Service Pack 2 to Service Pack 4 via WSUS

Discussion in 'Update Services' started by Ace Tan, Feb 17, 2006.

  1. Ace Tan

    Ace Tan Guest

    Hi All guru,

    I have a few set of PC which is still on Windows 2000 Service Pack 2. I
    have sucuessfully installed WUAU22.msi (Automatic Update Client) and
    trying to push down Windows 2000 Service Pack 4 into the client but I
    get the error in the windows update.log.

    Here is the extracted log file:

    2006-02-17 13:24:25 05:24:25 Success IUENGINE Starting
    2006-02-17 13:24:26 05:24:26 Success IUENGINE Determining
    machine configuration
    2006-02-17 13:24:26 05:24:26 Error IUENGINE Querying
    software update catalog from http://wsus:8530/autoupdate/getmanifest.asp
    (Error 0x80190193)
    2006-02-17 13:24:26 05:24:26 Success IUENGINE Shutting down
    2006-02-17 13:24:26 05:24:26 Success IUCTL Shutting down
    2006-02-17 18:28:40 10:28:40 Success IUCTL Starting
    2006-02-17 18:28:53 10:28:53 Success IUCTL Downloaded
    iuident.cab from http://wsus:8530 to C:\Program Files\WindowsUpdate\V4
    2006-02-17 18:28:53 10:28:53 Error IUCTL Library
    download error. Will retry. (Error 0x8007000B: An attempt was made to
    load a program with an incorrect format.)
    2006-02-17 18:28:53 10:28:53 Error IUCTL Library
    download error. Will retry. (Error 0x8007000B: An attempt was made to
    load a program with an incorrect format.)
    2006-02-17 18:28:53 10:28:53 Error IUCTL Library
    download error. Will retry. (Error 0x8007000B: An attempt was made to
    load a program with an incorrect format.)
    2006-02-17 18:28:53 10:28:53 Error IUCTL Checking to see
    if new version of Windows Update software available (Error 0x8007000B:
    An attempt was made to load a program with an incorrect format.)
    2006-02-17 18:28:53 10:28:53 Success IUENGINE Starting
    2006-02-17 18:28:54 10:28:54 Success IUENGINE Determining
    machine configuration
    2006-02-17 18:28:54 10:28:54 Error IUENGINE Querying
    software update catalog from http://wsus:8530/autoupdate/getmanifest.asp
    (Error 0x80190193)
    2006-02-17 18:28:54 10:28:54 Success IUENGINE Shutting down
    2006-02-17 18:28:54 10:28:54 Success IUCTL Shutting down


    Thanks for Answering my doubt.
     
    Ace Tan, Feb 17, 2006
    #1
    1. Advertisements

  2. Ace Tan

    Bobby P Guest

    Deployment guide says the update client is supported on SP3 or SP4... you
    may just have to suck it up and install SP4 manually on these computers.
     
    Bobby P, Feb 17, 2006
    #2
    1. Advertisements

  3. To elaborate more on Bobby's answer and why it isn't working...

    1) WSUS is for Windows 2000 Service Pack 3 or newer. This is because a new
    automatic updates client is required in order to pull from a WSUS server.
    This new client won't install on Windows 2000 Service Pack 2.

    2) Windows 2000 Service Pack 2 with the WUAU22 client can only pull from a
    SUS 1.x server on port 80.

    Now assuming that you upgraded from SUS 1.x to WSUS since it is listening on
    port 8530, you could have these legacy boxes pull from SUS 1.x and then
    migrate them to WSUS later.
     
    neo [mvp outlook], Feb 18, 2006
    #3
  4. That's exactly what will need to be done - or install SP4 via group policy,
    network share, or Windows Update.

    The client /must/ be running SP3 on a Windows 2000 system to work with WSUS.

    In addition, installing the wuau22.msi file doesn't accomplish anything of
    usefulness, since the legacy AU client contained in that package cannot
    easily initiate a detection with a WSUS server anyway.

    The best solution is to go to Microsoft Update, which will automatically
    install the latest WUA client, and upgrade to Service Pack 4. Then, the
    configured policy will take over, and the post-SP4 updates can be installed
    from the WSUS server, as after installing SP4 from Microsoft Updates, the
    client will be fully capable of updating from a WSUS server.
     
    Lawrence Garvin, Feb 18, 2006
    #4
  5. Clarification.... incorrect permissions settings in IIS generally return
    HTTP 401 errors, not HTTP 403 errors. The HTTP 403 error is generally a
    result of a proxy server denying access to a resource.

    HTTP 401 "....requires user authentication" - specifically triggered when an
    anonymous user attempts to access a resource protected by Integrated
    Authentication.

    HTTP 403 "....does not have sufficient access rights to the requested server
    object" - generally triggered by an intervening authority that is blocking
    access to the entire website, usually happens as a result of a misconfigured
    proxy server, or a client attempting to use a proxy server that is not
    configured to proxy internal resources.

    also, of interest:

    HTTP 407 "....proxy authentication required" - specifically triggered when a
    proxy server /requires/ user authentication (i.e. does not provide anonymous
    proxy services), and the proxy client fails to send authentication
    credentials, or sends authentication credentials for a user that is not
    authorized to access the resource requested (according to the proxy server's
    ACL -- not the web server's ACL -- this is a critically important point!)

    In this particular scenario, aside from the primary issue that Ace was
    trying to access a WSUS server with a Win2000SP2 client, there is the
    specific '403' error from the log:
    In this case, the proxy server is saying.. Hey... you're not authorized to
    access this resource. The fact that the resource doesn't exist, may be a
    contributing factor. If the proxy server's response is based on the concept
    that "unless I know it exists, you don't have permissions", then the 403
    error would be an expected response from the proxy server. A direct request
    to the webserver would have returned a 404 error (0x80190194), because there
    is no /autoupdate virtual directory in the WSUS virtual server
    (http://wsus:8530).
     
    Lawrence Garvin \(MVP\), Feb 18, 2006
    #5
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.