talksr Posted January 30, 2014 Posted January 30, 2014 Hi, I am working with a school who have a Windows Server 2008 R2 which has not been able to check for and install Windows Updates for almost 2 years. Each time you ask it to manually check, it throws up and error saying it is unable to retrieve any. I will attach some event log messages when I log into it this morning and post up on here. It is not running WSUS, I am talking about updating just the server its self, not anything else. Does anyone have any idea what steps I should take to resolve this issue?
newpersn Posted January 30, 2014 Posted January 30, 2014 Check if the server is applying any GP that contain WSUS information. As with what @Galway said. Make sure you got the latest Service pack. (SP1)
Dos_Box Posted January 30, 2014 Posted January 30, 2014 Have you tried deleting\removing the updates folder (\Windows\SoftwareDistribution) and rebooting? Whilst Microsoft say this is not advisable, it is often the only way to get your server to redetect and install updates if you have corrupt files in there preventing the updates from either being downloaded or installed. You have to first stop the Windows Update service then rename the folder (SoftwareDistributionOld will do) and reboot. You can delete the folder, but for safeties sake I think a rename will do. Please bare in mind that this is undertaken at your own risk! 1
GeekyPete Posted January 30, 2014 Posted January 30, 2014 (edited) Is there anything blocking the updates? Check your firewall/Proxy to make sure that the update service is allowed. EDIT: We have exceptions entered for; update.microsoft.com windowsupdate.com windowsupdate.microsoft.com Edited January 30, 2014 by GeekyPete 1
talksr Posted January 30, 2014 Author Posted January 30, 2014 Hi there, thanks for all of your helpful posts. It doesn't look like it does have SP1, so I am in the process of downloading it and will attempt to manually install it. Each time I go to check updates, I get: Windows could not search for new updates An error occured while checking for new updates on your computer. Error(s) found: Code: 80070005 Windows update encountered an unknown error. The firewall has been completely turned off by a previous engineer so that rules firewall restrictions off of the list.
newpersn Posted January 30, 2014 Posted January 30, 2014 Hi there, thanks for all of your helpful posts. It doesn't look like it does have SP1, so I am in the process of downloading it and will attempt to manually install it. Each time I go to check updates, I get: Windows could not search for new updates An error occured while checking for new updates on your computer. Error(s) found: Code: 80070005 Windows update encountered an unknown error. The firewall has been completely turned off by a previous engineer so that rules firewall restrictions off of the list. Quick google of that error, means permissions. Are you down on the local user groups an administrator?
talksr Posted January 30, 2014 Author Posted January 30, 2014 Quick google of that error, means permissions. Are you down on the local user groups an administrator? Yup, logged in as administrator. Tried this whilst waiting for download: Have you tried deleting\removing the updates folder (\Windows\SoftwareDistribution) and rebooting? Whilst Microsoft say this is not advisable, it is often the only way to get your server to redetect and install updates if you have corrupt files in there preventing the updates from either being downloaded or installed. You have to first stop the Windows Update service then rename the folder (SoftwareDistributionOld will do) and reboot. You can delete the folder, but for safeties sake I think a rename will do. Please bare in mind that this is undertaken at your own risk! Now it says: Windows Update cannot currently check for updates, because the service is not running. You may need to restart your computer. Have checked service is running and restarted twice.
chazzy2501 Posted January 30, 2014 Posted January 30, 2014 have you tried this? Fix the problem with Microsoft Windows Update that is not working
talksr Posted January 30, 2014 Author Posted January 30, 2014 (edited) have you tried this? Fix the problem with Microsoft Windows Update that is not working Yes already tried that a while back. Something I have noticed which never happened before is everything I try and download using the server mozilla broswer is failing with the following: This download has been blocked by your Security Zone Policy - microsoft.com Many of the Microsoft Hotfixes are failing to download or open because of security reasons. Tried to re-do the fix you mention and this time get this error: Troubleshooting cannot continue because an error has occured. We're sorry, but the program encountered a runtime error. Please try again later. Code: 80040402 Finally, have downloaded SP1 tried to manually install and it just keeps saying Error: Access is denied. I have made sure the installers are unblocked, that security on the server is enabled for everything and have set to run as administrator. It seem that literally everything I try and do comes back with an error. Edited January 30, 2014 by talksr
talksr Posted January 30, 2014 Author Posted January 30, 2014 I have managed to get on to Installed Updates. The last ever update to have installed onto the server was Service Pack 1 for SQL Server 2008 on the 8th of March 2011.
talksr Posted January 30, 2014 Author Posted January 30, 2014 If I try to manually install SP1, it just says Error: Access is denied. The following is shown in Event Viewer: Windows update could not be installed because of error 2147942405 "Access is denied." (Command line: ""C:\Windows\system32\wusa.exe" "C:\Windows6.0-KB942435-X64.MSU" ")
talksr Posted January 30, 2014 Author Posted January 30, 2014 Have tried buring SP1 update to dvd and same thing: Access denied when I try and run any of the setup files on the DVD. Every thing seems impossible.
free780 Posted January 30, 2014 Posted January 30, 2014 Its like your not a local admin. What av does it have installed?
talksr Posted January 30, 2014 Author Posted January 30, 2014 On 2008R2 as a dc you can't get local accounts, all you get is the domain admin or I would have created a secondary local admin logon. No AV. Removed it last time to rule that out lol
AngryTechnician Posted January 30, 2014 Posted January 30, 2014 This is a long shot, but is the admin account you are logged in with actually in the Domain Admins group in AD? Failing that, are you able to run the sfc /scannow command to check for corrupt system files?
AngryTechnician Posted January 30, 2014 Posted January 30, 2014 Also wondering if someone has inadvertently set something overly-restrictive in a GPO in the section Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment
talksr Posted January 30, 2014 Author Posted January 30, 2014 This is a long shot, but is the admin account you are logged in with actually in the Domain Admins group in AD? Failing that, are you able to run the sfc /scannow command to check for corrupt system files? Admin account is in the DC's admin group and tried sfc /scannow the other week, made no difference. I have tried all of the online articles relating to the error codes I am getting. Also wondering if someone has inadvertently set something overly-restrictive in a GPO in the section Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment That is not a bad idea. I am not going to be able to get back onto the server until Thursday afternoon, but I will certainly give this a check and update the thread accordingly next week. Or the wsus server is set in gp. Could be, but this school has no history of WSUS so I would be surprised, but certainly something worth checking given how unsolvable this issue has been! I will update next week when I am back on the server.
Arthur Posted January 30, 2014 Posted January 30, 2014 The following is shown in Event Viewer: Windows update could not be installed because of error 2147942405 "Access is denied." (Command line: ""C:\Windows\system32\wusa.exe" "C:\Windows6.0-KB942435-X64.MSU" ") Windows 6.0 is Server 2008. Why would 2008 R2 SP1 be trying to install an update for the previous version of Windows Server? Did you download the correct SP1 installer: Windows6.1-KB976932-X64.exe?
talksr Posted February 6, 2014 Author Posted February 6, 2014 Makes absolutely no difference, I have tried every installer I can (including the one you suggest) and they are all coming back with 'Access Denied' when I try and run them. Windows 6.0 is Server 2008. Why would 2008 R2 SP1 be trying to install an update for the previous version of Windows Server? Did you download the correct SP1 installer: Windows6.1-KB976932-X64.exe?
GeekyPete Posted February 6, 2014 Posted February 6, 2014 Time go go back a few steps. Have you checked the permissions on the file you are running and on the folder you are trying to install it to? Also in the properties of the file is there a blocked attribute with a check mark? You sometimes get this when a file is imported.
talksr Posted February 6, 2014 Author Posted February 6, 2014 Tried all of what you suggest Time go go back a few steps. Have you checked the permissions on the file you are running and on the folder you are trying to install it to? Also in the properties of the file is there a blocked attribute with a check mark? You sometimes get this when a file is imported.
GeekyPete Posted February 6, 2014 Posted February 6, 2014 I thought you might have done. When you log on are you logging on to the local computer or the domain? Try domainname\username and servername\username. The You should have more success as the local admin. One more thing to check is have you enabled "Allow all users to install updates" in Windows update? Then we are maybe looking at virus/Malware.
talksr Posted February 6, 2014 Author Posted February 6, 2014 Server 2008 does not seem to allow local login once it is a DC so it a domain login or nothing! I thought you might have done. When you log on are you logging on to the local computer or the domain? Try domainname\username and servername\username. The You should have more success as the local admin. One more thing to check is have you enabled "Allow all users to install updates" in Windows update? Then we are maybe looking at virus/Malware.
GeekyPete Posted February 6, 2014 Posted February 6, 2014 Server 2008 does not seem to allow local login once it is a DC so it a domain login or nothing! That may well be true, I've never tried. I know I do that on my member servers.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now