Error 80072efe - WSUS and ISA server...., clients dont ever report

Discussion in 'Update Services' started by sssstew, Jun 1, 2006.

  1. sssstew

    sssstew Guest

    Hi all

    Ive got a problem with my WSUS server where i have the 41 computers listed
    but they they are shown as never reporting in, in their windowsupdate.log
    file the main problem is this :-

    2006-05-30 17:10:40 1412 1630 PT Initializing simple targeting cookie,
    clientId = 42be3eba-cfe9-49ba-9926-80946062c515, target group = , DNS name =
    rhbackup.rhtrust.local
    2006-05-30 17:10:40 1412 1630 PT Server URL =
    http://rhbackup/SimpleAuthWebService/SimpleAuth.asmx
    2006-05-30 17:10:40 1412 1630 Misc WARNING: SendRequest failed with hr =
    80072efe. Proxy List used: <RHPROXY:8080> Bypass List used : <<local>> Auth
    Schemes used : <>
    2006-05-30 17:10:40 1412 1630 PT + Last proxy send request failed with hr =
    0x80072EFE, HTTP status code = 0
    2006-05-30 17:10:40 1412 1630 PT + Caller provided proxy = No
    2006-05-30 17:10:40 1412 1630 PT + Proxy list used = RHPROXY:8080
    2006-05-30 17:10:40 1412 1630 PT + Bypass list used = <local>
    2006-05-30 17:10:40 1412 1630 PT + Caller provided credentials = No
    2006-05-30 17:10:40 1412 1630 PT + Impersonate flags = 0
    2006-05-30 17:10:40 1412 1630 PT + Possible authorization schemes used =
    2006-05-30 17:10:40 1412 1630 PT WARNING: GetAuthorizationCookie failure,
    error = 0x80072EFE, soap client error = 5, soap error code = 0, HTTP status
    code = 200
    2006-05-30 17:10:40 1412 1630 Report WARNING: Reporter failed to upload
    events with hr = 80072efe.

    ive searched high and low on the net and not really found much of use.....
    can anyone help?

    the clientdiag exe shows everything as passed :-


    QUOTE

    WSUS Client Diagnostics Tool

    Checking Machine State
    Checking for admin rights to run tool . . . . . . . . . PASS
    Automatic Updates Service is running. . . . . . . . . . PASS
    Background Intelligent Transfer Service is running. . . PASS
    Wuaueng.dll version 5.8.0.2469. . . . . . . . . . . . . PASS
    This version is WSUS 2.0

    Checking AU Settings
    AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
    Option is from Policy settings

    Checking Proxy Configuration
    Checking for winhttp local machine Proxy settings . . . PASS
    Winhttp local machine access type
    <Using Proxy>
    Winhttp local machine Proxy
    RHPROXY:8080
    Winhttp local machine ProxyBypass
    <local>
    Checking User IE Proxy settings . . . . . . . . . . . . PASS
    User IE Proxy
    rhproxy.rhtrust.local:8080
    User IE ProxyByPass
    10.10.*.*,www2.roundhouse.org.uk,www1.roundhouse.org.uk;<local>
    User IE AutoConfig URL Proxy . . . . . . . . . NONE
    User IE AutoDetect
    AutoDetect not in use

    Checking Connection to WSUS/SUS Server
    WUServer = http://rhbackup
    WUStatusServer = http://rhbackup
    UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
    Connection to server. . . . . . . . . . . . . . . . . . PASS
    SelfUpdate folder is present. . . . . . . . . . . . . . PASS

    Press Enter to Complete

    So basically im sure its the ISA server they use, but how do i need to set
    it up so that WSUS can work ok. I can browse the admin page for wsus from
    any machine via the ISA server.


    Cheers, Stew
     
    sssstew, Jun 1, 2006
    #1
    1. Advertisements

  2. This client log is from 'rhbackup.rhtrust.local', which is the machine you
    have configured as the WSUS server.
    And the 0x80072efe error is
    0x80072efe - ERROR INTERNET CONNECTION ABORTED

    Which means that this client is getting aborted trying to talk to itself.
    Is this machine also the ISA server? Is this machine also an SBS2003 server?

    Why are you browsing /from/ the ISA server???


    As for the Client Diagnostic Tool results:
    Why is the proxy server definition for WinHTTP 'different' from the proxy
    server definition for IE?

    Is the proxy server addressed as RHPROXY, or as rhproxy.rhtrust.local?

    And.. oh yeah.. this answers my question.... the ISA server /IS/ the WSUS
    server..... so please.. tell me this /IS/ an SBS2003 server???

    If this is not an SBS2003 server... then I would strongly suggest
    (a) Uninstall the WSUS from the ISA server and put it on an INTERNAL
    machine, and
    (b) Uninstall IIS from your ISA server.

    If this IS an SBS2003 server, then I would suggest NOT using the proxy
    server for local communications.

    Run the command 'proxycfg -d' on the SBS2003 server to disable the WinHTTP
    proxy configuration.


    --
    Lawrence Garvin, M.S., MVP-Software Distribution
    Everything you need for WSUS is at
    http://technet2.microsoft.com/windowsserver/en/technologies/featured/wsus/default.mspx
    And, eveything else is at
    http://wsusinfo.onsitechsolutions.com
    ....
     
    Lawrence Garvin \(MVP\), Jun 1, 2006
    #2
    1. Advertisements

  3. sssstew

    sssstew Guest

    Lawrence, thanks for the reply, to answer your questions :-

    This client log is from 'rhbackup.rhtrust.local', which is the machine you
    have configured as the WSUS server. - rhbackup is the WSUS server

    Is this machine also the ISA server? Is this machine also an SBS2003 server?
    - No its not an ISA server, its a Windows Server 2003 which is just a PDC and
    has Veritas Backup Exec on.

    Why are you browsing /from/ the ISA server??? - im not, the error is the
    same on all servers/workstations on the domain.

    Why is the proxy server definition for WinHTTP 'different' from the proxy
    server definition for IE? - i dont know, proxy settings are done via a GP.
    I dont know how to set the winhttp ones.

    Is the proxy server addressed as RHPROXY, or as rhproxy.rhtrust.local? the
    proxy server will respond to both those addresses, this is another seperate
    Windows Server 2003 machine dedicated to the task.

    And.. oh yeah.. this answers my question.... the ISA server /IS/ the WSUS
    server..... so please.. tell me this /IS/ an SBS2003 server??? No the ISA
    server is rhproxy and the wsus server is rhbackup. They do not have any sbs
    machines.

    I think somehow the proxy server is stopping the WSUS client on all the
    servers/workstations talking back to the WSUS server, but i dont know what i
    need to do to get this working correctly.

    can you help me?

    Cheers
     
    sssstew, Jun 2, 2006
    #3
  4. sssstew

    sssstew Guest

    a bit more info, heres a clientdiag.exe from one of the other servers (just
    the PDC for the domain) :-


    WSUS Client Diagnostics Tool

    Checking Machine State
    Checking for admin rights to run tool . . . . . . . . . PASS
    Automatic Updates Service is running. . . . . . . . . . PASS
    Background Intelligent Transfer Service is not running. PASS
    Wuaueng.dll version 5.8.0.2469. . . . . . . . . . . . . PASS
    This version is WSUS 2.0

    Checking AU Settings
    AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
    Option is from Policy settings

    Checking Proxy Configuration
    Checking for winhttp local machine Proxy settings . . . PASS
    Winhttp local machine access type
    <Direct Connection>
    Winhttp local machine Proxy. . . . . . . . . . NONE
    Winhttp local machine ProxyBypass. . . . . . . NONE
    Checking User IE Proxy settings . . . . . . . . . . . . PASS
    User IE Proxy. . . . . . . . . . . . . . . . . NONE
    User IE ProxyByPass. . . . . . . . . . . . . . NONE
    User IE AutoConfig URL Proxy . . . . . . . . . NONE
    User IE AutoDetect
    AutoDetect not in use

    Checking Connection to WSUS/SUS Server
    WUServer = http://rhbackup
    WUStatusServer = http://rhbackup
    UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
    Connection to server. . . . . . . . . . . . . . . . . . PASS
    SelfUpdate folder is present. . . . . . . . . . . . . . PASS

    Press Enter to Complete
     
    sssstew, Jun 2, 2006
    #4
  5. You stated you were browsing to the WSUS server's admin page from the ISA
    server, did you not?
    Well, first you need to confirm that the IE proxy settings are correct for
    WSUS.
    Excuse me. The configured proxy SERVER address is the /same/ as the
    configured WSUS server address.

    That tells me that either you've seriously misconfigure the WSUS policy, the
    proxy client configuration, and this system, or else WSUS is installed on
    the "proxy server", which you have already stated is ISA Server.
    Yes.. we've already established that. :)

    So, the next step is to give me a complete verbal description of your
    network, including the proxy server, the WSUS server, the ISA server, and
    any desktop system you've performed diagnostics from, because you've totally
    confused me as to your network layout. What you are saying does not match
    with what the CDT has reported as being configured on this system.

    --
    Lawrence Garvin, M.S., MVP-Software Distribution
    Everything you need for WSUS is at
    http://technet2.microsoft.com/windowsserver/en/technologies/featured/wsus/default.mspx
    And, eveything else is at
    http://wsusinfo.onsitechsolutions.com
    ....
     
    Lawrence Garvin \(MVP\), Jun 3, 2006
    #5
  6. sssstew

    sssstew Guest

    You stated you were browsing to the WSUS server's admin page from the ISA
    server, did you not? - yes just to check i could get back to the wsus
    servers pages on port 80 ok.

    Well, first you need to confirm that the IE proxy settings are correct for
    WSUS. - ok how are they different, currently proxy settings are set to point
    all to rhproxy? Are proxy settings different if a WSUS server is on the
    network?

    The configured proxy SERVER address is the /same/ as the configured WSUS
    server address. - thats not correct, from the client diag :-

    Winhttp local machine Proxy RHPROXY:8080
    WUServer = http://rhbackup

    So :-
    RHbackup - WSUS server - a standard windows server 2003 machine which is
    just a PDC and veritas backup on

    Rhproxy - ISA 2004 Server - a standard windows server 2003 machine which is
    just a ISA server nothing else.

    A clientdiag.exe from RHBACKUP which is the actual WSUS server is this :-

    WSUS Client Diagnostics Tool

    Checking Machine State
    Checking for admin rights to run tool . . . . . . . . . PASS
    Automatic Updates Service is running. . . . . . . . . . PASS
    Background Intelligent Transfer Service is running. . . PASS
    Wuaueng.dll version 5.8.0.2469. . . . . . . . . . . . . PASS
    This version is WSUS 2.0

    Checking AU Settings
    AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
    Option is from Policy settings

    Checking Proxy Configuration
    Checking for winhttp local machine Proxy settings . . . PASS
    Winhttp local machine access type
    <Using Proxy>
    Winhttp local machine Proxy
    RHPROXY:8080
    Winhttp local machine ProxyBypass
    <local>
    Checking User IE Proxy settings . . . . . . . . . . . . PASS
    User IE Proxy
    rhproxy.rhtrust.local:8080
    User IE ProxyByPass

    10.10.*.*,www2.roundhouse.org.uk,www1.roundhouse.org.uk;<local>
    User IE AutoConfig URL Proxy . . . . . . . . . NONE
    User IE AutoDetect
    AutoDetect not in use

    Checking Connection to WSUS/SUS Server
    WUServer = http://rhbackup
    WUStatusServer = http://rhbackup
    UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
    Connection to server. . . . . . . . . . . . . . . . . . PASS
    SelfUpdate folder is present. . . . . . . . . . . . . . PASS

    Press Enter to Complete

    A client diag from another server on the network, which is just a Terminal
    Server is this :-

    WSUS Client Diagnostics Tool

    Checking Machine State
    Checking for admin rights to run tool . . . . . . . . . PASS
    Automatic Updates Service is running. . . . . . . . . . PASS
    Background Intelligent Transfer Service is not running. PASS
    Wuaueng.dll version 5.8.0.2469. . . . . . . . . . . . . PASS
    This version is WSUS 2.0

    Checking AU Settings
    AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
    Option is from Policy settings

    Checking Proxy Configuration
    Checking for winhttp local machine Proxy settings . . . PASS
    Winhttp local machine access type
    <Direct Connection>
    Winhttp local machine Proxy. . . . . . . . . . NONE
    Winhttp local machine ProxyBypass. . . . . . . NONE
    Checking User IE Proxy settings . . . . . . . . . . . . PASS
    User IE Proxy
    rhproxy:8080
    User IE ProxyByPass

    WWW2.ROUNDHOUSE.ORG.UK;10.10.4.10;www1.roundhouse.org.uk;<local>

    User IE AutoConfig URL Proxy . . . . . . . . . NONE
    User IE AutoDetect
    AutoDetect not in use

    Checking Connection to WSUS/SUS Server
    WUServer = http://rhbackup
    WUStatusServer = http://rhbackup
    UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
    Connection to server. . . . . . . . . . . . . . . . . . PASS
    SelfUpdate folder is present. . . . . . . . . . . . . . PASS

    Press Enter to Complete

    And another client diag from a PDC windows server 2003 machine on the
    network :-


    WSUS Client Diagnostics Tool

    Checking Machine State
    Checking for admin rights to run tool . . . . . . . . . PASS
    Automatic Updates Service is running. . . . . . . . . . PASS
    Background Intelligent Transfer Service is not running. PASS
    Wuaueng.dll version 5.8.0.2469. . . . . . . . . . . . . PASS
    This version is WSUS 2.0

    Checking AU Settings
    AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
    Option is from Policy settings

    Checking Proxy Configuration
    Checking for winhttp local machine Proxy settings . . . PASS
    Winhttp local machine access type
    <Direct Connection>
    Winhttp local machine Proxy. . . . . . . . . . NONE
    Winhttp local machine ProxyBypass. . . . . . . NONE
    Checking User IE Proxy settings . . . . . . . . . . . . PASS
    User IE Proxy
    rhproxy:8080
    User IE ProxyByPass
    <local>
    User IE AutoConfig URL Proxy . . . . . . . . . NONE
    User IE AutoDetect
    AutoDetect not in use

    Checking Connection to WSUS/SUS Server
    WUServer = http://rhbackup
    WUStatusServer = http://rhbackup
    UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
    Connection to server. . . . . . . . . . . . . . . . . . PASS
    SelfUpdate folder is present. . . . . . . . . . . . . . PASS

    Press Enter to Complete

    Hope that helps, thanks for all the help so far lawrence.
     
    sssstew, Jun 5, 2006
    #6

  7. My apologies for the confusion... over the course of several messages I saw
    rhproxy and rhbackup and somehow confused myself. Let me take a second look
    at this thread and I'll post back soon.


    --
    Lawrence Garvin, M.S., MVP-Software Distribution
    Everything you need for WSUS is at
    http://technet2.microsoft.com/windowsserver/en/technologies/featured/wsus/default.mspx
    And, eveything else is at
    http://wsusinfo.onsitechsolutions.com
    ....
     
    Lawrence Garvin \(MVP\), Jun 5, 2006
    #7
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.