Jan Hoedt

Hi All

i am having an issue on five servers at one of my clients - 3 of the 5 is at the same physical location while the other 2 is at a different site

i see tht this error refers to a network time out error but the rest of the servers patched fine at the 2 respective sites:

 Error=0x8024401c

however other servers at these sites have patched successfully -

I have ran the following script to try to remediate the issue

@echo off

cls

REM ==================================================================================

REM DESCRIPTION    : This script resets all of Windows Update Agent settings.

REM AUTHOR        : Luca Fabbri

REM VERSION HISTORY: 2.0 - Start

REM ==================================================================================

@echo 1. Stopping Windows Update, BITS, Application Identity, Cryptographic Services and SMS Host Agent services...

net stop wuauserv

net stop bits

net stop appidsvc

net stop cryptsvc

net stop ccmexec

@echo 2. Checking if services were stopped successfully...

sc query wuauserv | findstr /I /C:"STOPPED"

if %errorlevel% NEQ 0 goto END

sc query bits | findstr /I /C:"STOPPED"

if %errorlevel% NEQ 0 goto END

sc query appidsvc | findstr /I /C:"STOPPED"

if %errorlevel% NEQ 0 sc query appidsvc | findstr /I /C:"OpenService FAILED 1060"

if %errorlevel% NEQ 0 goto END

sc query cryptsvc | findstr /I /C:"STOPPED"

if %errorlevel% NEQ 0 goto END

sc query ccmexec | findstr /I /C:"STOPPED"

if %errorlevel% NEQ 0 sc query ccmexec | findstr /I /C:"OpenService FAILED 1060"

if %errorlevel% NEQ 0 goto END

@echo 3. Deleting AU cache folder and log file...

rd /s /q %SystemRoot%\SoftwareDistribution

@echo 4. Re-registering DLL files...

cd /d %WinDir%\system32

regsvr32.exe /s atl.dll

regsvr32.exe /s urlmon.dll

regsvr32.exe /s mshtml.dll

regsvr32.exe /s shdocvw.dll

regsvr32.exe /s browseui.dll

regsvr32.exe /s jscript.dll

regsvr32.exe /s vbscript.dll

regsvr32.exe /s scrrun.dll

regsvr32.exe /s msxml.dll

regsvr32.exe /s msxml3.dll

regsvr32.exe /s msxml6.dll

regsvr32.exe /s actxprxy.dll

regsvr32.exe /s softpub.dll

regsvr32.exe /s wintrust.dll

regsvr32.exe /s dssenh.dll

regsvr32.exe /s rsaenh.dll

regsvr32.exe /s gpkcsp.dll

regsvr32.exe /s sccbase.dll

regsvr32.exe /s slbcsp.dll

regsvr32.exe /s cryptdlg.dll

regsvr32.exe /s oleaut32.dll

regsvr32.exe /s ole32.dll

regsvr32.exe /s shell32.dll

regsvr32.exe /s initpki.dll

regsvr32.exe /s wuapi.dll

regsvr32.exe /s wuaueng.dll

regsvr32.exe /s wuaueng1.dll

regsvr32.exe /s wucltui.dll

regsvr32.exe /s wups.dll

regsvr32.exe /s wups2.dll

regsvr32.exe /s wuweb.dll

regsvr32.exe /s qmgr.dll

regsvr32.exe /s qmgrprxy.dll

regsvr32.exe /s wucltux.dll

regsvr32.exe /s muweb.dll

regsvr32.exe /s wuwebv.dll

@echo 5. Removing WSUS Client Id...

REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v AccountDomainSid /f

REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v PingID /f

REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v SusClientId /f

@echo 6. Resetting Winsock and WinHTTP Proxy...

netsh winsock reset

proxycfg.exe -d

netsh winhttp reset proxy

@echo 7. Starting SMS Host Agent, Cryptographic Services, Application Identity, BITS, Windows Update services...

net start ccmexec

net start cryptsvc

net start appidsvc

net start bits

net start wuauserv

@echo 8. Deleting all BITS jobs...

bitsadmin.exe /reset /allusers

@echo 9. Forcing AU discovery...

wuauclt /resetauthorization /detectnow

:END

these all virtual servers

i get the following error in

scanagent.log

windowsupdate.log

thank you

Hi All,

DCM Rule Settings to re-mediate the SEPM 12 Clients by running "smc -updateconfig". With rule am able to get the compliant / non-compliant machines list with respective to definition date. 

Some one please share me the options / way to achieve. Requirement is to collect the SEPM out of date machines and to run the SEPM policy update on those machines.

Visuvan.S

ADR started to fail every time it runs as of yesterday. Error code is 0x80072EEF. Error description is Unknown Error (-2147012865). Here is the ruleengine.log. Any help is greatly appreciated.

Found notification file E:\Program Files\Microsoft Configuration Manager\inboxes\RuleEngine.box\16777227.RUL    SMS_RULE_ENGINE    7/13/2016 10:09:29 AM    4152 (0x1038)
RuleSchedulerThred: Change in Rules Object Signalled.    SMS_RULE_ENGINE    7/13/2016 10:09:29 AM    4156 (0x103C)
Refreshed ScheduleList instance for Rule (16777227) from schedule string () with next occurence (12/31/1969 7:00:00 PM)    SMS_RULE_ENGINE    7/13/2016 10:09:29 AM    4156 (0x103C)
FindNextEventTime found next event for RuleID 0 as :1/1/2038 12:00:00 AM    SMS_RULE_ENGINE    7/13/2016 10:09:29 AM    4156 (0x103C)
RuleEngine: Got next rule execution time successfully. Next event is in  11291930 minutes    SMS_RULE_ENGINE    7/13/2016 10:09:29 AM    4156 (0x103C)
Sleeping for 15 minutes    SMS_RULE_ENGINE    7/13/2016 10:09:29 AM    4156 (0x103C)
CRuleHandler: Need to Process 0 rules    SMS_RULE_ENGINE    7/13/2016 10:09:29 AM    4152 (0x1038)
CRuleHandler: ResetRulesAndCleanUp()    SMS_RULE_ENGINE    7/13/2016 10:09:29 AM    4152 (0x1038)
Found notification file E:\Program Files\Microsoft Configuration Manager\inboxes\RuleEngine.box\16777227.RUL    SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4152 (0x1038)
RuleSchedulerThred: Change in Rules Object Signalled.    SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4156 (0x103C)
Constructing Rule 16777227 using Auto Deployment Rule Factory    SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4152 (0x1038)
    Populating Rule Skeleton    SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4152 (0x1038)
    Populating Criterion Skeleton    SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4152 (0x1038)
Refreshed ScheduleList instance for Rule (16777227) from schedule string () with next occurence (12/31/1969 7:00:00 PM)    SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4156 (0x103C)
FindNextEventTime found next event for RuleID 0 as :1/1/2038 12:00:00 AM    SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4156 (0x103C)
RuleEngine: Got next rule execution time successfully. Next event is in  11291929 minutes    SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4156 (0x103C)
Sleeping for 15 minutes    SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4156 (0x103C)
    Populating Action Skeleton    SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4152 (0x1038)
    Populating Action Skeleton    SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4152 (0x1038)
CRuleHandler: Need to Process 1 rules    SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4152 (0x1038)
CRuleHandler: Processing Rule with ID:16777227, Name:Endpoint Protection ADR.    SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4152 (0x1038)
Evaluating Update Criteria for AutoDeployment Rule 16777227    SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4152 (0x1038)
  Evaluating Update Criteria...    SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4152 (0x1038)
    Rule Criteria is: <UpdateXML xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" Name="SMS_SoftwareUpdate" LocaleId="1033"><UpdateXMLDescriptionItems><UpdateXMLDescriptionItem PropertyName="DateRevised" UIPropertyName=""><MatchRules><string>0:0:2:0</string></MatchRules></UpdateXMLDescriptionItem><UpdateXMLDescriptionItem PropertyName="_Product" UIPropertyName=""><MatchRules><string>'Product:a38c835c-2950-4e87-86cc-6911a52c34a3'</string></MatchRules></UpdateXMLDescriptionItem><UpdateXMLDescriptionItem PropertyName="IsSuperseded" UIPropertyName=""><MatchRules><string>false</string></MatchRules></UpdateXMLDescriptionItem></UpdateXMLDescriptionItems></UpdateXML>    SMS_RULE_ENGINE   7/13/2016 10:10:19 AM    4152 (0x1038)
      Inserting PropertyName:DateRevised, PropertyValue:0:0:2:0    SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4152 (0x1038)
      Inserting PropertyName:_Product, PropertyValue:'Product:a38c835c-2950-4e87-86cc-6911a52c34a3'    SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4152 (0x1038)
      Inserting PropertyName:IsSuperseded, PropertyValue:false    SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4152 (0x1038)
    Query to run is: select CI_ID from dbo.fn_ListUpdateCIs(1033) ci~where IsExpired=0~  and (DateRevised>=N'2016-07-11 14:10:19')~  and (IsSuperseded=0)~  and (CI_ID in (select CI_ID from v_CICategories_All where CategoryInstance_UniqueID in (N'Product:a38c835c-2950-4e87-86cc-6911a52c34a3')))    SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4152 (0x1038)
  Rule resulted in a total of 1 updates    SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4152 (0x1038)
  Evaluation Resultant XML is: <EvaluationResultXML xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><CI_IDs><CI_ID>17062296</CI_ID></CI_IDs> </EvaluationResultXML>   SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4152 (0x1038)
Enforcing Content Download Action    SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4152 (0x1038)
Download Rule Action XML is: <ContentActionXML xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><PackageID>NIS000B6</PackageID><ContentLocales><Locale>Locale:2052</Locale><Locale>Locale:9</Locale><Locale>Locale:12</Locale><Locale>Locale:7</Locale><Locale>Locale:18</Locale><Locale>Locale:1046</Locale><Locale>Locale:0</Locale></ContentLocales><ContentSources><Source Name="Internet" Order="1"/><Source Name="WSUS" Order="2"/><Source Name="UNC" Order="3" Location=""/></ContentSources></ContentActionXML>    SMS_RULE_ENGINE   7/13/2016 10:10:19 AM    4152 (0x1038)
Criteria Filter Result XML is: <EvaluationResultXML xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><CI_IDs><CI_ID>17062296</CI_ID></CI_IDs> </EvaluationResultXML>   SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4152 (0x1038)
1 update(s) need to be downloaded in package "NIS000B6" (\\siusns021\Source Files\Endpoint Protection)    SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4152 (0x1038)
List of update(s) which match the content rule criteria = {17062296}    SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4152 (0x1038)
Downloading contents (count = 42) for UpdateID 17062296    SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4152 (0x1038)
List of update content(s) which match the content rule criteria = {17027824,17027825,17027826,17027827,17027828,17027829,17034282,17034283,17034284,17034285,17034286,17034287,17034288,17034289,17034290,17034291,17034292,17034293,17034294,17034295,17034296,17034297,17034938,17034939,17035018,17035019,17035020,17035021,17035022,17035023,17035553,17035554,17035555,17035556,17035557,17035558,17035559,17035560,17035561,17035562,17035563,17035564}   SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4152 (0x1038)
Downloading content with ID 17027824 in the package    SMS_RULE_ENGINE    7/13/2016 10:10:19 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:10:23 AM    4152 (0x1038)
Downloading content with ID 17027825 in the package    SMS_RULE_ENGINE    7/13/2016 10:10:23 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:10:26 AM    4152 (0x1038)
Downloading content with ID 17027826 in the package    SMS_RULE_ENGINE    7/13/2016 10:10:26 AM    4152 (0x1038)
Failed to download the update from internet. Error = 13875    SMS_RULE_ENGINE    7/13/2016 10:10:28 AM    4152 (0x1038)
Failed to download ContentID 17027826 for UpdateID 17062296. Error code = 13875    SMS_RULE_ENGINE    7/13/2016 10:10:28 AM    4152 (0x1038)
Downloading content with ID 17027827 in the package    SMS_RULE_ENGINE    7/13/2016 10:10:28 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:10:29 AM    4152 (0x1038)
Downloading content with ID 17027828 in the package    SMS_RULE_ENGINE    7/13/2016 10:10:29 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:10:31 AM    4152 (0x1038)
Downloading content with ID 17027829 in the package    SMS_RULE_ENGINE    7/13/2016 10:10:31 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:10:32 AM    4152 (0x1038)
Downloading content with ID 17034282 in the package    SMS_RULE_ENGINE    7/13/2016 10:10:32 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:10:43 AM    4152 (0x1038)
Downloading content with ID 17034283 in the package    SMS_RULE_ENGINE    7/13/2016 10:10:43 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:10:58 AM    4152 (0x1038)
Downloading content with ID 17034284 in the package    SMS_RULE_ENGINE    7/13/2016 10:10:58 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:11:09 AM    4152 (0x1038)
Downloading content with ID 17034285 in the package    SMS_RULE_ENGINE    7/13/2016 10:11:09 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:11:23 AM    4152 (0x1038)
Downloading content with ID 17034286 in the package    SMS_RULE_ENGINE    7/13/2016 10:11:23 AM    4152 (0x1038)
Failed to download the update from internet. Error = 13875    SMS_RULE_ENGINE    7/13/2016 10:11:58 AM    4152 (0x1038)
Failed to download ContentID 17034286 for UpdateID 17062296. Error code = 13875    SMS_RULE_ENGINE    7/13/2016 10:11:58 AM    4152 (0x1038)
Downloading content with ID 17034287 in the package    SMS_RULE_ENGINE    7/13/2016 10:11:58 AM    4152 (0x1038)
Failed to download the update from internet. Error = 13875    SMS_RULE_ENGINE    7/13/2016 10:12:29 AM    4152 (0x1038)
Failed to download ContentID 17034287 for UpdateID 17062296. Error code = 13875    SMS_RULE_ENGINE    7/13/2016 10:12:29 AM    4152 (0x1038)
Downloading content with ID 17034288 in the package    SMS_RULE_ENGINE    7/13/2016 10:12:29 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:13:10 AM    4152 (0x1038)
Downloading content with ID 17034289 in the package    SMS_RULE_ENGINE    7/13/2016 10:13:10 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:13:51 AM    4152 (0x1038)
Downloading content with ID 17034290 in the package    SMS_RULE_ENGINE    7/13/2016 10:13:51 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:14:05 AM    4152 (0x1038)
Downloading content with ID 17034291 in the package    SMS_RULE_ENGINE    7/13/2016 10:14:05 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:14:21 AM    4152 (0x1038)
Downloading content with ID 17034292 in the package    SMS_RULE_ENGINE    7/13/2016 10:14:21 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:14:33 AM    4152 (0x1038)
Downloading content with ID 17034293 in the package    SMS_RULE_ENGINE    7/13/2016 10:14:33 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:14:47 AM    4152 (0x1038)
Downloading content with ID 17034294 in the package    SMS_RULE_ENGINE    7/13/2016 10:14:47 AM    4152 (0x1038)
Failed to download the update from internet. Error = 13875    SMS_RULE_ENGINE    7/13/2016 10:15:17 AM    4152 (0x1038)
Failed to download ContentID 17034294 for UpdateID 17062296. Error code = 13875    SMS_RULE_ENGINE    7/13/2016 10:15:17 AM    4152 (0x1038)
Downloading content with ID 17034295 in the package    SMS_RULE_ENGINE    7/13/2016 10:15:17 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:22:48 AM    4152 (0x1038)
Downloading content with ID 17034296 in the package    SMS_RULE_ENGINE    7/13/2016 10:22:48 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:23:28 AM    4152 (0x1038)
Downloading content with ID 17034297 in the package    SMS_RULE_ENGINE    7/13/2016 10:23:28 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:24:08 AM    4152 (0x1038)
Downloading content with ID 17034938 in the package    SMS_RULE_ENGINE    7/13/2016 10:24:08 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:24:10 AM    4152 (0x1038)
Downloading content with ID 17034939 in the package    SMS_RULE_ENGINE    7/13/2016 10:24:10 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:24:12 AM    4152 (0x1038)
Downloading content with ID 17035018 in the package    SMS_RULE_ENGINE    7/13/2016 10:24:12 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:24:16 AM    4152 (0x1038)
Downloading content with ID 17035019 in the package    SMS_RULE_ENGINE    7/13/2016 10:24:16 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:24:21 AM    4152 (0x1038)
Downloading content with ID 17035020 in the package    SMS_RULE_ENGINE    7/13/2016 10:24:21 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:24:26 AM    4152 (0x1038)
Downloading content with ID 17035021 in the package    SMS_RULE_ENGINE    7/13/2016 10:24:26 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:24:32 AM    4152 (0x1038)
Downloading content with ID 17035022 in the package    SMS_RULE_ENGINE    7/13/2016 10:24:32 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:24:36 AM    4152 (0x1038)
Downloading content with ID 17035023 in the package    SMS_RULE_ENGINE    7/13/2016 10:24:36 AM    4152 (0x1038)
Failed to download the update from internet. Error = 12031    SMS_RULE_ENGINE    7/13/2016 10:24:37 AM    4152 (0x1038)
Failed to download ContentID 17035023 for UpdateID 17062296. Error code = 12031    SMS_RULE_ENGINE    7/13/2016 10:24:37 AM    4152 (0x1038)
Downloading content with ID 17035553 in the package    SMS_RULE_ENGINE    7/13/2016 10:24:37 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:24:46 AM    4152 (0x1038)
Downloading content with ID 17035554 in the package    SMS_RULE_ENGINE    7/13/2016 10:24:46 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:24:57 AM    4152 (0x1038)
Downloading content with ID 17035555 in the package    SMS_RULE_ENGINE    7/13/2016 10:24:57 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:24:59 AM    4152 (0x1038)
Downloading content with ID 17035556 in the package    SMS_RULE_ENGINE    7/13/2016 10:24:59 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:25:01 AM    4152 (0x1038)
Downloading content with ID 17035557 in the package    SMS_RULE_ENGINE    7/13/2016 10:25:01 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:25:02 AM    4152 (0x1038)
Downloading content with ID 17035558 in the package    SMS_RULE_ENGINE    7/13/2016 10:25:02 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:25:04 AM    4152 (0x1038)
Downloading content with ID 17035559 in the package    SMS_RULE_ENGINE    7/13/2016 10:25:04 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:25:05 AM    4152 (0x1038)
Downloading content with ID 17035560 in the package    SMS_RULE_ENGINE    7/13/2016 10:25:05 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:25:06 AM    4152 (0x1038)
Downloading content with ID 17035561 in the package    SMS_RULE_ENGINE    7/13/2016 10:25:06 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:25:07 AM    4152 (0x1038)
Downloading content with ID 17035562 in the package    SMS_RULE_ENGINE    7/13/2016 10:25:07 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:25:08 AM    4152 (0x1038)
Downloading content with ID 17035563 in the package    SMS_RULE_ENGINE    7/13/2016 10:25:08 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:25:10 AM    4152 (0x1038)
Downloading content with ID 17035564 in the package    SMS_RULE_ENGINE    7/13/2016 10:25:10 AM    4152 (0x1038)
Successfully downloaded the update content from internet.    SMS_RULE_ENGINE    7/13/2016 10:25:11 AM    4152 (0x1038)
Failed to download update contents.    SMS_RULE_ENGINE    7/13/2016 10:25:11 AM    4152 (0x1038)
Updating package "NIS000B6" now...    SMS_RULE_ENGINE    7/13/2016 10:25:11 AM    4152 (0x1038)
Failed to run the DownloadAction for the AutoDeployment.    SMS_RULE_ENGINE    7/13/2016 10:25:11 AM    4152 (0x1038)
STATMSG: ID

