What log do I check to see why my sccm 2012 server is no recieving updates from my wsus

Hi,

I would have a look in Wsyncmgr.log, WCM.log and Wsusctrl.log, then you can verify that the permissions are correct and that it can configure the SUP and synchronize, the log files for Software Update Point is described here: http://technet.microsoft.com/en-us/library/hh427342.aspx#BKMK_SiteSiteServerLog

Regards,
Jrgen

This is what I saw in the log -

Checking for supported version of WSUS (min WSUS 3.0 SP2 + KB2720211 + KB2734608) SMS_WSUS_CONFIGURATION_MANAGER 6/25/2013 11:57:53 AM 5320 (0x14C8)

I am running WSUS 3.0 SP2 + KB2720211 + KB2734608 are installed...

Remote configuration failed on WSUS Server. SMS_WSUS_CONFIGURATION_MANAGER 6/25/2013 12:57:53 PM 5320 (0x14C8)

Did not find supported version of assembly Microsoft.UpdateServices.Administration. SMS_WSUS_CONFIGURATION_MANAGER 6/25/2013 12:57:53 PM 5320 (0x14C8)

Did not find supported version of assembly Microsoft.UpdateServices.Administration. SMS_WSUS_CONFIGURATION_MANAGER 6/25/2013 12:57:53 PM 5320 (0x14C8)

I am running WSUS 3.0 SP2 + KB2720211 + KB2734608 are installed...

Remote configuration failed on WSUS Server. SMS_WSUS_CONFIGURATION_MANAGER 6/25/2013 12:57:53 PM 5320 (0x14C8)

Hi,

Yes, install the WSUS admin console on the SCCM Primary Site server and the same WSUS updates that you applied to the WSUS server.

Regards,
Jrgen

Successfully connected to server: WSUSserver.company.com, port: 8530, useSSL: False SMS_WSUS_CONFIGURATION_MANAGER 6/25/2013 1:59:30 PM 5320 (0x14C8)

This looks good...so now I just did a Sync software updates and nothing is showing up.

Note that the computer account of the SCCM server has to be local admin on the WSUS server.

Sync failed: DssAuthenticationError: WebException: The request failed with HTTP status 401: Unauthorized.~~at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall). Source: Microsoft.SystemsManagementServer.SoftwareUpdatesManagement.WsusSyncAction.WSyncAction.SyncWSUS SMS_WSUS_SYNC_MANAGER 6/25/2013 2:08:57 PM 5420 (0x152C)

Also -

STATMSG: ID=6703 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_WSUS_SYNC_MANAGER" SYS=wsusserver.company.com SITE=BSC PID=3188 TID=5420 GMTDATE=Tue Jun 25 19:08:57.897 2013 ISTR0="Microsoft.SystemsManagementServer.SoftwareUpdatesManagement.WsusSyncAction.WSyncAction.SyncWSUS" ISTR1="DssAuthenticationError: WebException: The request failed with HTTP status 401: Unauthorized.~~at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0 SMS_WSUS_SYNC_MANAGER 6/25/2013 2:08:57 PM 5420 (0x152C)

Possibly IIS issue. This is an extract from Technet Library

http://technet.microsoft.com/en-us/library/bb735874.aspx

Possible Solution

Check the IIS permissions on the DssAuthWebService virtual directory for the WSUS Web site in IIS. The virtual directory must be enabled for anonymous access. By default, the IUSR_<ComputerName> account is used for anonymous access. Check that this account has appropriate rightsfor example, whether this account is a member of the Guests group where access has been denied. The following procedure provides the steps to configure the directory permissions for the virtual directory.

To configure anonymous access on the DssAuthWebService virtual directory

1. On the WSUS server, open Internet Information Services (IIS) Manager.

2. Expand Web Sites, and then expand the Web site for the WSUS server. It is recommended that the WSUS custom Web site be used, but the default Web site might have been chosen when installing WSUS.

3. Right-click DssAuthWebService, and then click Properties.

4. Click the Directory Security tab, and then click Edit in the Authentication and access control section.

5. Verify that Enable anonymous access is selected and that the IUSR_<ComputerName> account is specified.

I found so doc online so I reset the IUSR_<servername> and still doen't work, stilll getting 401 access denied.  And on thge WSUS server it get this -

Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date:  6/26/2013
Time:  9:18:47 AM
User:  NT AUTHORITY\SYSTEM
Computer: wsus server
Description:
Logon Failure:
  Reason:  Unknown user name or bad password
  User Name: IUSR_<servername>
  Domain:  PC310
  Logon Type: 8
  Logon Process: Advapi 
  Authentication Package: Negotiate
  Workstation Name: wsus server
  Caller User Name: NETWORK SERVICE
  Caller Domain: NT AUTHORITY
  Caller Logon ID: (0x0,0x3E4)
  Caller Process ID: 4808
  Transited Services: -
  Source Network Address: -
  Source Port: -

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Synchronizing WSUS server.company.com ... SMS_WSUS_SYNC_MANAGER 6/26/2013 11:19:19 AM 9496 (0x2518)

sync: Starting WSUS synchronization SMS_WSUS_SYNC_MANAGER 6/26/2013 11:19:19 AM 9496 (0x2518)

Sync failed: DssAuthenticationError: WebException: The request failed with HTTP status 401: Unauthorized.~~at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall). Source: Microsoft.SystemsManagementServer.SoftwareUpdatesManagement.WsusSyncAction.WSyncAction.SyncWSUS SMS_WSUS_SYNC_MANAGER 6/26/2013 11:19:23 AM 5420 (0x152C)

Same error when trying to sync software updates --

I usually do. It's easier to manage.

http://www.gerryhampsoncm.blogspot.ie/2013/04/sccm-2012-sp1-step-by-step-guide-part.html

Hi,

Yes you can use the SQL database, and the updates should be the same as above.

Regards,
Jrgen