SCCM 2007 R2: WUS Scan always quits with Scan failed with error = 0x80072f0c
Hi, I've switched my SCCM installation to native mode. No erros so far since days on sccm server site. Unfortunately WUS isn't working since the switch. Looking in WUAHanlder.log I get the following error messages on an on: <![LOG[Its a WSUS Update Source type ({27E5AD98-2B06-4068-BED3-DAEC878D570E}), adding it.]LOG]!><time="13:34:11.154+-120" date="08-23-2010" component="WUAHandler" context="" type="1" thread="1000" file="sourcemanager.cpp:1348"> <![LOG[Existing WUA Managed server was already set (https://dg-sccm-01.contoso.msft:8531), skipping Group Policy registration.]LOG]!><time="13:34:11.164+-120" date="08-23-2010" component="WUAHandler" context="" type="1" thread="1000" file="sourcemanager.cpp:1041"> <![LOG[Added Update Source ({27E5AD98-2B06-4068-BED3-DAEC878D570E}) of content type: 2]LOG]!><time="13:34:11.164+-120" date="08-23-2010" component="WUAHandler" context="" type="1" thread="1000" file="sourcemanager.cpp:1381"> <![LOG[Async searching of updates using WUAgent started.]LOG]!><time="13:34:11.492+-120" date="08-23-2010" component="WUAHandler" context="" type="1" thread="1000" file="cwuahandler.cpp:587"> <![LOG[Async searching completed.]LOG]!><time="13:34:11.720+-120" date="08-23-2010" component="WUAHandler" context="" type="1" thread="5980" file="cwuahandler.cpp:2099"> <![LOG[OnSearchComplete - Failed to end search job. Error = 0x80072f0c.]LOG]!><time="13:34:11.720+-120" date="08-23-2010" component="WUAHandler" context="" type="3" thread="1000" file="cwuahandler.cpp:2966"> <![LOG[Scan failed with error = 0x80072f0c.]LOG]!><time="13:34:11.720+-120" date="08-23-2010" component="WUAHandler" context="" type="3" thread="1000" file="cwuahandler.cpp:3223"> <![LOG[Its a WSUS Update Source type ({27E5AD98-2B06-4068-BED3-DAEC878D570E}), adding it.]LOG]!><time="13:48:28.360+-120" date="08-23-2010" component="WUAHandler" context="" type="1" thread="3232" file="sourcemanager.cpp:1348"> <![LOG[Existing WUA Managed server was already set (https://dg-sccm-01.contoso.msft:8531), skipping Group Policy registration.]LOG]!><time="13:48:28.370+-120" date="08-23-2010" component="WUAHandler" context="" type="1" thread="3232" file="sourcemanager.cpp:1041"> <![LOG[Added Update Source ({27E5AD98-2B06-4068-BED3-DAEC878D570E}) of content type: 2]LOG]!><time="13:48:28.370+-120" date="08-23-2010" component="WUAHandler" context="" type="1" thread="3232" file="sourcemanager.cpp:1381"> <![LOG[Async searching of updates using WUAgent started.]LOG]!><time="13:48:28.380+-120" date="08-23-2010" component="WUAHandler" context="" type="1" thread="3232" file="cwuahandler.cpp:587"> <![LOG[Async searching completed.]LOG]!><time="13:48:28.540+-120" date="08-23-2010" component="WUAHandler" context="" type="1" thread="6068" file="cwuahandler.cpp:2099"> <![LOG[OnSearchComplete - Failed to end search job. Error = 0x80072f0c.]LOG]!><time="13:48:28.540+-120" date="08-23-2010" component="WUAHandler" context="" type="3" thread="3232" file="cwuahandler.cpp:2966"> <![LOG[Scan failed with error = 0x80072f0c.]LOG]!><time="13:48:28.540+-120" date="08-23-2010" component="WUAHandler" context="" type="3" thread="3232" file="cwuahandler.cpp:3223"> Client cert is rolled out on all machines. What else could be the problem? Alex
August 23rd, 2010 2:52pm

Hi, Did you enable the SSL on the WSUS website and did you run the Configure SSL via the Wsusutil to make sure this is all setup correctly http://technet.microsoft.com/en-us/library/bb633246.aspx ? On your ConfigMgr, did you configured the SUP to use the port 8531. Also, make sure that WSUS is only installed and not configured, the WSUS is SP2 I hope !!! In addition, there are many threads about this problem, you can see here : http://social.technet.microsoft.com/Search/en-US/?query=Scan%20failed%20with%20error%20%3d%200x80072f0c&rq=meta:Search.MSForums.ForumID(7f829d1c-2fc5-4e76-aadc-a118080ff523)+site:microsoft.com&rn=Configuration+Manager+Software+Updates+Management+Forum
Free Windows Admin Tool Kit Click here and download it now
August 23rd, 2010 10:23pm

Hi, yes, all these items are double checked. Alex
August 23rd, 2010 10:37pm

Have you determined if client computers are ready for native mode http://technet.microsoft.com/en-us/library/bb680986.aspx ?? You can also re-check all native mode requirements http://technet.microsoft.com/en-us/library/bb680464.aspx ; http://technet.microsoft.com/en-us/library/bb632727.aspx ; http://technet.microsoft.com/en-us/library/bb680838.aspx There are no other errors in WindowsUpdate.log ??
Free Windows Admin Tool Kit Click here and download it now
August 24th, 2010 2:20am

Already checked these items, too. But the problem still exists. Alex
August 24th, 2010 8:06am

Remove SUP/WSUS then reinstall WSUS/SUP again http://technet.microsoft.com/en-us/library/bb632381.aspx
Free Windows Admin Tool Kit Click here and download it now
August 24th, 2010 4:31pm

Hi Alex, Please Check all DCOM permissions for "SMS Agent Host" application, Could you find any missing permission? The following group policy in "Default Domain Policy" should be set to "Not Defined" by default. Computer Configuration --> Windows Settings --> Security Settings --> System Services --> SMS Agent Host Adding the "Network Service" account with full permission to this policy. HTH.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
August 25th, 2010 10:47am

Eric, sorry for delayed reply, but that doesn't solute the problem (already checked this). Reason why I haven't replied: I've opened a request at MS. Alex
Free Windows Admin Tool Kit Click here and download it now
September 8th, 2010 11:32pm

Hi Alex, Were you able to solve this issue? I have the same problem. Regards, Simon.
April 26th, 2011 9:44pm

Hello - Have you tried all the steps mentioned in the thread? Also, it would be better to open a new thread to get good attention from experts rather than posting your queries in existing one.Anoop C Nair - This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
April 26th, 2011 9:55pm

Hi Simon, no unfortunately not. Seems there's not enough interest in this configuration out there. I gave up. Just open a payable call, this could help. Good luck, Simon. Alex
April 27th, 2011 10:48am

I had something similar with a customer. The problem was that ISA was blocking all the traffic, because it was HTTPS traffic on a non-standard port (8531). We had to make sure that this traffice wouldn't go to the proxy at all. We did this on the XP clients with proxycfg and on W7 with netsh. So If you are using ISA, check if it's blocking your WSUS traffic.My Blog: http://www.petervanderwoude.nl/
Free Windows Admin Tool Kit Click here and download it now
April 28th, 2011 2:20am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics