Windows Update Log analysis

-

i wondering if somome able me better anyalze why "install updates on shutdown" has quit working on of workstations in our organization, including windows 7 deployments. using wsus 3 sp2 running on windows 2003 standard http:// (tcp) protocol.

 

********** windowsupdate.log on windows xp sp3 workstation ******************

 

2011-03-15 09:55:01:390 1224 98c au au received policy change subscription event
2011-03-15 09:55:09:234 1224 450 dnldmgr preparing update install, updateid = {8df29d8f-aee9-447b-ab32-25f83f33bc1a}.101.
2011-03-15 09:55:09:234 3196 ae8 misc ===========  logging initialized (build: 7.4.7600.226, tz: -0400)  ===========
2011-03-15 09:55:09:234 3196 ae8 misc   = process: c:\windows\system32\wuauclt.exe
2011-03-15 09:55:09:234 3196 ae8 misc   = module: c:\windows\system32\wuaueng.dll
2011-03-15 09:55:09:234 3196 ae8 handler :::::::::::::
2011-03-15 09:55:09:234 3196 ae8 handler :: start ::  handler: windows patch install
2011-03-15 09:55:09:234 3196 ae8 handler :::::::::
2011-03-15 09:55:09:234 3196 ae8 handler   : updates install = 1
2011-03-15 09:55:09:265 3196 ae8 handler   : installing update {8df29d8f-aee9-447b-ab32-25f83f33bc1a}.101
2011-03-15 09:55:09:265 3196 db4 handler installing parameters=-q -z -er, sandbox=c:\windows\softwaredistribution\download\e79028ac4f02e201b61b2c632cb0fc5e.
2011-03-15 09:55:16:203 1224 98c agent ***********  agent: refreshing global settings cache  ***********
2011-03-15 09:55:16:203 1224 98c agent   * wsus server: http://10.61.0.21 (changed)
2011-03-15 09:55:16:203 1224 98c agent   * wsus status server: http://10.61.0.21 (changed)
2011-03-15 09:55:16:218 1224 98c agent   * target group: tech workstations (changed)
2011-03-15 09:55:16:218 1224 98c agent   * windows update access disabled: no (unchanged)
2011-03-15 09:55:16:250 1224 98c au au received policy change subscription event
2011-03-15 09:55:16:250 1224 98c au sus server changed through policy.
2011-03-15 09:55:16:250 1224 98c au target group changed through policy.
2011-03-15 09:55:16:250 1224 98c au au options changed policy.
2011-03-15 09:55:16:250 1224 98c au ###########  au: policy change processed  ###########
2011-03-15 09:55:16:250 1224 98c au   # policy changed, au refresh required = no
2011-03-15 09:55:16:250 1224 98c au   # wsus server: http://10.61.0.21
2011-03-15 09:55:16:250 1224 98c au   # detection frequency: 5
2011-03-15 09:55:16:250 1224 98c au   # target group: tech workstations
2011-03-15 09:55:16:250 1224 98c au   # approval type: pre-install notify (policy)
2011-03-15 09:55:16:250 1224 98c au   # auto-install minor updates: no (user preference)
2011-03-15 09:55:16:250 1224 98c au   # interact non-admins (non-admins elevated (policy))
2011-03-15 09:55:16:250 1224 98c au au refresh required....
2011-03-15 09:55:16:250 3196 708 handler cancel signalled operations 0x6.
2011-03-15 09:55:16:250 1224 98c au au setting next detection timeout 2011-03-15 13:55:16
2011-03-15 09:55:16:250 1224 98c au au setting next sqm report timeout 2011-03-15 13:55:16
2011-03-15 09:55:16:265 1224 98c au au setting next featured software notification timeout 2011-03-15 13:55:16
2011-03-15 09:55:16:265 1224 98c au triggering online detection (non-interactive)
2011-03-15 09:55:16:265 1224 98c au #############
2011-03-15 09:55:16:265 1224 98c au ## start ##  au: search updates
2011-03-15 09:55:16:265 1224 98c au #########
2011-03-15 09:55:16:265 1224 98c au <<## submitted ## au: search updates [callid = {2abdfe8c-5728-45f7-b125-25b53fe1499b}]
2011-03-15 09:55:16:265 1224 4b8 agent *************
2011-03-15 09:55:16:265 1224 4b8 agent ** start **  agent: finding updates [callerid = automaticupdates]
