I have had SCUP 2011 integrated with SCCM 2012R2 since March.  I went in on Friday to add some new cab files from Adobe and publish the updates.  If I run a "full content" publish it will fail every time with "SignPackageCabError" and "failed to sign package 2147942403."

I know this is related to the self signed certificate so I have recreated that and it still failed.  I followed all options at the following sites to no avail.

https://social.technet.microsoft.com/Forums/systemcenter/en-US/d78f31e6-dce0-4746-88a0-b8ca17c3d2f4/scup-failed-to-sign-package?forum=configmgrsum

http://blogs.msdn.com/b/minfangl/archive/2011/05/31/common-errors-and-resolutios-for-system-center-updates-publisher-2011.aspx

http://www.networksteve.com/enterprise/topic.php/SCUP_2011_publishing_fails_with_error:%C2%A0_Failed_to_sign_package;/?TopicId=68758&Posts=1

I then decided to try a certificate from my PKI environment.  I followed the steps from this page and still received the same error as above.

https://mikeshellenberger.wordpress.com/2010/09/02/system-center-updates-publisher-microsoft-pki/

http://blogs.technet.com/b/jasonlewis/archive/2011/07/12/system-center-updates-publisher-signing-certificate-requirements-amp-step-by-step-guide.aspx

At this point I am completely lost at what to try.  It was working just fine a few weeks ago. No updates were applied to the system between now and then, the configuration didn't change, I am the only person that gets on this server, etc.  

I even went through and uninstalled the scup application, deleted all certs, deleted the database, and rebuilt everything.  

I feel like my only other option is to install scup on another server and see if it works from there.

Any help would be great.

I setup a software update group that covers Windows 7 and Office 2013. I can see in the SUP group that there are 819 updates, but my users never seem to get all of the updates they need. Some show updates haven't been installed since 2014.

In the last three months every client I look at is able to find Windows updates by manually updating the system. I'm getting tired of dealing with this and if I can't get it fixed soon I need to abandon the SUP on SCCM 2012 and just set each client to update daily.

Any suggestions?

SCCM 2012 R2 :

Hello,

I am using an ADR to get the newest Windows Updates for endpoint protection. The ADR was ruuning without problems for a 3 months.

last week I saw the above failure.

I checked the ruleengine.log and the patchdownloader logs.

my network is ok,internet connection is ok, 

I found a few errors, but I do not know what to do now:

Here are the ruleengine.log failures

Failed to download the update from internet. Error = 12152	SMS_RULE_ENGINE	2015/6/2 8:28:53	5252 (0x1484)
Failed to download ContentID 16824084 for UpdateID 16829054. Error code = 12152	SMS_RULE_ENGINE	2015/6/2 8:28:53	5252 (0x1484)
Downloading content with ID 16824085 in the package	SMS_RULE_ENGINE	2015/6/2 8:28:53	5252 (0x1484)
Failed to download the update from internet. Error = 12152	SMS_RULE_ENGINE	2015/6/2 8:28:54	5252 (0x1484)
Failed to download ContentID 16824085 for UpdateID 16829054. Error code = 12152	SMS_RULE_ENGINE	2015/6/2 8:28:54	5252 (0x1484)
Downloading content with ID 16824086 in the package	SMS_RULE_ENGINE	2015/6/2 8:28:54	5252 (0x1484)
Failed to download the update from internet. Error = 12152	SMS_RULE_ENGINE	2015/6/2 8:28:54	5252 (0x1484)
Failed to download ContentID 16824086 for UpdateID 16829054. Error code = 12152	SMS_RULE_ENGINE	2015/6/2 8:28:54	5252 (0x1484)
Downloading content with ID 16824087 in the package	SMS_RULE_ENGINE	2015/6/2 8:28:54	5252 (0x1484)
Failed to download the update from internet. Error = 12152	SMS_RULE_ENGINE	2015/6/2 8:28:55	5252 (0x1484)
Failed to download ContentID 16824087 for UpdateID 16829054. Error code = 12152	SMS_RULE_ENGINE	2015/6/2 8:28:55	5252 (0x1484)
Downloading content with ID 16824088 in the package	SMS_RULE_ENGINE	2015/6/2 8:28:55	5252 (0x1484)
Failed to download the update from internet. Error = 12152	SMS_RULE_ENGINE	2015/6/2 8:28:56	5252 (0x1484)
Failed to download ContentID 16824088 for UpdateID 16829054. Error code = 12152	SMS_RULE_ENGINE	2015/6/2 8:28:56	5252 (0x1484)
Downloading content with ID 16824089 in the package	SMS_RULE_ENGINE	2015/6/2 8:28:56	5252 (0x1484)
Failed to download the update from internet. Error = 12152	SMS_RULE_ENGINE	2015/6/2 8:28:57	5252 (0x1484)
Failed to download ContentID 16824089 for UpdateID 16829054. Error code = 12152	SMS_RULE_ENGINE	2015/6/2 8:28:57	5252 (0x1484)
Downloading content with ID 16824090 in the package	SMS_RULE_ENGINE	2015/6/2 8:28:57	5252 (0x1484)
Failed to download the update from internet. Error = 12152	SMS_RULE_ENGINE	2015/6/2 8:28:58	5252 (0x1484)
Failed to download ContentID 16824090 for UpdateID 16829054. Error code = 12152	SMS_RULE_ENGINE	2015/6/2 8:28:58	5252 (0x1484)
Downloading content with ID 16824091 in the package	SMS_RULE_ENGINE	2015/6/2 8:28:58	5252 (0x1484)
Failed to download the update from internet. Error = 12152	SMS_RULE_ENGINE	2015/6/2 8:28:58	5252 (0x1484)
Failed to download ContentID 16824091 for UpdateID 16829054. Error code = 12152	SMS_RULE_ENGINE	2015/6/2 8:28:58	5252 (0x1484)
Downloading content with ID 16824092 in the package	SMS_RULE_ENGINE	2015/6/2 8:28:58	5252 (0x1484)
Failed to download the update from internet. Error = 12152	SMS_RULE_ENGINE	2015/6/2 8:29:00	5252 (0x1484)
Failed to download ContentID 16824092 for UpdateID 16829054. Error code = 12152	SMS_RULE_ENGINE	2015/6/2 8:29:00	5252 (0x1484)
Downloading content with ID 16824093 in the package	SMS_RULE_ENGINE	2015/6/2 8:29:00	5252 (0x1484)
Failed to download the update from internet. Error = 12152	SMS_RULE_ENGINE	2015/6/2 8:29:00	5252 (0x1484)
Failed to download ContentID 16824093 for UpdateID 16829054. Error code = 12152	SMS_RULE_ENGINE	2015/6/2 8:29:00	5252 (0x1484)
Downloading content with ID 16824094 in the package	SMS_RULE_ENGINE	2015/6/2 8:29:01	5252 (0x1484)
Failed to download the update from internet. Error = 12152	SMS_RULE_ENGINE	2015/6/2 8:29:01	5252 (0x1484)
Failed to download ContentID 16824094 for UpdateID 16829054. Error code = 12152	SMS_RULE_ENGINE	2015/6/2 8:29:01	5252 (0x1484)
Downloading content with ID 16824095 in the package	SMS_RULE_ENGINE	2015/6/2 8:29:01	5252 (0x1484)
Failed to download the update from internet. Error = 12152	SMS_RULE_ENGINE	2015/6/2 8:29:04	5252 (0x1484)
Failed to download ContentID 16824095 for UpdateID 16829054. Error code = 12152	SMS_RULE_ENGINE	2015/6/2 8:29:04	5252 (0x1484)
Downloading content with ID 16824096 in the package	SMS_RULE_ENGINE	2015/6/2 8:29:04	5252 (0x1484)
Failed to download the update from internet. Error = 12152	SMS_RULE_ENGINE	2015/6/2 8:29:04	5252 (0x1484)
Failed to download ContentID 16824096 for UpdateID 16829054. Error code = 12152	SMS_RULE_ENGINE	2015/6/2 8:29:04	5252 (0x1484)
Downloading content with ID 16824097 in the package	SMS_RULE_ENGINE	2015/6/2 8:29:04	5252 (0x1484)
Failed to download the update from internet. Error = 12152	SMS_RULE_ENGINE	2015/6/2 8:29:05	5252 (0x1484)
Failed to download ContentID 16824097 for UpdateID 16829054. Error code = 12152	SMS_RULE_ENGINE	2015/6/2 8:29:05	5252 (0x1484)
Downloading content with ID 16824098 in the package	SMS_RULE_ENGINE	2015/6/2 8:29:05	5252 (0x1484)
Failed to download the update from internet. Error = 12152	SMS_RULE_ENGINE	2015/6/2 8:29:06	5252 (0x1484)
Failed to download ContentID 16824098 for UpdateID 16829054. Error code = 12152	SMS_RULE_ENGINE	2015/6/2 8:29:06	5252 (0x1484)
Downloading content with ID 16824099 in the package	SMS_RULE_ENGINE	2015/6/2 8:29:06	5252 (0x1484)
Failed to download the update from internet. Error = 12152	SMS_RULE_ENGINE	2015/6/2 8:29:08	5252 (0x1484)
Failed to download ContentID 16824099 for UpdateID 16829054. Error code = 12152	SMS_RULE_ENGINE	2015/6/2 8:29:08	5252 (0x1484)
Downloading content with ID 16824100 in the package	SMS_RULE_ENGINE	2015/6/2 8:29:08	5252 (0x1484)
Failed to download the update from internet. Error = 12152	SMS_RULE_ENGINE	2015/6/2 8:29:08	5252 (0x1484)
Failed to download ContentID 16824100 for UpdateID 16829054. Error code = 12152	SMS_RULE_ENGINE	2015/6/2 8:29:08	5252 (0x1484)
Downloading content with ID 16824101 in the package	SMS_RULE_ENGINE	2015/6/2 8:29:08	5252 (0x1484)
Failed to download the update from internet. Error = 12152	SMS_RULE_ENGINE	2015/6/2 8:29:09	5252 (0x1484)
Failed to download ContentID 16824101 for UpdateID 16829054. Error code = 12152	SMS_RULE_ENGINE	2015/6/2 8:29:09	5252 (0x1484)
Downloading content with ID 16824102 in the package	SMS_RULE_ENGINE	2015/6/2 8:29:09	5252 (0x1484)
Failed to download the update from internet. Error = 12152	SMS_RULE_ENGINE	2015/6/2 8:29:10	5252 (0x1484)
Failed to download ContentID 16824102 for UpdateID 16829054. Error code = 12152	SMS_RULE_ENGINE	2015/6/2 8:29:10	5252 (0x1484)
Downloading content with ID 16824103 in the package	SMS_RULE_ENGINE	2015/6/2 8:29:10	5252 (0x1484)
Failed to download the update from internet. Error = 12152	SMS_RULE_ENGINE	2015/6/2 8:29:11	5252 (0x1484)
Failed to download ContentID 16824103 for UpdateID 16829054. Error code = 12152	SMS_RULE_ENGINE	2015/6/2 8:29:11	5252 (0x1484)
Downloading content with ID 16824104 in the package	SMS_RULE_ENGINE	2015/6/2 8:29:11	5252 (0x1484)
Failed to download the update from internet. Error = 12152	SMS_RULE_ENGINE	2015/6/2 8:29:12	5252 (0x1484)
Failed to download ContentID 16824104 for UpdateID 16829054. Error code = 12152	SMS_RULE_ENGINE	2015/6/2 8:29:12	5252 (0x1484)
Failed to download any update	SMS_RULE_ENGINE	2015/6/2 8:29:12	5252 (0x1484)
Failed to download update contents.	SMS_RULE_ENGINE	2015/6/2 8:29:12	5252 (0x1484)
No new update was added to the package. Package "51000009" would not be updated.	SMS_RULE_ENGINE	2015/6/2 8:29:12	5252 (0x1484)
Failed to run the DownloadAction for the AutoDeployment.	SMS_RULE_ENGINE	2015/6/2 8:29:12	5252 (0x1484)
STATMSG: ID=8706 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_RULE_ENGINE" SYS=bamboo.mmiyx.com.cn SITE=510 PID=1764 TID=5252 GMTDATE=周二 6月 02 00:29:12.852 2015 ISTR0="SMS Rule Engine" ISTR1="Failed to download one or more content files" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0	SMS_RULE_ENGINE	2015/6/2 8:29:12	5252 (0x1484)
Enforcing Create Deployment Action	SMS_RULE_ENGINE	2015/6/2 8:29:12	5252 (0x1484)
  Create Deployment Rule Action XML is: <DeploymentCreationActionXML xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><CollectionId>SMSDM003</CollectionId><IncludeSub>true</IncludeSub><Utc>false</Utc><Duration>0</Duration><DurationUnits>Hours</DurationUnits><AvailableDeltaDuration>0</AvailableDeltaDuration><AvailableDeltaDurationUnits>Hours</AvailableDeltaDurationUnits><SuppressServers>Checked</SuppressServers><SuppressWorkstations>Unchecked</SuppressWorkstations><PersistOnWriteFilterDevices>Unchecked</PersistOnWriteFilterDevices><AllowRestart>false</AllowRestart><DisableMomAlert>false</DisableMomAlert><GenerateMomAlert>false</GenerateMomAlert><UseRemoteDP>true</UseRemoteDP><UseUnprotectedDP>true</UseUnprotectedDP><UseBranchCache>true</UseBranchCache><EnableDeployment>true</EnableDeployment><EnableWakeOnLan>false</EnableWakeOnLan><AllowDownloadOutSW>false</AllowDownloadOutSW><AllowInstallOutSW>true</AllowInstallOutSW><EnableAlert>false</EnableAlert><AlertThresholdPercentage>0</AlertThresholdPercentage><AlertDuration>2</AlertDuration><AlertDurationUnits>Weeks</AlertDurationUnits><EnableNAPEnforcement>false</EnableNAPEnforcement><UserNotificationOption>HideAll</UserNotificationOption><LimitStateMessageVerbosity>true</LimitStateMessageVerbosity><StateMessageVerbosity>1</StateMessageVerbosity><AllowWUMU>true</AllowWUMU><AllowUseMeteredNetwork>false</AllowUseMeteredNetwork></DeploymentCreationActionXML>	SMS_RULE_ENGINE	2015/6/2 8:29:12	5252 (0x1484)
  Rule XML is: <AutoDeploymentRule xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><DeploymentId>{9c5bdeca-124e-4841-a6a0-2a93fe44fc9c}</DeploymentId><DeploymentName>defender auto-update</DeploymentName><UpdateGroupId>ScopeId_764B6FB3-EE01-4AE5-8BC1-A3072CE9C016/AuthList_cecc291e-7c69-4e53-b729-23c252a4e031</UpdateGroupId><UpdateGroupName/><LocaleId>2052</LocaleId><UseSameDeployment>false</UseSameDeployment><AlignWithSyncSchedule>false</AlignWithSyncSchedule><NoEULAUpdates>false</NoEULAUpdates><EnableAfterCreate>true</EnableAfterCreate><ScopeIDs><ScopeID>SMS00UNA</ScopeID></ScopeIDs></AutoDeploymentRule>	SMS_RULE_ENGINE	2015/6/2 8:29:12	5252 (0x1484)
  Criteria Filter Result XML is: <AutoDeploymentRule xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><DeploymentId>{9c5bdeca-124e-4841-a6a0-2a93fe44fc9c}</DeploymentId><DeploymentName>defender auto-update</DeploymentName><UpdateGroupId>ScopeId_764B6FB3-EE01-4AE5-8BC1-A3072CE9C016/AuthList_cecc291e-7c69-4e53-b729-23c252a4e031</UpdateGroupId><UpdateGroupName/><LocaleId>2052</LocaleId><UseSameDeployment>false</UseSameDeployment><AlignWithSyncSchedule>false</AlignWithSyncSchedule><NoEULAUpdates>false</NoEULAUpdates><EnableAfterCreate>true</EnableAfterCreate><ScopeIDs><ScopeID>SMS00UNA</ScopeID></ScopeIDs></AutoDeploymentRule>	SMS_RULE_ENGINE	2015/6/2 8:29:12	5252 (0x1484)
    Parsing Deployment Action XML...	SMS_RULE_ENGINE	2015/6/2 8:29:12	5252 (0x1484)
    Parsing Rule XML...	SMS_RULE_ENGINE	2015/6/2 8:29:13	5252 (0x1484)
    SQL is: select cis.CI_ID from vCI_ConfigurationItems cis join vProvisionedCIs pci on cis.CI_ID = pci.CI_ID where cis.CI_ID in (16829019, 16829054) order by cis.CI_ID	SMS_RULE_ENGINE	2015/6/2 8:29:13	5252 (0x1484)
      0 of 2 updates are downloaded and will be added to the Deployment.	SMS_RULE_ENGINE	2015/6/2 8:29:13	5252 (0x1484)
The rule resulted in no updates being found. Skip deployment creation or update...	SMS_RULE_ENGINE	2015/6/2 8:29:13	5252 (0x1484)
CRuleHandler: Enforcing Actions for Rule 2 failed!	SMS_RULE_ENGINE	2015/6/2 8:29:13	5252 (0x1484)
CRuleHandler: ResetRulesAndCleanUp()	SMS_RULE_ENGINE	2015/6/2 8:29:13	5252 (0x1484)

--------------

And here are the failuer of the PatchDownloader.log

Trying to connect to the \\bamboo.mmiyx.com.cn\root\sms\site_510 namespace on the bamboo.mmiyx.com.cn machine.	Software Updates Patch Downloader	2015/6/2 8:28:16	5252 (0x1484)
Connected to \\bamboo.mmiyx.com.cn\root\sms\site_510	Software Updates Patch Downloader	2015/6/2 8:28:16	5252 (0x1484)
Download destination = \\bamboo.mmiyx.com.cn\windows defender update\9b8d096e-8fae-4e6b-90d4-84cf7082c4fc.1\AM_Base.exe .	Software Updates Patch Downloader	2015/6/2 8:28:16	5252 (0x1484)
Contentsource = http://wsus.ds.download.windowsupdate.com/c/msdownload/update/software/defu/2015/05/am_base_82f139e9543c6ab43a3a646550156dfd3d0f9fa3.exe .	Software Updates Patch Downloader	2015/6/2 8:28:16	5252 (0x1484)
Downloading content for ContentID = 16823925,  FileName = AM_Base.exe.	Software Updates Patch Downloader	2015/6/2 8:28:16	5252 (0x1484)
HttpSendRequest failed 12152	Software Updates Patch Downloader	2015/6/2 8:28:16	7648 (0x1DE0)
Download http://wsus.ds.download.windowsupdate.com/c/msdownload/update/software/defu/2015/05/am_base_82f139e9543c6ab43a3a646550156dfd3d0f9fa3.exe to C:\Windows\TEMP\CABA171.tmp returns 12152	Software Updates Patch Downloader	2015/6/2 8:28:16	7648 (0x1DE0)
ERROR: DownloadContentFiles() failed with hr=0x80072f78	Software Updates Patch Downloader	2015/6/2 8:28:16	5252 (0x1484)
Trying to connect to the root\SMS namespace on the BAMBOO machine.	Software Updates Patch Downloader	2015/6/2 8:28:16	5252 (0x1484)
Connected to \\BAMBOO\root\SMS	Software Updates Patch Downloader	2015/6/2 8:28:16	5252 (0x1484)
Trying to connect to the \\bamboo.mmiyx.com.cn\root\sms\site_510 namespace on the bamboo.mmiyx.com.cn machine.	Software Updates Patch Downloader	2015/6/2 8:28:16	5252 (0x1484)
Connected to \\bamboo.mmiyx.com.cn\root\sms\site_510	Software Updates Patch Downloader	2015/6/2 8:28:16	5252 (0x1484)
Download destination = \\bamboo.mmiyx.com.cn\windows defender update\5b5e342d-d235-4f23-a963-fb53e14e3e2e.1\AM_Base.exe .	Software Updates Patch Downloader	2015/6/2 8:28:17	5252 (0x1484)
Contentsource = http://wsus.ds.download.windowsupdate.com/c/msdownload/update/software/defu/2015/05/am_base_c55c7ed7b9fa90457c3e676b23a737a569a7a332.exe .	Software Updates Patch Downloader	2015/6/2 8:28:17	5252 (0x1484)
Downloading content for ContentID = 16823926,  FileName = AM_Base.exe.	Software Updates Patch Downloader	2015/6/2 8:28:17	5252 (0x1484)
HttpSendRequest failed 12152	Software Updates Patch Downloader	2015/6/2 8:28:17	7860 (0x1EB4)
Download http://wsus.ds.download.windowsupdate.com/c/msdownload/update/software/defu/2015/05/am_base_c55c7ed7b9fa90457c3e676b23a737a569a7a332.exe to C:\Windows\TEMP\CABA402.tmp returns 12152	Software Updates Patch Downloader	2015/6/2 8:28:17	7860 (0x1EB4)
ERROR: DownloadContentFiles() failed with hr=0x80072f78	Software Updates Patch Downloader	2015/6/2 8:28:17	5252 (0x1484)
Trying to connect to the root\SMS namespace on the BAMBOO machine.	Software Updates Patch Downloader	2015/6/2 8:28:17	5252 (0x1484)
Connected to \\BAMBOO\root\SMS	Software Updates Patch Downloader	2015/6/2 8:28:17	5252 (0x1484)
Trying to connect to the \\bamboo.mmiyx.com.cn\root\sms\site_510 namespace on the bamboo.mmiyx.com.cn machine.	Software Updates Patch Downloader	2015/6/2 8:28:17	5252 (0x1484)
Connected to \\bamboo.mmiyx.com.cn\root\sms\site_510	Software Updates Patch Downloader	2015/6/2 8:28:17	5252 (0x1484)
Download destination = \\bamboo.mmiyx.com.cn\windows defender update\a81254a6-29d5-46f7-b3b9-ce1841d1054e.1\AM_Base.exe .	Software Updates Patch Downloader	2015/6/2 8:28:17	5252 (0x1484)
Contentsource = http://wsus.ds.download.windowsupdate.com/c/msdownload/update/software/defu/2015/05/am_base_343e65b49dcf674a659847b8748acb64dcc60097.exe .	Software Updates Patch Downloader	2015/6/2 8:28:17	5252 (0x1484)
Downloading content for ContentID = 16823927,  FileName = AM_Base.exe.	Software Updates Patch Downloader	2015/6/2 8:28:17	5252 (0x1484)
HttpSendRequest failed 12152	Software Updates Patch Downloader	2015/6/2 8:28:18	7340 (0x1CAC)
Download http://wsus.ds.download.windowsupdate.com/c/msdownload/update/software/defu/2015/05/am_base_343e65b49dcf674a659847b8748acb64dcc60097.exe to C:\Windows\TEMP\CABA684.tmp returns 12152	Software Updates Patch Downloader	2015/6/2 8:28:18	7340 (0x1CAC)
ERROR: DownloadContentFiles() failed with hr=0x80072f78	Software Updates Patch Downloader	2015/6/2 8:28:18	5252 (0x1484)
Trying to connect to the root\SMS namespace on the BAMBOO machine.	Software Updates Patch Downloader	2015/6/2 8:28:18	5252 (0x1484)
Connected to \\BAMBOO\root\SMS	Software Updates Patch Downloader	2015/6/2 8:28:18	5252 (0x1484)
Trying to connect to the \\bamboo.mmiyx.com.cn\root\sms\site_510 namespace on the bamboo.mmiyx.com.cn machine.	Software Updates Patch Downloader	2015/6/2 8:28:18	5252 (0x1484)
Connected to \\bamboo.mmiyx.com.cn\root\sms\site_510	Software Updates Patch Downloader	2015/6/2 8:28:18	5252 (0x1484)
Download destination = \\bamboo.mmiyx.com.cn\windows defender update\336a98c4-5df3-4915-a676-01ab9bfc5d10.1\AM_Base_Patch1.exe .	Software Updates Patch Downloader	2015/6/2 8:28:18	5252 (0x1484)
Contentsource = http://wsus.ds.download.windowsupdate.com/c/msdownload/update/software/defu/2015/05/am_base_patch1_f42e2a1c78cac690b1d739a8d9286e5658e98481.exe .	Software Updates Patch Downloader	2015/6/2 8:28:18	5252 (0x1484)
Downloading content for ContentID = 16823928,  FileName = AM_Base_Patch1.exe.	Software Updates Patch Downloader	2015/6/2 8:28:18	5252 (0x1484)
HttpSendRequest failed 12152	Software Updates Patch Downloader	2015/6/2 8:28:18	7832 (0x1E98)
Download http://wsus.ds.download.windowsupdate.com/c/msdownload/update/software/defu/2015/05/am_base_patch1_f42e2a1c78cac690b1d739a8d9286e5658e98481.exe to C:\Windows\TEMP\CABA905.tmp returns 12152	Software Updates Patch Downloader	2015/6/2 8:28:18	7832 (0x1E98)
ERROR: DownloadContentFiles() failed with hr=0x80072f78	Software Updates Patch Downloader	2015/6/2 8:28:18	5252 (0x1484)
Trying to connect to the root\SMS namespace on the BAMBOO machine.	Software Updates Patch Downloader	2015/6/2 8:28:18	5252 (0x1484)
Connected to \\BAMBOO\root\SMS	Software Updates Patch Downloader	2015/6/2 8:28:18	5252 (0x1484)
Trying to connect to the \\bamboo.mmiyx.com.cn\root\sms\site_510 namespace on the bamboo.mmiyx.com.cn machine.	Software Updates Patch Downloader	2015/6/2 8:28:18	5252 (0x1484)
Connected to \\bamboo.mmiyx.com.cn\root\sms\site_510	Software Updates Patch Downloader	2015/6/2 8:28:18	5252 (0x1484)
Download destination = \\bamboo.mmiyx.com.cn\windows defender update\42b6cac7-5ef0-430e-ab7f-890338b25a61.1\AM_Base_Patch1.exe .	Software Updates Patch Downloader	2015/6/2 8:28:19	5252 (0x1484)
Contentsource = http://wsus.ds.download.windowsupdate.com/c/msdownload/update/software/defu/2015/05/am_base_patch1_d8a7ac255a914de3c0cef4c16328a738a8169bc2.exe .	Software Updates Patch Downloader	2015/6/2 8:28:19	5252 (0x1484)
Downloading content for ContentID = 16823929,  FileName = AM_Base_Patch1.exe.	Software Updates Patch Downloader	2015/6/2 8:28:19	5252 (0x1484)
HttpSendRequest failed 12152	Software Updates Patch Downloader	2015/6/2 8:28:19	5964 (0x174C)
Download http://wsus.ds.download.windowsupdate.com/c/msdownload/update/software/defu/2015/05/am_base_patch1_d8a7ac255a914de3c0cef4c16328a738a8169bc2.exe to C:\Windows\TEMP\CABAB97.tmp returns 12152	Software Updates Patch Downloader	2015/6/2 8:28:19	5964 (0x174C)
ERROR: DownloadContentFiles() failed with hr=0x80072f78	Software Updates Patch Downloader	2015/6/2 8:28:19	5252 (0x1484)
Trying to connect to the root\SMS namespace on the BAMBOO machine.	Software Updates Patch Downloader	2015/6/2 8:28:19	5252 (0x1484)
Connected to \\BAMBOO\root\SMS	Software Updates Patch Downloader	2015/6/2 8:28:19	5252 (0x1484)
Trying to connect to the \\bamboo.mmiyx.com.cn\root\sms\site_510 namespace on the bamboo.mmiyx.com.cn machine.	Software Updates Patch Downloader	2015/6/2 8:28:19	5252 (0x1484)
Connected to \\bamboo.mmiyx.com.cn\root\sms\site_510	Software Updates Patch Downloader	2015/6/2 8:28:19	5252 (0x1484)
Download destination = \\bamboo.mmiyx.com.cn\windows defender update\89471bc3-09d4-45b1-a749-dc83c9a967bb.1\AM_Base_Patch1.exe .	Software Updates Patch Downloader	2015/6/2 8:28:19	5252 (0x1484)
Contentsource = http://wsus.ds.download.windowsupdate.com/c/msdownload/update/software/defu/2015/05/am_base_patch1_cb4ecb356ccde37e1d4b05d4f282964b768a115a.exe .	Software Updates Patch Downloader	2015/6/2 8:28:19	5252 (0x1484)
Downloading content for ContentID = 16823930,  FileName = AM_Base_Patch1.exe.	Software Updates Patch Downloader	2015/6/2 8:28:19	5252 (0x1484)
HttpSendRequest failed 12152	Software Updates Patch Downloader	2015/6/2 8:28:19	7864 (0x1EB8)
Download http://wsus.ds.download.windowsupdate.com/c/msdownload/update/software/defu/2015/05/am_base_patch1_cb4ecb356ccde37e1d4b05d4f282964b768a115a.exe to C:\Windows\TEMP\CABAE28.tmp returns 12152	Software Updates Patch Downloader	2015/6/2 8:28:19	7864 (0x1EB8)
ERROR: DownloadContentFiles() failed with hr=0x80072f78	Software Updates Patch Downloader	2015/6/2 8:28:20	5252 (0x1484)
Trying to connect to the root\SMS namespace on the BAMBOO machine.	Software Updates Patch Downloader	2015/6/2 8:28:20	5252 (0x1484)
Connected to \\BAMBOO\root\SMS	Software Updates Patch Downloader	2015/6/2 8:28:20	5252 (0x1484)
Trying to connect to the \\bamboo.mmiyx.com.cn\root\sms\site_510 namespace on the bamboo.mmiyx.com.cn machine.	Software Updates Patch Downloader	2015/6/2 8:28:20	5252 (0x1484)
Connected to \\bamboo.mmiyx.com.cn\root\sms\site_510	Software Updates Patch Downloader	2015/6/2 8:28:20	5252 (0x1484)
Download destination = \\bamboo.mmiyx.com.cn\windows defender update\e2c176ab-8b37-4b2a-bf52-26ffd20273ed.1\AM_Base_Patch_155.exe .	Software Updates Patch Downloader	2015/6/2 8:28:20	5252 (0x1484)
Contentsource = http://wsus.ds.download.windowsupdate.com/c/msdownload/update/software/defu/2015/05/am_base_patch_155_c34a2e605233433e26bfcd3dacf6c0d209665f97.exe .	Software Updates Patch Downloader	2015/6/2 8:28:20	5252 (0x1484)
Downloading content for ContentID = 16823931,  FileName = AM_Base_Patch_155.exe.	Software Updates Patch Downloader	2015/6/2 8:28:20	5252 (0x1484)
HttpSendRequest failed 12152	Software Updates Patch Downloader	2015/6/2 8:28:20	7884 (0x1ECC)
Download http://wsus.ds.download.windowsupdate.com/c/msdownload/update/software/defu/2015/05/am_base_patch_155_c34a2e605233433e26bfcd3dacf6c0d209665f97.exe to C:\Windows\TEMP\CABB0F8.tmp returns 12152	Software Updates Patch Downloader	2015/6/2 8:28:20	7884 (0x1ECC)
ERROR: DownloadContentFiles() failed with hr=0x80072f78	Software Updates Patch Downloader	2015/6/2 8:28:20	5252 (0x1484)
Trying to connect to the root\SMS namespace on the BAMBOO machine.	Software Updates Patch Downloader	2015/6/2 8:28:20	5252 (0x1484)
Connected to \\BAMBOO\root\SMS	Software Updates Patch Downloader	2015/6/2 8:28:20	5252 (0x1484)
Trying to connect to the \\bamboo.mmiyx.com.cn\root\sms\site_510 namespace on the bamboo.mmiyx.com.cn machine.	Software Updates Patch Downloader	2015/6/2 8:28:20	5252 (0x1484)
Connected to \\bamboo.mmiyx.com.cn\root\sms\site_510	Software Updates Patch Downloader	2015/6/2 8:28:20	5252 (0x1484)
Download destination = \\bamboo.mmiyx.com.cn\windows defender update\856ce590-9821-4913-879f-0013b8870468.1\AM_Base_Patch_155.exe .	Software Updates Patch Downloader	2015/6/2 8:28:21	5252 (0x1484)
Contentsource = http://wsus.ds.download.windowsupdate.com/c/msdownload/update/software/defu/2015/05/am_base_patch_155_18fc5c1833bac13c05dd6d362aae629abf75b697.exe .	Software Updates Patch Downloader	2015/6/2 8:28:21	5252 (0x1484)
Downloading content for ContentID = 16823932,  FileName = AM_Base_Patch_155.exe.	Software Updates Patch Downloader	2015/6/2 8:28:21	5252 (0x1484)
HttpSendRequest failed 12152	Software Updates Patch Downloader	2015/6/2 8:28:21	7908 (0x1EE4)
Download http://wsus.ds.download.windowsupdate.com/c/msdownload/update/software/defu/2015/05/am_base_patch_155_18fc5c1833bac13c05dd6d362aae629abf75b697.exe to C:\Windows\TEMP\CABB406.tmp returns 12152	Software Updates Patch Downloader	2015/6/2 8:28:21	7908 (0x1EE4)
ERROR: DownloadContentFiles() failed with hr=0x80072f78	Software Updates Patch Downloader	2015/6/2 8:28:21	5252 (0x1484)
Trying to connect to the root\SMS namespace on the BAMBOO machine.	Software Updates Patch Downloader	2015/6/2 8:28:21	5252 (0x1484)
Connected to \\BAMBOO\root\SMS	Software Updates Patch Downloader	2015/6/2 8:28:21	5252 (0x1484)
Trying to connect to the \\bamboo.mmiyx.com.cn\root\sms\site_510 namespace on the bamboo.mmiyx.com.cn machine.	Software Updates Patch Downloader	2015/6/2 8:28:21	5252 (0x1484)
Connected to \\bamboo.mmiyx.com.cn\root\sms\site_510	Software Updates Patch Downloader	2015/6/2 8:28:21	5252 (0x1484)
Download destination = \\bamboo.mmiyx.com.cn\windows defender update\7a32c53e-5bda-48cd-bb64-7eb96ef4f884.1\AM_Base_Patch_155.exe .	Software Updates Patch Downloader	2015/6/2 8:28:22	5252 (0x1484)
Contentsource = http://wsus.ds.download.windowsupdate.com/c/msdownload/update/software/defu/2015/05/am_base_patch_155_4fb99f2cc3811ff0ee544447f0df615089055026.exe .	Software Updates Patch Downloader	2015/6/2 8:28:22	5252 (0x1484)
Downloading content for ContentID = 16823933,  FileName = AM_Base_Patch_155.exe.	Software Updates Patch Downloader	2015/6/2 8:28:22	5252 (0x1484)
HttpSendRequest failed 12152	Software Updates Patch Downloader	2015/6/2 8:28:22	7916 (0x1EEC)
Download http://wsus.ds.download.windowsupdate.com/c/msdownload/update/software/defu/2015/05/am_base_patch_155_4fb99f2cc3811ff0ee544447f0df615089055026.exe to C:\Windows\TEMP\CABB6B6.tmp returns 12152	Software Updates Patch Downloader	2015/6/2 8:28:22	7916 (0x1EEC)
ERROR: DownloadContentFiles() failed with hr=0x80072f78	Software Updates Patch Downloader	2015/6/2 8:28:22	5252 (0x1484)
Trying to connect to the root\SMS namespace on the BAMBOO machine.	Software Updates Patch Downloader	2015/6/2 8:28:22	5252 (0x1484)
Connected to \\BAMBOO\root\SMS	Software Updates Patch Downloader	2015/6/2 8:28:22	5252 (0x1484)
Trying to connect to the \\bamboo.mmiyx.com.cn\root\sms\site_510 namespace on the bamboo.mmiyx.com.cn machine.	Software Updates Patch Downloader	2015/6/2 8:28:22	5252 (0x1484)
Connected to \\bamboo.mmiyx.com.cn\root\sms\site_510	Software Updates Patch Downloader	2015/6/2 8:28:22	5252 (0x1484)
Download destination = \\bamboo.mmiyx.com.cn\windows defender update\99eb48e7-720b-4467-8f62-6ae2e3620630.1\AM_Engine.exe .	Software Updates Patch Downloader	2015/6/2 8:28:22	5252 (0x1484)
Contentsource = http://wsus.ds.download.windowsupdate.com/c/msdownload/update/software/defu/2015/05/am_engine_dee277fdcf0fbf1c2ee5b030a69936360fef0baa.exe .	Software Updates Patch Downloader	2015/6/2 8:28:22	5252 (0x1484)
Downloading content for ContentID = 16823934,  FileName = AM_Engine.exe.	Software Updates Patch Downloader	2015/6/2 8:28:22	5252 (0x1484)
HttpSendRequest failed 12152	Software Updates Patch Downloader	2015/6/2 8:28:22	7924 (0x1EF4)
Download http://wsus.ds.download.windowsupdate.com/c/msdownload/update/software/defu/2015/05/am_engine_dee277fdcf0fbf1c2ee5b030a69936360fef0baa.exe to C:\Windows\TEMP\CABB957.tmp returns 12152	Software Updates Patch Downloader	2015/6/2 8:28:22	7924 (0x1EF4)
ERROR: DownloadContentFiles() failed with hr=0x80072f78	Software Updates Patch Downloader	2015/6/2 8:28:22	5252 (0x1484)

what can I do?

I am facing a problem in WSUS.

Actually, may it is a conflict between WSUS and SUP.

Environment running two WSUS Servers upstream and downstream, it's FQDN are SUP01.fuzail.local for upstream WSUS and SUP02.fuzail.local for downstream WSUS.

In SCCM Sites Hierarchy, two sites are running. Central Administration Site and Primary Site. Central Administration Site have Software Update Point installed on a dedicated machine of WSUS Upstream Server on sup01.fuzail.local. Primary site have Software Update Point installed on a dedicated machine of downstream server on sup02.fuzail.local.

Both sites have same SQL Server Installed sql01.fuzail.local but have a different instances for Upstream and downstream WSUS. Different instances also used for PRI and CAS Site Servers.

I m facing problem only in sup01.fuzail.local. in WSUS for this issue "WSUS Upstream Server Update Source Settings change itself. Instead of synchronizing from Microsoft Update, it is synchronizing from Upstream Server itself."

I know about in SCCM environment we don't need to configure WSUS, just we have to install it. Software Update Point will do configuration in WSUS.

According to my finding, SUP which is used for upstream server WSUS in sup01.fuzail.local, is properly configured in SCCM. It has been check that, synchronization has been done from Microsoft Update. But when I go to upstream server of WSUS and check it's update source and proxy settings it has been checked to upstream itself instead of Microsoft Update.

I have worked troubleshoot and do much more finding to resolve this issues but this issues raise again in few days or few hours.

Please provide me some technical help to resolve this issues.

Thanks

Fuzail Motan

MCT & Infrastructure Consultant.   

Hi Team,

I'm Unable to download  Adobe Reader 11.0.11 Update , Below is the error message.

The issue is only with adobe reader update where as i can download Adobe flash Updates & Microsoft updates.

i was also able to download the updates manually from server in the following link http://armdl.adobe.com/pub/adobe/reader/win/11.x/11.0.11/misc/AdbeRdrUpd11011.msp.

Patchdownloader.log :

Authentication of file C:\Users\user1\AppData\Local\Temp\3\CABB776.tmp failed, error 0x800b0004

ERROR: DownloadContentFiles() failed with hr=0x80073633

Kindly help me to fix the issue. Thanks.

I cannot seem to find anything that outlines step by step what needs to be done on the networking side prior to deploying operating systems via SCCM 2012 R2. For instance, what needs to be done to allow PXE, etc. 

Can someone please provide TechNet links, guides, white papers, anything that can help me on this?

I would greatly appreciate it, as always. 

Thank you all very much for you support. 

Hi,

I have this compliancy rule which checks for a certain registry settings (what should be 1).
Deployed it and created a collection which is not compatible. That works fine, I see machines which are not compatible.
So now I activated "remediate incompliant rules".

Should I redeploy this rule or is it activated automatically?

J.

Jan Hoedt

Hi!

After configuring the Software Updates in Configuration Manager, do we still have to create a group policy to specify the location of the update server on client computers?

http://servername:8530

Thanks.

Hello all,

I have an issue that is driving me nuts!

I need our Service Desk to be able to run report "Hardware 03B - Computers for a specific primary console user" which has two required fields before it can be run.  Collection and Primary Console User.  When they get to this point, they can drop down the list of collections and select one, but the Primary Console User drop down is blank.  Using a test user that has the same access I ran the following two reports successfully:

Hardware 01A - Summary of computers in a specific collection

Users > Computers for a specific user name

What I don't understand is why the User Name drop down in the "Computers for a specific user name" populates, but the one in the Hardware 03B does not.  What permissions am I missing?

Thanks in advance!

Hello,

We have over 11 different languages in the environment. When downloading software updates, I'm noticing that the deployment packages are much greater in size when I select all of the languages. My question is what would the harm be in only downloading the updates in English only and deploying them to machines in a different language? Would this mean the update would not install on any machine set in a language other than English? I would like to cut down on the deployment package size if there is no user impact. We currently have all software update notifications hidden on the users end.

Thanks for your time.

-Brian

I have a significant number (but not all) of my SCCM 2012 R2 CU3 clients not updating though my SCCM software updates. On these problem clients, I get this error in WindowsUpdate.log:

"COMAPI WARNING: ISusInternal::GetUpdateMetadata2 failed, hr=8007000E"

Then these machines report "Compliant" even though they don't install the updates. Almost all of our workstations are Windows 7 SP1 32bit. We are running SCCM 2012 R2 CU3. My site servers are running Windows 2008 R2.

I don't see much in WUAhandler.log or scanagent.log. These client are however, getting my SCEP definition updates just fine. (I have an ADR for those.) And when you go out to Microsoft for security updates it works. I have tried all of the usual Windows Updates repair suggestions (re-register dlls, rename software distribution folder, etc.) And I tried un-installing and re-installing the SCCM client on a problem PC, to no avail. I also tried using a Software Update Group with fewer updates (<100) and targeting a problem system with only that SUG, to no avail.

Any assistance would be greatly appreciated. Thank you.

I've created a configuration baseline and deployed it to a test collection.  The deployment settings were to run it on a simple schedule every hour.  I'm not seeing the baseline show up in my 'Configurations' tab however on the client side.  I can see the client reporting in via the SCCM console, and I see other baselines listed (i.e. Windows Firewall customization).

Any ideas?

I'm fairly new to the Software Updates portion of SCCM in my organization.  I recently noticed about 1.5 weeks ago that our SCEP Definitions are all failing to be distributed to our distribution points.  We have an ADR setup pointing to the Deployment Package we have for this.  The package itself is called Client - SCEP Definitions, which is showing failed on 231 of our DP's.  When viewing the content status, most failures show under "Processing content on site server" with the error description:

  "Distribution Manager failed to process package "Client - SCEP Definitions" (package ID = xxxxxx)  Possible cause:  Distribution Manager does not have access to either the package source directory or the distribution point.  Solution:  Verify that distribution manager can access the source directory/distribution point.  Possible cause:  The package source directory contains files with long file names and the total length of the path exceeds the maximum length supported by the operating system.  Solution:  Reduce the number of folders defined for the package, shorten the filename, or consider bundling the files using a compression utility.  Possible cause:  There is not enough disk space available on the site server computer or the distribution point.  Solution:  Verify that there is enough free space available on the site server computer and on the distribution point.  Possible cause:  The package source directory contains files that might be in use by an active process.  Solution:  Close any processes that may be using files in the source directory.  If this failure persists, create an alternate copy of the source directory and update the package source to point to it.

I took a look at my Primary Site Server and the drive has a smaller chunk of space left, about 9 gigs.  I spot checked some DP's and they all have at least 20 gigs free.  I will note, that I am able to push out new applications without any issues distributing the content.  I also tried creating a new folder for the source content and pointing the Deployment Package to that path, but it seems to keep trying to retry the original path after 30 minutes.

Some of the other errors show up as "Distributing Content" with the error "Distribution Manager failed to access the source directory \\pss1\d$\updates\Client - SCEP\ea297562-xxxxxxxxx" for content "ea297562-xxxxxxxx" (content ID = ea297562-xxxxxx"  Possible cause:  Distribution Manager does not have sufficient rights to the source directory.  Solution:  Verify that the site server computer account as at least read access to the directory you specify as the source directory.  Possible cause:  There is not enough disk space available on the site server.  Solution:  Verify that there is enough free disk space available on the site server.  Retry interval is 30 minutes, number of retries left is 30.

I verified the size of the package itself is about 2.1 gigs under the Content Status option. 

My other questions to ask are, should this be so big?  We've been noticing lately that the definitions can't make it to our remote sites quick enough, so we need to adjust either the amount of definitions this file is holding, or the amount of time it adds to the package.  But that is a question for after the question about not being able to deploy to our DP's.

Any help would greatly be appreciated, I'm somewhat new to this process.

We have two regional sites with complaints that each day around 2pm their workstations are locking-up.  They have sent me screenshots that indicate SVCHOST.EXE is using excessive resources with the file C:\WINDOWS\SOFTWAREDISTRIBUTION\DATASTORE\DATASTORE.EDB

we are running ConfigMgr 2012 R2 CU2 and using SCEP antivirus.  We deploy Software Updates with ConfigMgr.  The affected workstations are Windows 7 SP1 Enterprise.

We have about 200 workstations experiencing the problem.  I wasn't sure whether to try recreating the folder, I read an article that said I would lose the Windows Update history and then the workstations would have to rebuild the file/folder structure, so it could make the problem worse?  Have others who have experienced this problem done this successfully?

Is it likely that all/many of the computers at an individual site would have a corrupt DATASTORE.EDB file at the same time?  I may try running ESENTUTL to repair the file on a few computers when they experience the problem today to see if it alleviates the issue for them...  It seems like there may be an underlying issue at these two specific sites since the symptom is isolated there, but I am not sure how to troubleshoot it to narrow down the problem.

It would be nice if ConfigMgr had the ability to specify a designated time window (after hours) where the Software Update scan could take place instead of "every 1 day".

I've found a few articles that suggest this file is the database that tells Windows Update which patches are already installed on the computer, and say to exclude this file from Antivirus scanning.  I have verified that our antimalware policyalready excludes this file.

Why else might SVCHOST lock-onto this file and lock-up computers?  Has anybody else run into this?

Thanks!

Hi all,

I was wondering if there are any add-in for SCCM 2012 and AWS to control patch management for those AWS cloud-based Servers through SCCM 2012? I know there are for SCOM and SCVMM (http://aws.amazon.com/windows/products/system-center/) but I haven't found any information for SCCM 2012? Would it just be a case of having a VPN to the AWS and then you should be able to locate the Servers in SCCM to control?

Thanks

hi all,

we've an on-box SUP (WSUS 3.2)on our Primary & CAS running SCCM2012R2 on Windows 2008R2.

Is it possible to have SUP role moved to a separate box running Windows 2012/R2.

would this be a supported config.

thanks in advance...

Hi

I originally posted in the WSUS forum but was advised to post here as CM2012 related.

I am getting the above error appearing in my WSUSCtrol.log. I wondered if anyone had come across this?

I am using CM2012 R2 SP1 with WSUS 3 SP2 and WSUS-KB2720211-x64 & WSUS-KB2734608-x64 patches.  WSUS is on a separate box and SQL is on another box. The WSUS console is installed with the aforementioned patches on the CM2012 primary site.

This error reappears approx every 30 mins or so (but occasionally longer).

Thanks

Good morning,

I've noticed a bug with SCCM wherein scheduled sync's and deployments don't function as configured. My environment is configured to check for new updates on the second Thursday of each month. The clients are then configured to run the software update scan and then the schedule deployment re-evaluation on the third Thursday of each month thus installing any required updates. Issues occur, for example, as SCCM seems to view the third Thursday of the month (in the below example) as the 14th... and not the 21st! 

This causes obvious issues with the scheduling of each stage of the process becoming out of sync (on certain months). Is there a hotfix to resolve this issue? Does bringing 2012 to the latest release resolve this issue? 

Thank you to anyone that takes the time to respond to this post. 

M Tipler

So, this is one of the odd ones.

We have setup our SCCM/SCEP to send e-mails when new malware are found in selected collections (Alerts).

During last week, I was surprised to see that our environment was without malware at all (according to the endpoint protection status in the SCCM console) . That's very unlikely to happen, so I started to go about test the SCEP client on a newly installed W81 machine. I did a few test with the following http://www.eicar.org/86-0-Intended-use.html

SCEP instantly found the string as malware, which is what I hoped for. I waited to see if the client would report that back to SCCM as usually, but no. Nothing ever shows up in the console.

Long story short; we went back to see when the last time we ever recieved an e-mail based on a malware-alert in SCCM. The last e-mail was dated march 14th 2015.

So we went back to see what happened on our clients back in march, and during our troubleshooting we went through every software update we released in march, and it appears thatKB3025417 is causing the trouble here. (Note: I also suspect that the update itself is unnecessary given we have SCEP, and the update is related to windows defender. However, the update is seen as required by all W81 clients)

We ended up excluding the mentioned update, and reinstalled a client and voila; SCEP works fine again. The minute we install the update, SCEP on the client is no longer reporting the found malware back to SCCM. Also, uninstalling the update doesn't do anything. The damage is done.

We found a few other reporting similar behaviour. While they don't mention the KB itself, I suspect it's very same issue: https://social.technet.microsoft.com/Forums/en-US/34903763-b423-41b4-8783-b75df94337d0/scep-email-alerts-stopped-working-in-sccm-2012-r2?forum=FCSNext

The environment is SCCM 2012 R2 CU4, Antimalware Client Version: 4.8.204.0, Windows 8.1 x64

Also, note that everything around the SCCM client seems healthy. Deployments are installing and reporting back as usual. Nothing else seems broken, and the SCEP component is also healthy.

This is probably a case for MS Support, but given that I see a few others with the same issue, I also suspect that there's alot more out there with the same problem. They just don't know yet, or haven't figured out why it stopped working.

Any pointers or comments to above is much appreciated.

Thanks in advance.

Martin Bengtsson | www.imab.dk

Hi,

I recently pushed out the all the March Patch Tuesday updates and I've got around 11 systems that are reporting as compliant when I review the status of the deployment, but are systems that haven't actually pulled down or installed the updates from the deployment.

Strangely the systems show up as Active in the SCCM 2012 console and have current (within the last 4 hours or so) active times. So it seems the SCCM client components are working correctly.

The thing all these systems appear to have in common is that in the WindowsUpdate.log I see the following lines:

2015-03-23 04:32:32:148 2216 16d8 COMAPI ---------
2015-03-23 04:32:32:148 2216 16d8 COMAPI --  END  --  COMAPI: Search [ClientId = CcmExec]
2015-03-23 04:32:32:148 2216 16d8 COMAPI -------------
2015-03-23 04:32:32:959 2216 a18 COMAPI WARNING: ISusInternal::GetUpdateMetadata2 failed, hr=8007000E

Reviewing the WindowsUpdate.log I can see the CCMExec process talking to my SCCM 2012 server but then I get the error above and no updates appear to get pulled down.

I've tried rebooting the systems to see if that resolves the issue but it doesn't.  Also what is strange is that these systems have all been working fine in the past.  So something appears to have gotten messed up but I'm not sure what?

Any ideas?

Thanks in advance,

Nick