4430-9279-4A52D1EFE18D}, Server URL =
https://update.microsoft.com/v6/Clie...ce/client.asmx
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{BB1E694D-58E9-451F-8956-5BED33B3EB0C}.102 to search result
2009-09-11 08:54:44:335 900 8e8 Agent Update
{A5D343F1-DCAC-4509-AD69-D9741F8B9438}.102 is pruned out due to potential
supersedence
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{46C1E11A-0629-4D64-9D02-5394E0D7671F}.101 to search result
2009-09-11 08:54:44:335 900 8e8 Agent Update
{607B8E7B-BDE9-4A09-AC67-1E169DCAF227}.101 is pruned out due to potential
supersedence
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{A63AC02D-F827-4274-9C30-8393381F2D5E}.102 to search result
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{2A382F96-3F11-465D-9123-2C9E8569F4F0}.102 to search result
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{4AC48E96-CAC1-43A0-A87D-C9FCEAE6F0B7}.101 to search result
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{050039BE-09C7-442F-B27D-ECC41E6F7D6E}.101 to search result
2009-09-11 08:54:44:335 900 8e8 Agent Update
{47936CD4-A9AF-456E-93E6-9229BC0093DF}.101 is pruned out due to potential
supersedence
2009-09-11 08:54:44:335 900 8e8 Agent Update
{55801CA3-864B-4C23-B61C-BE7825E43413}.100 is pruned out due to potential
supersedence
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{B90A2A9C-1DF6-42B2-A9D2-951E9EF5D4CB}.101 to search result
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{7006584C-FC5B-4B10-AF56-1C138FC2112E}.101 to search result
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{29FC9E04-120D-4C87-BE2C-1EBC88D4E9C8}.101 to search result
2009-09-11 08:54:44:335 900 8e8 Agent Update
{804FC72F-296D-48DD-BC22-43B0D40584BC}.101 is pruned out due to potential
supersedence
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{359023FF-F937-4B22-9BC8-FF8EEC7D4BAF}.101 to search result
2009-09-11 08:54:44:335 900 8e8 Agent Update
{42564933-0432-42EC-A399-3EBDD4D73ED0}.100 is pruned out due to potential
supersedence
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{4D6E7C9C-99BA-4448-8A0A-3E8E7B84D2FA}.103 to search result
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{9BA1663D-827C-4FAF-8A46-C610E155623A}.101 to search result
2009-09-11 08:54:44:335 900 8e8 Agent Update
{3DB07F29-D05F-4FB7-9496-4216980EE610}.100 is pruned out due to potential
supersedence
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{78AB071D-096A-48AA-BE36-A74D55FBC047}.101 to search result
2009-09-11 08:54:44:335 900 8e8 Agent Update
{5902472D-77D2-4CF9-B197-7E526A1A16E3}.100 is pruned out due to potential
supersedence
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{41E79548-7B36-4E0F-A02F-D30CCB0CB341}.100 to search result
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{78B86D45-2B71-447D-AE7B-CEDF21E63416}.100 to search result
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{6D4A0CB0-3F0A-4A35-92FA-FD6A94CD8577}.101 to search result
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{295D9C81-2EB7-4D28-BF4C-EF36052C054B}.101 to search result
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{C896FBDD-74A2-441B-B50B-0C4CF7857700}.101 to search result
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{EB438A73-173B-42C7-B554-4C68833C7D14}.101 to search result
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{69504CB3-A60C-4D2D-A4EE-5306A477E5E6}.101 to search result
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{6BC29964-8991-453B-A4E7-2AA688A1E94A}.101 to search result
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{C6C5DAA4-1AEB-409D-B5D2-FE71E3012B5E}.101 to search result
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{62C31B2C-BC81-4C7C-BF4F-6D75C3FEF5C5}.100 to search result
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{901CC533-EEE0-493A-812C-B9104AC311AA}.101 to search result
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{3A4F5297-7A4E-4919-B301-8436B50CE410}.100 to search result
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{FBD8316C-68B4-47C3-8059-B826CC72EFC6}.100 to search result
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{AA73E543-51D9-4FFC-A7BD-C17E5AFC6A89}.103 to search result
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{F6628171-C942-42CB-8C3F-82CD8EF4FE5D}.103 to search result
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{06C812C5-2087-4EB6-907A-01B0CC6BA828}.100 to search result
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{8EC1B6D8-465C-45B4-AF10-2D155AB9E186}.101 to search result
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{8279F270-917D-4C7F-985D-9975CEABC549}.102 to search result
2009-09-11 08:54:44:335 900 8e8 Agent * Added update
{6E4A30FE-29B6-4328-9D47-C7FBE6B7B7E8}.101 to search result
2009-09-11 08:54:44:335 900 8e8 Agent * Found 32 updates and 53
categories in search; evaluated appl. rules of 985 out of 1521 deployed
entities
2009-09-11 08:54:44:382 900 8e8 Agent *********
2009-09-11 08:54:44:382 900 8e8 Agent ** END ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2009-09-11 08:54:44:382 900 8e8 Agent *************
2009-09-11 08:54:44:398 900 16bc AU >>## RESUMED ## AU: Search for
updates [CallId = {47EFE9CF-5697-4E81-B127-5A7B248AF3E4}]
2009-09-11 08:54:44:398 900 8e8 Report REPORT EVENT:
{F4A1B1EA-37E8-4277-B610-846E122657C5} 2009-09-11
08:54:44:382-0700 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Software
Synchronization Windows Update Client successfully detected 32 updates.
2009-09-11 08:54:44:398 900 16bc AU # 32 updates detected
2009-09-11 08:54:44:398 900 16bc AU #########
2009-09-11 08:54:44:398 900 16bc AU ## END ## AU: Search for updates
[CallId = {47EFE9CF-5697-4E81-B127-5A7B248AF3E4}]
2009-09-11 08:54:44:398 900 16bc AU #############
2009-09-11 08:54:44:398 900 16bc AU AU setting next detection timeout to
2009-09-12 13:07:56
2009-09-11 10:36:20:663 900 122c DnldMgr *********** DnldMgr: Regulation
Refresh [Svc: {7971F918-A847-4430-9279-4A52D1EFE18D}] ***********
2009-09-11 10:36:20:663 900 122c DnldMgr Contacting regulation server for 1
updates.
2009-09-11 10:36:20:960 900 122c Misc Validating signature for
C:\WINDOWS\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\wuredir.cab:
2009-09-11 10:36:20:976 900 122c Misc Microsoft signed: Yes
2009-09-11 10:36:20:976 900 122c DnldMgr Regulation server path:
http://update.microsoft.com/v6/Updat...egulation.asmx.
2009-09-11 10:36:22:398 900 122c DnldMgr Per-Update:
ab14ba6d-d5d5-423a-a374-42732f8e839a at rate 0
2009-09-11 10:36:22:398 900 122c DnldMgr * Regulation call complete.
0x00000000
2009-09-11 10:36:22:398 900 122c DnldMgr *********** DnldMgr: New download
job [UpdateId = {AB14BA6D-D5D5-423A-A374-42732F8E839A}.100] ***********
2009-09-11 10:36:22:398 900 122c DnldMgr Regulation:
{7971F918-A847-4430-9279-4A52D1EFE18D} - Update
AB14BA6D-D5D5-423A-A374-42732F8E839A is "PerUpdate" regulated and can NOT
download. Sequence 1600 vs AcceptRate 0.
2009-09-11 10:36:22:398 900 122c DnldMgr * Update is not allowed to
download due to regulation.
2009-09-11 10:36:22:398 900 122c DnldMgr Regulation:
{7971F918-A847-4430-9279-4A52D1EFE18D} - Update
AB14BA6D-D5D5-423A-A374-42732F8E839A is "PerUpdate" regulated and can NOT
download. Sequence 1600 vs AcceptRate 0.

Thanks again...

"Richard Roati" <> wrote in message
news:6BB56153-B66E-4799-929F-...

> Thanks so much Mr. Garvin.
> Client Diagnostic Tool results:

Well.. shucks.... that's what I get for assuming facts not in evidence!

> Checking Connection to WSUS/SUS Server
> AU does not have Policy Set
> AU does not have Policy Set
> UseWuServer is disabled . . . . . . . . . . . . . . . . FAIL

This machine is not configured to use your WSUS Server.

A number of possibilities:
1. This machine is not in the correct OU.
2. The Group Policy is not linked to the OU containing this machine.
3. The Group Policy is not configured correctly.
4. There are conflicting policy objects, and the superior policy has
"Configure Automatic Updates" set to Disabled.

With this in mind, I'd like to revisit your early statement and get some
clarification as to your meaning:

>At this point, we have nine servers showing up in the console,
> even though there are 21 servers listed in the group policy.

Are the *nine* servers showing in the console in the same OU as the other 12
servers that are not?

What do you mean by "21 servers listed in the group policy"?


--
Lawrence Garvin, M.S., MCITP:EA, MCDBA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)

MS WSUS Website: http://www.microsoft.com/wsus
My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin

True, I thought that word fail was interesting, sorry about that! However,
it is in the same group policy application group that the other two servers
are in, and all 21 servers are in the same OU. I think your possibilities #3
and #4 could be on to something, as the admin removed an older policy before
adding in this one.

As to your questions,Are the *nine* servers showing in the console in the
same OU as the other 12 servers that are not? Yes

What do you mean by "21 servers listed in the group policy"? All in the same
group policy application group for WSUS. I can provide more details if
needed?

Here are the results from two other problem servers using the client diag
tool, the results were the same:

WSUS Client Diagnostics Tool

Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is running. . . PASS
Wuaueng.dll version 7.2.6001.788. . . . . . . . . . . . PASS
This version is WSUS 2.0

Checking AU Settings
AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
Option is from Policy settings

Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . PASS
Winhttp local machine ProxyBypass. . . . . . . PASS
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . PASS
User IE ProxyByPass. . . . . . . . . . . . . . PASS
User IE AutoConfig URL Proxy . . . . . . . . . PASS
User IE AutoDetect
AutoDetect not in use

Checking Connection to WSUS/SUS Server
WUServer = http://provt-wsus-01.xxx
WUStatusServer = http://provt-wsus-01.xxx
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
Connection to server. . . . . . . . . . . . . . . . . . PASS
SelfUpdate folder is present. . . . . . . . . . . . . . PASS

Here is the result of the windowsupdate.log from one of them:

2009-09-11 08:47:07:283 972 1408 Service ** START ** Service: Service
startup
2009-09-11 08:47:07:283 972 1408 Service *********
2009-09-11 08:47:07:343 972 1408 Agent * WU client version 7.2.6001.788
2009-09-11 08:47:07:343 972 1408 Agent * Base directory:
C:\WINDOWS\SoftwareDistribution
2009-09-11 08:47:07:343 972 1408 Agent * Access type: No proxy
2009-09-11 08:47:07:343 972 1408 Agent * Network state: Connected
2009-09-11 08:47:28:995 972 f24 Agent *********** Agent: Initializing
Windows Update Agent ***********
2009-09-11 08:47:28:995 972 1408 Agent Created new random SusClientId
8e180387-4b81-45d6-b2b2-f696ff5cf37d. Old Id: none.
2009-09-11 08:47:28:995 972 1408 Report *********** Report: Initializing
static reporting data ***********
2009-09-11 08:47:28:995 972 1408 Report * OS Version = 5.2.3790.2.0.196880
2009-09-11 08:47:29:016 972 f24 Agent *********** Agent: Initializing
global settings cache ***********
2009-09-11 08:47:29:016 972 f24 Agent * WSUS server:
http://provt-wsus-01.corporate.providence.com
2009-09-11 08:47:29:016 972 f24 Agent * WSUS status server:
http://provt-wsus-01.corporate.providence.com
2009-09-11 08:47:29:016 972 f24 Agent * Target group:
Providence-Servers-General
2009-09-11 08:47:29:016 972 f24 Agent * Windows Update access disabled: No
2009-09-11 08:47:29:506 972 1408 Report * Computer Brand = Microsoft
Corporation
2009-09-11 08:47:29:506 972 1408 Report * Computer Model = Virtual Machine
2009-09-11 08:47:29:516 972 1408 Report * Bios Revision = 080002
2009-09-11 08:47:29:516 972 1408 Report * Bios Name = BIOS Date: 02/22/06
20:54:49 Ver: 08.00.02
2009-09-11 08:47:29:516 972 1408 Report * Bios Release Date =
2006-02-22T00:00:00
2009-09-11 08:47:29:516 972 1408 Report * Locale ID = 1033
2009-09-11 08:47:29:977 972 f24 DnldMgr Download manager restoring 0
downloads
2009-09-11 08:47:29:977 972 f24 AU ########### AU: Initializing Automatic
Updates ###########
2009-09-11 08:47:29:977 972 f24 AU # WSUS server: http://provt-wsus-01.xxx
2009-09-11 08:47:29:977 972 f24 AU # Detection frequency: 22
2009-09-11 08:47:29:977 972 f24 AU # Target group:
Providence-Servers-General
2009-09-11 08:47:29:977 972 f24 AU # Approval type: Scheduled (Policy)
2009-09-11 08:47:29:977 972 f24 AU # Scheduled install day/time: Friday
at 3:00
2009-09-11 08:47:29:977 972 f24 AU # Auto-install minor updates: Yes
(User preference)
2009-09-11 08:47:29:977 972 f24 Agent Switching to hardware-verified
ClientId.
2009-09-11 08:47:29:977 972 f24 AU Setting AU scheduled install time to
2009-09-18 10:00:00
2009-09-11 08:47:30:858 972 f24 Agent Created new random SusClientId
b8643521-844c-4ccd-bf02-a1c42eca8ff5. Old Id:
8e180387-4b81-45d6-b2b2-f696ff5cf37d.
2009-09-11 08:47:30:868 972 f24 AU AU finished delayed initialization
2009-09-11 08:47:30:868 972 f24 AU Triggering AU detection through
DetectNow API
2009-09-11 08:47:30:868 972 f24 AU Triggering Online detection
(non-interactive)
2009-09-11 08:47:30:878 972 1408 AU #############
2009-09-11 08:47:30:878 972 1408 AU ## START ## AU: Search for updates
2009-09-11 08:47:30:878 972 1408 AU #########
2009-09-11 08:47:30:878 972 1408 AU <<## SUBMITTED ## AU: Search for
updates [CallId = {DA1FEE77-BEEB-45A9-8426-DD1A5D0B3590}]
2009-09-11 08:47:31:680 972 92c Agent *************
2009-09-11 08:47:31:680 972 92c Agent ** START ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2009-09-11 08:47:31:680 972 92c Agent *********
2009-09-11 08:47:31:680 972 92c Agent * Online = Yes; Ignore download
priority = No
2009-09-11 08:47:31:680 972 92c Agent * Criteria = "IsHidden=0 and
IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or
IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and
IsAssigned=1 or IsHidden=0 and IsInstalled=1 and
DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or
IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and
IsAssigned=1 and RebootRequired=1"
2009-09-11 08:47:31:680 972 92c Agent * ServiceID =
{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}
2009-09-11 08:47:31:680 972 92c Agent * Search Scope = {Machine}
2009-09-11 08:47:31:680 972 92c Misc Validating signature for
C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default \wuident.cab:
2009-09-11 08:47:31:730 972 92c Misc Microsoft signed: Yes
2009-09-11 08:47:32:250 972 92c Misc Validating signature for
C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default \wuident.cab:
2009-09-11 08:47:32:260 972 92c Misc Microsoft signed: Yes
2009-09-11 08:47:32:801 972 92c Misc Validating signature for
C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default \wsus3setup.cab:
2009-09-11 08:47:32:811 972 92c Misc Microsoft signed: Yes
2009-09-11 08:47:32:821 972 92c Setup *********** Setup: Checking whether
self-update is required ***********
2009-09-11 08:47:32:821 972 92c Setup * Inf file:
C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default \wsus3setup.inf
2009-09-11 08:47:32:841 972 92c Setup Update NOT required for
C:\WINDOWS\system32\cdm.dll: target version = 7.2.6001.788, required version
= 7.1.6001.65
2009-09-11 08:47:32:841 972 92c Setup Update NOT required for
C:\WINDOWS\system32\wuapi.dll: target version = 7.2.6001.788, required
version = 7.1.6001.65
2009-09-11 08:47:32:851 972 92c Setup Update NOT required for
C:\WINDOWS\system32\wuapi.dll.mui: target version = 7.2.6001.788, required
version = 7.1.6001.65
2009-09-11 08:47:32:851 972 92c Setup Update NOT required for
C:\WINDOWS\system32\wuauclt.exe: target version = 7.2.6001.788, required
version = 7.1.6001.65
2009-09-11 08:47:32:851 972 92c Setup Update NOT required for
C:\WINDOWS\system32\wuaucpl.cpl: target version = 7.2.6001.788, required
version = 7.1.6001.65
2009-09-11 08:47:32:861 972 92c Setup Update NOT required for
C:\WINDOWS\system32\wuaucpl.cpl.mui: target version = 7.2.6001.788, required
version = 7.1.6001.65
2009-09-11 08:47:32:861 972 92c Setup Update NOT required for
C:\WINDOWS\system32\wuaueng.dll: target version = 7.2.6001.788, required
version = 7.1.6001.65
2009-09-11 08:47:32:861 972 92c Setup Update NOT required for
C:\WINDOWS\system32\wuaueng.dll.mui: target version = 7.2.6001.788, required
version = 7.1.6001.65
2009-09-11 08:47:32:861 972 92c Setup Update NOT required for
C:\WINDOWS\system32\wucltui.dll: target version = 7.2.6001.788, required
version = 7.1.6001.65
2009-09-11 08:47:32:871 972 92c Setup Update NOT required for
C:\WINDOWS\system32\wucltui.dll.mui: target version = 7.2.6001.788, required
version = 7.1.6001.65
2009-09-11 08:47:32:871 972 92c Setup Update NOT required for
C:\WINDOWS\system32\wups.dll: target version = 7.2.6001.788, required version
= 7.1.6001.65
2009-09-11 08:47:32:871 972 92c Setup Update NOT required for
C:\WINDOWS\system32\wups2.dll: target version = 7.2.6001.788, required
version = 7.1.6001.65
2009-09-11 08:47:32:901 972 92c Setup Update NOT required for
C:\WINDOWS\system32\wuweb.dll: target version = 7.2.6001.788, required
version = 7.1.6001.65
2009-09-11 08:47:32:911 972 92c Setup WARNING: Warning: Setup callback
ReportProgress failed: 0x8007000d
2009-09-11 08:47:32:911 972 92c Setup * IsUpdateRequired = No
2009-09-11 08:47:35:255 972 92c PT +++++++++++ PT: Synchronizing server
updates +++++++++++
2009-09-11 08:47:35:255 972 92c PT + ServiceId =
{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
http://provt-wsus-01.corporate.provi...ce/client.asmx
2009-09-11 08:47:35:465 972 92c PT WARNING: Cached cookie has expired or
new PID is available
2009-09-11 08:47:35:465 972 92c PT Initializing simple targeting cookie,
clientId = b8643521-844c-4ccd-bf02-a1c42eca8ff5, target group =
Providence-Servers-General, DNS name = prov-vector-01.corporate.providence.com
2009-09-11 08:47:35:465 972 92c PT Server URL =
http://provt-wsus-01.xxx/SimpleAuthW...impleAuth.asmx
2009-09-11 08:47:40:293 972 92c PT WARNING: SyncUpdates failure, error =
0x8024400D, soap client error = 7, soap error code = 300, HTTP status code =
200
2009-09-11 08:47:40:293 972 92c PT WARNING: SOAP Fault: 0x00012c
2009-09-11 08:47:40:293 972 92c PT WARNING: faultstring:Fault occurred
2009-09-11 08:47:40:293 972 92c PT WARNING:
ErrorCode:RegistrationRequired(3)
2009-09-11 08:47:40:293 972 92c PT WARNING: Message:need to call
RegisterComputer.
2009-09-11 08:47:40:293 972 92c PT WARNING:
Method:"http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService/SyncUpdates"
2009-09-11 08:47:40:293 972 92c PT WARNING:
ID:0b03e5b2-353d-4417-a211-4b8828ce98be
2009-09-11 08:47:41:224 972 92c PT Initializing simple targeting cookie,
clientId = b8643521-844c-4ccd-bf02-a1c42eca8ff5, target group =
Providence-Servers-General, DNS name = prov-vector-01.xxx
2009-09-11 08:47:41:224 972 92c PT Server URL =
http://provt-wsus-01.corporate.provi...impleAuth.asmx
2009-09-11 08:47:44:679 972 92c PT +++++++++++ PT: Synchronizing extended
update info +++++++++++
2009-09-11 08:47:44:679 972 92c PT + ServiceId =
{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
http://provt-wsus-01.xxx/ClientWebService/client.asmx
2009-09-11 08:47:47:043 972 92c Agent * Found 0 updates and 47 categories
in search; evaluated appl. rules of 726 out of 995 deployed entities
2009-09-11 08:47:47:083 972 92c Agent *********
2009-09-11 08:47:47:083 972 92c Agent ** END ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2009-09-11 08:47:47:083 972 92c Agent *************
2009-09-11 08:47:47:103 972 92c Report REPORT EVENT:
{50A8CF2B-A062-4C5C-8775-A9144C3E71CB} 2009-09-11
08:47:29:977-0700 1 202 102 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Content Install Reboot completed.
2009-09-11 08:47:47:113 972 1300 AU >>## RESUMED ## AU: Search for
updates [CallId = {DA1FEE77-BEEB-45A9-8426-DD1A5D0B3590}]
2009-09-11 08:47:47:113 972 1300 AU # 0 updates detected
2009-09-11 08:47:47:113 972 1300 AU #########
2009-09-11 08:47:47:113 972 1300 AU ## END ## AU: Search for updates
[CallId = {DA1FEE77-BEEB-45A9-8426-DD1A5D0B3590}]
2009-09-11 08:47:47:113 972 1300 AU #############
2009-09-11 08:47:47:113 972 1300 AU AU setting next detection timeout to
2009-09-12 12:50:36
2009-09-11 08:47:47:113 972 1300 AU Setting AU scheduled install time to
2009-09-18 10:00:00
2009-09-11 08:47:52:090 972 92c Report REPORT EVENT:
{4E409891-CAC0-4477-B370-F44C70B1F4A9} 2009-09-11
08:47:47:083-0700 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Software
Synchronization Windows Update Client successfully detected 0 updates.
2009-09-11 08:47:52:090 972 92c Report REPORT EVENT:
{7A36B04C-6C85-4479-9754-C5DA9536365F} 2009-09-11
08:47:47:083-0700 1 156 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Pre-Deployment Check Reporting client status.
2009-09-11 09:01:17:034 972 92c Report Uploading 3 events using cached
cookie, reporting URL =
http://provt-wsus-01.xxx/ReportingWe...ebService.asmx
2009-09-11 09:01:18:116 972 92c Report Reporter successfully uploaded 3
events.
2009-09-11 10:12:36:366 972 1408 AU AU received policy change subscription
event