2011-03-15 09:55:16:265 1224 4b8 agent *********
2011-03-15 09:55:16:265 1224 4b8 agent   * online = yes; ignore download priority = no
2011-03-15 09:55:16:265 1224 4b8 agent   * criteria = "ishidden=0 , isinstalled=0 , deploymentaction='installation' , isassigned=1 or ishidden=0 , ispresent=1 , deploymentaction='uninstallation' , isassigned=1 or ishidden=0 , isinstalled=1 , deploymentaction='installation' , isassigned=1 , rebootrequired=1 or ishidden=0 , isinstalled=0 , deploymentaction='uninstallation' , isassigned=1 , rebootrequired=1"
2011-03-15 09:55:16:265 1224 4b8 agent   * serviceid = {3da21691-e39d-4da6-8a4b-b43877bcb1b7} managed
2011-03-15 09:55:16:265 1224 4b8 agent   * search scope = {machine}
2011-03-15 09:55:16:265 1224 4b8 misc validating signature c:\windows\softwaredistribution\selfupdate\default\wuident.cab:
2011-03-15 09:55:16:328 1224 4b8 misc  microsoft signed: yes
2011-03-15 09:55:16:968 3196 db4 handler install completed 0x8007f00d.
2011-03-15 09:55:16:968 3196 ae8 handler install cancelled
2011-03-15 09:55:16:968 1224 41c report report event: {df71534f-5ce6-469e-8d4e-c4df9abbe830} 2011-03-15 09:55:16:968-0400 1 186 101 {374e0100-caa7-41bc-90a6-dfbac8d1ea5e} 102 8024000b automaticupdates success content install user cancelled installation.
2011-03-15 09:55:16:968 3196 ae8 handler   : install completed: result type = 0x2, installer error = false, error = 0x8007f00d, disabled until reboot = no, reboot required = no
2011-03-15 09:55:16:968 3196 ae8 handler fatal: uh: 0x80242008: handlesingleupdate failed in cuhwindowspatchhandler::handlemultipleupdates
2011-03-15 09:55:16:968 3196 ae8 handler :::::::::
2011-03-15 09:55:16:968 3196 ae8 handler ::  end  ::  handler: windows patch install
2011-03-15 09:55:16:968 3196 ae8 handler :::::::::::::
2011-03-15 09:55:16:984 1224 450 agent   * warning: exit code = 0x8024000b
2011-03-15 09:55:16:984 1224 450 agent *********
2011-03-15 09:55:16:984 1224 450 agent **  end  **  agent: installing updates [callerid = automaticupdates]
2011-03-15 09:55:16:984 1224 450 agent *************
2011-03-15 09:55:16:984 1224 450 agent warning: wu client failed installing updates error 0x8024000b
2011-03-15 09:55:17:203  676 df4 shutdwn fatal: wuautoupdateatshutdown failed, hr=8024000c
2011-03-15 09:55:18:375 1224 98c au au received policy change subscription event
2011-03-15 09:55:22:281 1224 98c au ###########  au: uninitializing automatic updates  ###########
2011-03-15 09:55:29:578 1224 4b8 misc warning: winhttp: isfiletobedownloaded failed 0x80004004
2011-03-15 09:55:29:578 1224 4b8 misc warning: winhttp: shouldfilebedownloaded failed 0x80004004
2011-03-15 09:55:29:578 1224 4b8 setup fatal: isupdaterequired failed error 0x80004004
2011-03-15 09:55:29:578 1224 4b8 setup warning: selfupdate: default service: isupdaterequired failed: 0x80004004
2011-03-15 09:55:29:578 1224 4b8 setup warning: selfupdate: default service: isupdaterequired failed, error = 0x80004004
2011-03-15 09:55:29:578 1224 4b8 agent   * warning: skipping scan, self-update check returned 0x80004004
2011-03-15 09:55:29:593 1224 4b8 agent   * warning: exit code = 0x80004004
2011-03-15 09:55:29:593 1224 4b8 agent *********
2011-03-15 09:55:29:593 1224 4b8 agent **  end  **  agent: finding updates [callerid = automaticupdates]
2011-03-15 09:55:29:593 1224 4b8 agent *************
2011-03-15 09:55:29:593 1224 4b8 agent warning: wu client failed searching update error 0x80004004
2011-03-15 09:55:29:718 1224 98c service *********
2011-03-15 09:55:29:718 1224 98c service **  end  **  service: service exit [exit code = 0x240001]
2011-03-15 09:55:29:718 1224 98c service *************

 

 

thanks in advance

hard say... logfile doesn't appear show shutdown event, or attempt invoke "install @ shutdown" event.

it show lot of cancelled/aborted activity, however.

2011-03-15 09:55:16:984 1224 450 agent warning: wu client failed installing updates error 0x8024000b

0x8024000b -2145124341 sus_e_call_cancelled call has been cancelled

2011-03-15 09:55:17:203  676 df4 shutdwn fatal: wuautoupdateatshutdown failed, hr=8024000c

0x8024000c -2145124340  sus_e_noop   no operation needed

2011-03-15 09:55:29:593 1224 4b8 agent warning: wu client failed searching update error 0x80004004

0x80004004 -2147467260 e_abort  operation aborted

 

however, when quits working on systems . . . there's 2 possible sources:

  • the policy has been changed disable access (and logfile note policy change imposed @ 9:55am tuesday morning)
  • the server damaged, or content approved updates not available download client systems.
lawrence garvin, m.s., mcitp:ea, mcdba, mcsa
principal/cto, onsite technology solutions, houston, texas
microsoft mvp - software distribution (2005-2011)
mvp profile: http://mvp.support.microsoft.com/profile/lawrence.garvin
blog: http://onsitechsolutions.spaces.live.com


Windows Server  >  WSUS



Comments

Post a Comment

Popular posts from this blog

Edit Group Policy

-
i have pc has power settings pushed out default domain policy in ad environment. of course on local machine "some settings managed system adminstrator". the machine temporarily no longer in contact domain controller (it's been physically moved , not on same network now) can't updated gpo settings. i believe if edit local group policy won't make difference because of group policy processing , precedence. since it's temporary away ad network, still want use settings of ad user. is there somewhere in registry stored can edit power plan manually until can sync domain? (i need prevent sleeping while plugged in - it's set 1 hour) thanks! allen crist i found site: http://gpsearch.azurewebsites.net/#7916 i able add policy to hkey_local_machine\software\policies\microsoft\power using specs found on site. looks solved issue. i'll report if didn't. thanks! allen crist ...
Read more

Hyper-V VM not reaching OS 'Logon' screen

-
i trying migrate vm vmware hyper-v. so far have done following (seemingly successfully): prepare vmware vm conversion hyper-v format (vhd) within vmware workstation 8.0 environment following steps guide: http://social.technet.microsoft.com/forums/en/winserverhyperv/thread/ef8c12f7-c45d-442e-9a30-c43cd87df3b3   (i.e. remove vm tools, add new ide hard disk…) use vmdk2vhd application convert individual vmdk files vhd ones create new vm in hyper-v exporting in 3 newly converted vhd files at point have checked settings , powered on vm in hyper-v find although windows begins load expected manages reach screen prior login screen saying either of following messages: “windows starting up…” “the active directory rebuilding indices… please wait” to knowledge, albeit limited in area, vm should present me login screen since appears in vmware. if start vm in safe mode can login not desired affect. below details of vm: operating system: windows server 2003 (enterprise edit...
Read more

DNS question...

-
i new setting dns server....my domain name expl. "domain.com"....i set "a" record in forward lookup for  www.domain.com itself...."server's local ip"....i've added no other zones , i seem able resolve names except own....www.domain.com.....also, do i put my isp's dns ip's....for external dns's server can't resolve?....forwarding or in nic setup?......i want setup in my dns server don't have include them on client side..... thanks mark     not put isp dsn server address in settings on nic dc or clients. should point local dns server on dc. set dns forward public dns, such isp. bill Windows Server  >  Network Infrastructure Servers
Read more