Clients not getting updates from

I am using the latest version of WSUS V3. We use it to download and install
windows critical updates on most clients which is working fine. We have a
group of clients in one of office which are not getting the updates
installed. The status of the machines are saying install, but the status is
Not applicable. But they are applicable as they need these updates.

I checked the windowsupdates log on one of the machines and they are few
errors like:

Launched Client UI process
2008-12-01 15:15:36:091 1308 a7c AU Windows Update is disabled by policy for
user
2008-12-01 15:15:36:107 368 864 Misc =========== Logging initialized
(build: 7.1.6001.65, tz: +0100) ===========
2008-12-01 15:15:36:107 368 864 Misc = Process:
C:\WINDOWS\system32\wuauclt.exe
2008-12-01 15:15:36:107 368 864 Misc = Module:
C:\WINDOWS\system32\wucltui.dll
2008-12-01 15:15:36:107 368 864 CltUI FATAL: Failed to get notification
handle, hr=80240025
2008-12-01 15:15:36:123 1308 5e8 AU AU received handle event
2008-12-01 15:15:51:127 1308 5e8 AU Launched new AU client for directive
'Reboot Pending', session id = 0x0
2008-12-01 15:15:51:158 3364 7e4 Misc =========== Logging initialized
(build: 7.1.6001.65, tz: +0100) ===========
2008-12-01 15:15:51:158 3364 7e4 Misc = Process:
C:\WINDOWS\system32\wuauclt.exe

I have checked group policy and I cannot see any restrictions. Can anyone
see from above why these clients are not getting these updates.

guv wrote:
> I am using the latest version of WSUS V3. We use it to download
> and install windows critical updates on most clients which is
> working fine. We have a group of clients in one of office which
> are not getting the updates installed. The status of the machines
> are saying install, but the status is Not applicable. But they
> are applicable as they need these updates.
> I checked the windowsupdates log on one of the machines and they
> are few errors like:
>
> Launched Client UI process
> 2008-12-01 15:15:36:091 1308 a7c AU Windows Update is disabled by
> policy for user
> 2008-12-01 15:15:36:107 368 864 Misc =========== Logging
> initialized (build: 7.1.6001.65, tz: +0100) ===========
> 2008-12-01 15:15:36:107 368 864 Misc = Process:
> C:\WINDOWS\system32\wuauclt.exe
> 2008-12-01 15:15:36:107 368 864 Misc = Module:
> C:\WINDOWS\system32\wucltui.dll
> 2008-12-01 15:15:36:107 368 864 CltUI FATAL: Failed to get
> notification handle, hr=80240025
> 2008-12-01 15:15:36:123 1308 5e8 AU AU received handle event
> 2008-12-01 15:15:51:127 1308 5e8 AU Launched new AU client for
> directive 'Reboot Pending', session id = 0x0
> 2008-12-01 15:15:51:158 3364 7e4 Misc =========== Logging
> initialized (build: 7.1.6001.65, tz: +0100) ===========
> 2008-12-01 15:15:51:158 3364 7e4 Misc = Process:
> C:\WINDOWS\system32\wuauclt.exe
>
> I have checked group policy and I cannot see any restrictions. Can
> anyone see from above why these clients are not getting these
> updates.

On the machines in question - what is the RSOP?
Do they have the proper entry for your WSUS server?
Are their DNS settings correct?

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html

guv wrote:
> I am using the latest version of WSUS V3. We use it to download
> and install windows critical updates on most clients which is
> working fine. We have a group of clients in one of office which
> are not getting the updates installed. The status of the machines
> are saying install, but the status is Not applicable. But they
> are applicable as they need these updates.
> I checked the windowsupdates log on one of the machines and they
> are few errors like:
>
> Launched Client UI process
> 2008-12-01 15:15:36:091 1308 a7c AU Windows Update is disabled by
> policy for user
> 2008-12-01 15:15:36:107 368 864 Misc =========== Logging
> initialized (build: 7.1.6001.65, tz: +0100) ===========
> 2008-12-01 15:15:36:107 368 864 Misc = Process:
> C:\WINDOWS\system32\wuauclt.exe
> 2008-12-01 15:15:36:107 368 864 Misc = Module:
> C:\WINDOWS\system32\wucltui.dll
> 2008-12-01 15:15:36:107 368 864 CltUI FATAL: Failed to get
> notification handle, hr=80240025
> 2008-12-01 15:15:36:123 1308 5e8 AU AU received handle event
> 2008-12-01 15:15:51:127 1308 5e8 AU Launched new AU client for
> directive 'Reboot Pending', session id = 0x0
> 2008-12-01 15:15:51:158 3364 7e4 Misc =========== Logging
> initialized (build: 7.1.6001.65, tz: +0100) ===========
> 2008-12-01 15:15:51:158 3364 7e4 Misc = Process:
> C:\WINDOWS\system32\wuauclt.exe
>
> I have checked group policy and I cannot see any restrictions. Can
> anyone see from above why these clients are not getting these
> updates.

Shenan Stanley wrote:
> On the machines in question - what is the RSOP?
> Do they have the proper entry for your WSUS server?
> Are their DNS settings correct?

Oh...

And you might get better advice if you posted in a more properly associated
newsgroup...
microsoft.public.windows.server.update_services

Cross-posting this entire conversation thus-far to there...

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html

"Shenan Stanley" <> wrote in message
news:OQtMa$...

>> 2008-12-01 15:15:36:091 1308 a7c AU Windows Update is disabled by
>> policy for user

>> 2008-12-01 15:15:36:107 368 864 CltUI FATAL: Failed to get
>> notification handle, hr=80240025



0x80240025 WU_E_USER_ACCESS_DISABLED Group Policy settings prevented access
to Windows Update.

>> 2008-12-01 15:15:51:127 1308 5e8 AU Launched new AU client for
>> directive 'Reboot Pending', session id = 0x0

The problem, basically, is that you've blocked access to the Windows Update
client and this system needs to be rebooted, but there's no way for the WUA
to inform the logged on user of that requirement, since you've blocked all
access to the UI.

>> I have checked group policy and I cannot see any restrictions. Can
>> anyone see from above why these clients are not getting these
>> updates.

The clients are not getting additional updates because the Reboot is still
pending.

Reboot the client.

--
Lawrence Garvin, M.S., MCITP(x2), MCTS(x5), MCP(x7), MCBMSP
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)

MS WSUS Website: http://www.microsoft.com/wsus
My Websites: http://www.onsitechsolutions.com;
http://wsusinfo.onsitechsolutions.com
My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin