WSUS not working in vista

Hi all,

I have installed wsus 3.0 sp2 in windows 2003 stantader edi. and configured
all setting which required, its working in windows xp, not in vista. please
tell me what are the problem.

Regards,

Anklesh.

Hi all,

I have installed wsus 3.0 sp2 in windows 2003 stantader edi. and configured
all setting which required, its working in windows xp, not in vista. please
help will be appreciate.

WSUS Client Diagnostics Tool

Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is running. . . PASS
Wuaueng.dll version 7.4.7600.226. . . . . . . . . . . . PASS
This version is WSUS 2.0

Checking AU Settings
AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
Option is from Control Panel

Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use

Checking Connection to WSUS/SUS Server
WUServer = http://192.168.1.124:8530
WUStatusServer = http://192.168.1.124:8530
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS

VerifyWUServerURL() failed with hr=0x800710dd

The operation identifier is not valid.


Press Enter to Complete



Regards,

Anklesh.


"Anklesh Chauhan" <> wrote in message
news:CA3537A4-24C7-4E69-8F50-...
> Hi all,
>
> I have installed wsus 3.0 sp2 in windows 2003 stantader edi. and
> configured all setting which required, its working in windows xp, not in
> vista. please tell me what are the problem.
>
> Regards,
>
> Anklesh.
>

Hi,

After chenge in the IIS Manager to see what authentication type is enabled
on the directories that are part of the WSUS Server. Windows Integrated
Authentication needs to be enabled on the "SimpleAuthWebService", "Content",
"ClientWebService", "ReportingWebService" and the "SelfUpdate" folders.
error is chenged as below.
WSUS Client Diagnostics Tool

Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is running. . . PASS
Wuaueng.dll version 7.4.7600.226. . . . . . . . . . . . PASS
This version is WSUS 2.0

Checking AU Settings
AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
Option is from Control Panel

Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use

Checking Connection to WSUS/SUS Server
WUServer = http://192.168.1.124:8530
WUStatusServer = http://192.168.1.124:8530
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
Connection to server. . . . . . . . . . . . . . . . . . PASS

WinHttpDownloadFileToMemory(szURLDest, NULL, 0, NULL, NULL, NULL,
&downloadBuffe
r) failed with hr=0x800710dd

The operation identifier is not valid.


Press Enter to Complete


"Anklesh Chauhan" <> wrote in message
news:2512728A-5AFF-4C92-A4FB-...
> Hi all,
>
> I have installed wsus 3.0 sp2 in windows 2003 stantader edi. and
> configured
> all setting which required, its working in windows xp, not in vista.
> please
> help will be appreciate.
>
> WSUS Client Diagnostics Tool
>
> Checking Machine State
> Checking for admin rights to run tool . . . . . . . . . PASS
> Automatic Updates Service is running. . . . . . . . . . PASS
> Background Intelligent Transfer Service is running. . . PASS
> Wuaueng.dll version 7.4.7600.226. . . . . . . . . . . . PASS
> This version is WSUS 2.0
>
> Checking AU Settings
> AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
> Option is from Control Panel
>
> Checking Proxy Configuration
> Checking for winhttp local machine Proxy settings . . . PASS
> Winhttp local machine access type
> <Direct Connection>
> Winhttp local machine Proxy. . . . . . . . . . NONE
> Winhttp local machine ProxyBypass. . . . . . . NONE
> Checking User IE Proxy settings . . . . . . . . . . . . PASS
> User IE Proxy. . . . . . . . . . . . . . . . . NONE
> User IE ProxyByPass. . . . . . . . . . . . . . NONE
> User IE AutoConfig URL Proxy . . . . . . . . . NONE
> User IE AutoDetect
> AutoDetect not in use
>
> Checking Connection to WSUS/SUS Server
> WUServer = http://192.168.1.124:8530
> WUStatusServer = http://192.168.1.124:8530
> UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
>
> VerifyWUServerURL() failed with hr=0x800710dd
>
> The operation identifier is not valid.
>
>
> Press Enter to Complete
>
>
>
> Regards,
>
> Anklesh.
>
>
> "Anklesh Chauhan" <> wrote in message
> news:CA3537A4-24C7-4E69-8F50-...
>> Hi all,
>>
>> I have installed wsus 3.0 sp2 in windows 2003 stantader edi. and
>> configured all setting which required, its working in windows xp, not in
>> vista. please tell me what are the problem.
>>
>> Regards,
>>
>> Anklesh.
>>
>
>

"Anklesh Chauhan" <> wrote in message
news:AC8870B8-9EF4-40E3-BF89-...

