An error occurred while scanning for security updates. (0x80004003)
July 29th, 2014 12:01am

Did the duplicate thread help resolve your issue?  I am having the same problem but I don't have any SOAP fault messages in my Windows Update log file.  The MBSA scan will work if I specify a catalog file, but whenever I choose "/WA" the scan errors on Security Updates.  My normal Windows Updates process seems to work fine with my WSUS server.

Here's my MBSA script.

"C:\MBSA\multimbsa.exe" /listfile=C:\MBSA\IT.txt /scanners=10 /computers=10 /options="/q /nvc /nd /wa"

cd \

cscript.exe /nologo rollup.js -c 101 102 104 106 107 110 115 117 118 119 121 122 123 124 178 179 204 207 213 215 216 218 314>c:\MBSA\ITMultiCheck.xml

cscript /nologo rollup.js -b>c:\MBSA\ITMBSA.xml

---------------------------------------------------------------------------

2014-12-16 12:09:32:099 5176 1590 Misc ===========  Logging initialized (build: 7.6.7600.256, tz: -0500)  ===========
2014-12-16 12:09:32:099 5176 1590 Misc  = Process: C:\Program Files\Microsoft Baseline Security Analyzer 2\mbsa.exe
2014-12-16 12:09:32:099 5176 1590 Misc  = Module: C:\Windows\system32\wuapi.dll
2014-12-16 12:09:32:098 5176 1590 COMAPI -------------
2014-12-16 12:09:32:099 5176 1590 COMAPI -- START --  COMAPI: Search [ClientId = MBSA]
2014-12-16 12:09:32:099 5176 1590 COMAPI ---------
2014-12-16 12:09:32:108 1016 18a4 Agent *************
2014-12-16 12:09:32:108 5176 1590 COMAPI <<-- SUBMITTED -- COMAPI: Search [ClientId = MBSA]
2014-12-16 12:09:32:108 1016 18a4 Agent ** START **  Agent: Finding updates [CallerId = MBSA]
2014-12-16 12:09:32:108 1016 18a4 Agent *********
2014-12-16 12:09:32:108 1016 18a4 Agent  * Include potentially superseded updates
2014-12-16 12:09:32:108 1016 18a4 Agent  * Online = Yes; Ignore download priority = No
2014-12-16 12:09:32:108 1016 18a4 Agent  * Criteria = "IsInstalled=0 or IsInstalled=1"
2014-12-16 12:09:32:108 1016 18a4 Agent  * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
2014-12-16 12:09:32:108 1016 18a4 Agent  * Search Scope = {Machine}
2014-12-16 12:09:54:159 1016 18a4 PT +++++++++++  PT: Synchronizing server updates  +++++++++++
2014-12-16 12:09:54:159 1016 18a4 PT  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://SERVER:8530/ClientWebService/client.asmx
2014-12-16 12:10:18:843 1016 18a4 PT +++++++++++  PT: Synchronizing extended update info  +++++++++++
2014-12-16 12:10:18:844 1016 18a4 PT  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://SERVER:8530/ClientWebService/client.asmx
2014-12-16 12:10:21:940 1016 18a4 Agent  * Added update {490BE004-BC5C-4EEF-AC82-769542FC3A2D}.201 to search result
2014-12-16 12:10:21:940 1016 18a4 Agent  * Added update {EE136505-4841-4E95-9E60-CA2F84F60C12}.202 to search result
2014-12-16 12:10:21:940 1016 18a4 Agent  * Added update {5D7DFB05-BA0E-4A57-BF61-C372AB2AA697}.202 to search result
2014-12-16 12:10:21:940 1016 18a4 Agent  * Added update {505FDA07-B4F3-45FB-83D9-8642554E2773}.200 to search result
2014-12-16 12:10:21:940 1016 18a4 Agent  * Added update {9DB82D0B-5611-4BC1-A4B8-432FE1A3CC43}.201 to search result
2014-12-16 12:10:21:940 1016 18a4 Agent  * Added update {80FEF50B-F349-4BDC-B781-FF8CD6D913F6}.201 to search result
2014-12-16 12:10:21:940 1016 18a4 Agent  * Added update {0958DD0C-92B0-45D3-8588-C4034E52ACAA}.201 to search result
2014-12-16 12:10:21:940 1016 18a4 Agent  * Added update {739DD20D-927D-48D2-A347-957F5B226E24}.101 to search result
2014-12-16 12:10:21:940 1016 18a4 Agent  * Added update {D5FD720E-0F2C-4363-AA87-6AD4A6D11B0E}.107 to search result
2014-12-16 12:10:21:940 1016 18a4 Agent  * Added update {AEF6280F-8C4D-4804-9913-407582227E75}.202 to search result
2014-12-16 12:10:21:940 1016 18a4 Agent  * Added update {6B3E9B10-B12D-4190-97F4-05DE550FF435}.203 to search result
2014-12-16 12:10:21:940 1016 18a4 Agent  * Added update {A1893712-C814-4AC9-AEB3-4292A63EF2B8}.103 to search result
2014-12-16 12:10:21:940 1016 18a4 Agent  * Added update {965F4712-FC2F-4AF6-A80A-909211E12B74}.102 to search result
2014-12-16 12:10:21:940 1016 18a4 Agent  * Added update {FDA58512-32F3-4A5D-A5C4-05A193E037D4}.104 to search result
2014-12-16 12:10:21:940 1016 18a4 Agent  * Added update {EB57CC12-5103-4EF0-A87A-E9DB2AFA23DC}.200 to search result
2014-12-16 12:10:21:940 1016 18a4 Agent  * Added update {2F6F2013-2990-4FA6-8AB9-CA59DCA4E62D}.202 to search result
2014-12-16 12:10:21:940 1016 18a4 Agent  * Added update {B4413613-7062-4F6B-A1E4-7A957409A51F}.103 to search result
2014-12-16 12:10:21:940 1016 18a4 Agent  * Added update {04B27F14-2812-41EE-BC43-87592A28EA28}.200 to search result
2014-12-16 12:10:21:940 1016 18a4 Agent  * Added update {9334B915-72B1-4F60-8885-4C327D7CC433}.201 to search result
2014-12-16 12:10:21:941 1016 18a4 Agent  * Added update {E14D2017-DCA4-46F9-977A-44D991E82BBE}.200 to search result
2014-12-16 12:10:21:941 1016 18a4 Agent  * Added update {6CFB7D17-F556-423A-B052-0A1F0463572E}.201 to search result
2014-12-16 12:10:21:941 1016 18a4 Agent  * Added update {53F2CC17-4951-4D4C-920F-4E44445F1EE2}.201 to search result
2014-12-16 12:10:21:941 1016 18a4 Agent  * Added update {3F15001A-A051-4CEF-8642-FF241D063C9A}.102 to search result
2014-12-16 12:10:21:941 1016 18a4 Agent  * Added update {6AA7561A-7EBF-4601-B040-D73804C38356}.102 to search result
2014-12-16 12:10:21:941 1016 18a4 Agent  * Added update {B89EC71A-1103-4EA7-B123-1C4D2E23F97A}.102 to search result
2014-12-16 12:10:21:941 1016 18a4 Agent  * Added update {24F8B31C-F0DD-44B3-997C-07620B7F1A4C}.201 to search result
2014-12-16 12:10:21:943 1016 18a4 Agent Bundle contains no deployed children and thus is invalid.
2014-12-16 12:10:21:943 1016 18a4 Agent Update {EB7A169F-6BCA-4E00-A52A-623C063C162D}.103 is not a valid bundle. Not returning it.
2014-12-16 12:10:21:944 1016 18a4 Agent Bundle contains no deployed children and thus is invalid.
2014-12-16 12:10:21:944 1016 18a4 Agent Update {5BD72FC8-8BDB-458A-95B8-4372212FE3CE}.201 is not a valid bundle. Not returning it.
2014-12-16 12:10:21:944 1016 18a4 Agent  * Added update {87E3E2FA-70E5-4B90-83EE-A16F41569A11}.111 to search result
2014-12-16 12:10:21:944 1016 18a4 Agent  * Added update {57260DFE-227C-45E3-9FFC-2FC77A67F95A}.104 to search result
2014-12-16 12:10:21:945 1016 18a4 Agent  * Added update {E65F4DFF-0DF6-4DDE-88DB-18991DFA80B9}.202 to search result
2014-12-16 12:10:21:965 1016 18a4 Agent  * Found 182 updates and 91 categories in search; evaluated appl. rules of 2541 out of 4626 deployed entities
2014-12-16 12:10:21:990 1016 18a4 Agent *********
2014-12-16 12:10:21:990 1016 18a4 Agent **  END  **  Agent: Finding updates [CallerId = MBSA]
2014-12-16 12:10:21:990 1016 18a4 Agent *************
2014-12-16 12:10:22:044 1016 18a4 Report REPORT EVENT: {93457078-A9E3-4B55-9DA0-272DEDCB5DCF} 2014-12-16 12:10:21:972-0500 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 MBSA Success Software Synchronization Windows Update Client successfully detected 182 updates.
2014-12-16 12:10:22:044 1016 18a4 Report REPORT EVENT: {9EBB943F-E004-4F08-A7CC-A7DE8C75D5F5} 2014-12-16 12:10:21:972-0500 1 156 101 {00000000-0000-0000-0000-000000000000} 0 0 MBSA Success Pre-Deployment Check Reporting client status.
2014-12-16 12:10:22:052 1016 18a4 Report CWERReporter finishing event handling. (00000000)
2014-12-16 12:10:22:052 1016 18a4 Report CWERReporter finishing event handling. (00000000)
2014-12-16 12:10:22:052 1016 18a4 Report CWERReporter finishing event handling. (00000000)
2014-12-16 12:10:22:053 1016 18a4 Report CWERReporter finishing event handling. (00000000)
2014-12-16 12:10:22:053 1016 18a4 Report CWERReporter finishing event handling. (00000000)
2014-12-16 12:10:22:053 1016 18a4 Report CWERReporter finishing event handling. (00000000)
2014-12-16 12:10:22:053 1016 18a4 Report CWERReporter finishing event handling. (00000000)
2014-12-16 12:10:22:053 1016 18a4 Report CWERReporter finishing event handling. (00000000)
2014-12-16 12:10:22:054 1016 18a4 Report CWERReporter finishing event handling. (00000000)
2014-12-16 12:10:22:054 1016 18a4 Report CWERReporter finishing event handling. (00000000)
2014-12-16 12:10:22:054 1016 18a4 Report CWERReporter finishing event handling. (00000000)
2014-12-16 12:10:22:054 1016 18a4 Report CWERReporter finishing event handling. (00000000)
2014-12-16 12:10:22:054 1016 18a4 Report CWERReporter finishing event handling. (00000000)
2014-12-16 12:10:22:055 1016 18a4 Report CWERReporter finishing event handling. (00000000)
2014-12-16 12:10:22:055 1016 18a4 Report CWERReporter finishing event handling. (00000000)
2014-12-16 12:10:22:055 1016 18a4 Report CWERReporter finishing event handling. (00000000)
2014-12-16 12:10:22:055 1016 18a4 Report CWERReporter finishing event handling. (00000000)
2014-12-16 12:10:22:055 1016 18a4 Report CWERReporter finishing event handling. (00000000)
2014-12-16 12:10:22:060 5176 1ff8 COMAPI >>--  RESUMED  -- COMAPI: Search [ClientId = MBSA]
2014-12-16 12:10:22:298 5176 1ff8 COMAPI  - Updates found = 182
2014-12-16 12:10:22:298 5176 1ff8 COMAPI ---------
2014-12-16 12:10:22:298 5176 1ff8 COMAPI --  END  --  COMAPI: Search [ClientId = MBSA]
2014-12-16 12:10:22:298 5176 1ff8 COMAPI -------------
2014-12-16 12:10:26:989 1016 18a4 Report CWERReporter finishing event handling. (00000000)

December 16th, 2014 9:25pm

No I have not been able to resolve the issue.

If I use the catalog file the scan will work, however not everything in the catalog is what gets approved.   Wish I could find the answer I would love to be able to use the MBSA scan against the WSUS server.

Free Windows Admin Tool Kit Click here and download it now
December 18th, 2014 5:45am

I was able to get part of it to work.  I have the remote registry service enabled on all of the machines with the default permissions on the SecurePipeServers--winreg key.  When I run my script in a scheduled task under a different username it will work for most of the computers, I might have to look at that on a case by case basis.  When I run the commands during the logged in session of my admin account it error's.  I might have confused my self a little more with this description but I'm still poking away at it.
December 22nd, 2014 9:07pm

OK, I was officially able to get mine to work.  Aside from the default Unassigned, Workstation and Server group in WSUS console I had another group called Test Group that I was using to test WPP.  For some reason any computer I had in that group would not work and I would get the 4003 error.  After moving them to Workstation I didn't have an issue scanning the pc's.  
Free Windows Admin Tool Kit Click here and download it now
December 26th, 2014 10:56pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics
An error occurred while scanning for security updates. (0x80004003)