WSUS server says updates needed client says 0 found

Discussion in 'Update Services' started by RDellaca, Aug 30, 2005.

  1. RDellaca

    RDellaca Guest

    I have a WSUS client that keeps saying 0 updates found while the WSUS server
    keeps saying that many updates are needed.

    info from the client's windowsupdate.log:

    2005-08-30 15:54:01 1916 7ac Misc =========== Logging initialized (build:
    5.8.0.2469, tz: -0400) ===========
    2005-08-30 15:54:01 1916 7ac Misc = Process: C:\WINNT\system32\svchost.exe
    2005-08-30 15:54:01 1916 7ac Misc = Module: C:\WINNT\system32\wuaueng.dll
    2005-08-30 15:54:01 1916 7ac Service *************
    2005-08-30 15:54:01 1916 7ac Service ** START ** Service: Service startup
    2005-08-30 15:54:01 1916 7ac Service *********
    2005-08-30 15:54:01 1916 7ac Agent * WU client version 5.8.0.2469
    2005-08-30 15:54:01 1916 7ac Agent * SusClientId =
    'ebfaa9fe-6a59-418d-8b16-ce0f924aad8a'
    2005-08-30 15:54:01 1916 7ac Agent * Base directory:
    C:\WINNT\SoftwareDistribution
    2005-08-30 15:54:01 1916 7ac Agent * Access type: No proxy
    2005-08-30 15:54:02 1916 7ac Agent * Network state: Connected
    2005-08-30 15:54:47 1916 7ac Agent *********** Agent: Initializing Windows
    Update Agent ***********
    2005-08-30 15:54:47 1916 7ac Agent *********** Agent: Initializing global
    settings cache ***********
    2005-08-30 15:54:47 1916 7ac Agent * WSUS server: http://wsus-server
    2005-08-30 15:54:47 1916 7ac Agent * WSUS status server: http://wsus-server
    2005-08-30 15:54:47 1916 7ac Agent * Target group: (Unassigned Computers)
    2005-08-30 15:54:47 1916 7ac Agent * Windows Update access disabled: No
    2005-08-30 15:54:48 1916 7ac DnldMgr Download manager restoring 0 downloads
    2005-08-30 15:54:48 1916 7ac AU ########### AU: Initializing Automatic
    Updates ###########
    2005-08-30 15:54:48 1916 7ac AU # WSUS server: http://wsus-server
    2005-08-30 15:54:48 1916 7ac AU # Detection frequency: 22
    2005-08-30 15:54:48 1916 7ac AU # Approval type: Pre-install notify (Policy)
    2005-08-30 15:54:48 1916 7ac AU # Auto-install minor updates: No (User
    preference)
    2005-08-30 15:55:20 1916 63c AU Triggering AU detection through DetectNow API
    2005-08-30 15:55:20 1916 7ac AU #############
    2005-08-30 15:55:20 1916 7ac AU ## START ## AU: Search for updates
    2005-08-30 15:55:20 1916 7ac AU #########
    2005-08-30 15:55:20 1916 7ac AU <<## SUBMITTED ## AU: Search for updates
    [CallId = {AEA298A4-7ECE-4176-A657-84C5531C95DC}]
    2005-08-30 15:55:20 1916 3f4 Agent *************
    2005-08-30 15:55:20 1916 3f4 Agent ** START ** Agent: Finding updates
    [CallerId = AutomaticUpdates]
    2005-08-30 15:55:20 1916 3f4 Agent *********
    2005-08-30 15:55:21 1916 3f4 Setup *********** Setup: Checking whether
    self-update is required ***********
    2005-08-30 15:55:21 1916 3f4 Setup * Inf file:
    C:\WINNT\SoftwareDistribution\SelfUpdate\Default\wusetup.inf
    2005-08-30 15:55:21 1916 3f4 Setup Update NOT required for
    C:\WINNT\system32\cdm.dll: target version = 5.8.0.2469, required version =
    5.8.0.2469
    2005-08-30 15:55:21 1916 3f4 Setup Update NOT required for
    C:\WINNT\system32\iuengine.dll: target version = 5.8.0.2469, required version
    = 5.8.0.2469
    2005-08-30 15:55:21 1916 3f4 Setup Update NOT required for
    C:\WINNT\system32\wuapi.dll: target version = 5.8.0.2469, required version =
    5.8.0.2469
    2005-08-30 15:55:21 1916 3f4 Setup Update NOT required for
    C:\WINNT\system32\wuauclt.exe: target version = 5.8.0.2469, required version
    = 5.8.0.2469
    2005-08-30 15:55:21 1916 3f4 Setup Update NOT required for
    C:\WINNT\system32\wuauclt1.exe: target version = 5.8.0.2469, required version
    = 5.8.0.2469
    2005-08-30 15:55:21 1916 3f4 Setup Update NOT required for
    C:\WINNT\system32\wuaucpl.cpl: target version = 5.8.0.2469, required version
    = 5.8.0.2469
    2005-08-30 15:55:21 1916 3f4 Setup Update NOT required for
    C:\WINNT\system32\wuaueng.dll: target version = 5.8.0.2469, required version
    = 5.8.0.2469
    2005-08-30 15:55:21 1916 3f4 Setup Update NOT required for
    C:\WINNT\system32\wuaueng1.dll: target version = 5.8.0.2469, required version
    = 5.8.0.2469
    2005-08-30 15:55:21 1916 3f4 Setup Update NOT required for
    C:\WINNT\system32\wucltui.dll: target version = 5.8.0.2469, required version
    = 5.8.0.2469
    2005-08-30 15:55:21 1916 3f4 Setup Update NOT required for
    C:\WINNT\system32\wups.dll: target version = 5.8.0.2469, required version =
    5.8.0.2469
    2005-08-30 15:55:21 1916 3f4 Setup Update NOT required for
    C:\WINNT\system32\wups2.dll: target version = 5.8.0.2469, required version =
    5.8.0.2469
    2005-08-30 15:55:21 1916 3f4 Setup Update NOT required for
    C:\WINNT\system32\wuweb.dll: target version = 5.8.0.2469, required version =
    5.8.0.2469
    2005-08-30 15:55:21 1916 3f4 Setup * IsUpdateRequired = No
    2005-08-30 15:55:21 1916 3f4 PT +++++++++++ PT: Synchronizing server
    updates +++++++++++
    2005-08-30 15:55:21 1916 3f4 PT + ServiceId =
    {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
    http://wsus-server/ClientWebService/client.asmx
    2005-08-30 15:55:23 1916 3f4 Agent * Found 0 updates and 5 categories in
    search
    2005-08-30 15:55:23 1916 3f4 Report *********** Report: Initializing static
    reporting data ***********
    2005-08-30 15:55:23 1916 3f4 Report * OS Version = 5.0.2195.4.0.196608
    2005-08-30 15:55:23 1916 3f4 Report * Computer Brand = Dell Computer
    Corporation
    2005-08-30 15:55:23 1916 3f4 Report * Computer Model = PowerEdge 2850
    2005-08-30 15:55:23 1916 3f4 Report * Bios Revision = A02
    2005-08-30 15:55:23 1916 3f4 Report * Bios Name = Default System BIOS
    2005-08-30 15:55:23 1916 3f4 Report * Bios Release Date =
    2005-01-19T00:00:00
    2005-08-30 15:55:23 1916 3f4 Report * Locale ID = 1033
    2005-08-30 15:55:23 1916 3f4 Agent *********
    2005-08-30 15:55:23 1916 3f4 Agent ** END ** Agent: Finding updates
    [CallerId = AutomaticUpdates]
    2005-08-30 15:55:23 1916 3f4 Agent *************
    2005-08-30 15:55:23 1916 3f4 AU >>## RESUMED ## AU: Search for updates
    [CallId = {AEA298A4-7ECE-4176-A657-84C5531C95DC}]
    2005-08-30 15:55:23 1916 3f4 AU # 0 updates detected
    2005-08-30 15:55:23 1916 3f4 AU #########
    2005-08-30 15:55:23 1916 3f4 AU ## END ## AU: Search for updates [CallId
    = {AEA298A4-7ECE-4176-A657-84C5531C95DC}]
    2005-08-30 15:55:23 1916 3f4 AU #############
    2005-08-30 15:55:23 1916 3f4 AU AU setting next detection timeout to
    2005-08-31 17:49:48