If needed, there are other service startups on this server, and I have the
other one also.
Thanks again for your help!

"Richard Roati" <> wrote in message
news:8C041D08-A99E-4002-8354-...

> What do you mean by "21 servers listed in the group policy"? All in the
> same
> group policy application group for WSUS. I can provide more details if
> needed?

Please do, because I want to make sure I understand exactly what you are
saying. The terminology you are using is not entirely familiar to me, but
that may well be my deficiency -- my expertise is not in Group Policy. :-)


> Checking Connection to WSUS/SUS Server
> WUServer = http://provt-wsus-01.xxx
> WUStatusServer = http://provt-wsus-01.xxx

Does this configuration really use a two-level hostname, or should I
interpret the .xxx to mean .company.com?

> Here is the result of the windowsupdate.log from one of them:

Ahhh.. never mind... <VBG>

> 2009-09-11 08:47:29:016 972 f24 Agent * WSUS server:
> http://provt-wsus-01.corporate.providence.com


Well, here's the first item of intrigue...

> 2009-09-11 08:47:28:995 972 1408 Agent Created new random SusClientId
> 8e180387-4b81-45d6-b2b2-f696ff5cf37d. Old Id: none.

So, the machine did not have a SusClientID -- but *now* it has one. (That
would either be evidence that the SusClientID was deleted from the registry,
or this machine had never before attempted to contact the WSUS Server. If
the policy was just recently applied, that would explain this also.)