> After chenge in the IIS Manager to see what authentication type is enabled
> on the directories that are part of the WSUS Server. Windows Integrated
> Authentication needs to be enabled on the "SimpleAuthWebService",
> "Content", "ClientWebService", "ReportingWebService" and the "SelfUpdate"
> folders.

Well.. actually.. =no=.. Windows Integrated Authentication should not be
enabled on any IIS virtual directory, except APIRemoting30.

> error is chenged as below.

I don't see where the error changed at all.

Both samples returned an 0x800710dd error, which for the moment, and
considering that the client is Vista, suggests that the problem may be that
somebody has modified the default group memberships on the WSUS server.

Please verify that the NT AUTHORITY\Authenticated Users group is a member of
the local Users group.


--
Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2010)

My Blog: http://onsitechsolutions.spaces.live.com
Microsoft WSUS Website: http://www.microsoft.com/wsus
My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin

Hi,

Thank you so much for responding,
I checked that the NT AUTHORITY\Authenticated Users group is a member of the
local Users group.
Now when i disable Windows Integrated Authentication in IIS manager then my
wsus administrator consol is not working.




"Lawrence Garvin [MVP]" <> wrote in message
news952CF90-8532-4434-AC0E-...
> "Anklesh Chauhan" <> wrote in message
> news:AC8870B8-9EF4-40E3-BF89-...
>
>> After chenge in the IIS Manager to see what authentication type is
>> enabled on the directories that are part of the WSUS Server. Windows
>> Integrated Authentication needs to be enabled on the
>> "SimpleAuthWebService", "Content", "ClientWebService",
>> "ReportingWebService" and the "SelfUpdate" folders.
>
> Well.. actually.. =no=.. Windows Integrated Authentication should not be
> enabled on any IIS virtual directory, except APIRemoting30.
>
>> error is chenged as below.
>
> I don't see where the error changed at all.
>
> Both samples returned an 0x800710dd error, which for the moment, and
> considering that the client is Vista, suggests that the problem may be
> that somebody has modified the default group memberships on the WSUS
> server.
>
> Please verify that the NT AUTHORITY\Authenticated Users group is a member
> of the local Users group.
>
>
> --
> Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
> Principal/CTO, Onsite Technology Solutions, Houston, Texas
> Microsoft MVP - Software Distribution (2005-2010)
>
> My Blog: http://onsitechsolutions.spaces.live.com
> Microsoft WSUS Website: http://www.microsoft.com/wsus
> My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin
>
>

Hi,
one more observation, when i go to http://myservername:8530/iuident.cab then
its asking for the username and passoword after giving, download iuidet.cab
file successfully.

"Anklesh Chauhan" <> wrote in message
news:9AB0CF97-0F5A-43C0-A3B1-...
> Hi,
>
> Thank you so much for responding,
> I checked that the NT AUTHORITY\Authenticated Users group is a member of
> the
> local Users group.
> Now when i disable Windows Integrated Authentication in IIS manager then
> my wsus administrator consol is not working.
>
>
>
>
> "Lawrence Garvin [MVP]" <> wrote in message
> news952CF90-8532-4434-AC0E-...
>> "Anklesh Chauhan" <> wrote in message
>> news:AC8870B8-9EF4-40E3-BF89-...
>>
>>> After chenge in the IIS Manager to see what authentication type is
>>> enabled on the directories that are part of the WSUS Server. Windows
>>> Integrated Authentication needs to be enabled on the
>>> "SimpleAuthWebService", "Content", "ClientWebService",
>>> "ReportingWebService" and the "SelfUpdate" folders.
>>
>> Well.. actually.. =no=.. Windows Integrated Authentication should not be
>> enabled on any IIS virtual directory, except APIRemoting30.
>>
>>> error is chenged as below.
>>
>> I don't see where the error changed at all.
>>
>> Both samples returned an 0x800710dd error, which for the moment, and
>> considering that the client is Vista, suggests that the problem may be
>> that somebody has modified the default group memberships on the WSUS
>> server.
>>
>> Please verify that the NT AUTHORITY\Authenticated Users group is a member
>> of the local Users group.
>>
>>
>> --
>> Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
>> Principal/CTO, Onsite Technology Solutions, Houston, Texas
>> Microsoft MVP - Software Distribution (2005-2010)
>>
>> My Blog: http://onsitechsolutions.spaces.live.com
>> Microsoft WSUS Website: http://www.microsoft.com/wsus
>> My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin
>>
>>
>

Hi,

After chenge in the IIS Manager default website, dose enable Windows
Integrated Authentication, then Succesfully complite clinet diagonistic as
below,

WSUS Client Diagnostics Tool

Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is running. . . PASS
Wuaueng.dll version 7.4.7600.226. . . . . . . . . . . . PASS
This version is WSUS 2.0

Checking AU Settings
AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
Option is from Control Panel

Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use

Checking Connection to WSUS/SUS Server
WUServer = http://wsus:8530
WUStatusServer = http://wsus:8530
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
Connection to server. . . . . . . . . . . . . . . . . . PASS
SelfUpdate folder is present. . . . . . . . . . . . . . PASS

Press Enter to Complete

now see windows update log file.

2010-03-20 12:30:18:904 1224 1750 AU AU setting next detection timeout to
2010-03-20 12:00:18
2010-03-20 12:30:22:525 1224 1530 Report REPORT EVENT:
{9FA8FF7C-DF50-4FE3-B3DE-32515A0CCBC5} 2010-03-20 12:30:17:524+0530 1 148
101 {00000000-0000-0000-0000-000000000000} 0 80244017 AutomaticUpdates
Failure Software Synchronization Windows Update Client failed to detect with
error 0x80244017.
2010-03-20 12:30:22:525 1224 1530 Report REPORT EVENT:
{D7B54563-5A47-4E88-83DA-EF8B19703E6E} 2010-03-20 12:30:18:902+0530 1 148
101 {00000000-0000-0000-0000-000000000000} 0 80244017 AutomaticUpdates
Failure Software Synchronization Windows Update Client failed to detect with
error 0x80244017.
2010-03-20 12:30:22:536 1224 1530 Report CWERReporter::HandleEvents - WER
report upload completed with status 0x8
2010-03-20 12:30:22:536 1224 1530 Report WER Report sent: 7.4.7600.226
0x80244017 00000000-0000-0000-0000-000000000000 Scan 101 Managed
2010-03-20 12:30:22:548 1224 1530 Report CWERReporter::HandleEvents - WER
report upload completed with status 0x8
2010-03-20 12:30:22:548 1224 1530 Report WER Report sent: 7.4.7600.226
0x80244017 00000000-0000-0000-0000-000000000000 Scan 101 Managed
2010-03-20 12:30:22:548 1224 1530 Report CWERReporter finishing event
handling. (00000000)
2010-03-20 12:38:50:911 1224 1530 PT WARNING: GetConfig failure, error =
0x80244017, soap client error = 10, soap error code = 0, HTTP status code =
401
2010-03-20 12:38:50:911 1224 1530 PT WARNING: PTError: 0x80244017
2010-03-20 12:38:50:911 1224 1530 PT WARNING: GetConfig_WithRecovery failed:
0x80244017
2010-03-20 12:38:50:911 1224 1530 PT WARNING: RefreshConfig failed:
0x80244017
2010-03-20 12:38:50:911 1224 1530 PT WARNING: RefreshPTState failed:
0x80244017
2010-03-20 12:38:50:911 1224 1530 PT WARNING: PTError: 0x80244017
2010-03-20 12:38:50:911 1224 1530 Report WARNING: Reporter failed to upload
events with hr = 80244017.
2010-03-20 12:57:27:058 1224 6e0 PT WARNING: GetConfig failure, error =
0x80244017, soap client error = 10, soap error code = 0, HTTP status code =
401
2010-03-20 12:57:27:058 1224 6e0 PT WARNING: PTError: 0x80244017
2010-03-20 12:57:27:058 1224 6e0 PT WARNING: GetConfig_WithRecovery failed:
0x80244017
2010-03-20 12:57:27:058 1224 6e0 PT WARNING: RefreshConfig failed:
0x80244017
2010-03-20 12:57:27:058 1224 6e0 PT WARNING: RefreshPTState failed:
0x80244017
2010-03-20 12:57:27:058 1224 6e0 PT WARNING: PTError: 0x80244017
2010-03-20 12:57:27:058 1224 6e0 Report WARNING: Reporter failed to upload
events with hr = 80244017.

Please help will be appreciate.



"Anklesh Chauhan" <> wrote in message
news:B4A804BE-9B9B-4005-8812-...
> Hi,
> one more observation, when i go to http://myservername:8530/iuident.cab
> then its asking for the username and passoword after giving, download
> iuidet.cab file successfully.
>
> "Anklesh Chauhan" <> wrote in message
> news:9AB0CF97-0F5A-43C0-A3B1-...
>> Hi,
>>
>> Thank you so much for responding,
>> I checked that the NT AUTHORITY\Authenticated Users group is a member of
>> the
>> local Users group.
>> Now when i disable Windows Integrated Authentication in IIS manager then
>> my wsus administrator consol is not working.
>>
>>
>>
>>
>> "Lawrence Garvin [MVP]" <> wrote in message
>> news952CF90-8532-4434-AC0E-...
>>> "Anklesh Chauhan" <> wrote in message
>>> news:AC8870B8-9EF4-40E3-BF89-...
>>>
>>>> After chenge in the IIS Manager to see what authentication type is
>>>> enabled on the directories that are part of the WSUS Server. Windows
>>>> Integrated Authentication needs to be enabled on the
>>>> "SimpleAuthWebService", "Content", "ClientWebService",
>>>> "ReportingWebService" and the "SelfUpdate" folders.
>>>
>>> Well.. actually.. =no=.. Windows Integrated Authentication should not be
>>> enabled on any IIS virtual directory, except APIRemoting30.
>>>
>>>> error is chenged as below.
>>>
>>> I don't see where the error changed at all.
>>>
>>> Both samples returned an 0x800710dd error, which for the moment, and
>>> considering that the client is Vista, suggests that the problem may be
>>> that somebody has modified the default group memberships on the WSUS
>>> server.
>>>
>>> Please verify that the NT AUTHORITY\Authenticated Users group is a
>>> member of the local Users group.
>>>
>>>
>>> --
>>> Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
>>> Principal/CTO, Onsite Technology Solutions, Houston, Texas
>>> Microsoft MVP - Software Distribution (2005-2010)
>>>
>>> My Blog: http://onsitechsolutions.spaces.live.com
>>> Microsoft WSUS Website: http://www.microsoft.com/wsus
>>> My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin
>>>
>>>
>>
>

"Anklesh Chauhan" <> wrote in message
news:9AB0CF97-0F5A-43C0-A3B1-...

> Now when i disable Windows Integrated Authentication in IIS manager then
> my wsus administrator consol is not working.

The administration console connection is an authenticated connection to the
APIRemoting30 virtual directory and does require that Integrated Windows
Authentication be enabled on that v-dir. It's likely you do not have it
enabled for that particular v-dir.

The correct permissions settings for IIS can be found in Appendix C of the
WSUS Operations Guide
http://technet.microsoft.com/en-us/l...03(WS.10).aspx

You should refer there to obtain the correct access permission settings for
IIS.



--
Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2010)

My Blog: http://onsitechsolutions.spaces.live.com
Microsoft WSUS Website: http://www.microsoft.com/wsus
My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin

"Anklesh Chauhan" <> wrote in message
news:B4A804BE-9B9B-4005-8812-...
> Hi,
> one more observation, when i go to http://myservername:8530/iuident.cab
> then its asking for the username and passoword after giving, download
> iuidet.cab file successfully.

This is the core symptom of your issue.

You masked this symptom by incorrectly enabling Windows Authentication on
the website, which suppressed the prompt for username and password.

The WSUS server should be accepting anonymous connections, and this prompt
indicates it is not.

As noted in the previous message, refer to Appendix C of the Ops Guide and
verify that all IIS permissions are correctly set.
You may also need to refer to Appendix D and verify NTFS permissions as
well.

The other relevant question to ask here is this: Has anybody used the
Windows Security Configuration Wizard on this server to apply a security
template? If so, you should consider rolling that template back as it's
known to change NTFS permissions that break WSUS.


--
Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2010)

My Blog: http://onsitechsolutions.spaces.live.com
Microsoft WSUS Website: http://www.microsoft.com/wsus
My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin

"Anklesh Chauhan" <> wrote in message
news:B43072C6-206B-487D-938C-...

> 2010-03-20 12:30:22:525 1224 1530 Report REPORT EVENT:
> {9FA8FF7C-DF50-4FE3-B3DE-32515A0CCBC5} 2010-03-20 12:30:17:524+0530 1 148
> 101 {00000000-0000-0000-0000-000000000000} 0 80244017 AutomaticUpdates
> Failure Software Synchronization Windows Update Client failed to detect
> with error 0x80244017.

This is an HTTP 401 error, consistent with you being prompted for
authentication credentials in Internet Explorer.

The fix is to correct the invalid permissions configured on the WSUS server,
either in IIS or in the filesystem itself.


--
Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2010)

My Blog: http://onsitechsolutions.spaces.live.com
Microsoft WSUS Website: http://www.microsoft.com/wsus
My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin