WSUS status:Not needed, but patches have never been installed...

We setup a WSUS server on our internal network handling about 5,000
clients, and it's working without problems. However when we installed
another one in our DMZ to handle just 20 servers, it's not willing to
cooperate.

None of the servers in the DMZ had the December patches installed (it's
a scary situation... we never wait this long, but wanted to give WSUS a
try. Another couple of days though, and we'll have to give up and patch
manually).
The status for all servers however is still "Not needed" for *ALL*
updates (both oder installed patches and the new not-installed ones).
We tried to fiddle with the approvals changing them from Detect only to
install, but no matter what the status is always "Not needed".
Going to the WindowsUpdate website does correctly show that this
month's patches are missing.

Following are bits of data that can help hopefully to point to the
problem. Any help will be very very much appreciated, as we've been
fighting with this for two weeks now...

Thanks,

Roberto Franceschetti


Following is the "Home" screenshot for our WSUS server:
Status as of Wednesday, December 28, 2005 9:36 AM
Refreshing...
Updates
Total: 518
Approved updates: 508
Updates not approved: 8
Declined updates: 2
Updates with computer errors: 0
Updates needed by computers: 0

Computers
Total: 19
Computers with update errors: 0
Computers needing updates: 0
Synchronization Status
Last synchronization: 12/28/2005 4:16 AM
Last synchronization result: Success
Next synchronization: 12/29/2005 4:18 AM
Current status: Idle
Synchronize nowStop synchronizing

Status of Downloads
Updates needing files: 0





The client diagnostics tool reports no errors when run on one of the
servers:

D:\temp\wsus>clientdiag

WSUS Client Diagnostics Tool

Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is not running. PASS
Wuaueng.dll version 5.8.0.2469. . . . . . . . . . . . . PASS
This version is WSUS 2.0

Checking AU Settings
AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
Option is from Policy settings

Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use

Checking Connection to WSUS/SUS Server
WUServer = https://owpwus02
WUStatusServer = https://owpwus02
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
Connection to server. . . . . . . . . . . . . . . . . . PASS
SelfUpdate folder is present. . . . . . . . . . . . . . PASS



Following is section of the WindowsUpdate.log from one of the servers
in the DMZ. At 7:34 it shows the entries relative to a check against
our WSUS server. At 8:02 it shows the entries when I went to the
WindowsUpdate.com website and checked for updates.

2005-12-28 07:34:16 2688 49c AU ## START ## AU: Search for updates
2005-12-28 07:34:16 2688 49c AU #########
2005-12-28 07:34:16 2688 49c AU <<## SUBMITTED ## AU: Search for
updates [CallId = {AAA23AC4-C5F1-4F40-A6AD-EC84367B8D01}]
2005-12-28 07:34:16 2688 db8 Agent *************
2005-12-28 07:34:16 2688 db8 Agent ** START ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2005-12-28 07:34:16 2688 db8 Agent *********
2005-12-28 07:34:16 2688 db8 Setup *********** Setup: Checking whether
self-update is required ***********
2005-12-28 07:34:16 2688 db8 Setup * Inf file:
C:\WINNT\SoftwareDistribution\SelfUpdate\Default\wusetup.inf
2005-12-28 07:34:16 2688 db8 Setup Update NOT required for
C:\WINNT\system32\cdm.dll: target version = 5.8.0.2469, required
version = 5.8.0.2469
2005-12-28 07:34:16 2688 db8 Setup Update NOT required for
C:\WINNT\system32\iuengine.dll: target version = 5.8.0.2469, required
version = 5.8.0.2469
2005-12-28 07:34:16 2688 db8 Setup Update NOT required for
C:\WINNT\system32\wuapi.dll: target version = 5.8.0.2469, required
version = 5.8.0.2469
2005-12-28 07:34:16 2688 db8 Setup Update NOT required for
C:\WINNT\system32\wuauclt.exe: target version = 5.8.0.2469, required
version = 5.8.0.2469
2005-12-28 07:34:16 2688 db8 Setup Update NOT required for
C:\WINNT\system32\wuauclt1.exe: target version = 5.8.0.2469, required
version = 5.8.0.2469
2005-12-28 07:34:16 2688 db8 Setup Update NOT required for
C:\WINNT\system32\wuaucpl.cpl: target version = 5.8.0.2469, required
version = 5.8.0.2469
2005-12-28 07:34:16 2688 db8 Setup Update NOT required for
C:\WINNT\system32\wuaueng.dll: target version = 5.8.0.2469, required
version = 5.8.0.2469
2005-12-28 07:34:16 2688 db8 Setup Update NOT required for
C:\WINNT\system32\wuaueng1.dll: target version = 5.8.0.2469, required
version = 5.8.0.2469
2005-12-28 07:34:16 2688 db8 Setup Update NOT required for
C:\WINNT\system32\wucltui.dll: target version = 5.8.0.2469, required
version = 5.8.0.2469
2005-12-28 07:34:16 2688 db8 Setup Update NOT required for
C:\WINNT\system32\wups.dll: target version = 5.8.0.2469, required
version = 5.8.0.2469
2005-12-28 07:34:16 2688 db8 Setup Update NOT required for
C:\WINNT\system32\wups2.dll: target version = 5.8.0.2469, required
version = 5.8.0.2469
2005-12-28 07:34:16 2688 db8 Setup Update NOT required for
C:\WINNT\system32\wuweb.dll: target version = 5.8.0.2469, required
version = 5.8.0.2469
2005-12-28 07:34:16 2688 db8 Setup * IsUpdateRequired = No
2005-12-28 07:34:18 2688 db8 PT +++++++++++ PT: Synchronizing server
updates +++++++++++
2005-12-28 07:34:18 2688 db8 PT + ServiceId =
{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
https://owpwus02/ClientWebService/client.asmx
2005-12-28 07:34:19 2688 db8 PT Initializing simple targeting cookie,
clientId = eaf08a64-ca68-4b45-bb1f-84f1c5e22bfc, target group = , DNS
name = octrend02.onetgov.net
2005-12-28 07:34:19 2688 db8 PT Server URL =
https://owpwus02/SimpleAuthWebService/SimpleAuth.asmx
2005-12-28 07:34:20 2688 db8 Agent * Found 0 updates and 3 categories
in search
2005-12-28 07:34:20 2688 db8 Agent *********
2005-12-28 07:34:20 2688 db8 Agent ** END ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2005-12-28 07:34:20 2688 db8 Agent *************
2005-12-28 07:34:20 2688 db8 AU >>## RESUMED ## AU: Search for
updates [CallId = {AAA23AC4-C5F1-4F40-A6AD-EC84367B8D01}]
2005-12-28 07:34:20 2688 db8 AU # 0 updates detected
2005-12-28 07:34:20 2688 db8 AU #########
2005-12-28 07:34:20 2688 db8 AU ## END ## AU: Search for updates
[CallId = {AAA23AC4-C5F1-4F40-A6AD-EC84367B8D01}]
2005-12-28 07:34:20 2688 db8 AU #############
2005-12-28 07:34:20 2688 db8 AU AU setting next detection timeout to
2005-12-28 13:32:03
2005-12-28 07:34:25 2688 db8 Report REPORT EVENT:
{790FAE4D-6525-43D7-B311-BBE7F8C61058} 2005-12-28
07:34:20-0500 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Software
Synchronization Agent has finished detecting items.
2005-12-28 07:34:25 2688 db8 Report REPORT EVENT:
{BA20B43D-0992-4465-8970-47DF7D66F610} 2005-12-28
07:34:20-0500 1 153 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Pre-Deployment
Check Reporting client status.
2005-12-28 07:39:56 2688 db8 Report Uploading 2 events using cached
cookie, reporting URL =
https://owpwus02/ReportingWebService/ReportingWebService.asmx
2005-12-28 07:39:56 2688 db8 Report Reporter successfully uploaded 2
events.
2005-12-28 08:02:02 3320 798 Misc =========== Logging initialized
(build: 5.8.0.2469, tz: -0500) ===========
2005-12-28 08:02:02 3320 798 Misc = Process: C:\Program
Files\Internet Explorer\iexplore.exe
2005-12-28 08:02:02 3320 798 Misc = Module:
C:\WINNT\system32\wuweb.dll
2005-12-28 08:02:02 3320 798 Setup *********** Setup: Checking whether
self-update is required ***********
2005-12-28 08:02:02 3320 798 Setup * Inf file:
C:\WINNT\SoftwareDistribution\WebSetup\wusetup.inf
2005-12-28 08:02:02 3320 798 Setup Update NOT required for
C:\WINNT\system32\cdm.dll: target version = 5.8.0.2469, required
version = 5.8.0.2469
2005-12-28 08:02:02 3320 798 Setup Update NOT required for
C:\WINNT\system32\iuengine.dll: target version = 5.8.0.2469, required
version = 5.8.0.2469
2005-12-28 08:02:02 3320 798 Setup Update NOT required for
C:\WINNT\system32\wuapi.dll: target version = 5.8.0.2469, required
version = 5.8.0.2469
2005-12-28 08:02:02 3320 798 Setup Update NOT required for
C:\WINNT\system32\wuauclt.exe: target version = 5.8.0.2469, required
version = 5.8.0.2469
2005-12-28 08:02:02 3320 798 Setup Update NOT required for
C:\WINNT\system32\wuauclt1.exe: target version = 5.8.0.2469, required
version = 5.8.0.2469
2005-12-28 08:02:02 3320 798 Setup Update NOT required for
C:\WINNT\system32\wuaucpl.cpl: target version = 5.8.0.2469, required
version = 5.8.0.2469
2005-12-28 08:02:02 3320 798 Setup Update NOT required for
C:\WINNT\system32\wuaueng.dll: target version = 5.8.0.2469, required
version = 5.8.0.2469
2005-12-28 08:02:02 3320 798 Setup Update NOT required for
C:\WINNT\system32\wuaueng1.dll: target version = 5.8.0.2469, required
version = 5.8.0.2469
2005-12-28 08:02:02 3320 798 Setup Update NOT required for
C:\WINNT\system32\wucltui.dll: target version = 5.8.0.2469, required
version = 5.8.0.2469
2005-12-28 08:02:02 3320 798 Setup Update NOT required for
C:\WINNT\system32\wups.dll: target version = 5.8.0.2469, required
version = 5.8.0.2469
2005-12-28 08:02:02 3320 798 Setup Update NOT required for
C:\WINNT\system32\wups2.dll: target version = 5.8.0.2469, required
version = 5.8.0.2469
2005-12-28 08:02:02 3320 798 Setup * IsUpdateRequired = No
2005-12-28 08:02:24 3320 798 Misc =========== Logging initialized
(build: 5.8.0.2469, tz: -0500) ===========
2005-12-28 08:02:24 3320 798 Misc = Process: C:\Program
Files\Internet Explorer\iexplore.exe
2005-12-28 08:02:24 3320 798 Misc = Module:
C:\WINNT\system32\wuapi.dll
2005-12-28 08:02:24 3320 798 COMAPI -------------
2005-12-28 08:02:24 3320 798 COMAPI -- START -- COMAPI: Search
[ClientId = WindowsUpdate]
2005-12-28 08:02:24 3320 798 COMAPI ---------
2005-12-28 08:02:24 3320 798 COMAPI - Online = Yes; Ignore download
priority = No
2005-12-28 08:02:24 3320 798 COMAPI - Criteria = "IsInstalled=0 and
IsHidden=1"
2005-12-28 08:02:24 3320 798 COMAPI - ServiceID =
{9482F4B4-E343-43B6-B170-9A65BC822C77}
2005-12-28 08:02:24 3320 798 COMAPI <<-- SUBMITTED -- COMAPI: Search
[ClientId = WindowsUpdate]
2005-12-28 08:02:24 2688 db8 Agent *************
2005-12-28 08:02:24 2688 db8 Agent ** START ** Agent: Finding updates
[CallerId = WindowsUpdate]
2005-12-28 08:02:24 2688 db8 Agent *********
2005-12-28 08:02:25 2688 db8 PT +++++++++++ PT: Synchronizing server
updates +++++++++++
2005-12-28 08:02:25 2688 db8 PT + ServiceId =
{9482F4B4-E343-43B6-B170-9A65BC822C77}, Server URL =
https://update.microsoft.com/v6/ClientWebService/client.asmx
2005-12-28 08:02:34 2688 db8 Agent WARNING: Failed to evaluate
Installed rule, updateId = {ED300F67-421C-4C08-B3BA-F35C55F3B427}.100,
error = 0x80041017
2005-12-28 08:02:39 2688 db8 PT +++++++++++ PT: Synchronizing extended
update info +++++++++++
2005-12-28 08:02:39 2688 db8 PT + ServiceId =
{9482F4B4-E343-43B6-B170-9A65BC822C77}, Server URL =
https://update.microsoft.com/v6/ClientWebService/client.asmx
2005-12-28 08:02:40 2688 db8 Agent * Found 0 updates and 10
categories in search
2005-12-28 08:02:40 2688 db8 Agent *********
2005-12-28 08:02:40 2688 db8 Agent ** END ** Agent: Finding updates
[CallerId = WindowsUpdate]
2005-12-28 08:02:40 2688 db8 Agent *************
2005-12-28 08:02:40 3320 ee0 COMAPI >>-- RESUMED -- COMAPI: Search
[ClientId = WindowsUpdate]
2005-12-28 08:02:40 3320 ee0 COMAPI - Updates found = 0
2005-12-28 08:02:40 3320 ee0 COMAPI ---------
2005-12-28 08:02:40 3320 ee0 COMAPI -- END -- COMAPI: Search
[ClientId = WindowsUpdate]
2005-12-28 08:02:40 3320 ee0 COMAPI -------------
2005-12-28 08:02:40 3320 798 COMAPI -------------
2005-12-28 08:02:40 3320 798 COMAPI -- START -- COMAPI: Search
[ClientId = WindowsUpdate]
2005-12-28 08:02:40 3320 798 COMAPI ---------
2005-12-28 08:02:40 3320 798 COMAPI - Online = No; Ignore download
priority = No
2005-12-28 08:02:40 3320 798 COMAPI - Criteria = "IsInstalled = 0 and
IsHidden = 0"
2005-12-28 08:02:40 3320 798 COMAPI - ServiceID =
{9482F4B4-E343-43B6-B170-9A65BC822C77}
2005-12-28 08:02:40 3320 798 COMAPI <<-- SUBMITTED -- COMAPI: Search
[ClientId = WindowsUpdate]
2005-12-28 08:02:40 2688 db8 Agent *************
2005-12-28 08:02:40 2688 db8 Agent ** START ** Agent: Finding updates
[CallerId = WindowsUpdate]
2005-12-28 08:02:40 2688 db8 Agent *********
2005-12-28 08:02:41 2688 db8 Agent WARNING: Failed to evaluate
Installed rule, updateId = {ED300F67-421C-4C08-B3BA-F35C55F3B427}.100,
error = 0x80041017
2005-12-28 08:02:43 2688 db8 Agent * Added update
{25812E83-F63C-4900-A53C-BD9AF4805AA0}.101 to search result
2005-12-28 08:02:43 2688 db8 Agent * Added update
{558197DD-C3F1-4BD3-AFC6-12A200A6441A}.101 to search result
2005-12-28 08:02:43 2688 db8 Agent * Added update
{2DFE422E-1679-4B41-8525-7DF62B50B366}.102 to search result
2005-12-28 08:02:43 2688 db8 Agent * Added update
{BCDD265F-E14C-4417-86F3-4077B932AC54}.103 to search result
2005-12-28 08:02:43 2688 db8 Driver DeviceStatus: 0x180200a,
DeviceProblemNumber: 00000000
2005-12-28 08:02:43 2688 db8 Agent * Added update
{E5934CF5-89C7-4464-974E-8FF20E15C173}.100 to search result
2005-12-28 08:02:43 2688 db8 Agent * Added update
{CE06CC42-28B2-4746-81FA-72BA17EEA548}.100 to search result
2005-12-28 08:02:43 2688 db8 Agent Update
{56A3ECF6-DFFC-43E1-A17A-F37BA2D52474}.101 is pruned out due to
potential supersedence
2005-12-28 08:02:43 2688 db8 Agent * Added update
{6384F8AC-4973-4ED9-BC7F-4644507FB001}.100 to search result
2005-12-28 08:02:43 2688 db8 Agent * Added update
{D0693CAF-5D32-4479-8983-2F981C1437E8}.100 to search result
2005-12-28 08:02:43 2688 db8 Agent * Added update
{D33194B5-F3EA-4907-A956-489AA497566D}.101 to search result
2005-12-28 08:02:43 2688 db8 Agent * Added update
{9B069952-90DE-47E8-9935-0E796F54AED4}.101 to search result
2005-12-28 08:02:43 2688 db8 Agent * Added update
{E9497F41-3D87-4237-AF23-A44A93B28D13}.100 to search result
2005-12-28 08:02:43 2688 db8 Agent * Found 11 updates and 10
categories in search
2005-12-28 08:02:43 2688 db8 Agent *********
2005-12-28 08:02:43 2688 db8 Agent ** END ** Agent: Finding updates
[CallerId = WindowsUpdate]
2005-12-28 08:02:43 2688 db8 Agent *************
2005-12-28 08:02:44 3320 ee0 COMAPI >>-- RESUMED -- COMAPI: Search
[ClientId = WindowsUpdate]
2005-12-28 08:02:44 3320 ee0 COMAPI - Updates found = 11
2005-12-28 08:02:44 3320 ee0 COMAPI ---------
2005-12-28 08:02:44 3320 ee0 COMAPI -- END -- COMAPI: Search
[ClientId = WindowsUpdate]
2005-12-28 08:02:44 3320 ee0 COMAPI -------------
2005-12-28 08:02:45 2688 db8 Report REPORT EVENT:
{57650A69-34F8-44E1-88B8-1F5FDAF30A2E} 2005-12-28
08:02:40-0500 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 WindowsUpdate Success Software
Synchronization Agent has finished detecting items.

 

Very strange... Using Network Monitor I did some packet capturing, and found
out that the client server does not send a single packet to the WSUS server,
even though in the WindowsUpdate log entries show checks being made:

2005-12-28 11:02:54 22048 53c0 Misc =========== Logging initialized (build:
5.8.0.2469, tz: -0500) ===========
2005-12-28 11:02:54 22048 53c0 Misc = Process: C:\WINNT\system32\svchost.exe
2005-12-28 11:02:54 22048 53c0 Misc = Module: C:\WINNT\system32\wuaueng.dll
2005-12-28 11:02:54 22048 53c0 Service *************
2005-12-28 11:02:54 22048 53c0 Service ** START ** Service: Service startup
2005-12-28 11:02:54 22048 53c0 Service *********
2005-12-28 11:02:54 22048 53c0 Agent * WU client version 5.8.0.2469
2005-12-28 11:02:54 22048 53c0 Agent * SusClientId =
'7b07a865-ed46-404c-b1ec-1f13255756c1'
2005-12-28 11:02:54 22048 53c0 Agent * Base directory:
C:\WINNT\SoftwareDistribution
2005-12-28 11:02:54 22048 53c0 Agent * Access type: No proxy
2005-12-28 11:02:54 22048 53c0 Agent * Network state: Connected
2005-12-28 11:03:42 22048 53c0 Agent *********** Agent: Initializing
Windows Update Agent ***********
2005-12-28 11:03:42 22048 53c0 Agent *********** Agent: Initializing global
settings cache ***********
2005-12-28 11:03:42 22048 53c0 Agent * WSUS server: https://owpwus02
2005-12-28 11:03:42 22048 53c0 Agent * WSUS status server: https://owpwus02
2005-12-28 11:03:42 22048 53c0 Agent * Target group: (Unassigned Computers)
2005-12-28 11:03:42 22048 53c0 Agent * Windows Update access disabled: No
2005-12-28 11:03:42 22048 53c0 DnldMgr Download manager restoring 0 downloads
2005-12-28 11:03:42 22048 53c0 AU ########### AU: Initializing Automatic
Updates ###########
2005-12-28 11:03:42 22048 53c0 AU # WSUS server: https://owpwus02
2005-12-28 11:03:42 22048 53c0 AU # Detection frequency: 1
2005-12-28 11:03:42 22048 53c0 AU # Approval type: Scheduled (Policy)
2005-12-28 11:03:42 22048 53c0 AU # Scheduled install day/time: Every day
at 1:00
2005-12-28 11:03:42 22048 53c0 AU # Auto-install minor updates: Yes (Policy)
2005-12-28 11:03:42 22048 53c0 Report *********** Report: Initializing
static reporting data ***********
2005-12-28 11:03:42 22048 53c0 Report * OS Version = 5.0.2195.4.0.196880
2005-12-28 11:03:43 22048 53c0 Report * Computer Brand = Dell Computer
Corporation
2005-12-28 11:03:43 22048 53c0 Report * Computer Model = PowerEdge
4300/500
2005-12-28 11:03:43 22048 53c0 Report * Bios Revision = A09
2005-12-28 11:03:43 22048 53c0 Report * Bios Name = Default System BIOS
2005-12-28 11:03:43 22048 53c0 Report * Bios Release Date =
1999-10-13T00:00:00
2005-12-28 11:03:43 22048 53c0 Report * Locale ID = 1033
2005-12-28 11:03:43 22048 53c0 AU #############
2005-12-28 11:03:43 22048 53c0 AU ## START ## AU: Search for updates
2005-12-28 11:03:43 22048 53c0 AU #########
2005-12-28 11:03:43 22048 53c0 AU <<## SUBMITTED ## AU: Search for updates
[CallId = {C777EA00-D0B6-49F8-96A4-DAD2C172DA71}]
2005-12-28 11:03:43 22048 5a48 Agent *************
2005-12-28 11:03:43 22048 5a48 Agent ** START ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2005-12-28 11:03:43 22048 5a48 Agent *********
2005-12-28 11:03:43 22048 5a48 Agent * Found 0 updates and 3 categories in
search
2005-12-28 11:03:43 22048 5a48 Agent *********
2005-12-28 11:03:43 22048 5a48 Agent ** END ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2005-12-28 11:03:43 22048 5a48 Agent *************
2005-12-28 11:03:44 22048 5a48 AU >>## RESUMED ## AU: Search for updates
[CallId = {C777EA00-D0B6-49F8-96A4-DAD2C172DA71}]
2005-12-28 11:03:44 22048 5a48 AU # 0 updates detected
2005-12-28 11:03:44 22048 5a48 AU #########
2005-12-28 11:03:44 22048 5a48 AU ## END ## AU: Search for updates
[CallId = {C777EA00-D0B6-49F8-96A4-DAD2C172DA71}]
2005-12-28 11:03:44 22048 5a48 AU #############
2005-12-28 11:03:48 22048 5a48 Report REPORT EVENT:
{89AFD1A7-B0A7-4D1B-9E6A-CCFF38D5A412} 2005-12-28
11:03:42-0500 1 202 102 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Content Install Reboot completed.

After a few minutes, I did see a handful of packet in the Network Monitor. I
immediately refreshed the log, and found that they were caused by the client
server uploading a report to the WSUS server:

2005-12-28 11:07:25 22048 5a48 PT Initializing simple targeting cookie,
clientId = 7b07a865-ed46-404c-b1ec-1f13255756c1, target group = , DNS name =
onetgov03.onetgov.net
2005-12-28 11:07:25 22048 5a48 PT Server URL =
https://owpwus02/SimpleAuthWebService/SimpleAuth.asmx
2005-12-28 11:07:26 22048 5a48 Report Uploading 2 events using cached
cookie, reporting URL =
https://owpwus02/ReportingWebService/ReportingWebService.asmx
2005-12-28 11:07:26 22048 5a48 Report Reporter successfully uploaded 2 events.


....so it seems that uploads of reports works just fine, but that the client
servers are not at all even attempting to contact the WSUS server to find
updates... Bu no errors show in the logs. So the question is, where in the
workd are they trying to get their updates from...?

Roberto Franceschetti

 

First.. the configured URL implies you've enabled SSL capabilities

So most likely the packets being sent are encrypted, which would be
impossible for Network Monitor to decrypt and display.

Second, the log /does/ show that the client performed a detection, and found
no updates approved for installation.

Possibly this is because the client doesn't have a target group configured,
and you've not approved any updates for "Unassigned Computers" or "All
Computers"

Otherwise, as you noted, the uploading of reporting is working perfectly,
and there is -no- data communication failure between this client and the
WSUS server:

This statement is contradicted by the specific log entries cited. The client
servers =are= contacting the WSUS server successfully, you can confirm this
because the client servers are most likely listed under "Unassigned
Computers" on your WSUS Admin Console, and reporting the December updates as
"Needed", but it unable to detect/download those updates because they have
not yet been approved for the target group that this client server belongs
to.

Either you've misconfigured client-side targeting in the group policy, or
you've not manually moved the client server into the appropriate group at
the server if using server-side targeting.


""

 

Lawrence,

First of all thanks for the reply. I tried to post as much info as possible
without overdoing it, so let me add more to answer the points you make.
Correct for the encryption, however the packets *will* be captured by NetMon
as it will see TCP traffic on port 443, and does not care about packets being
encrypted or not (of course I won't be able to "see" the HTTP content, but
what matters is that there is no communication period). Now during the time
in the log that I mention, there is neither http traffic not https traffic
between the client server and the WSUS server. However after a few minutes,
NetMon did show a bit of SSL traffic being captured, and the time corresponds
to the entry in the log where the report has been uplodaed (using SSL). To
sum this up, Netmon only captured the SSL traffic for the report upload, it
did not capture any traffic during the checks.
I agree, however NetMon indicates no traffic between WSUS and the server, so
the updates were performed against another server...
Let me add that when running the Client Diagnostics Tool, NetMon *did*
indeed capture traffic between the server and the WSUS. Yes, if I were in
your place I'd be thinking "this is impossible, what's he talking about" as
well.
These are the groups we defined and their members:
Groups
All Computers: 19
Unassigned Computers: 0
LoadBalanced-01: 4
LoadBalanced-02: 4
Standalone: 11

The server in the logs of the 1st posting belongs to the "LoadBalanced-02"
group. The server in the 2nd posting belongs to the "Standalone" group.

Approvals for the "LoadBalanced-02" group are set to "Install".
Approvals for all the other groups are set to "Same as All Computers group"
Approvals for the "All Computers" are set to "Detect Only".

From the screenshot (text only) above, you can see that all 19 servers are
assigned to groups, WSUS sees them without problems, and they belogn to the
right groups. None is in the "Unassigned Computers". However WSUS still
thinks that no updates are needed on *any* of them.

We moved the servers in the various groups manually using the WSUS GUI,
we're not using policies as the number of servers is very small.

I know this is all very strange, we hardly ever need to resort to support to
solve technical issues, but after two weeks we're giving up as *none* of this
makes any sense. Please remember that we configured a much more complex WSUS
setup for our internal network...

 

""

Roberto... since both the client -and- the server contradict your
observations using Network Monitor, I think it best that we set aside the
Network Monitor diagnostics for the moment. In the year that I've been
troubleshooting WSUS installations, we've not yet ever needed to dig to the
depths of using a packet tracing utility to troubleshoot client-to-server
communications. I fear in this instance, that all it's doing is confusing
the issue. The client logs it's communication attempt, it does not log an
error, and the server recognizes the client registration, and unless the
"Last Reported On" date displayed by the server is notably inaccurate, I'd
say the client-to-server communication is working perfectly.

The server that the detection was performed against is logged in the
WindowsUpdate.log. Either this is the correct server, or it is not. You tell
me.

You're using server-side targeting, so possibly you need to purge the cookie
on the clients, as they don't have any information about the new group
memberships. Incidentally, what is the detection interval you're using in
this 'test group'?

Execute 'wuauclt /resetauthorization /detectnow' and observe the results
over 20 minutes.

The servers =should= be at least /detecting/ the availability of the updates
if the "All Computers" group is set to "Detect Only" =and= "Unassigned
Computers" is set to "Same as All Computers group" or "Detect Only".

Thank you for the confirmation. The problem, as noted above, is most likely
an out-of-date cached cookie on the client-side. Run the command with
/resetauthorization (cited above), and let the servers obtain new cookie
data.

If it helps... complexity rarely has been an issue in diagnostics of
malfunctioning enviroments.

 

No luck...
Agreed. Furthermore the IIS logs on the WSUS server show GET requests during
times in the logs, so yes, NetMon unreliable.
Did that on both a client and the WSUS, it did not help. The
WindowsUpdate.log still show "0 updates" and the status in the WSUS does not
change.
We left the default (22 hours?) for the first week of troubleshooting, we've
had it at 1 hour for the past week or two.

Additional piece of (useless maybe, since it's probably related to this
problem) information is that WSUS does not detect even installed patches (for
which we have "Detect Only" approval). Maybe the screenshot at
ftp://ftp.ocfl.net/divisions/AdminServices/pub/cap.jpg showing data relative
to a patch that has been installed already will help.

We're lost... and will probably update the servers maunally today, since
that should still leave us with the problem of WSUS not seing installed
patches either, allowing us to troubleshoot further.

 

Hmmmm..... that would suggest the problem is not a targeting issue, but I'd
need to inspect the new data in the WindowsUpdate.log to confirm the
results.

The 1 hour detection interval can interfere with the timeouts of the cached
cookie. Set these back to the default. You can force a detection for testing
purposes with 'wuauclt /detectnow'.

Thanks for the screen cap... that gives me a better idea of what your
situation is. I'm still inclined to think this problem is caused by a
miscommunication concerning target group membership.

There is one other thing that has occasionally caused problems updating via
WSUS, and it has to do with systems that had pending activities under AU/SUS
when the conversion took place. The presence of registry data showing a
'pending action' with AU/SUS can interfere with the ability of the WUA to
detect new updates. Try deleting the registry key at
HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate
and restarting the Automatic Updates service.

If deleting that key and restarting the AU service does not provide a fix,
could you please post the new entries in the WindowsUpdate.log following the
AU service restart.

 

The 1 hour detection interval can interfere with the timeouts of the cachedDone, set back to 22hrs.

This morning we finally updated all servers manually, so they were all
rebooted about 12 hours ago. As of now no server in the WSUS GUI showed as
having the newest patches installed, they all still showed as "Not needed",
and when viewing the "Status tab" for individual updates, all the computers
show them as "Not needed" rather than "Installed".

About an hour ago I deleted the registry key you indicated, restarted the
Automatic Update service on one of the client servers, and issued the wuauclt
/detectnow command just in case. After about 30 minutes the server reported
back to WSUS, but bad news... Nothing changed, patches still show as "Not
needed" rather than "Installed".

The WindowsUpdate.log follows below.

2005-12-30 22:25:02 2488 c2c Misc =========== Logging initialized (build:
5.8.0.2469, tz: -0500) ===========
2005-12-30 22:25:02 2488 c2c Misc = Process: C:\WINNT\system32\svchost.exe
2005-12-30 22:25:02 2488 c2c Misc = Module: C:\WINNT\system32\wuaueng.dll
2005-12-30 22:25:02 2488 c2c Service *************
2005-12-30 22:25:02 2488 c2c Service ** START ** Service: Service startup
2005-12-30 22:25:02 2488 c2c Service *********
2005-12-30 22:25:02 2488 c2c Agent * WU client version 5.8.0.2469
2005-12-30 22:25:02 2488 c2c Agent * WARNING: Failed to obtain SusClientId
2005-12-30 22:25:02 2488 c2c Agent * Base directory:
C:\WINNT\SoftwareDistribution
2005-12-30 22:25:02 2488 c2c Agent * Access type: No proxy
2005-12-30 22:25:02 2488 c2c Agent * Network state: Connected
2005-12-30 22:25:47 2488 c2c Agent *********** Agent: Initializing Windows
Update Agent ***********
2005-12-30 22:25:47 2488 c2c Agent *********** Agent: Initializing global
settings cache ***********
2005-12-30 22:25:47 2488 c2c Agent * WSUS server: https://owpwus02
2005-12-30 22:25:47 2488 c2c Agent * WSUS status server: https://owpwus02
2005-12-30 22:25:47 2488 c2c Agent * Target group: (Unassigned Computers)
2005-12-30 22:25:47 2488 c2c Agent * Windows Update access disabled: No
2005-12-30 22:25:52 2488 c2c DnldMgr Download manager restoring 0 downloads
2005-12-30 22:25:52 2488 c2c AU ########### AU: Initializing Automatic
Updates ###########
2005-12-30 22:25:52 2488 c2c AU AU setting next detection timeout to
2005-12-31 03:25:52
2005-12-30 22:25:52 2488 c2c AU # WSUS server: https://owpwus02
2005-12-30 22:25:52 2488 c2c AU # Detection frequency: 22
2005-12-30 22:25:52 2488 c2c AU # Approval type: Scheduled (Policy)
2005-12-30 22:25:52 2488 c2c AU # Scheduled install day/time: Every day at
1:00
2005-12-30 22:25:52 2488 c2c AU # Auto-install minor updates: Yes (Policy)
2005-12-30 22:25:52 2488 c2c AU #############
2005-12-30 22:25:52 2488 c2c AU ## START ## AU: Search for updates
2005-12-30 22:25:52 2488 c2c AU #########
2005-12-30 22:25:52 2488 c2c AU <<## SUBMITTED ## AU: Search for updates
[CallId = {EBC04FA5-D823-4BD2-885E-622982F194AD}]
2005-12-30 22:25:52 2488 dc4 Agent *************
2005-12-30 22:25:52 2488 dc4 Agent ** START ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2005-12-30 22:25:52 2488 dc4 Agent *********
2005-12-30 22:25:57 2488 dc4 Setup *********** Setup: Checking whether
self-update is required ***********
2005-12-30 22:25:57 2488 dc4 Setup * Inf file:
C:\WINNT\SoftwareDistribution\SelfUpdate\Default\wusetup.inf
2005-12-30 22:25:57 2488 dc4 Setup Update NOT required for
C:\WINNT\system32\cdm.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-30 22:25:57 2488 dc4 Setup Update NOT required for
C:\WINNT\system32\iuengine.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-30 22:25:58 2488 dc4 Setup Update NOT required for
C:\WINNT\system32\wuapi.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-30 22:25:58 2488 dc4 Setup Update NOT required for
C:\WINNT\system32\wuauclt.exe: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-30 22:25:59 2488 dc4 Setup Update NOT required for
C:\WINNT\system32\wuauclt1.exe: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-30 22:25:59 2488 dc4 Setup Update NOT required for
C:\WINNT\system32\wuaucpl.cpl: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-30 22:25:59 2488 dc4 Setup Update NOT required for
C:\WINNT\system32\wuaueng.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-30 22:25:59 2488 dc4 Setup Update NOT required for
C:\WINNT\system32\wuaueng1.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-30 22:25:59 2488 dc4 Setup Update NOT required for
C:\WINNT\system32\wucltui.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-30 22:25:59 2488 dc4 Setup Update NOT required for
C:\WINNT\system32\wups.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-30 22:26:00 2488 dc4 Setup Update NOT required for
C:\WINNT\system32\wups2.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-30 22:26:00 2488 dc4 Setup Update NOT required for
C:\WINNT\system32\wuweb.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-30 22:26:00 2488 dc4 Setup * IsUpdateRequired = No
2005-12-30 22:26:01 2488 dc4 PT +++++++++++ PT: Synchronizing server
updates +++++++++++
2005-12-30 22:26:01 2488 dc4 PT + ServiceId =
{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
https://owpwus02/ClientWebService/client.asmx
2005-12-30 22:26:10 2488 dc4 Agent * Found 0 updates and 3 categories in
search
2005-12-30 22:26:10 2488 dc4 Report *********** Report: Initializing static
reporting data ***********
2005-12-30 22:26:10 2488 dc4 Report * OS Version = 5.0.2195.4.0.196880
2005-12-30 22:26:10 2488 dc4 Report * Computer Brand = Dell Computer
Corporation
2005-12-30 22:26:10 2488 dc4 Report * Computer Model = PowerEdge 2550

2005-12-30 22:26:10 2488 dc4 Report * Bios Revision = A05
2005-12-30 22:26:10 2488 dc4 Report * Bios Name = Default System BIOS
2005-12-30 22:26:10 2488 dc4 Report * Bios Release Date =
2001-05-25T00:00:00
2005-12-30 22:26:10 2488 dc4 Report * Locale ID = 1033
2005-12-30 22:26:10 2488 dc4 Agent *********
2005-12-30 22:26:10 2488 dc4 Agent ** END ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2005-12-30 22:26:10 2488 dc4 Agent *************
2005-12-30 22:26:12 2488 c70 AU >>## RESUMED ## AU: Search for updates
[CallId = {EBC04FA5-D823-4BD2-885E-622982F194AD}]
2005-12-30 22:26:12 2488 c70 AU # 0 updates detected
2005-12-30 22:26:12 2488 c70 AU #########
2005-12-30 22:26:12 2488 c70 AU ## END ## AU: Search for updates [CallId
= {EBC04FA5-D823-4BD2-885E-622982F194AD}]
2005-12-30 22:26:12 2488 c70 AU #############
2005-12-30 22:26:12 2488 c70 AU AU setting next detection timeout to
2005-12-31 23:26:43
2005-12-30 22:26:15 2488 dc4 Report REPORT EVENT:
{4970E664-F048-4DD1-A206-346D3EFACEB6} 2005-12-30
22:26:10-0500 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Software Synchronization Agent has finished detecting items.
2005-12-30 22:26:15 2488 dc4 Report REPORT EVENT:
{0635C46D-BC63-4478-8F17-F4150EFB5BDB} 2005-12-30
22:26:10-0500 1 153 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Pre-Deployment Check Reporting client status.
2005-12-30 22:30:04 2488 4f0 AU Triggering AU detection through DetectNow API
2005-12-30 22:30:04 2488 c2c AU #############
2005-12-30 22:30:04 2488 c2c AU ## START ## AU: Search for updates
2005-12-30 22:30:04 2488 c2c AU #########
2005-12-30 22:30:04 2488 c2c AU <<## SUBMITTED ## AU: Search for updates
[CallId = {34318FC2-87A1-40B5-BCC8-61B918D355AD}]
2005-12-30 22:30:04 2488 dc4 Agent *************
2005-12-30 22:30:04 2488 dc4 Agent ** START ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2005-12-30 22:30:04 2488 dc4 Agent *********
2005-12-30 22:30:04 2488 dc4 Setup *********** Setup: Checking whether
self-update is required ***********
2005-12-30 22:30:04 2488 dc4 Setup * Inf file:
C:\WINNT\SoftwareDistribution\SelfUpdate\Default\wusetup.inf
2005-12-30 22:30:04 2488 dc4 Setup Update NOT required for
C:\WINNT\system32\cdm.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-30 22:30:04 2488 dc4 Setup Update NOT required for
C:\WINNT\system32\iuengine.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-30 22:30:04 2488 dc4 Setup Update NOT required for
C:\WINNT\system32\wuapi.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-30 22:30:04 2488 dc4 Setup Update NOT required for
C:\WINNT\system32\wuauclt.exe: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-30 22:30:04 2488 dc4 Setup Update NOT required for
C:\WINNT\system32\wuauclt1.exe: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-30 22:30:04 2488 dc4 Setup Update NOT required for
C:\WINNT\system32\wuaucpl.cpl: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-30 22:30:04 2488 dc4 Setup Update NOT required for
C:\WINNT\system32\wuaueng.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-30 22:30:04 2488 dc4 Setup Update NOT required for
C:\WINNT\system32\wuaueng1.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-30 22:30:04 2488 dc4 Setup Update NOT required for
C:\WINNT\system32\wucltui.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2005-12-30 22:30:04 2488 dc4 Setup Update NOT required for
C:\WINNT\system32\wups.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-30 22:30:04 2488 dc4 Setup Update NOT required for
C:\WINNT\system32\wups2.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-30 22:30:04 2488 dc4 Setup Update NOT required for
C:\WINNT\system32\wuweb.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2005-12-30 22:30:04 2488 dc4 Setup * IsUpdateRequired = No
2005-12-30 22:30:06 2488 dc4 PT +++++++++++ PT: Synchronizing server
updates +++++++++++
2005-12-30 22:30:06 2488 dc4 PT + ServiceId =
{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
https://owpwus02/ClientWebService/client.asmx
2005-12-30 22:30:06 2488 dc4 Agent * Found 0 updates and 3 categories in
search
2005-12-30 22:30:06 2488 dc4 Agent *********
2005-12-30 22:30:06 2488 dc4 Agent ** END ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2005-12-30 22:30:06 2488 dc4 Agent *************
2005-12-30 22:30:06 2488 dc4 AU >>## RESUMED ## AU: Search for updates
[CallId = {34318FC2-87A1-40B5-BCC8-61B918D355AD}]
2005-12-30 22:30:06 2488 dc4 AU # 0 updates detected
2005-12-30 22:30:06 2488 dc4 AU #########
2005-12-30 22:30:06 2488 dc4 AU ## END ## AU: Search for updates [CallId
= {34318FC2-87A1-40B5-BCC8-61B918D355AD}]
2005-12-30 22:30:06 2488 dc4 AU #############
2005-12-30 22:30:06 2488 dc4 AU AU setting next detection timeout to
2006-01-01 00:55:00
2005-12-30 22:30:11 2488 dc4 Report REPORT EVENT:
{1CAAF287-9718-4B47-8F50-0AC5330B5235} 2005-12-30
22:30:06-0500 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Software Synchronization Agent has finished detecting items.
2005-12-30 22:30:11 2488 dc4 Report REPORT EVENT:
{2F523F18-7968-4B12-9865-DEC5F781AD49} 2005-12-30
22:30:06-0500 1 153 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Pre-Deployment Check Reporting client status.
2005-12-30 22:32:53 2488 dc4 Report Uploading 4 events using cached cookie,
reporting URL = https://owpwus02/ReportingWebService/ReportingWebService.asmx
2005-12-30 22:32:57 2488 dc4 Report Reporter successfully uploaded 4 events.

 

We've reconfigured WSUS to *not* use SSL to eliminate that as a possibility.
To do so, we've deleted the Group Policies with the old settings, and created
a new Group Policy with the new ones. No changes, all computers still show
all patches as "Not needed" rather than installed.

Help...

Following is the latest update log after the SSL requirement removal:

2006-01-04 11:22:00 2488 ea0 AU Triggering AU detection through DetectNow API
2006-01-04 11:22:00 2488 c2c AU #############
2006-01-04 11:22:00 2488 c2c AU ## START ## AU: Search for updates
2006-01-04 11:22:00 2488 c2c AU #########
2006-01-04 11:22:00 2488 c2c AU <<## SUBMITTED ## AU: Search for updates
[CallId = {98D10D95-3917-4670-B3A4-0A88BD7AB15D}]
2006-01-04 11:22:00 2488 694 Agent *************
2006-01-04 11:22:00 2488 694 Agent ** START ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2006-01-04 11:22:00 2488 694 Agent *********
2006-01-04 11:22:01 2488 694 Setup *********** Setup: Checking whether
self-update is required ***********
2006-01-04 11:22:01 2488 694 Setup * Inf file:
C:\WINNT\SoftwareDistribution\SelfUpdate\Default\wusetup.inf
2006-01-04 11:22:01 2488 694 Setup Update NOT required for
C:\WINNT\system32\cdm.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-01-04 11:22:01 2488 694 Setup Update NOT required for
C:\WINNT\system32\iuengine.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-04 11:22:01 2488 694 Setup Update NOT required for
C:\WINNT\system32\wuapi.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-01-04 11:22:01 2488 694 Setup Update NOT required for
C:\WINNT\system32\wuauclt.exe: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-04 11:22:02 2488 694 Setup Update NOT required for
C:\WINNT\system32\wuauclt1.exe: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-04 11:22:02 2488 694 Setup Update NOT required for
C:\WINNT\system32\wuaucpl.cpl: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-04 11:22:02 2488 694 Setup Update NOT required for
C:\WINNT\system32\wuaueng.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-04 11:22:02 2488 694 Setup Update NOT required for
C:\WINNT\system32\wuaueng1.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-04 11:22:02 2488 694 Setup Update NOT required for
C:\WINNT\system32\wucltui.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-04 11:22:02 2488 694 Setup Update NOT required for
C:\WINNT\system32\wups.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-01-04 11:22:02 2488 694 Setup Update NOT required for
C:\WINNT\system32\wups2.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-01-04 11:22:02 2488 694 Setup Update NOT required for
C:\WINNT\system32\wuweb.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-01-04 11:22:02 2488 694 Setup * IsUpdateRequired = No
2006-01-04 11:22:03 2488 694 PT +++++++++++ PT: Synchronizing server
updates +++++++++++
2006-01-04 11:22:03 2488 694 PT + ServiceId =
{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
http://owpwus02/ClientWebService/client.asmx
2006-01-04 11:22:03 2488 694 PT Initializing simple targeting cookie,
clientId = 464675e3-00ea-4481-b949-7dd744778a95, target group = , DNS name =
octrend02.onetgov.net
2006-01-04 11:22:03 2488 694 PT Server URL =
http://owpwus02/SimpleAuthWebService/SimpleAuth.asmx
2006-01-04 11:22:05 2488 694 Agent * Found 0 updates and 3 categories in
search
2006-01-04 11:22:05 2488 694 Agent *********
2006-01-04 11:22:05 2488 694 Agent ** END ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2006-01-04 11:22:05 2488 694 Agent *************
2006-01-04 11:22:05 2488 694 AU >>## RESUMED ## AU: Search for updates
[CallId = {98D10D95-3917-4670-B3A4-0A88BD7AB15D}]
2006-01-04 11:22:05 2488 694 AU # 0 updates detected
2006-01-04 11:22:05 2488 694 AU #########
2006-01-04 11:22:05 2488 694 AU ## END ## AU: Search for updates [CallId
= {98D10D95-3917-4670-B3A4-0A88BD7AB15D}]
2006-01-04 11:22:05 2488 694 AU #############
2006-01-04 11:22:05 2488 694 AU AU setting next detection timeout to
2006-01-05 11:07:01
2006-01-04 11:22:10 2488 694 Report REPORT EVENT:
{F484C69C-B9E5-4750-A8F7-2DC56ABB863B} 2006-01-04
11:22:05-0500 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Software Synchronization Agent has finished detecting items.
2006-01-04 11:22:10 2488 694 Report REPORT EVENT:
{F222FA21-47F6-4BC0-8679-EE71F905373C} 2006-01-04
11:22:05-0500 1 153 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Pre-Deployment Check Reporting client status.
2006-01-04 11:28:50 2488 694 Report Uploading 2 events using cached cookie,
reporting URL = http://owpwus02/ReportingWebService/ReportingWebService.asmx
2006-01-04 11:28:50 2488 694 Report Reporter successfully uploaded 2 events.

 

It appears that your client is still unaware that it has any target group
membership

a. Did you configure the WSUS server for client-side targeting? or did you
leave the WSUS server configured at the default settings (server-side
targeting).

b. Did you create the target groups on the WSUS server?

c. Did you enable client-side targeting in the GPO, and assign a valid
target group name in the policy?

d. Is that policy applied to this client?

Essentially, as long as the client thinks that it is not assigned to a
target group, it will only seek for approvals granted for the "Unassigned
Computers" target group. Until it can find those approvals, it will report
all updates as "Not Needed".


""

 

FYI - we removed all clients from wsus, removed the WSUS group policy from
A/D. We then reinstalled WSUS with an empty database, and created a new WSUS
group policy. Same *exact* problems.. To answer the questions below:

Left the default server-side.

Yes, see screenshot at ftp://ftp.ocfl.net/divisions/AdminServices/pub/cap.jpg

No, the policy is set to "Not configured"

It should be, as the clients are getting from the GPO the correct name of
the server to report to, and picked up the fact that we told them not to use
SSL anymore. However, is there a better way to verify all this?

Question then. Assuming that even though we did assign the clients to groups
in WSUS, the clients still think they are in the "Unassigned Computers". From
the screenshot you can see that the approvals for the "Unassigned Computers"
are the "Same as All Computers group", and the "All Computers" are set to
"Detect Only". Doesn't this mean that the "Unassigned Computers" should then
be confugred to "Detect Only", and should thus show the patches they have as
"Installed"? Please note that all updates are approved for Detect Only".


Is there anyhting that can be done to troubleshoot this further, to see more
in detail what the clients are doing, and why they are not doing what they
should be doing? Is there enhanced debug logging that can be set for both the
clients and the wsus server?

 

Yes.. it does.... theoretically.

But now I've seen a couple of situations where this is -not- happening. So
it could be that it's a bit more complicated from the client's perspective.
It could be that the ambiguous information about target group info (or the
lack of it in the cookie) is causing the client to -not- detect anything at
all.

Run 'wuauclt /resetauthorization /detectnow' at a client to -force- the
client to discard and rebuild the targeting cookie. Wait 20 minutes, for the
reporting cycle to execute. Then, inspect the WindowsUpdate.log to see if
the new target group information is obtained from the server.

BTW.. looking at the provided image.... have you noticed that the "Last
Status Report" was performed over a week ago?

It might be good for us to look at the bigger picture on the client.
1. Restart the Automatic Updates service.
2. Wait 30 minutes.
3. Post the last 30 minutes of the WindowsUpdate.log starting with the
restart of the AU service.

 

Yes.. it does.... theoretically.

I was actually getting ready to post more info when I found your reply. I
agree that it looks like we have a problem with the clients not knowing what
to do. Even though we removed the clients from wsus, cleared the \software
distribution directory on a client, resintalled wsus with an empty database,
deleted and re-created the GPO, waited until the clients reported back,
****then used the WSUS GUI to move the servers into WSUS groups *****, the
clients still think they belong to the "Unassigned Group". I restarted the AU
service a couple of times, re-issued the 'wuauclt /resetauthorization
/detectnow' a couple of times, but still, the clients think they're in the
"Unassigned group". I agree that this could be causing them to not know what
they're supposed to do. If they can't "understand" that WSUS is telling them
to change goup, then very likely they can't "understand" which updates to
install, thus my problem... Anything we can do here to find out why the
clinets communicate with WSUS but can't "listen" to its directions?

Sorry about this one, I was too lazy to do another screenshot, it's the same
one I posted a week ago at the beginning of the thread. Everything looks
exaclty like that now, with the exception of course of the reporting times,
which have today's date.

These are the logs from one server for today:

2006-01-06 10:37:01 2464 c48 Misc =========== Logging initialized (build:
5.8.0.2469, tz: -0500) ===========
2006-01-06 10:37:01 2464 c48 Misc = Process: C:\WINNT\system32\svchost.exe
2006-01-06 10:37:01 2464 c48 Misc = Module: C:\WINNT\system32\wuaueng.dll
2006-01-06 10:37:01 2464 c48 Service *************
2006-01-06 10:37:01 2464 c48 Service ** START ** Service: Service startup
2006-01-06 10:37:01 2464 c48 Service *********
2006-01-06 10:37:01 2464 c48 Agent * WU client version 5.8.0.2469
2006-01-06 10:37:01 2464 c48 Agent * SusClientId =
'b257476d-a302-408b-8e9a-76a7c56beecd'
2006-01-06 10:37:01 2464 c48 Agent * Base directory:
C:\WINNT\SoftwareDistribution
2006-01-06 10:37:01 2464 c48 Agent * Access type: No proxy
2006-01-06 10:37:01 2464 c48 Agent * Network state: Connected
2006-01-06 10:37:46 2464 c48 Agent *********** Agent: Initializing Windows
Update Agent ***********
2006-01-06 10:37:46 2464 c48 Agent *********** Agent: Initializing global
settings cache ***********
2006-01-06 10:37:46 2464 c48 Agent * WSUS server: http://owpwus02
2006-01-06 10:37:46 2464 c48 Agent * WSUS status server: http://owpwus02
2006-01-06 10:37:46 2464 c48 Agent * Target group: (Unassigned Computers)
2006-01-06 10:37:46 2464 c48 Agent * Windows Update access disabled: No
2006-01-06 10:37:48 2464 c48 DtaStor Default service for AU is
{00000000-0000-0000-0000-000000000000}
2006-01-06 10:37:48 2464 c48 DtaStor Default service for AU is
{9482F4B4-E343-43B6-B170-9A65BC822C77}
2006-01-06 10:37:48 2464 c48 DnldMgr Download manager restoring 0 downloads
2006-01-06 10:37:48 2464 c48 AU ########### AU: Initializing Automatic
Updates ###########
2006-01-06 10:37:48 2464 c48 AU # WSUS server: http://owpwus02
2006-01-06 10:37:48 2464 c48 AU # Detection frequency: 22
2006-01-06 10:37:48 2464 c48 AU # Approval type: Scheduled (Policy)
2006-01-06 10:37:48 2464 c48 AU # Scheduled install day/time: Every day at
3:00
2006-01-06 10:37:48 2464 c48 AU # Auto-install minor updates: Yes (User
preference)
2006-01-06 10:37:55 2464 b60 AU Triggering AU detection through DetectNow API
2006-01-06 10:37:55 2464 c48 AU #############
2006-01-06 10:37:55 2464 c48 AU ## START ## AU: Search for updates
2006-01-06 10:37:55 2464 c48 AU #########
2006-01-06 10:37:55 2464 c48 AU <<## SUBMITTED ## AU: Search for updates
[CallId = {73A1BD00-C177-4DF8-9FA9-5EBFA5FCBD3B}]
2006-01-06 10:37:55 2464 9e8 Agent *************
2006-01-06 10:37:55 2464 9e8 Agent ** START ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2006-01-06 10:37:55 2464 9e8 Agent *********
2006-01-06 10:37:56 2464 9e8 Setup *********** Setup: Checking whether
self-update is required ***********
2006-01-06 10:37:56 2464 9e8 Setup * Inf file:
C:\WINNT\SoftwareDistribution\SelfUpdate\Default\wusetup.inf
2006-01-06 10:37:56 2464 9e8 Setup Update NOT required for
C:\WINNT\system32\cdm.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-01-06 10:37:56 2464 9e8 Setup Update NOT required for
C:\WINNT\system32\iuengine.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-06 10:37:57 2464 9e8 Setup Update NOT required for
C:\WINNT\system32\wuapi.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-01-06 10:37:57 2464 9e8 Setup Update NOT required for
C:\WINNT\system32\wuauclt.exe: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-06 10:37:57 2464 9e8 Setup Update NOT required for
C:\WINNT\system32\wuauclt1.exe: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-06 10:37:57 2464 9e8 Setup Update NOT required for
C:\WINNT\system32\wuaucpl.cpl: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-06 10:37:57 2464 9e8 Setup Update NOT required for
C:\WINNT\system32\wuaueng.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-06 10:37:57 2464 9e8 Setup Update NOT required for
C:\WINNT\system32\wuaueng1.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-06 10:37:57 2464 9e8 Setup Update NOT required for
C:\WINNT\system32\wucltui.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-06 10:37:57 2464 9e8 Setup Update NOT required for
C:\WINNT\system32\wups.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-01-06 10:37:57 2464 9e8 Setup Update NOT required for
C:\WINNT\system32\wups2.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-01-06 10:37:57 2464 9e8 Setup Update NOT required for
C:\WINNT\system32\wuweb.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-01-06 10:37:57 2464 9e8 Setup * IsUpdateRequired = No
2006-01-06 10:37:57 2464 9e8 PT +++++++++++ PT: Synchronizing server
updates +++++++++++
2006-01-06 10:37:57 2464 9e8 PT + ServiceId =
{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
http://owpwus02/ClientWebService/client.asmx
2006-01-06 10:38:07 2464 9e8 PT Initializing simple targeting cookie,
clientId = b257476d-a302-408b-8e9a-76a7c56beecd, target group = , DNS name =
octrend02.onetgov.net
2006-01-06 10:38:07 2464 9e8 PT Server URL =
http://owpwus02/SimpleAuthWebService/SimpleAuth.asmx
2006-01-06 10:38:10 2464 9e8 PT +++++++++++ PT: Synchronizing extended
update info +++++++++++
2006-01-06 10:38:10 2464 9e8 PT + ServiceId =
{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
http://owpwus02/ClientWebService/client.asmx
2006-01-06 10:38:10 2464 9e8 Agent * Found 0 updates and 2 categories in
search
2006-01-06 10:38:10 2464 9e8 Report *********** Report: Initializing static
reporting data ***********
2006-01-06 10:38:10 2464 9e8 Report * OS Version = 5.0.2195.4.0.196880
2006-01-06 10:38:11 2464 9e8 Report * Computer Brand = Dell Computer
Corporation
2006-01-06 10:38:11 2464 9e8 Report * Computer Model = PowerEdge 2550

2006-01-06 10:38:11 2464 9e8 Report * Bios Revision = A05
2006-01-06 10:38:11 2464 9e8 Report * Bios Name = Default System BIOS
2006-01-06 10:38:11 2464 9e8 Report * Bios Release Date =
2001-05-25T00:00:00
2006-01-06 10:38:11 2464 9e8 Report * Locale ID = 1033
2006-01-06 10:38:11 2464 9e8 Agent *********
2006-01-06 10:38:11 2464 9e8 Agent ** END ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2006-01-06 10:38:11 2464 9e8 Agent *************
2006-01-06 10:38:11 2464 9e8 AU >>## RESUMED ## AU: Search for updates
[CallId = {73A1BD00-C177-4DF8-9FA9-5EBFA5FCBD3B}]
2006-01-06 10:38:11 2464 9e8 AU # 0 updates detected
2006-01-06 10:38:11 2464 9e8 AU #########
2006-01-06 10:38:11 2464 9e8 AU ## END ## AU: Search for updates [CallId
= {73A1BD00-C177-4DF8-9FA9-5EBFA5FCBD3B}]
2006-01-06 10:38:11 2464 9e8 AU #############
2006-01-06 10:38:11 2464 9e8 AU AU setting next detection timeout to
2006-01-07 10:46:33
2006-01-06 10:38:16 2464 9e8 Report REPORT EVENT:
{4AAD9B10-B2F2-495B-A4D3-011BBA104946} 2006-01-06
10:38:10-0500 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Software Synchronization Agent has finished detecting items.
2006-01-06 10:38:16 2464 9e8 Report REPORT EVENT:
{8E091DFD-D73F-4911-A491-013D2CB66432} 2006-01-06
10:38:11-0500 1 153 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Pre-Deployment Check Reporting client status.
2006-01-06 10:50:28 2464 9e8 Report Uploading 2 events using cached cookie,
reporting URL = http://owpwus02/ReportingWebService/ReportingWebService.asmx
2006-01-06 10:50:31 2464 9e8 Report Reporter successfully uploaded 2 events.
2006-01-06 14:54:50 2464 c48 Service *********
2006-01-06 14:54:50 2464 c48 Service ** END ** Service: Service exit
[Exit code = 0x240001]
2006-01-06 14:54:50 2464 c48 Service *************
2006-01-06 14:54:51 2464 278 Misc =========== Logging initialized (build:
5.8.0.2469, tz: -0500) ===========
2006-01-06 14:54:51 2464 278 Misc = Process: C:\WINNT\system32\svchost.exe
2006-01-06 14:54:51 2464 278 Misc = Module: C:\WINNT\system32\wuaueng.dll
2006-01-06 14:54:51 2464 278 Service *************
2006-01-06 14:54:51 2464 278 Service ** START ** Service: Service startup
2006-01-06 14:54:51 2464 278 Service *********
2006-01-06 14:54:51 2464 278 Agent * WU client version 5.8.0.2469
2006-01-06 14:54:51 2464 278 Agent * SusClientId =
'b257476d-a302-408b-8e9a-76a7c56beecd'
2006-01-06 14:54:51 2464 278 Agent * Base directory:
C:\WINNT\SoftwareDistribution
2006-01-06 14:54:51 2464 278 Agent * Access type: No proxy
2006-01-06 14:54:52 2464 278 Agent * Network state: Connected
2006-01-06 14:55:02 2464 444 Agent *********** Agent: Initializing Windows
Update Agent ***********
2006-01-06 14:55:02 2464 444 Agent *********** Agent: Initializing global
settings cache ***********
2006-01-06 14:55:02 2464 444 Agent * WSUS server: http://owpwus02
2006-01-06 14:55:02 2464 444 Agent * WSUS status server: http://owpwus02
2006-01-06 14:55:02 2464 444 Agent * Target group: (Unassigned Computers)
2006-01-06 14:55:02 2464 444 Agent * Windows Update access disabled: No
2006-01-06 14:55:04 2464 444 DnldMgr Download manager restoring 0 downloads
2006-01-06 14:55:04 2464 444 AU ########### AU: Initializing Automatic
Updates ###########
2006-01-06 14:55:04 2464 444 AU # WSUS server: http://owpwus02
2006-01-06 14:55:04 2464 444 AU # Detection frequency: 22
2006-01-06 14:55:04 2464 444 AU # Approval type: Scheduled (Policy)
2006-01-06 14:55:04 2464 444 AU # Scheduled install day/time: Every day at
3:00
2006-01-06 14:55:04 2464 444 AU # Auto-install minor updates: Yes (User
preference)
2006-01-06 14:55:04 2464 444 AU Triggering AU detection through DetectNow API
2006-01-06 14:55:04 2464 278 AU #############
2006-01-06 14:55:04 2464 278 AU ## START ## AU: Search for updates
2006-01-06 14:55:04 2464 278 AU #########
2006-01-06 14:55:04 2464 278 AU <<## SUBMITTED ## AU: Search for updates
[CallId = {1A55A3F0-D170-4F8C-A364-2A2D5013A858}]
2006-01-06 14:55:04 2464 cd0 Agent *************
2006-01-06 14:55:04 2464 cd0 Agent ** START ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2006-01-06 14:55:04 2464 cd0 Agent *********
2006-01-06 14:55:05 2464 cd0 Setup *********** Setup: Checking whether
self-update is required ***********
2006-01-06 14:55:05 2464 cd0 Setup * Inf file:
C:\WINNT\SoftwareDistribution\SelfUpdate\Default\wusetup.inf
2006-01-06 14:55:05 2464 cd0 Setup Update NOT required for
C:\WINNT\system32\cdm.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-01-06 14:55:05 2464 cd0 Setup Update NOT required for
C:\WINNT\system32\iuengine.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-06 14:55:05 2464 cd0 Setup Update NOT required for
C:\WINNT\system32\wuapi.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-01-06 14:55:05 2464 cd0 Setup Update NOT required for
C:\WINNT\system32\wuauclt.exe: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-06 14:55:05 2464 cd0 Setup Update NOT required for
C:\WINNT\system32\wuauclt1.exe: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-06 14:55:05 2464 cd0 Setup Update NOT required for
C:\WINNT\system32\wuaucpl.cpl: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-06 14:55:05 2464 cd0 Setup Update NOT required for
C:\WINNT\system32\wuaueng.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-06 14:55:05 2464 cd0 Setup Update NOT required for
C:\WINNT\system32\wuaueng1.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-06 14:55:05 2464 cd0 Setup Update NOT required for
C:\WINNT\system32\wucltui.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-06 14:55:05 2464 cd0 Setup Update NOT required for
C:\WINNT\system32\wups.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-01-06 14:55:05 2464 cd0 Setup Update NOT required for
C:\WINNT\system32\wups2.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-01-06 14:55:05 2464 cd0 Setup Update NOT required for
C:\WINNT\system32\wuweb.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-01-06 14:55:05 2464 cd0 Setup * IsUpdateRequired = No
2006-01-06 14:55:05 2464 cd0 PT +++++++++++ PT: Synchronizing server
updates +++++++++++
2006-01-06 14:55:05 2464 cd0 PT + ServiceId =
{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
http://owpwus02/ClientWebService/client.asmx
2006-01-06 14:55:06 2464 cd0 PT Initializing simple targeting cookie,
clientId = b257476d-a302-408b-8e9a-76a7c56beecd, target group = , DNS name =
octrend02.onetgov.net
2006-01-06 14:55:06 2464 cd0 PT Server URL =
http://owpwus02/SimpleAuthWebService/SimpleAuth.asmx
2006-01-06 14:55:19 2464 cd0 Agent * Found 0 updates and 2 categories in
search
2006-01-06 14:55:19 2464 cd0 Report *********** Report: Initializing static
reporting data ***********
2006-01-06 14:55:19 2464 cd0 Report * OS Version = 5.0.2195.4.0.196880
2006-01-06 14:55:19 2464 cd0 Report * Computer Brand = Dell Computer
Corporation
2006-01-06 14:55:19 2464 cd0 Report * Computer Model = PowerEdge 2550

2006-01-06 14:55:19 2464 cd0 Report * Bios Revision = A05
2006-01-06 14:55:19 2464 cd0 Report * Bios Name = Default System BIOS
2006-01-06 14:55:19 2464 cd0 Report * Bios Release Date =
2001-05-25T00:00:00
2006-01-06 14:55:19 2464 cd0 Report * Locale ID = 1033
2006-01-06 14:55:19 2464 cd0 Agent *********
2006-01-06 14:55:19 2464 cd0 Agent ** END ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2006-01-06 14:55:19 2464 cd0 Agent *************
2006-01-06 14:55:19 2464 cd0 AU >>## RESUMED ## AU: Search for updates
[CallId = {1A55A3F0-D170-4F8C-A364-2A2D5013A858}]
2006-01-06 14:55:19 2464 cd0 AU # 0 updates detected
2006-01-06 14:55:19 2464 cd0 AU #########
2006-01-06 14:55:19 2464 cd0 AU ## END ## AU: Search for updates [CallId
= {1A55A3F0-D170-4F8C-A364-2A2D5013A858}]
2006-01-06 14:55:19 2464 cd0 AU #############
2006-01-06 14:55:19 2464 cd0 AU AU setting next detection timeout to
2006-01-07 17:25:16
2006-01-06 14:55:24 2464 cd0 Report REPORT EVENT:
{44BAEF70-1477-441F-B928-53DAC6CBCBE0} 2006-01-06
14:55:19-0500 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Software Synchronization Agent has finished detecting items.
2006-01-06 14:55:24 2464 cd0 Report REPORT EVENT:
{4F1CAAEA-C004-4BE2-8FE4-4D5A1B0804F5} 2006-01-06
14:55:19-0500 1 153 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Pre-Deployment Check Reporting client status.

 

Note. When I say <<the clients still think they belong to the "Unassigned
Group">> it's because I see it from the WindowsUpdate log on the client.
Otherwise, according to WSUS, everything is normal.. and they belong to the
assigned groups.

 

2006-01-06 14:55:02 2464 444 Agent * WSUS server: http://owpwus02
2006-01-06 14:55:02 2464 444 Agent * WSUS status server: http://owpwus02
2006-01-06 14:55:02 2464 444 Agent * Target group: (Unassigned Computers)

Roberto.. let's get to the basic...

please export the registry key at
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate
and post here, please.

Obviously the clients are /not/ getting updated targeting information, and
that's our best way at getting a clue as to why at this time.


""

 

I agree. Both clients and WSUS server have the same settings:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"WUServer"="http://owpwus02"
"WUStatusServer"="http://owpwus02"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000004
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:00000003
"UseWUServer"=dword:00000001
"DetectionFrequencyEnabled"=dword:00000001
"DetectionFrequency"=dword:00000016
"RebootWarningTimeoutEnabled"=dword:00000001
"RebootWarningTimeout"=dword:00000005
"RebootRelaunchTimeoutEnabled"=dword:00000001
"RebootRelaunchTimeout"=dword:0000000a

 

""

Notably missing from this registry key is a "TargetGroupEnabled" and
"TargetGroup" value, which means that the client -is- configured to use
server-side targeting.

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]

These settings are all correct.

Please try the following:

1. Stop the Automatic Updates service.

2. Remove the registry key and values at
HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate

3. Rename the %windir%\SoftwareDistribution folder to
SoftwareDistribution.old

4. Rename the %windir%\WindowsUpdate.log to WindowsUpdate.log.old

5. Start the Automatic Updates service.

6. Wait 15 minutes.

7. Run this command: 'wuauclt /resetauthorization /detectnow'

8. Wait 15 minutes.

9. Post the new WindowsUpdate.log in its entirety (split it in multiple
messages if necessary).

 

Strange. The "TargetGroupEnabled" reg key is missing also from our internal
WSUS server, and the team that's in charge for the internal WSUS has created
about a hundred WSUS groups for about 5,000 PCs, and I believe that
everything works fine there (we installed/configured the server, then handed
it to the team for WSUS administration).

In any case, followed the directions. Following is the new WindowsUpdate log
from a client:

2006-01-10 07:15:24 3824 bd8 Misc =========== Logging initialized (build:
5.8.0.2469, tz: -0500) ===========
2006-01-10 07:15:24 3824 bd8 Misc = Process: C:\WINNT\system32\svchost.exe
2006-01-10 07:15:24 3824 bd8 Misc = Module: C:\WINNT\system32\wuaueng.dll
2006-01-10 07:15:24 3824 bd8 Service *************
2006-01-10 07:15:24 3824 bd8 Service ** START ** Service: Service startup
2006-01-10 07:15:24 3824 bd8 Service *********
2006-01-10 07:15:24 3824 bd8 Agent * WU client version 5.8.0.2469
2006-01-10 07:15:24 3824 bd8 Agent * WARNING: Failed to obtain SusClientId
2006-01-10 07:15:24 3824 bd8 Agent * Base directory:
C:\WINNT\SoftwareDistribution
2006-01-10 07:15:24 3824 bd8 Agent * Access type: No proxy
2006-01-10 07:15:24 3824 bd8 Agent * Network state: Connected
2006-01-10 07:16:10 3824 bd8 Agent *********** Agent: Initializing Windows
Update Agent ***********
2006-01-10 07:16:10 3824 bd8 Agent *********** Agent: Initializing global
settings cache ***********
2006-01-10 07:16:10 3824 bd8 Agent * WSUS server: http://owpwus02
2006-01-10 07:16:10 3824 bd8 Agent * WSUS status server: http://owpwus02
2006-01-10 07:16:10 3824 bd8 Agent * Target group: (Unassigned Computers)
2006-01-10 07:16:10 3824 bd8 Agent * Windows Update access disabled: No
2006-01-10 07:16:14 3824 bd8 DtaStor Default service for AU is
{00000000-0000-0000-0000-000000000000}
2006-01-10 07:16:14 3824 bd8 DtaStor Default service for AU is
{9482F4B4-E343-43B6-B170-9A65BC822C77}
2006-01-10 07:16:14 3824 bd8 DnldMgr Download manager restoring 0 downloads
2006-01-10 07:16:14 3824 bd8 AU ########### AU: Initializing Automatic
Updates ###########
2006-01-10 07:16:14 3824 bd8 AU AU setting next detection timeout to
2006-01-10 12:16:14
2006-01-10 07:16:14 3824 bd8 AU # WSUS server: http://owpwus02
2006-01-10 07:16:14 3824 bd8 AU # Detection frequency: 22
2006-01-10 07:16:14 3824 bd8 AU # Approval type: Scheduled (Policy)
2006-01-10 07:16:14 3824 bd8 AU # Scheduled install day/time: Every day at
3:00
2006-01-10 07:16:14 3824 bd8 AU # Auto-install minor updates: No (User
preference)
2006-01-10 07:16:14 3824 bd8 AU #############
2006-01-10 07:16:14 3824 bd8 AU ## START ## AU: Search for updates
2006-01-10 07:16:14 3824 bd8 AU #########
2006-01-10 07:16:14 3824 bd8 AU <<## SUBMITTED ## AU: Search for updates
[CallId = {EA388F67-8870-4614-B6D0-63B1EC3DA076}]
2006-01-10 07:16:14 3824 bc8 Agent *************
2006-01-10 07:16:14 3824 bc8 Agent ** START ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2006-01-10 07:16:14 3824 bc8 Agent *********
2006-01-10 07:16:18 3824 bc8 Setup *********** Setup: Checking whether
self-update is required ***********
2006-01-10 07:16:18 3824 bc8 Setup * Inf file:
C:\WINNT\SoftwareDistribution\SelfUpdate\Default\wusetup.inf
2006-01-10 07:16:18 3824 bc8 Setup Update NOT required for
C:\WINNT\system32\cdm.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-01-10 07:16:18 3824 bc8 Setup Update NOT required for
C:\WINNT\system32\iuengine.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-10 07:16:20 3824 bc8 Setup Update NOT required for
C:\WINNT\system32\wuapi.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-01-10 07:16:20 3824 bc8 Setup Update NOT required for
C:\WINNT\system32\wuauclt.exe: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-10 07:16:20 3824 bc8 Setup Update NOT required for
C:\WINNT\system32\wuauclt1.exe: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-10 07:16:21 3824 bc8 Setup Update NOT required for
C:\WINNT\system32\wuaucpl.cpl: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-10 07:16:21 3824 bc8 Setup Update NOT required for
C:\WINNT\system32\wuaueng.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-10 07:16:21 3824 bc8 Setup Update NOT required for
C:\WINNT\system32\wuaueng1.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-10 07:16:21 3824 bc8 Setup Update NOT required for
C:\WINNT\system32\wucltui.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-10 07:16:22 3824 bc8 Setup Update NOT required for
C:\WINNT\system32\wups.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-01-10 07:16:22 3824 bc8 Setup Update NOT required for
C:\WINNT\system32\wups2.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-01-10 07:16:22 3824 bc8 Setup Update NOT required for
C:\WINNT\system32\wuweb.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-01-10 07:16:22 3824 bc8 Setup * IsUpdateRequired = No
2006-01-10 07:16:22 3824 bc8 PT +++++++++++ PT: Synchronizing server
updates +++++++++++
2006-01-10 07:16:22 3824 bc8 PT + ServiceId =
{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
http://owpwus02/ClientWebService/client.asmx
2006-01-10 07:16:30 3824 bc8 PT Initializing simple targeting cookie,
clientId = a211926d-1509-4390-9760-8483a3cc1a97, target group = , DNS name =
octrend02.onetgov.net
2006-01-10 07:16:30 3824 bc8 PT Server URL =
http://owpwus02/SimpleAuthWebService/SimpleAuth.asmx
2006-01-10 07:16:31 3824 bc8 PT +++++++++++ PT: Synchronizing extended
update info +++++++++++
2006-01-10 07:16:31 3824 bc8 PT + ServiceId =
{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
http://owpwus02/ClientWebService/client.asmx
2006-01-10 07:16:31 3824 bc8 Agent * Found 0 updates and 2 categories in
search
2006-01-10 07:16:31 3824 bc8 Report *********** Report: Initializing static
reporting data ***********
2006-01-10 07:16:31 3824 bc8 Report * OS Version = 5.0.2195.4.0.196880
2006-01-10 07:16:31 3824 bc8 Report * Computer Brand = Dell Computer
Corporation
2006-01-10 07:16:31 3824 bc8 Report * Computer Model = PowerEdge 2550

2006-01-10 07:16:31 3824 bc8 Report * Bios Revision = A05
2006-01-10 07:16:31 3824 bc8 Report * Bios Name = Default System BIOS
2006-01-10 07:16:31 3824 bc8 Report * Bios Release Date =
2001-05-25T00:00:00
2006-01-10 07:16:31 3824 bc8 Report * Locale ID = 1033
2006-01-10 07:16:31 3824 bc8 Agent *********
2006-01-10 07:16:31 3824 bc8 Agent ** END ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2006-01-10 07:16:31 3824 bc8 Agent *************
2006-01-10 07:16:31 3824 bc8 AU >>## RESUMED ## AU: Search for updates
[CallId = {EA388F67-8870-4614-B6D0-63B1EC3DA076}]
2006-01-10 07:16:31 3824 bc8 AU # 0 updates detected
2006-01-10 07:16:31 3824 bc8 AU #########
2006-01-10 07:16:31 3824 bc8 AU ## END ## AU: Search for updates [CallId
= {EA388F67-8870-4614-B6D0-63B1EC3DA076}]
2006-01-10 07:16:31 3824 bc8 AU #############
2006-01-10 07:16:31 3824 bc8 AU AU setting next detection timeout to
2006-01-11 09:12:02
2006-01-10 07:16:36 3824 bc8 Report REPORT EVENT:
{FA7148BB-0D3B-4BF2-8AC5-F6F6DF5A5E4A} 2006-01-10
07:16:31-0500 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Software Synchronization Agent has finished detecting items.
2006-01-10 07:16:36 3824 bc8 Report REPORT EVENT:
{D15A278D-D03D-48DB-A75C-4A38247AD0BF} 2006-01-10
07:16:31-0500 1 153 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Pre-Deployment Check Reporting client status.
2006-01-10 07:29:25 3824 bc8 Report Uploading 2 events using cached cookie,
reporting URL = http://owpwus02/ReportingWebService/ReportingWebService.asmx
2006-01-10 07:29:25 3824 bc8 Report Reporter successfully uploaded 2 events.
2006-01-10 07:31:35 3824 fbc AU Triggering AU detection through DetectNow API
2006-01-10 07:31:35 3824 bd8 AU #############
2006-01-10 07:31:35 3824 bd8 AU ## START ## AU: Search for updates
2006-01-10 07:31:35 3824 bd8 AU #########
2006-01-10 07:31:35 3824 bd8 AU <<## SUBMITTED ## AU: Search for updates
[CallId = {89E3677B-E5A2-4B60-BE79-D1BACE0C8089}]
2006-01-10 07:31:35 3824 bc8 Agent *************
2006-01-10 07:31:35 3824 bc8 Agent ** START ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2006-01-10 07:31:35 3824 bc8 Agent *********
2006-01-10 07:31:35 3824 bc8 Setup *********** Setup: Checking whether
self-update is required ***********
2006-01-10 07:31:35 3824 bc8 Setup * Inf file:
C:\WINNT\SoftwareDistribution\SelfUpdate\Default\wusetup.inf
2006-01-10 07:31:36 3824 bc8 Setup Update NOT required for
C:\WINNT\system32\cdm.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-01-10 07:31:36 3824 bc8 Setup Update NOT required for
C:\WINNT\system32\iuengine.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-10 07:31:36 3824 bc8 Setup Update NOT required for
C:\WINNT\system32\wuapi.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-01-10 07:31:36 3824 bc8 Setup Update NOT required for
C:\WINNT\system32\wuauclt.exe: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-10 07:31:36 3824 bc8 Setup Update NOT required for
C:\WINNT\system32\wuauclt1.exe: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-10 07:31:37 3824 bc8 Setup Update NOT required for
C:\WINNT\system32\wuaucpl.cpl: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-10 07:31:37 3824 bc8 Setup Update NOT required for
C:\WINNT\system32\wuaueng.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-10 07:31:38 3824 bc8 Setup Update NOT required for
C:\WINNT\system32\wuaueng1.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-10 07:31:38 3824 bc8 Setup Update NOT required for
C:\WINNT\system32\wucltui.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-01-10 07:31:38 3824 bc8 Setup Update NOT required for
C:\WINNT\system32\wups.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-01-10 07:31:38 3824 bc8 Setup Update NOT required for
C:\WINNT\system32\wups2.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-01-10 07:31:38 3824 bc8 Setup Update NOT required for
C:\WINNT\system32\wuweb.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-01-10 07:31:38 3824 bc8 Setup * IsUpdateRequired = No
2006-01-10 07:31:38 3824 bc8 PT +++++++++++ PT: Synchronizing server
updates +++++++++++
2006-01-10 07:31:38 3824 bc8 PT + ServiceId =
{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
http://owpwus02/ClientWebService/client.asmx
2006-01-10 07:31:38 3824 bc8 PT Initializing simple targeting cookie,
clientId = a211926d-1509-4390-9760-8483a3cc1a97, target group = , DNS name =
octrend02.onetgov.net
2006-01-10 07:31:38 3824 bc8 PT Server URL =
http://owpwus02/SimpleAuthWebService/SimpleAuth.asmx
2006-01-10 07:31:39 3824 bc8 Agent * Found 0 updates and 2 categories in
search
2006-01-10 07:31:39 3824 bc8 Agent *********
2006-01-10 07:31:39 3824 bc8 Agent ** END ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2006-01-10 07:31:39 3824 bc8 Agent *************
2006-01-10 07:31:39 3824 bc8 AU >>## RESUMED ## AU: Search for updates
[CallId = {89E3677B-E5A2-4B60-BE79-D1BACE0C8089}]
2006-01-10 07:31:39 3824 bc8 AU # 0 updates detected
2006-01-10 07:31:39 3824 bc8 AU #########
2006-01-10 07:31:39 3824 bc8 AU ## END ## AU: Search for updates [CallId
= {89E3677B-E5A2-4B60-BE79-D1BACE0C8089}]
2006-01-10 07:31:39 3824 bc8 AU #############
2006-01-10 07:31:39 3824 bc8 AU AU setting next detection timeout to
2006-01-11 07:21:44
2006-01-10 07:31:44 3824 bc8 Report REPORT EVENT:
{4E818649-4EEE-4F1B-A46F-771D6C9EE856} 2006-01-10
07:31:39-0500 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Software Synchronization Agent has finished detecting items.
2006-01-10 07:31:44 3824 bc8 Report REPORT EVENT:
{AD3C57CC-3A35-4871-92B8-037D12CEF58F} 2006-01-10
07:31:39-0500 1 153 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Pre-Deployment Check Reporting client status.
2006-01-10 07:44:30 3824 bc8 Report Uploading 2 events using cached cookie,
reporting URL = http://owpwus02/ReportingWebService/ReportingWebService.asmx
2006-01-10 07:44:31 3824 bc8 Report Reporter successfully uploaded 2 events.

 

This is making us crazy... nothing we try works. In act of desperation, we've
done some packet captures after issuing the 'wuauclt /resetauthorization
/detectnow' command on a client. The binary packet capture is at
ftp://ftp.ocfl.net/divisions/AdminServices/pub/cap.cap. Below is the ASCII
transcript for it:


HEAD /selfupdate/wuident.cab?0601121343 HTTP/1.1
Accept: */*
User-Agent: Windows-Update-Agent
Host: owpwus02
Connection: Keep-Alive

HTTP/1.1 200 OK
Content-Length: 7364
Content-Type: application/octet-stream
Last-Modified: Thu, 26 May 2005 09:42:26 GMT
Accept-Ranges: bytes
ETag: "0ad7839d761c51:61b"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 12 Jan 2006 13:43:53 GMT

HEAD /selfupdate/AU/x86/W2K/en/wusetup.cab?0601121343 HTTP/1.1
Accept: */*
User-Agent: Windows-Update-Agent
Host: owpwus02
Connection: Keep-Alive

HTTP/1.1 200 OK
Content-Length: 15816
Content-Type: application/octet-stream
Last-Modified: Thu, 26 May 2005 09:44:30 GMT
Accept-Ranges: bytes
ETag: "0936183d761c51:61b"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 12 Jan 2006 13:43:53 GMT

GET /selfupdate/AU/x86/W2K/en/wusetup.cab?0601121343 HTTP/1.1
Accept: */*
User-Agent: Windows-Update-Agent
Host: owpwus02
Connection: Keep-Alive

HTTP/1.1 200 OK
Content-Length: 15816
Content-Type: application/octet-stream
Last-Modified: Thu, 26 May 2005 09:44:30 GMT
Accept-Ranges: bytes
ETag: "0936183d761c51:61b"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 12 Jan 2006 13:43:53 GMT

<<<------binary content from stream was removed to simplify
readibility--------->>>


POST /SimpleAuthWebService/SimpleAuth.asmx HTTP/1.1
Accept: text/xml
Content-Type: text/xml
SOAPAction:
"http://www.microsoft.com/SoftwareDistribution/Server/SimpleAuthWebService/GetAuthorizationCookie"
User-Agent: Windows-Update-Agent
Host: owpwus02
Content-Length: 529
Connection: Keep-Alive

<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/"><soap:Body><GetAuthorizationCookie
xmlns="http://www.microsoft.com/SoftwareDistribution/Server/SimpleAuthWebService"><clientId>e065be68-27e6-4a74-9b13-92d279b5c24e</clientId><targetGroupName></targetGroupName><dnsName>octrend02.onetgov.net</dnsName></GetAuthorizationCookie></soap:Body></soap:Envelope>HTTP/1.1 200 OK
Date: Thu, 12 Jan 2006 13:43:54 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 1.1.4322
Cache-Control: private, max-age=0
Content-Type: text/xml; charset=utf-8
Content-Length: 1237

<?xml version="1.0" encoding="utf-8"?><soap:Envelope
xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"><soap:Body><GetAuthorizationCookieResponse
xmlns="http://www.microsoft.com/SoftwareDistribution/Server/SimpleAuthWebService"><GetAuthorizationCookieResult><PlugInId>SimpleTargeting</PlugInId><CookieData>noyPx/docsSCvfMHggMaZlkx9nJ4UxNmurTsa+HtTj38RwYOY1UoRkfqIIVj2A/XQ0dSu7zFR167
tS9WTM4P9KBRVoES9jtAL7N2JQRF5y0DMshKTiifEhj1QdGMmFEUhq7Rq7LsKjAQINAPhp0sGHsb
jEh+md46wSWkOX4iqiefuzoaS49AdHkVzJmA0/wQ8bRlqvBII7SGksAQjeyJAHabBLtTGmIDn4ZO
qFSLnEWYAelUGG9Xd06XqSsTU6XQTU61+4mArJmJPmFJLa6yRxrle0yGPBTbNBI0pDeZRewELcAM
Nec2abhS7kB+Y5tYw8IqSAlF4B5nbHX5opkvDkp0452loJMhxAh+1lvdIRms39eKTmlXPhqAXLOJ
zHvLbgK4WBTfK60tO4gVj9qCyxOcdlNzhLYd+S3dQgO4n4P+ASNYN79YA4SPEwv2KZwGtMSG9fX3
9HLTsYlCr9wptqBdOSnk95czQtz1lU+siqj3aG29Bnvd9t1OyzQCNzu0V2e7SrpFrOnhCQ/6y7SK
X/f/muCntw70M738gYT+Fzg+2Q+B2CrFltLW4IhUu55aD7X34GaI4pshggkJAozT0mjV5P/kyizw
csyUBhNs2+RbAhYqIGZPcv0/4efEItmRfvB4K7QOqHY7q/5pZa1H6OFQ4J9MUUfKiob6PI7vQqj4
A/HipxfYq+HVHT7t7ByX</CookieData></GetAuthorizationCookieResult></GetAuthorizationCookieResponse></soap:Body></soap:Envelope>

POST /ClientWebService/client.asmx HTTP/1.1
Accept: text/xml
Content-Type: text/xml
Accept-Encoding: xpress
SOAPAction:
"http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService/GetCookie"
User-Agent: Windows-Update-Agent
Host: owpwus02
Content-Length: 1888
Connection: Keep-Alive

<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/"><soap:Body><GetCookie
xmlns="http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService"><authCookies
xmlns:q1="http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService"
soapenc:arrayType="q1:AuthorizationCookie[1]"><AuthorizationCookie><PlugInId>SimpleTargeting</PlugInId><CookieData>noyPx/docsSCvfMHggMaZlkx9nJ4UxNmurTsa+HtTj38RwYOY1UoRkfqIIVj2A/XQ0dSu7zFR167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</CookieData></AuthorizationCookie></authCookies><oldCookie><Expiration>2006-01-12T09:33:23.2814590-05:00</Expiration><EncryptedData>4a7oG3RoOc3NGVWpy45rRdBBAYNi6a8dxEyExyw+5ECMgZuYDVAn/Wk+6E7GMoUEyerTxF08CWEz
bRk5/4yjoBM3aEnzKFUoCHYfIVs7KB0Y6TBtAh7O3vGhJ8NuYWb8ZGHn0LQvfyvezRCfi45aOJmZ
Nfv/pds9enimpIgwxMKapBDAf2eXy6HYUNFXi2/Mb74LQ/u5VhJ19NsHqpn6Ib+uUx0QmHqIW08e
LCyY5h5vW1sVLUIc8SCDbgRKKemuZw8/2fMmxjdZoA0CiKJ7VQ==</EncryptedData></oldCookie><lastChange>2006-01-04T19:20:37.0600000-05:00</lastChange><currentTime>2006-01-12T13:43:48Z</currentTime><protocolVersion>1.0</protocolVersion></GetCookie></soap:Body></soap:Envelope>HTTP/1.1 100 Continue

HTTP/1.1 200 OK
Cache-Control: private, max-age=0
Date: Thu, 12 Jan 2006 13:43:54 GMT
Content-Type: text/xml; charset=utf-8
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 1.1.4322
Content-Encoding: xpress
Vary: Accept-Encoding
Transfer-Encoding: chunked

2af
.............<?xml version="1.0" encoding="[email protected]"?><soap:Envelope
...ns:..="httpb$..://schemas......org/A./e../"
.....xsi..wT...ww.w3b.2001/XMLSB.-instance...d..."D.Bo....dy><GetCookieRespons..7.Cmicrosoft.....com/[email protected]/Server/Clie....ntWeby.i....ult><Expirat..>..6-01-12T....09:43:47.9692900-05:00</o.1<Encryp....tedData>EQQPB/1eHPd6+Rz3LfB0+X88....v+/rCP1wLYXh/VHDZ4OX94iwiDn5lS7H....NSCcZqXUu94ovbrZEVnM
RH+6URY8E8....6y4YMqDHQ36KnACbLgnDafMBYC0/MGqF....VlQ5MeBl23WCE90AHEjktkzjjyHqj+Sa....S5
7T1zDrZ/fOjCMolgb0blr5NNEFQ8....KRn7cfWvwSRoghAVMIeXIGo0fIAJ19CA....ICtO60jn26uxnHJZ
wRwVTKeiwni0PR....UlW45uPOyj2N+UhY7t4knaYYRwr+TPuh..?.bz2w==..o.</G.7.........[.Envelope>
0

POST /ClientWebService/client.asmx HTTP/1.1
Accept: text/xml
Content-Type: text/xml
Accept-Encoding: xpress
SOAPAction:
"http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService/SyncUpdates"
User-Agent: Windows-Update-Agent
Host: owpwus02
Content-Length: 1185
Connection: Keep-Alive

<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/"><soap:Body><SyncUpdates
xmlns="http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService"><cookie><Expiration>2006-01-12T09:43:47.9692900-05:00</Expiration><EncryptedData>EQQPB/1eHPd6+Rz3LfB0+X88v+/rCP1wLYXh/VHDZ4OX94iwiDn5lS7HNSCcZqXUu94ovbrZEVnM
RH+6URY8E86y4YMqDHQ36KnACbLgnDafMBYC0/MGqFVlQ5MeBl23WCE90AHEjktkzjjyHqj+SaS5
7T1zDrZ/fOjCMolgb0blr5NNEFQ8KRn7cfWvwSRoghAVMIeXIGo0fIAJ19CAICtO60jn26uxnHJZ
wRwVTKeiwni0PRUlW45uPOyj2N+UhY7t4knaYYRwr+TPuhbz2w==</EncryptedData></cookie><parameters><ExpressQuery>false</ExpressQuery><InstalledNonLeafUpdateIDs
soapenc:arrayType="xsd:int[4]"><int>15</int><int>18</int><int>19</int><int>46</int></InstalledNonLeafUpdateIDs><OtherCachedUpdateIDs
soapenc:arrayType="xsd:int[4]"><int>16</int><int>17</int><int>44</int><int>45</int></OtherCachedUpdateIDs><SystemSpec
xsi:nil="1"/><CachedDriverIDs
xsi:nil="1"/><SkipSoftwareSync>false</SkipSoftwareSync></parameters></SyncUpdates></soap:Body></soap:Envelope>HTTP/1.1 100 Continue

HTTP/1.1 200 OK
Cache-Control: private, max-age=0
Date: Thu, 12 Jan 2006 13:43:54 GMT
Content-Type: text/xml; charset=utf-8
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 1.1.4322
Content-Encoding: xpress
Vary: Accept-Encoding
Transfer-Encoding: chunked

2cd
:...........<?xml version="1.0" encoding="[email protected]"?><soap:Envelope
...ns:..="httpb$..://schemas......org/A./e../"
.....xsi..wT...ww.w3b.2001/XMLSB.-instance...d..."D.Bo....dy><SyncUpdatesRespons..G.cmicrosof....t.com/[email protected]/Server/Cl..`.ientWeby.i....ult><Trunc..d>false</.......<NewCookie><Expirat..>..6-01-12T09....:43:47.9692900-05:00</o.<Encrypx.D....ata>+zFDwIi+kRqMJ+OC3QByNa9F35B5....iWp39ie3BM5KZOppRH5sqLI94hHTKlA5....juFf665vXTwoju5KpYFi1KSb/byV0cF7....GD5bkkagxXwPvtTAbRv4f8klOavTYMSo....BXBWzVCVIKmGcvIgY7cZJ1vGDkIy7VJ9....qopH6yLYDmibzD72ukbOQetYhFAqPA6U....YjeUXFFwLJdi8sYy51qvU7cenKIefKal....3C3zvbqBiAteYCR7BZu5DLSIfzHlkbP9....z7XOILgUDPJReD22UwBOxPp/VA==..?..</..{.../.
I/..pq.><..|.[.%.>
0

POST /ClientWebService/client.asmx HTTP/1.1
Accept: text/xml
Content-Type: text/xml
Accept-Encoding: xpress
SOAPAction:
"http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService/SyncUpdates"
User-Agent: Windows-Update-Agent
Host: owpwus02
Content-Length: 32259
Connection: Keep-Alive

HTTP/1.1 100 Continue

<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/"><soap:Body><SyncUpdates
xmlns="http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService"><cookie><Expiration>2006-01-12T09:43:47.9692900-05:00</Expiration><EncryptedData>+zFDwIi+kRqMJ+OC3QByNa9F35B5iWp39ie3BM5KZOppRH5sqLI94hHTKlA5juFf665vXTwoju5K
pYFi1KSb/byV0cF7GD5bkkagxXwPvtTAbRv4f8klOavTYMSoBXBWzVCVIKmGcvIgY7cZJ1vGDkIy
7VJ9qopH6yLYDmibzD72ukbOQetYhFAqPA6UYjeUXFFwLJdi8sYy51qvU7cenKIefKal3C3zvbqB
iAteYCR7BZu5DLSIfzHlkbP9z7XOILgUDPJReD22UwBOxPp/VA==</EncryptedData></cookie><parameters><ExpressQuery>true</ExpressQuery><InstalledNonLeafUpdateIDs
soapenc:arrayType="xsd:int[4]"><int>15</int><int>18</int><int>19</int><int>46</int></InstalledNonLeafUpdateIDs><OtherCachedUpdateIDs
xsi:nil="1"/><SystemSpec
xmlns:q1="http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService"
soapenc:arrayType="q1evice[61]"><Device><HardwareIDs
soapenc:arrayType="xsd:string[1]"><string>lptenum\hewlett-packardhp_lad7e2</string></HardwareIDs><CompatibleIDs
xsi:nil="1"/><installedDriver><MatchingID>lptenum\hewlett-packardhp_lad7e2</MatchingID><DriverVerDate>1999-11-14</DriverVerDate><DriverVerVersion>-1</DriverVerVersion><Class>Printer</Class><Manufacturer>HP</Manufacturer><Provider>Microsoft
Windows 2000</Provider><Model>HP LaserJet
6L</Model></installedDriver></Device><Device><HardwareIDs
soapenc:arrayType="xsd:string[1]"><string>lptenum\hewlett-packardhp_la576f</string></HardwareIDs><CompatibleIDs
xsi:nil="1"/><installedDriver><MatchingID>lptenum\hewlett-packardhp_la576f</MatchingID><DriverVerDate>1999-11-14</DriverVerDate><DriverVerVersion>-1</DriverVerVersion><Class>Printer</Class><Manufacturer>HP</Manufacturer><Provider>Microsoft
Windows 2000</Provider><Model>HP LaserJet
5Si</Model></installedDriver></Device><Device><HardwareIDs
soapenc:arrayType="xsd:string[1]"><string>hphp_laserjet_5m2bf8</string></HardwareIDs><CompatibleIDs
xsi:nil="1"/><installedDriver><MatchingID>hphp_laserjet_5m2bf8</MatchingID><DriverVerDate>1999-11-14</DriverVerDate><DriverVerVersion>-1</DriverVerVersion><Class>Printer</Class><Manufacturer>HP</Manufacturer><Provider>Microsoft
Windows 2000</Provider><Model>HP LaserJet
5M</Model></installedDriver></Device><Device><HardwareIDs
soapenc:arrayType="xsd:string[1]"><string>lptenum\hewlett-packardhp_la973e</string></HardwareIDs><CompatibleIDs
xsi:nil="1"/><installedDriver><MatchingID>lptenum\hewlett-packardhp_la973e</MatchingID><DriverVerDate>1999-11-14</DriverVerDate><DriverVerVersion>-1</DriverVerVersion><Class>Printer</Class><Manufacturer>HP</Manufacturer><Provider>Microsoft Windows 2000</Provider><Model>HP LaserJet 4Si</Model>


<<<------content from stream was removed to simplify readibility--------->>>


STORAGE\Volume</string></HardwareIDs><CompatibleIDs
xsi:nil="1"/><installedDriver><MatchingID>storage\volume</MatchingID><DriverVerDate>1999-11-14</DriverVerDate><DriverVerVersion>-1</DriverVerVersion><Class>Volume</Class><Manufacturer>Microsoft</Manufacturer><Provider>Microsoft</Provider><Model>Generic
volume</Model></installedDriver></Device></SystemSpec><CachedDriverIDs
xsi:nil="1"/><SkipSoftwareSync>true</SkipSoftwareSync></parameters></SyncUpdates></soap:Body></soap:Envelope>HTTP/1.1 200 OK
Cache-Control: private, max-age=0
Date: Thu, 12 Jan 2006 13:43:55 GMT
Content-Type: text/xml; charset=utf-8
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 1.1.4322
Content-Encoding: xpress
Vary: Accept-Encoding
Transfer-Encoding: chunked

2cc
:...........<?xml version="1.0" encoding="[email protected]"?><soap:Envelope
...ns:..="httpb$..://schemas......org/A./e../"
.....xsi..wT...ww.w3b.2001/XMLSB.-instance...d..."D.Bo....dy><SyncUpdatesRespons..G.cmicrosof....t.com/[email protected]/Server/Cl..`.ientWeby.i....ult><Trunc..d>false</.......<NewCookie><Expirat..>..6-01-12T09....:43:47.9692900-05:00</o.<Encrypx.D....ata>VtOATlvx1aptTWaAFRiCh90JNOpF....Sz3DEPCBM0GuiK6PaR48Khr/uQbji6k3..../BkgIxCUvHVtQ+YC3TEcBGddNFRH6g4H....HvZvwsgJwEGdP7u8bDPVG19bkU0snktH....38YgdcYnW5qJUC03dea/CCsRnoF+kx3f....Wwr/Jr69XE9x4DpyRQyA1xEEk3ipe0fy....vxVq3jb0mpO8oRikYOiev3yFBQcFIs4G....bz2CDHbLCD5EfDkwq6Sx0dAdWkXrGSvo....yhyKMjrOArVFTlZL+tzX/+zVEg==</?..<..{V/../.
I/..r.><..|.[.%.>
0

 

Potentially found a problem.

Please look at the following sequence below, and note the

HTTP/1.1 100 Continue

sent by the server during the POST stream. I had read about similar issues
before on newsgroups, so we have alreade applied the hotfix for the KB898708
which addresses "FIX: IIS 6.0 may send an "HTTP 100 Continue" response in the
middle of the response stream when you send a POST request".

Am I reading the packet trace correctly and seing that IIS is still
interrupting the POST stream by sending the HTTP/1.1 100 response? Could this
very well be the cause of all this?



POST /ClientWebService/client.asmx HTTP/1.1
Accept: text/xml
Content-Type: text/xml
Accept-Encoding: xpress
SOAPAction:
"http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService/SyncUpdates"
User-Agent: Windows-Update-Agent
Host: owpwus02
Content-Length: 32259
Connection: Keep-Alive

HTTP/1.1 100 Continue

<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/"><soap:Body><SyncUpdates
xmlns="http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService"><cookie><Expiration>2006-01-12T09:43:47.9692900-05:00</Expiration><EncryptedData>+zFDwIi+kRqMJ+OC3QByNa9F35B5iWp39ie3BM5KZOppRH5sqLI94hHTKlA5juFf665vXTwoju5K
pYFi1KSb/byV0cF7GD5bkkagxXwPvtTAbRv4f8klOavTYMSoBXBWzVCVIKmGcvIgY7cZJ1vGDkIy
7VJ9qopH6yLYDmibzD72ukbOQetYhFAqPA6UYjeUXFFwLJdi8sYy51qvU7cenKIefKal3C3zvbqB
iAteYCR7BZu5DLSIfzHlkbP9z7XOILgUDPJReD22UwBOxPp/VA==</EncryptedData></cookie><parameters><ExpressQuery>true</ExpressQuery><InstalledNonLeafUpdateIDs
soapenc:arrayType="xsd:int[4]"><int>15</int><int>18</int><int>19</int><int>46</int></InstalledNonLeafUpdateIDs><OtherCachedUpdateIDs
xsi:nil="1"/><SystemSpec
xmlns:q1="http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService"
soapenc:arrayType="q1evice[61]"><Device><HardwareIDs
soapenc:arrayType="xsd:string[1]"><string>lptenum\hewlett-packardhp_lad7e2</string></HardwareIDs><CompatibleIDs
xsi:nil="1"/><installedDriver><MatchingID>lptenum\hewlett-packardhp_lad7e2</MatchingID><DriverVerDate>1999-11-14</DriverVerDate><DriverVerVersion>-1</DriverVerVersion><Class>Printer</Class><Manufacturer>HP</Manufacturer><Provider>Microsoft
Windows 2000</Provider><Model>HP LaserJet
6L</Model></installedDriver></Device><Device><HardwareIDs
soapenc:arrayType="xsd:string[1]"><string>lptenum\hewlett-packardhp_la576f</string></HardwareIDs><CompatibleIDs
xsi:nil="1"/><installedDriver><MatchingID>lptenum\hewlett-packardhp_la576f</MatchingID><DriverVerDate>1999-11-14</DriverVerDate><DriverVerVersion>-1</DriverVerVersion><Class>Printer</Class><Manufacturer>HP</Manufacturer><Provider>Microsoft
Windows 2000</Provider><Model>HP LaserJet
5Si</Model></installedDriver></Device><Device><HardwareIDs
soapenc:arrayType="xsd:string[1]"><string>hphp_laserjet_5m2bf8</string></HardwareIDs><CompatibleIDs
xsi:nil="1"/><installedDriver><MatchingID>hphp_laserjet_5m2bf8</MatchingID><DriverVerDate>1999-11-14</DriverVerDate><DriverVerVersion>-1</DriverVerVersion><Class>Printer</Class><Manufacturer>HP</Manufacturer><Provider>Microsoft
Windows 2000</Provider><Model>HP LaserJet
5M</Model></installedDriver></Device><Device><HardwareIDs
soapenc:arrayType="xsd:string[1]"><string>lptenum\hewlett-packardhp_la973e</string></HardwareIDs><CompatibleIDs
xsi:nil="1"/><installedDriver><MatchingID>lptenum\hewlett-packardhp_la973e</MatchingID><DriverVerDate>1999-11-14</DriverVerDate><DriverVerVersion>-1</DriverVerVersion><Class>Printer</Class><Manufacturer>HP</Manufacturer><Provider>Microsoft Windows 2000</Provider><Model>HP LaserJet 4Si</Model>


<<<------content from stream was removed to simplify readibility--------->>>