    The WSUS server says the following updates are needed:

    Cumulative Security Update for Internet Explorer 6 Service Pack 1 (KB883939)
    Install Needed
    Cumulative Security Update for Internet Explorer 6 Service Pack 1 (KB896727)
    Install Needed
    Security Update for JView Profiler (KB903235) Install Needed
    Security Update for Microsoft Data Access Components (KB823718) Install
    Needed
    Security Update for Microsoft Data Access Components (KB832483) Install
    Needed
    Security Update for Outlook Express 6 Service Pack 1 (KB897715) Install
    Needed
    Security Update for Windows 2000 (KB890046) Install Needed
    Security Update for Windows 2000 (KB893066) Install Needed
    Security Update for Windows 2000 (KB893756) Install Needed
    Security Update for Windows 2000 (KB894320) Install Needed
    Security Update for Windows 2000 (KB896358) Install Needed
    Security Update for Windows 2000 (KB896422) Install Needed
    Security Update for Windows 2000 (KB896423) Install Needed
    Security Update for Windows 2000 (KB899587) Install Needed
    Security Update for Windows 2000 (KB899588) Install Needed
    Security Update for Windows 2000 (KB899591) Install Needed
    Security Update for Windows 2000 (KB901214) Install Needed

    I already tried the trick from another post of the 7 steps to blow away the
    SUSClientID & remove from the server, no difference.
     
    RDellaca, Aug 30, 2005
    #1
    1. Advertisements

  2. I would suggest reading the metadata, and verifying that the updates
    "Needed" have not been resolved by the installation of an update that
    supercedes those listed.

    For starters, the Cumulative Updates are specifically problematic, as the
    WUA fails to properly recognize the supercession chain of the IE and OE
    Cumulative Updates.
    In the instant case, KB883939 was superceded by KB896727, so you should
    unapprove KB883939.

    I don't have a full set of Windows 2000 metadata, so I cannot check the
    other updates, but you should inspect the metadata of each update for two
    things:

    (1) Is it superceded by another update... if so, unapprove it.
    (2) It is applicable to that specific system.

    The fact that they're marked as "Needed", but may not be actually needed,
    could be problematic itself. In the thread you referred to, that was the
    repair necessary, but also note that it took two additional detection cycles
    before the issue was fully resolved. The first detection cycle obtained a
    new SusClientId value, but it was the subsequent detection cycle that
    recognized those updates needed to be installed.

     
    Lawrence Garvin, Aug 31, 2005
    #2
    1. Advertisements


  3. Also KB903235 (Vulnerability in JView Profiler Could Allow Remote Code
    Execution) is superseded by KB896727, so KB903235 should be unapproved
    as well.

    KB832483 (MS04-003: Buffer Overrun in MDAC Function Could Allow Code
    Execution) supersedes KB823718 (MS03-033: Security Update for
    Microsoft Data Access Components), so KB823718 should be unapproved as
    well.


     
    Torgeir Bakken \(MVP\), Aug 31, 2005
    #3
  4. RDellaca

    RDellaca Guest

    a few of the updates in my list were superceded. I unapproved them, thanks.
    Most are still there, though. You mentioned the multiple detection cycles for
    the repair I mentioned, In fact the machine did go thru multiple detection
    cycles - the one I sent was after it had regeneratd a new SUSClientID. It has
    gone thru a couple more cycles now. It did download the updates now. (Even
    though I did multiple wuauclt /detectnow at the thime, I guess it needed more
    time to "catch up"?).

    Two questions:

    1. Is it a problem that some machines had some of these superceded updates
    installed? I had several other machines that did install them.

    2. I have one more server that is doing the same thing - showing 0 found
    while the server says updates are needed - is there any way to tell in
    advance if it will have problems downloading updates? Other machines (about 5
    so far) are doing fine. I have a lot more to add as clients.

     
    RDellaca, Sep 1, 2005
    #4
  5. I'd like to see the WindowsUpdate.log for that client, so that I can do some
    extra analysis on when/how it finally detected the updates, and maybe get an
    idea as to why.... could you please email me the log at

    l a w r e n c e @ e f o r e s t . n e t
    It should not be. Even if superceded updates are installed, the WUA should
    detect the 'newer' update and overinstall it. However, there is one known
    issue with one set of updates, and Torgeir has the expertise on that
    scenario. I'll defer to him to fill in the blanks in my response here with
    the details of that particular update.
    No, there isn't. In fact, this behavior is unexpected, and may be an
    indication of an unidentified 'bug' in the WUA.
     
    Lawrence Garvin, Sep 2, 2005
    #5
  6. Torgeir, Lawrence,

    Careful about that suggestion. These are only superceeded for clients
    with IE6 or IE5.0, but *not* for clients still using IE5.5.

    CU,
    Massimo
     
    Massimo Rosen, Sep 6, 2005
    #6
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.