Clients not downloading WSUS updates from server.

[CHR1S]

I have a virtual server with IIS and WSUS and the catalog files on a core server with passthrough authentication enabled.

 

All of the clients are reporting back with these errors -

 

DnldMgr CUpdateDownloadJob::GetNetworkCostSwitch() Neither unrestricted or restricted network cost used, so using current cost

2013-11-25 11:54:23:124 896 1130 DnldMgr WARNING: Download job failed because of proxy auth or server auth.

2013-11-25 11:54:23:124 896 dec DnldMgr WARNING: Got error (hr = 80240008) starting update 0 in call 1. Notifying call.

2013-11-25 11:54:23:140 896 5e0 DnldMgr WARNING: BITS job {A3CA8CC0-C0D1-4356-9B56-0793DC6B4020} failed, updateId = {7B6FA0CC-B591-4477-9602-208F877CBE85}.201, hr = 0x80190191, BG_ERROR_CONTEXT = 5

2013-11-25 11:54:23:140 896 5e0 DnldMgr Progress failure bytes total = 1577921, bytes transferred = 0

2013-11-25 11:54:23:140 896 5e0 DnldMgr Failed job file: URL = http://wsus:8530/Content/DE/2897D659A65BD4B51D38800186730F16B55BB2DE.cab, local path = C:\Windows\SoftwareDistribution\Download\124ae75656035a660b420d97601dd1b8\windows8-rt-kb2877211-x64.cab

2013-11-25 11:54:23:140 896 9e8 AU AU checked download status and it changed: Downloading is paused

 

then

 

PT +++++++++++ PT: Synchronizing extended update info +++++++++++

2013-11-25 11:54:25:941 896 3e0 PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://wsus:8530/ClientWebService/client.asmx

2013-11-25 11:54:33:573 896 3e0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80190191

2013-11-25 11:54:33:573 896 3e0 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80190191

2013-11-25 11:54:33:573 896 3e0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80190191

2013-11-25 11:54:33:573 896 3e0 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80190191

2013-11-25 11:54:33:588 896 3e0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80190191

2013-11-25 11:54:33:588 896 3e0 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80190191

2013-11-25 11:54:33:604 896 3e0 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80190191

2013-11-25 11:54:33:604 896 3e0 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80190191

 

I know its either a proxy or permissions error but I have removed the proxy for testing, and checked the folder and web permissions too.

 

Anyone care to help?

[dmanning]

Try adding your domain to your local intranet settings in Internet Explorer. Internet Options --> Security Tab --> Sites --> Advanced --> Add

I'd put in the FQDN too.

[CHR1S]

I have tried with and without proxy, with and without exclusions. Get the same issues.

[dmanning]

Try this thread ... post number 6 and beyond ... seems similar to your issue:

 

Download failed, error = 0x80244017 - WSUS Support Forums

[dmanning]

If that thread doesn't help then the only things I can think of are:

 

1. Change http://wsus:8530 in your GPO to your FQDN ( http://wsus.contoso.com:8530 )

2. Double check and see if it was installed on port 80 instead of 8530 ... then you would just need http://wsus.contoso.com for your WSUS settings

3. Make sure port 8530 is open on the Windows Firewall on the WSUS server

[browolf]

sure you removed the right proxy? winhttp has its own proxy independent of the rest of windows.

[bossman]

@CHR1S:

 

Have you changed the password for the user who initiates the updates?

 

You are still on CC4 are you not?

 

Have you done a clean up from within WSUS to create space, I had to move WSUS from DC to Secondary DC because of this,

 

Just looking at things logically

[CHR1S]

Brand new server, domain, install et al

 

This is a fresh install from the ground up.

@browolf

netsh winhttp reset proxy

is what I used Edited November 26, 2013 by CHR1S

[browolf]

Oh you know about that. Well if you have a proxy onsite? Winhttp is going to have to use it. By default winhttp has no proxy.

netsh winhttp set proxy ip:port

[CHR1S]

If I add the winhttp proxy I still get the same errors (with the bypass in place) I also get the servers stop reporting in SMC with 502 errors.

[browolf]

If I add the winhttp proxy I still get the same errors (with the bypass in place) I also get the servers stop reporting in SMC with 502 errors.

 

what kind of proxy is it?

[CHR1S]

Was an upstream squid, now its a "loadbalancer" yes thats the official title the LEA give it.

[CHR1S]

well I have ensured my local bypass settings are in and used netsh winhttp import proxy source =ie to check a couple of PCs/servers...

 

fingers crossed

[CHR1S]

New errors after tweaking my proxy settings -

 

2013-11-29 09:51:16:445 896 a4 DnldMgr WARNING: Download job failed because of proxy auth or server auth.

2013-11-29 09:51:16:445 896 12f4 DnldMgr WARNING: Got error (hr = 80240008) starting update 0 in call 1. Notifying call.

 

and

 

2013-11-29 09:51:06:563 896 314 Misc WARNING: WinHttp: SendRequestUsingProxy failed for . error 0x800710dd

2013-11-29 09:51:06:563 896 314 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x800710dd

2013-11-29 09:51:06:563 896 314 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x800710dd

2013-11-29 09:51:06:563 896 314 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x800710dd

 

Now the proxy is unauthenticated and the correct bypasses are in place ;IP of entire scope.*;*.fqdn

 

could it be IIS user permissions now?

[CHR1S]

After further tinkering I'm down to 1 error now -

 

WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80190191

 

Error 0x800710dd fixed with -

 

Check in the IIS Manager to see what authentication type is enabled on the directories that are part of the WSUS Server. Windows Integrated Authentication needs to be enabled on the "SimpleAuthWebService", "Content", "ClientWebService", "ReportingWebService" and the "SelfUpdate" folders. After correcting this, all my clients are making successful connections and downloading approved updates, as well as reporting to the server that the client exists and is using the Windows Server Update Services server.

 

New error -

 

WARNING: The server returned HTTP status code '401 (0x191)' with text 'Unauthorized'.

 

So it is a permissions problem......

Edited November 29, 2013 by CHR1S

[dmanning]

What are you using for your proxy server? TMG?

[CHR1S]

As I "fixed" one thing another broke.

 

I removed it from a virtual server and am now installing it on a physical with the content store local. Lets see if this works.

[CHR1S]

So it seems WSUS does not like running on a virtual server.

 

All seems ok on a real one touch wood!!