I have a significant number (but not all) of my SCCM 2012 R2 CU3 clients not updating though my SCCM software updates. On these problem clients, I get this error in WindowsUpdate.log:

"COMAPI WARNING: ISusInternal::GetUpdateMetadata2 failed, hr=8007000E"

Then these machines report "Compliant" even though they don't install the updates. Almost all of our workstations are Windows 7 SP1 32bit. We are running SCCM 2012 R2 CU3. My site servers are running Windows 2008 R2.

I don't see much in WUAhandler.log or scanagent.log. These client are however, getting my SCEP definition updates just fine. (I have an ADR for those.) And when you go out to Microsoft for security updates it works. I have tried all of the usual Windows Updates repair suggestions (re-register dlls, rename software distribution folder, etc.) And I tried un-installing and re-installing the SCCM client on a problem PC, to no avail. I also tried using a Software Update Group with fewer updates (<100) and targeting a problem system with only that SUG, to no avail.

Any assistance would be greatly appreciated. Thank you.

I have been asked to get a report for the following and can't find something out there exactly what I need and was wondering if anything someone could point me at the right tables/views.

I have been asked to create a report of All Deployed Software Updates against our server collections with showing compliance percentage sorted by least compliant and chart this out also.

Basically in our environment we Have a Software update group Named: Prod (1980- June 2015) - Windows 200x Software Updates

And then we have collections by application Name for Example: Prod Corporate File Servers or Prod Site File Servers, etc...

How can I pull the Software update groups compliance level per the collection for only targeted updates?

I have been asked to create a report of All Software’s list against our user collections specific to Dept (I able to create user collection based on AD user Attribute) , and user-device affinity also mapped.

How can I pull the report? 

After having issues with the latest patch (KB3159706), I had to restore my entire Configuration Manager server from backup and reapply the update. Since then, I am unable to run summarization on Update Deployments that had occurred prior to the patch. I am getting the following error:

"The summarization request for this deployment failed. To run summarization, you must be granted deployment rights for the selected item."

No security settings have changed on my server and I'm not sure what log file to look at for additional information.

Dear All,

For my Organization - I am Process of finding the Windows Servers which is not compliant. Here are the following which I have done.

1. Created SUG which is having all Microsoft Security Updates for Windows Server 2012 (Not-Expired & Not-Superseded)

2. Deployed the Patches as per the SCCM Work Flow Deployment Procedure

3. Created CI & Compliance Baseline using (QuickFixEngineering) to find the list of updates using as WQL Query with requirements as Windows Server 2012

4. Few of the Updates got download and installed on Windows Server 2012, but still many of the updates are not showing as Deployed - Yes, Expired - No, Superseded - No with active deployment, but it is not showing in the Software Center.

5. Ran the Machine Policy, but still few of the Updates were missing/not installing. As a Result this Updates are showing as Required/Not Installed in the Compliance baseline reports.

Please drive me, If I do any mistakes here.

Note: Preferred to use the WQL Query only, as we are having issues with SQL Reportings

Regards,

Veera

Veera

Hi,

While addressing July 2016  monthly patching, I found sometyhing wrong with KB3170377. This was part of MS16-092

I checked in SCCM for this,  and it shows Superseded already?
Did Microsoft pulled this patch out or replaced with something else? screenshot link below:

https://s31.postimg.org/yqisilp23/KB3170377.jpg

Thanks,

Hey Guys - 

When SCCM was first introduced and clients deployed in our environment, there was a single server local to the primary which had the SUP role & WSUS installed.  We soon realized that shortly after client deployments to remote sites that them simply evaluating updates needed against the remote (to them) WSUS server caused havoc with WAN bandwidth.

Since then, I have installed & configured the SUP role / WSUS at both secondary sites which many clients are local to and are in the same boundaries with.  They were automatically configured to be upsteam to the WSUS local to the primary.  I've also verified in the console + log files that synchronization between the primary and secondaries from a software updates perspective is green across the board.  

When checking WindowsUpdate.log on many clients, though, all remote ones I've checked are still pointing to the SUP local to the primary - not their local one on the secondary.  I also checked local policy on these clients and it shows the same is configured and no GPOs currently exist that set WSUS settings.

I was under the impression that SUP / WSUS server would be assigned based on the boundary each client is in then default back to the primary's if none existing.  Is this not correct?  The new SUPs were added 2-3 days ago and I have forced all policies on selected clients with no change.

What am I missing?  Thanks!

Ben K.

hi,

I am getting error as below for multiple actions 

Job error (0x87d00692) received for assignment ({65749DF6-2677-40CE-BEEC-17EB42343F93}) action

It is not installing/ downloading updates to client.

We have the error below on SCCM logs.
Clients are not registering on SCCM server due to a certificate issue - but WHAT certificate to issue?
Clients cannot communicate to the SCCM server

Begin validation of Certificate [Thumbprint 84BC67537946B6B56A071CEA499A200064F6A089] issued to 'servidor.dominio.com.br'  MP_RegistrationManager            7/13/2016 1:17:28 PM    5236 (0x1474)

The certificate chain processed correctly but terminated in a root certificate not trusted per ConfigMgr CTL.                MP_RegistrationManager            7/13/2016 1:17:28 PM    2896 (0x0B50)

Completed validation of Certificate [Thumbprint 25DEE4F349BCCCC5A19D543390880BAB1AFEEFC9] issued to 'xyz.dominio.com.br'       MP_RegistrationManager            7/13/2016 1:17:28 PM    2896 (0x0B50)

