Hello,

SCCM newbie here.

I've just finished installing and configuring my first SCCM 2012 R2 server, following the prajwaldesai.com and Windows-noob blogs. And I have successfully deployed the Client Agent Software to all my computers using the Client Push Installation method. However, the software updates (Windows 7) is not being deployed to my client machines. Below is the error message I get within the Application Log (Event ID 1001) of the client machines.

I've looked at the distmgr, wcm and wsyncmgr logs on the SCCM server; and all seems OK. And when I look at the Content Status within SCCM window, I can see that the Package was successfully processed on the distribution point.

Any ideas what could be causing the problem?

Thanks in advance for your help.

====================

Fault bucket , type 0
Event Name: WindowsUpdateFailure
Response: Not available
Cab Id: 0

Problem signature:
P1: 7.6.7600.320
P2: 80072ee2
P3: 00000000-0000-0000-0000-000000000000
P4: Scan
P5: 101
P6: Managed
P7:
P8:
P9:
P10:

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_ea86d4903a769a356a12b8766d9aef2dc91a659e_1e8bea7d

Analysis symbol:
Rechecking for solution: 0
Report Id: 136eb1d3-cd6d-11e4-bcda-00155d44a80c
Report Status: 0

How are you deploying the updates - an ADR?

What is in the wuahandler.log on a sample client?

Jeff

Hi Jeff,

Thanks for your response.

No, I didn't use ADR. I scheduled the updates to be deployed using the 'Deploy Software Updates' wizard.

Below is the content of the wuahandler.log on a sample client:

<![LOG[Its a WSUS Update Source type ({3BA2D8EC-5EC8-4B5F-B274-EF80CDEEFB9A}), adding it.]LOG]!><time="12:30:01.590+00" date="03-18-2015" component="WUAHandler" context="" type="1" thread="7552" file="sourcemanager.cpp:1232">
<![LOG[Existing WUA Managed server was already set <URL OF MY SCCMSERVER:8530>, skipping Group Policy registration.]LOG]!><time="12:30:01.688+00" date="03-18-2015" component="WUAHandler" context="" type="1" thread="7552" file="sourcemanager.cpp:936">
<![LOG[Added Update Source ({3BA2D8EC-5EC8-4B5F-B274-EF80CDEEFB9A}) of content type: 2]LOG]!><time="12:30:01.707+00" date="03-18-2015" component="WUAHandler" context="" type="1" thread="7552" file="sourcemanager.cpp:1265">
<![LOG[Scan results will include superseded updates only when they are superseded by service packs and definition updates.]LOG]!><time="12:30:01.786+00" date="03-18-2015" component="WUAHandler" context="" type="1" thread="7552" file="cwuahandler.cpp:2909">
<![LOG[Search Criteria is (DeploymentAction=* AND Type='Software') OR (DeploymentAction=* AND Type='Driver')]LOG]!><time="12:30:01.786+00" date="03-18-2015" component="WUAHandler" context="" type="1" thread="7552" file="cwuahandler.cpp:2916">
<![LOG[Async searching of updates using WUAgent started.]LOG]!><time="12:30:01.807+00" date="03-18-2015" component="WUAHandler" context="" type="1" thread="7552" file="cwuahandler.cpp:579">
<![LOG[Async searching completed.]LOG]!><time="12:30:25.242+00" date="03-18-2015" component="WUAHandler" context="" type="1" thread="3104" file="cwuahandler.cpp:2068">
<![LOG[OnSearchComplete - Failed to end search job. Error = 0x80072ee2.]LOG]!><time="12:30:25.243+00" date="03-18-2015" component="WUAHandler" context="" type="3" thread="7552" file="cwuahandler.cpp:3064">
<![LOG[Scan failed with error = 0x80072ee2.]LOG]!><time="12:30:25.243+00" date="03-18-2015" component="WUAHandler" context="" type="3" thread="7552" file="cwuahandler.cpp:3520">
<![LOG[Its a WSUS Update Source type ({3BA2D8EC-5EC8-4B5F-B274-EF80CDEEFB9A}), adding it.]LOG]!><time="12:48:01.429+00" date="03-18-2015" component="WUAHandler" context="" type="1" thread="5428" file="sourcemanager.cpp:1232">
<![LOG[Existing WUA Managed server was already set <URL OF MY SCCMSERVER:8530>,  skipping Group Policy registration.]LOG]!><time="12:48:01.458+00" date="03-18-2015" component="WUAHandler" context="" type="1" thread="5428" file="sourcemanager.cpp:936">
<![LOG[Added Update Source ({3BA2D8EC-5EC8-4B5F-B274-EF80CDEEFB9A}) of content type: 2]LOG]!><time="12:48:01.470+00" date="03-18-2015" component="WUAHandler" context="" type="1" thread="5428" file="sourcemanager.cpp:1265">
<![LOG[Scan results will include superseded updates only when they are superseded by service packs and definition updates.]LOG]!><time="12:48:01.480+00" date="03-18-2015" component="WUAHandler" context="" type="1" thread="5428" file="cwuahandler.cpp:2909">
<![LOG[Search Criteria is (DeploymentAction=* AND Type='Software') OR (DeploymentAction=* AND Type='Driver')]LOG]!><time="12:48:01.480+00" date="03-18-2015" component="WUAHandler" context="" type="1" thread="5428" file="cwuahandler.cpp:2916">
<![LOG[Async searching of updates using WUAgent started.]LOG]!><time="12:48:01.486+00" date="03-18-2015" component="WUAHandler" context="" type="1" thread="5428" file="cwuahandler.cpp:579">
<![LOG[Async searching completed.]LOG]!><time="12:48:24.911+00" date="03-18-2015" component="WUAHandler" context="" type="1" thread="4600" file="cwuahandler.cpp:2068">
<![LOG[OnSearchComplete - Failed to end search job. Error = 0x80072ee2.]LOG]!><time="12:48:24.911+00" date="03-18-2015" component="WUAHandler" context="" type="3" thread="5428" file="cwuahandler.cpp:3064">
<![LOG[Scan failed with error = 0x80072ee2.]LOG]!><time="12:48:24.911+00" date="03-18-2015" component="WUAHandler" context="" type="3" thread="5428" file="cwuahandler.cpp:3520">

Based on your intitial post and the snip from the wuahandler.log, it appears to be a connection issue.  i.e., the client cannot connect to the WSUS server.  The 0x80072ee2 = The operation timed out.

You need to look at the network - is there a proxy or firewall between the clients and the ConfigMgr server/WSUS server?

Jeff

Hi Jeff,

Thanks again for your reply.

Yes, the Windows Firewall is enabled on the SCCM server (WSUS resides on this server as well).

During installation, I had to open the following Inbound TCP ports: 1433, 4022, 445, 135 and UDP port: 135. Also, enabled the following: File and Printer sharing (Inbound and OutBound), WMI (Inbound).

Just in case, the Windows Firewall on the clients is disabled.

Is there any other port I need to open on the SCCM server?

• Edited by GBINSTALL 16 hours 2 minutes ago

Review this documentation for inof on ports: https://technet.microsoft.com/en-us/library/hh427328.aspx

In addition to client-based firewalls (Windows Firewall), are there any hardware/appliance firewalls or proxies between the clients and the ConfigMgr server?

If you have access to a network team, can they determine from a networking perspective why a timeout is occurring?

Thanks,

Jeff

Hi Jeff,

Thanks again for your reply.

Yes, the Windows Firewall is enabled on the SCCM server (WSUS resides on this server as well).

During installation, I had to open the following Inbound TCP ports: 1433, 4022, 445, 135 and UDP port: 135. Also, enabled the following: File and Printer sharing (Inbound and OutBound), WMI (Inbound).

Just in case, the Windows Firewall on the clients is disabled.

Is there any other port I need to open on the SCCM server?

• Edited by GBINSTALL Wednesday, March 18, 2015 3:39 PM

Review this documentation for inof on ports: https://technet.microsoft.com/en-us/library/hh427328.aspx

In addition to client-based firewalls (Windows Firewall), are there any hardware/appliance firewalls or proxies between the clients and the ConfigMgr server?

If you have access to a network team, can they determine from a networking perspective why a timeout is occurring?

Thanks,

Jeff

• Proposed as answer by Joyce LMicrosoft contingent staff, Moderator 23 hours 7 minutes ago

Hi Jeff,

Thanks for your reply.

I've opened up more ports as per the TechNet article you sent; and the "0x80072ee2 = The operation timed out" error in the WUAHANDLER.log has disappeared. Below is a snip of the current status:

<![LOG[Its a WSUS Update Source type ({3BA2D8EC-5EC8-4B5F-B274-EF80CDEEFB9A}), adding it.]LOG]!><time="08:36:01.709+00" date="03-19-2015" component="WUAHandler" context="" type="1" thread="5332" file="sourcemanager.cpp:1232">
<![LOG[Existing WUA Managed server was already set SCCMSERVER URL:8530 skipping Group Policy registration.]LOG]!><time="08:36:01.865+00" date="03-19-2015" component="WUAHandler" context="" type="1" thread="5332" file="sourcemanager.cpp:936">
<![LOG[Added Update Source ({3BA2D8EC-5EC8-4B5F-B274-EF80CDEEFB9A}) of content type: 2]LOG]!><time="08:36:01.891+00" date="03-19-2015" component="WUAHandler" context="" type="1" thread="5332" file="sourcemanager.cpp:1265">
<![LOG[Scan results will include superseded updates only when they are superseded by service packs and definition updates.]LOG]!><time="08:36:01.921+00" date="03-19-2015" component="WUAHandler" context="" type="1" thread="5332" file="cwuahandler.cpp:2909">
<![LOG[Search Criteria is (DeploymentAction=* AND Type='Software') OR (DeploymentAction=* AND Type='Driver')]LOG]!><time="08:36:01.921+00" date="03-19-2015" component="WUAHandler" context="" type="1" thread="5332" file="cwuahandler.cpp:2916">
<![LOG[Async searching of updates using WUAgent started.]LOG]!><time="08:36:01.936+00" date="03-19-2015" component="WUAHandler" context="" type="1" thread="5332" file="cwuahandler.cpp:579">
<![LOG[Async searching completed.]LOG]!><time="08:37:13.009+00" date="03-19-2015" component="WUAHandler" context="" type="1" thread="8376" file="cwuahandler.cpp:2068">
<![LOG[Successfully completed scan.]LOG]!><time="08:37:15.208+00" date="03-19-2015" component="WUAHandler" context="" type="1" thread="5332" file="cwuahandler.cpp:3557">
<![LOG[CWuaHandler::SetCategoriesForStateReportingExclusion called with E0789628-CE08-4437-BE74-2495B842F43B;E0789628-CE08-4437-BE74-2495B842F43B,A38C835C-2950-4E87-86CC-6911A52C34A3; for leaves and E0789628-CE08-4437-BE74-2495B842F43B,A38C835C-2950-4E87-86CC-6911A52C34A3; for bundles]LOG]!><time="10:19:41.326+00" date="03-19-2015" component="WUAHandler" context="" type="1" thread="4268" file="cwuahandler.cpp:2527">

Just to add that I'm yet to see the updates been deployed to the client machines.

The software update scan cycle will need to run.  You can manually invoke it from the ConfigMgr control panel applet.

Jeff

Hi Jeff,

Just to let you know that the deployment of software updates have now commenced. At the moment, the compliance rate on this particular deployment task is 90.3%

Thanks  a lot for your help.