Clients not conntecting to SCE/WSUS
hello,we use SCE 2007 as our Windows update server as well and we recently re-built the server from scratch. We are trying to iron out a few issues.At the moment all the clients are showing in SCE as "not bieng contacted by SCE yet" to get updates and inventory when I checked the WindowsUpdate.log on the client after running the wuauclt /detectnow it shows the following - for Privacy I have replaced the server name with SCEServer2009-06-2915:48:54:3931244ff0AUTriggering AU detection through DetectNow API2009-06-2915:48:54:3931244ff0AUTriggering Online detection (non-interactive)2009-06-2915:48:54:3931244210AU#############2009-06-2915:48:54:3931244210AU## START ## AU: Search for updates2009-06-2915:48:54:3931244210AU#########2009-06-2915:48:54:3931244210AU<<## SUBMITTED ## AU: Search for updates [CallId = {2F732F40-CD7F-4B86-9233-333845A0D8E9}]2009-06-2915:48:54:3931244270Agent*************2009-06-2915:48:54:3931244270Agent** START ** Agent: Finding updates [CallerId = AutomaticUpdates]2009-06-2915:48:54:3931244270Agent*********2009-06-2915:48:54:3931244270Agent * Online = Yes; Ignore download priority = No2009-06-2915:48:54:3931244270Agent * Criteria = "IsHidden=0 and IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and IsAssigned=1 or IsHidden=0 and IsInstalled=1 and DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and IsAssigned=1 and RebootRequired=1"2009-06-2915:48:54:3931244270Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}2009-06-2915:48:54:3931244270Agent * Search Scope = {Machine}2009-06-2915:48:54:3931244270MiscValidating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab:2009-06-2915:48:54:3931244270Misc Microsoft signed: Yes2009-06-2915:48:54:4081244270MiscWARNING: Send failed with hr = 80072f8f.2009-06-2915:48:54:4081244270MiscWARNING: SendRequest failed with hr = 80072f8f. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>2009-06-2915:48:54:4081244270MiscWARNING: WinHttp: SendRequestUsingProxy failed for <https://SCE Server:8531/selfupdate/wuident.cab>. error 0x80072f8f2009-06-2915:48:54:4081244270MiscWARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f8f2009-06-2915:48:54:4081244270MiscWARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072f8f2009-06-2915:48:54:4081244270MiscWARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072f8f2009-06-2915:48:54:4081244270MiscWARNING: Send failed with hr = 80072f8f.2009-06-2915:48:54:4081244270MiscWARNING: SendRequest failed with hr = 80072f8f. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>2009-06-2915:48:54:4081244270MiscWARNING: WinHttp: SendRequestUsingProxy failed for <https://SCEServer:8531/selfupdate/wuident.cab>. error 0x80072f8f2009-06-2915:48:54:4081244270MiscWARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f8f2009-06-2915:48:54:4081244270MiscWARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072f8f2009-06-2915:48:54:4081244270MiscWARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072f8f2009-06-2915:48:54:4081244270MiscWARNING: Send failed with hr = 80072f8f.2009-06-2915:48:54:4081244270MiscWARNING: SendRequest failed with hr = 80072f8f. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>2009-06-2915:48:54:4081244270MiscWARNING: WinHttp: SendRequestUsingProxy failed for <https://SCE Server:8531/selfupdate/wuident.cab>. error 0x80072f8f2009-06-2915:48:54:4241244270MiscWARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f8f2009-06-2915:48:54:4241244270MiscWARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072f8f2009-06-2915:48:54:4241244270MiscWARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072f8f2009-06-2915:48:54:4241244270MiscWARNING: Send failed with hr = 80072f8f.2009-06-2915:48:54:4241244270MiscWARNING: SendRequest failed with hr = 80072f8f. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>2009-06-2915:48:54:4241244270MiscWARNING: WinHttp: SendRequestUsingProxy failed for <https://SCEServer:8531/selfupdate/wuident.cab>. error 0x80072f8f2009-06-2915:48:54:4241244270MiscWARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f8f2009-06-2915:48:54:4241244270MiscWARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072f8f2009-06-2915:48:54:4241244270MiscWARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072f8f2009-06-2915:48:54:4241244270MiscWARNING: DownloadFileInternal failed for https://SCEServer:8531/selfupdate/wuident.cab: error 0x80072f8f2009-06-2915:48:54:4241244270SetupFATAL: IsUpdateRequired failed with error 0x80072f8f2009-06-2915:48:54:4241244270SetupWARNING: SelfUpdate: Default Service: IsUpdateRequired failed: 0x80072f8f2009-06-2915:48:54:4241244270SetupWARNING: SelfUpdate: Default Service: IsUpdateRequired failed, error = 0x80072F8F2009-06-2915:48:54:4241244270MiscRegistering binary: C:\WINDOWS\system32\regsvr32.exe /s "C:\WINDOWS\system32\wintrust.dll"2009-06-2915:48:54:4861244270MiscValidating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab:2009-06-2915:48:54:4861244270Misc Microsoft signed: Yes2009-06-2915:48:54:4861244270MiscWARNING: Send failed with hr = 80072f8f.2009-06-2915:48:54:4861244270MiscWARNING: SendRequest failed with hr = 80072f8f. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>2009-06-2915:48:54:4861244270MiscWARNING: WinHttp: SendRequestUsingProxy failed for <https://SCEServer:8531/selfupdate/wuident.cab>. error 0x80072f8f2009-06-2915:48:54:4861244270MiscWARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f8f2009-06-2915:48:54:4861244270MiscWARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072f8f2009-06-2915:48:54:4861244270MiscWARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072f8f2009-06-2915:48:54:5021244270MiscWARNING: Send failed with hr = 80072f8f.2009-06-2915:48:54:5021244270MiscWARNING: SendRequest failed with hr = 80072f8f. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>2009-06-2915:48:54:5021244270MiscWARNING: WinHttp: SendRequestUsingProxy failed for <https://SCEServer:8531/selfupdate/wuident.cab>. error 0x80072f8f2009-06-2915:48:54:5021244270MiscWARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f8f2009-06-2915:48:54:5021244270MiscWARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072f8f2009-06-2915:48:54:5021244270MiscWARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072f8f2009-06-2915:48:54:5181244270MiscWARNING: Send failed with hr = 80072f8f.2009-06-2915:48:54:5181244270MiscWARNING: SendRequest failed with hr = 80072f8f. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>2009-06-2915:48:54:5181244270MiscWARNING: WinHttp: SendRequestUsingProxy failed for <https://SCEServer:8531/selfupdate/wuident.cab>. error 0x80072f8f2009-06-2915:48:54:5181244270MiscWARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f8f2009-06-2915:48:54:5181244270MiscWARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072f8f2009-06-2915:48:54:5181244270MiscWARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072f8f2009-06-2915:48:54:5181244270MiscWARNING: Send failed with hr = 80072f8f.2009-06-2915:48:54:5181244270MiscWARNING: SendRequest failed with hr = 80072f8f. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>2009-06-2915:48:54:5181244270MiscWARNING: WinHttp: SendRequestUsingProxy failed for <https://SCEServer:8531/selfupdate/wuident.cab>. error 0x80072f8f2009-06-2915:48:54:5181244270MiscWARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f8f2009-06-2915:48:54:5181244270MiscWARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072f8f2009-06-2915:48:54:5181244270MiscWARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072f8f2009-06-2915:48:54:5181244270MiscWARNING: DownloadFileInternal failed for https://SCEServer:8531/selfupdate/wuident.cab: error 0x80072f8f2009-06-2915:48:54:5181244270SetupFATAL: IsUpdateRequired failed with error 0x80072f8f2009-06-2915:48:54:5181244270SetupWARNING: SelfUpdate: Default Service: IsUpdateRequired failed: 0x80072f8f2009-06-2915:48:54:5181244270SetupWARNING: SelfUpdate: Default Service: IsUpdateRequired failed, error = 0x80072F8F2009-06-2915:48:54:5181244270Agent * WARNING: Skipping scan, self-update check returned 0x80072F8F2009-06-2915:48:55:4861244270Agent * WARNING: Exit code = 0x80072F8F2009-06-2915:48:55:4861244270Agent*********2009-06-2915:48:55:4861244270Agent** END ** Agent: Finding updates [CallerId = AutomaticUpdates]2009-06-2915:48:55:4861244270Agent*************2009-06-2915:48:55:4861244270AgentWARNING: WU client failed Searching for update with error 0x80072f8f2009-06-2915:48:55:4861244efcAU>>## RESUMED ## AU: Search for updates [CallId = {2F732F40-CD7F-4B86-9233-333845A0D8E9}]2009-06-2915:48:55:4861244efcAU # WARNING: Search callback failed, result = 0x80072F8F2009-06-2915:48:55:4861244efcAU # WARNING: Failed to find updates with error code 80072F8F2009-06-2915:48:55:4861244efcAU#########2009-06-2915:48:55:4861244efcAU## END ## AU: Search for updates [CallId = {2F732F40-CD7F-4B86-9233-333845A0D8E9}]2009-06-2915:48:55:4861244efcAU#############2009-06-2915:48:55:4861244efcAUAU setting next detection timeout to 2009-06-29 15:45:422009-06-2915:48:55:4861244efcAUSetting AU scheduled install time to 2009-07-03 15:00:00I have another post which details the SCE side issue more http://social.technet.microsoft.com/Forums/en-US/systemcenter/thread/3abf8f8a-3796-4440-b7aa-150b7f3d95e6/?prof=required
June 29th, 2009 5:56pm

Hi,From the log, I find following error message:2009-06-29 15:48:54:408 1244 270 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <https://SCE Server:8531/selfupdate/wuident.cab>. error 0x80072f8fclients contact with SCE server using netbios name instead of FQDN of SCE server. Please change to FQDN name in GPO and check if you can browser https://<FQDNSceserver>:8531/selfupdate/wuident.cab correctly on problematice clients.Run rsop.msc on clients to check whether the GPOs: SCE Managed Computers Group Policy& System Center Essentials All Computers Policy had been applied correctly on clients.Check that the client is configured to use the SCE server for Windows Updates. The following registry entries should be set to https://<SCEServerFQDN>:8531HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\WUServerHKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\WUStatusServerCheck whether the required ports for communication between clients and server had been opened, or disable the firewall as a test.Is there a proxy server in your scenario? If not, please ensure there is no proxy setting in IE and run proxycfg -d (netsh winhttp reset proxy in vista)command on problematic SCE clients.Run wuauclt /detectnow and reportnow on the SCE agents.HTH.Jie-Feng Ren - MSFT
Free Windows Admin Tool Kit Click here and download it now
July 1st, 2009 7:23am

I agree with Jie-Feng that the issue may well be related to the name, as the0x80072f8f error code indicates an SSL connectivity-related error. Make sure you can ping SCE Server by FQDN from the downstream node and follow JF's steps below.Pete Zerger, MVP-OpsMgr and SCE | http://www.systemcentercentral.com
July 1st, 2009 10:58am

Thought i would add my piece to this post as I had this exact same problem, and after hours of searching and troubleshooting and trying all the various ideas offered up, i checked the IIS settings for the WSUS administration site. Under properties and ssl certiciates i had a certificate available but i could not view its details and only had the option to renew or replace certificate under the SSL wizard. It ended up that i had recently loaded the CA Authority as an enterprise trusted root, on to the SBS box running SCE and for some reason the certificate had been removed in this process (no idea as to why and i could not locate the certificate which had been used). I simply issued a certificate for the sceserver.fqdn and using replace in the wizard imported it to the site in IIS and voila problem gone and clients all contactable. Quick check if your problem is similar is to visit in a browser, from server or any client: 1) https://sceserver.fqdn:8531/selfupdate/wuident.cab (page cannot be displayed, ssl cert screwed) or 2) http://sceserver.fqdn:8530/selfupdate/wuident.cab (file can be downloaded without ssl) The problem specified in windowsupdate.log says that 1) is not contactable and hence the problem with the SSL cert. I have seen this on more than one site but i cannot be any more specific as to what caused the problem in the first place as i had installed the CA authority on all sites at the same time, it may be an update, but i think it more likely the installation of the CA authority porked the certificate that was already being used.
Free Windows Admin Tool Kit Click here and download it now
August 17th, 2009 4:21am

thanks for the reply Surgez,I tried both URL - https and http and couldnt access both so I guess ssl is screwed.what I wanted to know was how do I check the IIS settings for the WSUS admin site and how do I renew the cert or replace it with the SSL wizard?Regards
August 17th, 2009 12:30pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics