Windows 10 clients not reporting to WSUS
the majority (roughly two-thirds) of windows 10 clients aren't reporting our wsus server running on 2012r2. seems windows 10 clients having issues, of our windows 7 machines working fine.
i can't find connection between machines are/aren't having problems, they're running 1511, deployed same mdt reference image, use same wsus server receive updates, , members of same groups.
- i verified urls being pushed broken client via gpo correct, , they're http certificate trust isn't issue.
- i've verified broken client can download self-update tree accessing $base/selfupdate/wuident.cab
- i've tried resetting wsus authorization & sid.
- i've tried running troubleshooter (which passes) , manually restting windows update component.
- if browse $base/reportingwebservice/reportingwebservice.asmx client receive asp enable remote debugging message, browsing sus server displays "invalidoperationexception: request format unrecognized". added httpget , httppost web.config in reportingwebservice directory, restart iis & sus , receive same result.
here's censored windowsupdate.log sample compiled using get-windowsupdatelog:
2016/10/24 08:11:32.7554648 12852 8676 misc got wsus client/server url: http://sus.domain.xyz:8530/clientwebservice/client.asmx"" 2016/10/24 08:11:32.7555998 12852 8676 protocoltalker ok reuse existing configuration 2016/10/24 08:11:32.7556046 12852 8676 protocoltalker existing cookie valid, use 2016/10/24 08:11:32.7556059 12852 8676 protocoltalker ptinfo: server requested registration 2016/10/24 08:11:32.7839951 12852 8676 misc got wsus reporting url: http://sus.domain.xyz:8530/reportingwebservice/reportingwebservice.asmx"" 2016/10/24 08:11:32.7840144 12852 8676 webservices failed in cnwshelper::tows_datetime(&dest->timeattarget, timeattarget): 0x80070057 2016/10/24 08:11:32.7840153 12852 8676 webservices failed in basicdata4.tonws(dest->basicdata): 0x80070057 2016/10/24 08:11:32.7840166 12852 8676 webservices failed in (tonwsstructpointerarray<legacyreportingservice::reportingevent, suslegacyreportingevent>)( &_eventbatchcount, &_eventbatch, eventbatchcount, eventbatch): 0x80070057 2016/10/24 08:19:34.4645830 12852 8676 misc got wsus client/server url: http://sus.domain.xyz:8530/clientwebservice/client.asmx"" 2016/10/24 08:19:34.4647819 12852 8676 protocoltalker ok reuse existing configuration 2016/10/24 08:19:34.4647906 12852 8676 protocoltalker existing cookie valid, use 2016/10/24 08:19:34.4647918 12852 8676 protocoltalker ptinfo: server requested registration 2016/10/24 08:19:35.0175816 12852 8676 misc got wsus reporting url: http://sus.domain.xyz:8530/reportingwebservice/reportingwebservice.asmx"" 2016/10/24 08:19:35.0175951 12852 8676 webservices failed in cnwshelper::tows_datetime(&dest->timeattarget, timeattarget): 0x80070057 2016/10/24 08:19:35.0175957 12852 8676 webservices failed in basicdata4.tonws(dest->basicdata): 0x80070057 2016/10/24 08:19:35.0175967 12852 8676 webservices failed in (tonwsstructpointerarray<legacyreportingservice::reportingevent, suslegacyreportingevent>)( &_eventbatchcount, &_eventbatch, eventbatchcount, eventbatch): 0x80070057 2016/10/24 08:21:34.4443704 12852 4312 agent earliest future timer found: 2016/10/24 08:21:34.4443800 12852 4312 agent timer: 29a863e7-8609-4d1e-b7cd-5668f857f1db, expires 2016-10-24 17:30:15, not idle-only, not network-only 2016/10/24 08:21:34.4642873 12852 4312 misc createsessionstatechangetrigger, type:2, enable:no 2016/10/24 08:21:34.4643794 12852 4312 misc createsessionstatechangetrigger, type:4, enable:no 2016/10/24 08:21:35.5073667 12852 4312 agent timer: 855e8a7c-ecb4-4ca3-b045-1dfa50104289, expires 2016-10-20 09:40:24, not idle-only, <null>network-only 2016/10/24 08:21:35.5600436 12852 4312 shared * end * service exit exit code = 0x240001 2016/10/24 08:28:16.5809935 17248 24944 shared * start * service startup 2016/10/24 08:28:16.6364547 17248 24944 agent wu client version 10.0.10586.545 2016/10/24 08:28:16.6366705 17248 24944 agent sleepstudytracker: machine non-aoac. sleep study tracker disabled. 2016/10/24 08:28:16.6367898 17248 24944 agent base directory: c:\windows\softwaredistribution 2016/10/24 08:28:16.6389099 17248 24944 shared updatenetworkstate ipv6, cnetworkinterfaces = 2. 2016/10/24 08:28:16.6390308 17248 24944 shared updatenetworkstate ipv4, cnetworkinterfaces = 3. 2016/10/24 08:28:16.6425198 17248 24944 shared network state: connected 2016/10/24 08:28:16.7024355 17248 24944 misc loadhistoryeventfromregistry completed, hr = 8024000c 2016/10/24 08:28:16.7727832 17248 24944 datastore service 3da21691-e39d-4da6-8a4b-b43877bcb1b7 added 2016/10/24 08:28:16.7742162 17248 24944 datastore service 9482f4b4-e343-43b6-b170-9a65bc822c77 added 2016/10/24 08:28:16.7743904 17248 24944 datastore data store created 2016/10/24 08:28:16.7774105 17248 24944 shared updatenetworkstate ipv6, cnetworkinterfaces = 2. 2016/10/24 08:28:16.7774162 17248 24944 shared updatenetworkstate ipv4, cnetworkinterfaces = 3. 2016/10/24 08:28:16.7774204 17248 24944 shared power status changed 2016/10/24 08:28:16.7779512 17248 24944 agent initializing global settings cache 2016/10/24 08:28:16.7779516 17248 24944 agent wsus server: http://sus.domain.xyz:8530 2016/10/24 08:28:16.7779519 17248 24944 agent wsus status server: http://sus.domain.xyz:8530 2016/10/24 08:28:16.7779522 17248 24944 agent target group: (unassigned computers) 2016/10/24 08:28:16.7779525 17248 24944 agent windows update access disabled: no 2016/10/24 08:28:16.7854469 17248 24944 agent initializing windows update agent 2016/10/24 08:28:16.7855255 17248 24944 downloadmanager download manager restoring 0 downloads 2016/10/24 08:28:16.7855746 17248 24944 agent cpersistenttimeoutscheduler | gettimer, returned hr = 0x80248007 2016/10/24 08:28:16.7855803 17248 24944 agent cpersistenttimeoutevent | resubscribe, no existing/cached timer id=29a863e7-8609-4d1e-b7cd-5668f857f1db. 2016/10/24 08:28:16.7855855 17248 24944 agent adding timer: 2016/10/24 08:28:16.7855893 17248 24944 agent timer: 29a863e7-8609-4d1e-b7cd-5668f857f1db, expires 2016-10-25 12:28:16, not idle-only, not network-only 2016/10/24 08:28:16.7881139 17248 11636 downloadmanager purgeexpiredfiles::found 0 expired files delete. 2016/10/24 08:28:16.7881235 17248 11636 downloadmanager purgeexpiredupdates::found 0 non expired updates. 2016/10/24 08:28:16.7881276 17248 11636 downloadmanager purgeexpiredupdates::found 0 expired updates. 2016/10/24 08:28:16.7890953 17248 11636 shared effective power state: ac 2016/10/24 08:28:16.7890960 17248 11636 downloadmanager power state change detected. source now: ac 2016/10/24 08:30:10.8332293 17248 24944 agent earliest future timer found: 2016/10/24 08:30:10.8332377 17248 24944 agent timer: 29a863e7-8609-4d1e-b7cd-5668f857f1db, expires 2016-10-25 12:28:16, not idle-only, not network-only 2016/10/24 08:30:10.9986665 17248 24944 misc wutaskmanager couldn't register scheduled start task, hr=80070003 2016/10/24 08:30:12.0546893 17248 24944 shared * end * service exit exit code = 0x240001 2016/10/24 08:31:29.4928560 3184 3760 agent wu client version 10.0.10586.545 2016/10/24 08:31:29.4938307 3184 3760 agent sleepstudytracker: machine non-aoac. sleep study tracker disabled. 2016/10/24 08:31:29.4939731 3184 3760 agent base directory: c:\windows\softwaredistribution 2016/10/24 08:31:29.4956089 3184 3760 shared updatenetworkstate ipv6, cnetworkinterfaces = 2. 2016/10/24 08:31:29.4957096 3184 3760 shared updatenetworkstate ipv4, cnetworkinterfaces = 3. 2016/10/24 08:31:29.4982264 3184 3760 shared network state: connected 2016/10/24 08:31:29.5274356 3184 3760 misc loadhistoryeventfromregistry completed, hr = 8024000c 2016/10/24 08:31:29.5514554 3184 3760 shared updatenetworkstate ipv6, cnetworkinterfaces = 2. 2016/10/24 08:31:29.5514612 3184 3760 shared updatenetworkstate ipv4, cnetworkinterfaces = 3. 2016/10/24 08:31:29.5514657 3184 3760 shared power status changed 2016/10/24 08:31:29.5647389 3184 3760 agent initializing global settings cache 2016/10/24 08:31:29.5647395 3184 3760 agent wsus server: http://sus.domain.xyz:8530 2016/10/24 08:31:29.5647398 3184 3760 agent wsus status server: http://sus.domain.xyz:8530 2016/10/24 08:31:29.5647402 3184 3760 agent target group: (unassigned computers) 2016/10/24 08:31:29.5647405 3184 3760 agent windows update access disabled: no 2016/10/24 08:31:29.5669061 3184 3760 agent timer: 29a863e7-8609-4d1e-b7cd-5668f857f1db, expires 2016-10-25 12:28:16, not idle-only, not network-only 2016/10/24 08:31:29.6683898 3184 3760 agent initializing windows update agent 2016/10/24 08:31:29.6686631 3184 3760 downloadmanager download manager restoring 0 downloads 2016/10/24 08:31:29.6688805 3184 3760 agent cpersistenttimeoutscheduler | gettimer, returned hr = 0x00000000 2016/10/24 08:31:30.7136802 3184 5052 downloadmanager purgeexpiredfiles::found 0 expired files delete. 2016/10/24 08:31:30.7136892 3184 5052 downloadmanager purgeexpiredupdates::found 0 non expired updates. 2016/10/24 08:31:30.7136911 3184 5052 downloadmanager purgeexpiredupdates::found 0 expired updates. 2016/10/24 08:31:30.7144750 3184 5052 shared effective power state: ac 2016/10/24 08:31:30.7144756 3184 5052 downloadmanager power state change detected. source now: ac 2016/10/24 08:34:22.1491871 1836 8712 comapi * start * init search clientid = updateorchestrator 2016/10/24 08:34:22.1491942 1836 8712 comapi * start * search clientid = updateorchestrator 2016/10/24 08:34:22.3249086 3184 4168 agent failed duplicate handle error 80070006. 2016/10/24 08:34:22.3256937 1836 8712 comapi search clientid = updateorchestrator 2016/10/24 08:35:45.8513616 17760 13452 appau * start * finding app updates 2016/10/24 08:35:45.8514530 17760 13452 appau * end * finding app updates, exit code = 0x00000000 2016/10/24 08:38:40.0631878 15540 17492 appau * start * finding app updates 2016/10/24 08:38:40.0632272 15540 17492 appau * end * finding app updates, exit code = 0x00000000 2016/10/24 08:44:22.3295330 3184 5964 agent earliest future timer found: 2016/10/24 08:44:22.3295471 3184 5964 agent timer: 29a863e7-8609-4d1e-b7cd-5668f857f1db, expires 2016-10-25 12:28:16, not idle-only, not network-only 2016/10/24 08:44:23.3542919 3184 3760 agent earliest future timer found: 2016/10/24 08:44:23.3542983 3184 3760 agent timer: 29a863e7-8609-4d1e-b7cd-5668f857f1db, expires 2016-10-25 12:28:16, not idle-only, not network-only 2016/10/24 08:44:23.3595405 3184 3760 misc createsessionstatechangetrigger, type:2, enable:no 2016/10/24 08:44:23.3600697 3184 3760 misc createsessionstatechangetrigger, type:4, enable:no 2016/10/24 08:44:23.3850271 3184 3760 agent sending shutdown notification client 2016/10/24 08:44:24.4216578 3184 3760 shared * end * service exit exit code = 0x240001 2016/10/24 08:45:45.2045577 16124 8784 agent wu client version 10.0.10586.545 2016/10/24 08:45:45.2048419 16124 8784 agent sleepstudytracker: machine non-aoac. sleep study tracker disabled. 2016/10/24 08:45:45.2051293 16124 8784 agent base directory: c:\windows\softwaredistribution 2016/10/24 08:45:45.2093281 16124 8784 shared updatenetworkstate ipv6, cnetworkinterfaces = 2. 2016/10/24 08:45:45.2094435 16124 8784 shared updatenetworkstate ipv4, cnetworkinterfaces = 3. 2016/10/24 08:45:45.2135025 16124 8784 shared network state: connected 2016/10/24 08:45:45.2326439 16124 8784 misc loadhistoryeventfromregistry completed, hr = 8024000c 2016/10/24 08:45:45.2539192 16124 12920 agent initializing global settings cache 2016/10/24 08:45:45.2539196 16124 12920 agent wsus server: http://sus.domain.xyz:8530 2016/10/24 08:45:45.2539199 16124 12920 agent wsus status server: http://sus.domain.xyz:8530 2016/10/24 08:45:45.2539202 16124 12920 agent target group: (unassigned computers) 2016/10/24 08:45:45.2539205 16124 12920 agent windows update access disabled: no 2016/10/24 08:45:45.2542047 16124 8784 shared updatenetworkstate ipv6, cnetworkinterfaces = 2. 2016/10/24 08:45:45.2542098 16124 8784 shared updatenetworkstate ipv4, cnetworkinterfaces = 3. 2016/10/24 08:45:45.2542143 16124 8784 shared power status changed 2016/10/24 08:45:45.2571687 16124 12920 agent timer: 29a863e7-8609-4d1e-b7cd-5668f857f1db, expires 2016-10-25 12:28:16, not idle-only, not network-only 2016/10/24 08:45:45.2635761 16124 12920 agent initializing windows update agent 2016/10/24 08:45:45.2638618 16124 12920 downloadmanager download manager restoring 0 downloads 2016/10/24 08:45:45.2640816 16124 12920 agent cpersistenttimeoutscheduler | gettimer, returned hr = 0x00000000 2016/10/24 08:45:45.2665041 1140 5464 comapi *queued* sls discovery 2016/10/24 08:45:45.2715583 16124 18356 sls retrieving sls response server... 2016/10/24 08:45:45.2730186 16124 18356 sls making request url https://sls.update.microsoft.com/sls/{9482f4b4-e343-43b6-b170-9a65bc822c77}/x64/10.0.10586.0/0?ch=982&l=en-us&p=&pt=0x30&wua=10.0.10586.545 2016/10/24 08:45:46.0971464 16124 17804 downloadmanager purgeexpiredfiles::found 0 expired files delete. 2016/10/24 08:45:46.0971583 16124 17804 downloadmanager purgeexpiredupdates::found 0 non expired updates. 2016/10/24 08:45:46.0971602 16124 17804 downloadmanager purgeexpiredupdates::found 0 expired updates. 2016/10/24 08:45:46.0982722 16124 17804 shared effective power state: ac 2016/10/24 08:45:46.0982729 16124 17804 downloadmanager power state change detected. source now: ac 2016/10/24 08:45:46.5696196 16124 18356 misc validating signature c:\windows\softwaredistribution\sls\9482f4b4-e343-43b6-b170-9a65bc822c77\sls.cab dwprovflags 0x00000080: 2016/10/24 08:45:46.5767891 16124 18356 misc microsoft signed: na 2016/10/24 08:45:46.5772474 16124 18356 misc infrastructure signed: yes 2016/10/24 08:45:46.5832667 16124 18356 misc validating signature c:\windows\softwaredistribution\sls\9482f4b4-e343-43b6-b170-9a65bc822c77\tmp125b.tmp dwprovflags 0x00000080: 2016/10/24 08:45:46.5863551 16124 18356 misc microsoft signed: na 2016/10/24 08:45:46.5864020 16124 18356 misc infrastructure signed: yes 2016/10/24 08:45:46.5886253 16124 18356 sls retrieving sls response server... 2016/10/24 08:45:46.5890006 16124 18356 sls making request url https://sls.update.microsoft.com/sls/{855e8a7c-ecb4-4ca3-b045-1dfa50104289}/x64/10.0.10586.0/0?ch=982&l=en-us&p=&pt=0x30&wua=10.0.10586.545 2016/10/24 08:45:46.6346563 16124 18356 misc validating signature c:\windows\softwaredistribution\sls\855e8a7c-ecb4-4ca3-b045-1dfa50104289\sls.cab dwprovflags 0x00000080: 2016/10/24 08:45:46.6378457 16124 18356 misc microsoft signed: na 2016/10/24 08:45:46.6378935 16124 18356 misc infrastructure signed: yes 2016/10/24 08:45:46.6452404 16124 18356 misc validating signature c:\windows\softwaredistribution\sls\855e8a7c-ecb4-4ca3-b045-1dfa50104289\tmp129a.tmp dwprovflags 0x00000080: 2016/10/24 08:45:46.6482319 16124 18356 misc microsoft signed: na 2016/10/24 08:45:46.6482797 16124 18356 misc infrastructure signed: yes 2016/10/24 08:45:46.6605188 1140 2304 comapi *resumed* discovery 2016/10/24 08:45:46.6605686 1140 2304 api * end * discovery clientid 2016/10/24 08:45:49.9894186 1140 5464 comapi isusinternal:: disconnectcall failed, hr=8024000c 2016/10/24 08:45:50.0425591 1140 2284 comapi * start * sls discovery 2016/10/24 08:45:50.0432647 1140 2284 comapi *queued* sls discovery 2016/10/24 08:45:50.0447305 1140 5496 comapi *resumed* discovery 2016/10/24 08:45:50.0447626 1140 5496 api * end * discovery clientid 2016/10/24 08:45:50.0454310 1140 2284 comapi isusinternal:: disconnectcall failed, hr=8024000c 2016/10/24 08:55:50.0394765 16124 12920 agent earliest future timer found: 2016/10/24 08:55:50.0394896 16124 12920 agent timer: 29a863e7-8609-4d1e-b7cd-5668f857f1db, expires 2016-10-25 12:28:16, not idle-only, not network-only 2016/10/24 08:55:51.0645641 16124 8784 agent earliest future timer found: 2016/10/24 08:55:51.0645699 16124 8784 agent timer: 29a863e7-8609-4d1e-b7cd-5668f857f1db, expires 2016-10-25 12:28:16, not idle-only, not network-only 2016/10/24 08:55:51.0695801 16124 8784 misc createsessionstatechangetrigger, type:2, enable:no 2016/10/24 08:55:51.0702963 16124 8784 misc createsessionstatechangetrigger, type:4, enable:no 2016/10/24 08:55:52.1023466 16124 8784 shared * end * service exit exit code = 0x240001
after quite bit of troubleshooting , comparing working clients defunct clients have figured out.
the service type on windows update service somehow set "own" on defunct clients, default service "share". changing service type share using below command, rebooting resolved issue.
sc.exe config wuauserv type=share
while defunct clients set "own" type able pull windows updates using public sources when disabled configuration pointed them our wsus server source, https internal source service type of own might work, haven't tested that.
Windows Server > WSUS
Comments
Post a Comment