> 2009-09-11 08:47:29:977 972 f24 AU # WSUS server:
> http://provt-wsus-01.xxx

[See.. attempting to mask URLs unless you know all the places they get
logged is really an exercise in futility. <g> ...and, truth be told, in some
cases has caused easily remediable errors to go undetected because the
masking value was syntactically correct, and the masked value was not.]

> 2009-09-11 08:47:29:977 972 f24 Agent Switching to hardware-verified
> ClientId.

Note: This is apparently a new feature in the v7.4 WUAgent -- I'm still
trying to get some background information on this "feature" but my
preliminary understanding is that it's supposed to help eliminate these
duplicate SusClientID scenarios.

Ironically, though, according to the chart published in the Deployment Guide
in the "Client Requirements" section
[http://technet.microsoft.com/en-us/l...8(WS.10).aspx] -- this
feature is only supposed to be implemented on *physical* machines -- not
virtual machines. I've renewed my inqury for documentation and clarification
on this "hardware-verified ClientID" feature.

> 2009-09-11 08:47:30:858 972 f24 Agent Created new random SusClientId
> b8643521-844c-4ccd-bf02-a1c42eca8ff5. Old Id:
> 8e180387-4b81-45d6-b2b2-f696ff5cf37d.

But.. maybe it has a bug... since 1.8 seconds earlier it had just created
another "new" SusClientID. :-/


> 2009-09-11 08:47:35:465 972 92c PT Server URL =
> http://provt-wsus-01.xxx/SimpleAuthW...impleAuth.asmx
> 2009-09-11 08:47:40:293 972 92c PT WARNING: SyncUpdates failure, error =
> 0x8024400D, soap client error = 7, soap error code = 300, HTTP status code
> =
> 200
> 2009-09-11 08:47:40:293 972 92c PT WARNING: SOAP Fault: 0x00012c
> 2009-09-11 08:47:40:293 972 92c PT WARNING: faultstring:Fault occurred
> 2009-09-11 08:47:40:293 972 92c PT WARNING:
> ErrorCode:RegistrationRequired(3)
> 2009-09-11 08:47:40:293 972 92c PT WARNING: Message:need to call
> RegisterComputer.

Here we go.... the 0x8024400D / SOAP 0x12c error. :-)

This error combination has been observed in duplicate SusClientID scenarios,
but we know we don't have a duplicate because we've regenerated TWO
SusClietnIDs in the previous two minutes.

It's also a *known* (confirmed empirically, but still awaiting confirmation
and resolution from Microsoft) issue on clients of replica servers, and
manifests on the *first* detection following every synchronization of the
replica server with the upstream server. (If provt-wsus-01 is a replica
server, then we can safely ignore this.)

> 2009-09-11 08:47:47:043 972 92c Agent * Found 0 updates and 47
> categories
> in search; evaluated appl. rules of 726 out of 995 deployed entities

Here we successfully executed the detection and found -0- updates
approved/needed for installation. Is this the expected result?

> 2009-09-11 09:01:17:034 972 92c Report Uploading 3 events using cached
> cookie, reporting URL =
> http://provt-wsus-01.xxx/ReportingWe...ebService.asmx
> 2009-09-11 09:01:18:116 972 92c Report Reporter successfully uploaded 3
> events.

And ~15 minutes later the status is reported to the WSUS Server. This
machine (prov-vector-01) should show in the WSUS Server with a Last Reported
Date of 9/11/09 9:01am. (Was this one of the 12 that had not yet reported?)



--
Lawrence Garvin, M.S., MCITP:EA, MCDBA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)

MS WSUS Website: http://www.microsoft.com/wsus
My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin

On Fri, 11 Sep 2009 22:21:03 -0500, "Lawrence Garvin [MVP]"
<> wrote:

snip...
>
>> 2009-09-11 08:47:29:977 972 f24 Agent Switching to hardware-verified
>> ClientId.
>
>Note: This is apparently a new feature in the v7.4 WUAgent -- I'm still
>trying to get some background information on this "feature" but my
>preliminary understanding is that it's supposed to help eliminate these
>duplicate SusClientID scenarios.
>
Lawrence there seems to be some new info on this in
http://support.microsoft.com/default...b;EN-US;903262
under the heading "More Information"
--
Dave Mills
There are 10 types of people, those that understand binary and those that don't.