MP Reg: Client in-band certificate is not valid due to failures in certificate chain validation, Raising status event. Failure HR = 0x800b0109, In-band Cert SubjectName = xyz.dominio.COM.BR  MP_RegistrationManager                7/13/2016 1:17:28 PM    2896 (0x0B50)

The certificate chain processed correctly but terminated in a root certificate not trusted per ConfigMgr CTL.                MP_RegistrationManager            7/13/2016 1:17:28 PM    5236 (0x1474)

Completed validation of Certificate [Thumbprint 84BC67537946B6B56A071CEA499A200064F6A089] issued to 'servidor.dominio.com.br'  MP_RegistrationManager            7/13/2016 1:17:28 PM    5236 (0x1474)

MP Reg: Client in-band certificate is not valid due to failures in certificate chain validation, Raising status event. Failure HR = 0x800b0109, In-band Cert SubjectName = servidor.dominio.com.br                MP_RegistrationManager            7/13/2016 1:17:28 PM    5236 (0x1474)

Raising event:

[SMS_CodePage(850), SMS_LocaleID(1046)]

instance of MpEvent_CertInvalidChain

{

                ClientID = "GUID:738D16B7-C306-443A-B3E4-A9C4184A924F";

                DateTime = "20160713161728.874000+000";

                MachineName = "sccm.dominio.com.br";

                ProcessID = 4636;

                SiteCode = "site1";

                SubjectName = "servidor.dominio.com.br";

                ThreadID = 5236;

                Win32ErrorCode = 2148204809;

};

                MP_RegistrationManager            7/13/2016 1:17:28 PM    5236 (0x1474)

MP Reg: Registration request body is invalid.      MP_RegistrationManager            7/13/2016 1:17:28 PM    5236 (0x1474)

Also another error message from CLientIDManagerStartup.log:

<![LOG[[RegTask] -

Client is not registered. Sending registration request for GUID:400B42E4-FFAA-4859-BCAE-B443ABD0A90D …

]LOG]!><time="16:29:08.626+180" date="07-12-2016" component="ClientIDManagerStartup" context="" type="1" thread="7188" file="regtask.cpp:1595">

<![LOG[[RegTask] -

Server rejected registration request: 3

]LOG]!><time="16:29:08.813+180" date="07-12-2016" component="ClientIDManagerStartup" context="" type="3" thread="7188" file="regtask.cpp:1662">

Thank you,
De Lucca

Hi All,

I am getting below errors on the Windowsupdate.log and scan not happening. Can you help me to fix the following issues.

TIA

Hi,

I was wondering if it is best practice or at least feasible to have only one deployment package for all software updates? Example, for year 2016, would it be ok to have 1 deployment package for Jan to Dec software releases? We don't do specific deployment per OS or application here in our environment. What we do is whatever release there is in a month, we package it as one and deploy it per collection (Server, Desktop, Custom, etc.)

If having one deployment package for all release is possible, would it have any significant effect on the clients or distribution points?

Thanks!

Not sure if it is possible, but I would like to be able to control installations in my enterprise, Automatically.

So say I have a software with 30 licenses, I would like to be able to install it on 30 clients, but on the 31st, deny it due to licenses, and if the application hasn't been used in 30 days, clear the license and allow it to be installed elsewhere.

Is this possible?

We have around 100+ Xenapp servers running Windows Server 2008 Enterprise SP2 OS which we are in planning to do backlog patching.

Currently I am facing issue in deploying the patches in UAT servers as most likely I will be receiving the same issue on LIVE servers. Below are the logs snapshot for reference.

Also compliance reports for those servers are showing empty.

Just for information I had face the same issue on windows 7 machines and updating the WUA is working. However I am not able to find any update installer for Windows Server 2008 OS.

Appreciate if anyone can let me know a possible solution I can try!!

https://gallery.technet.microsoft.com/Workstation-Patch-9f52a143 - This would help for windows 7 and server 2008 R2 With this patch or the latest on the month of march 2016.

Is there any solution available for the server 2008 SP2 as the KB'S are only for the 2008 R2 ?

I know the workaround to get it worked until a reboot but i want a permanent solution like other OS platform.

Kamala kannan.c| Please remember to click “Mark as Answer” or Vote as Helpful if its helpful for you. |Disclaimer: This posting is provided with no warranties and confers no rights