WSUS clients unable to access due to ISA 2006 ???

Hi,

I have windows 2000 domain in which there is a member server running on
windows 2003 standard server (server: proxy). The proxy has a windows
2006 ISA server Installed and configured and operating.

On the proxy server i have installed the WSUS server. i have done the
settings using gpo. I created an OU and put the xp and windows 2003
machines in that OU (Servers) and created a gp PatchUpdates and applied
to the Servers OU.

When my client machine is tring to access i get the following in my ISA
server logs:

10.0.0.133 anonymous 2006-06-29 02:42:40 - - 10.0.0.96 1 710 2257 - POST /ClientWebService/client.asmx - 12202 - Compression:
client=No, server=No, cache=Yes, compress rate=0% decompress
rate=0% - 0x200 Denied

As it is trying to access using anonymous it is being denied access by
ISA server.
How do i improve the situation and get them to update.

The output from clientdiag is as follows:

C:\WS>clientdiag

WSUS Client Diagnostics Tool

Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is running. . . PASS
Wuaueng.dll version 5.8.0.2469. . . . . . . . . . . . . PASS
This version is WSUS 2.0

Checking AU Settings
AU Option is 3 : Notify Prior to Install. . . . . . . . PASS
Option is from Policy settings

Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy
10.0.0.96:8080
User IE ProxyByPass
10.1.0.5;10.1.0.30;10.1.0.20;<local>
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use

Checking Connection to WSUS/SUS Server
WUServer = http://10.0.0.96
WUStatusServer = http://10.0.0.96
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS

VerifyWUServerURL() failed with hr=0x80190193

No Error description could be found

Press Enter to Complete

Request help with respect to this matter .

TIA
amit kaushal

<> wrote in message
news: oups.com...
> Hi,
>
> I have windows 2000 domain in which there is a member server running on
> windows 2003 standard server (server: proxy). The proxy has a windows
> 2006 ISA server Installed and configured and operating.

Please confirm the version of ISA Server installed. ISA Server /2006/ is a
BETA product. ISA Server /2004/ is the current production release of ISA
Server.

> On the proxy server i have installed the WSUS server.

I would strongly discourage you from installing WSUS on the same system as
your ISA Server. Why, specifically, did you choose to install WSUS on this
system, as opposed to any other Windows server system in your domain?

> As it is trying to access using anonymous it is being denied access by
> ISA server.
> How do i improve the situation and get them to update.

The permissions being used to access an authenticated session on ISA Server
are entirely different than any issues concerning accesing the WSUS Server.

This surely appears to me to be an ISA Server question (and, as you've
suggested, on a BETA product at that). I suggest, if you are using ISA
Server 2006, that you direct this question to the BETA support
forum/newsgroup. If you're using ISA Server 2004, this is still an ISA
Server question (as you've quoted from the ISA logs, not the IIS logs), and
the question would be better directed to the ISA Server forum/newsgroup.

> Checking Connection to WSUS/SUS Server
> WUServer = http://10.0.0.96
> WUStatusServer = http://10.0.0.96
> UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
>
> VerifyWUServerURL() failed with hr=0x80190193

This error is consistent with what you've reported from your ISA logs. The
firewall/proxy is denying access to the WSUS server.


--
Lawrence Garvin, M.S., MVP-Software Distribution
Everything you need for WSUS is at
http://technet2.microsoft.com/window...s/default.mspx
And, eveything else is at
http://wsusinfo.onsitechsolutions.com
....