Hello. I get this error message wheni check my Windows SCE Server. The selfupdate folder is there. https://SCEVHDSERVER.domain:8531/selfupdate/wuident.cab https://SCEVHDSERVER.domain:8531/simpleauthwebservice/simpleauth.asmx when i try to visit thise links, i get a wuident.cab downlaod file on the first one. The 2nd one i get this message: SimpleAuth The following operations are supported. For a formal definition, please review the Service Description. GetAuthorizationCookie Ping What is wrong here? Some computers are getting connected, and reports operating system and diskspace etc. Thanks. Rune. Copy'nPaste from clientdiag.exe WSUS Client Diagnostics Tool Checking Machine State Checking for admin rights to run tool . . . . . . . . . PASS Automatic Updates Service is running. . . . . . . . . . PASS Background Intelligent Transfer Service is running. . . PASS Wuaueng.dll version 7.1.6001.65 . . . . . . . . . . . . PASS This version is WSUS 2.0 Checking AU Settings AU Option is 4: Scheduled Install . . . . . . . . . . . PASS Option is from Policy settings Checking Proxy Configuration Checking for winhttp local machine Proxy settings . . . PASS Winhttp local machine access type <Direct Connection> Winhttp local machine Proxy. . . . . . . . . . NONE Winhttp local machine ProxyBypass. . . . . . . NONE Checking User IE Proxy settings . . . . . . . . . . . . PASS User IE Proxy. . . . . . . . . . . . . . . . . NONE User IE ProxyByPass. . . . . . . . . . . . . . NONE User IE AutoConfig URL Proxy . . . . . . . . . NONE User IE AutoDetect AutoDetect not in use Checking Connection to WSUS/SUS Server WUServer = https://SCEVHDSERVER.domain.com:8531 WUStatusServer = https://SCEVHDSERVER.domain.com:8531 UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS Connection to server. . . . . . . . . . . . . . . . . . PASS WinHttpDownloadFileToMemory(szURLDest, NULL, 0, NULL, NULL, NULL, &downloadBuffer) failed with hr=0x80072efd A connection with the server could not be established Press Enter to Complete

A log from one of our client. 2008-04-1112:59:18:98213569b0AU#############2008-04-1112:59:19:0141356884Inv#############2008-04-1112:59:19:0141356884Inv## START ## Inv: Inventory Collection2008-04-1112:59:19:0141356884Inv#########2008-04-1112:59:19:0141356884Inv # Talking to WSUS server = https://SCEVHDSERVER.domain:85312008-04-1112:59:19:1701356884Inv # Downloading Rule file from = https://SCEVHDSERVER.domain.com:8531/Inventory/InventoryRules.cab2008-04-1112:59:19:45113569b0AUAU setting next detection timeout to 2008-04-12 04:57:162008-04-1112:59:19:46713569b0AUSetting AU scheduled install time to 2008-04-12 01:00:002008-04-1112:59:23:6061356884MiscValidating signature for C:\WINNT\SoftwareDistribution\Inventory\InventoryRule\InventoryRules.cab:2008-04-1112:59:23:9961356884Misc Microsoft signed: Yes2008-04-1112:59:24:3871356884Inv # Inventory Rule id = 8226C3A1-70D4-4848-B441-1555AC820A23, version = 1.02008-04-1112:59:53:8931356884Inv#########2008-04-1112:59:53:8931356884Inv## END ## Inv: Inventory Collection2008-04-1112:59:53:8931356884Inv#############2008-04-1112:59:53:9091356884ReportREPORT EVENT: {F437F4D3-A784-43D3-B688-889066A858EC}2008-04-11 12:59:18:576+02001147101{00000000-0000-0000-0000-000000000000}00AutomaticUpdatesSuccessSoftware SynchronizationWindows Update Client successfully detected 0 updates.2008-04-1112:59:53:9091356884ReportREPORT EVENT: {29F470CD-4C24-4E29-B1D3-E49FA9044221}2008-04-11 12:59:18:686+02001156101{00000000-0000-0000-0000-000000000000}00AutomaticUpdatesSuccessPre-Deployment CheckReporting client status.2008-04-1112:59:58:8911356884ReportREPORT EVENT: {F66E92DB-D955-4630-AEC9-FDA596487669}2008-04-11 12:59:53:893+02001126104{00000000-0000-0000-0000-000000000000}00InventoryEngineSuccessInventory processingInventory: Successfully collected the inventory data2008-04-1113:10:48:4441356884ReportUploading 3 events using cached cookie, reporting URL = https://SCEVHDSERVER.domain.com:8531/ReportingWebService/ReportingWebService.asmx2008-04-1113:10:51:0841356884ReportReporter successfully uploaded 3 events.2008-04-1113:58:45:72513563a0AU########### AU: Uninitializing Automatic Updates ###########2008-04-1113:58:47:91213563a0Service*********2008-04-1113:58:47:91213563a0Service** END ** Service: Service exit [Exit code = 0x240001]2008-04-1113:58:47:91213563a0Service*************2008-04-1113:58:49:0211356a30Misc=========== Logging initialized (build: 7.1.6001.65, tz: +0200) ===========2008-04-1113:58:49:0211356a30Misc = Process: C:\WINNT\System32\svchost.exe2008-04-1113:58:49:0211356a30Misc = Module: C:\WINNT\system32\wuaueng.dll2008-04-1113:58:49:0211356a30Service*************2008-04-1113:58:49:0211356a30Service** START ** Service: Service startup2008-04-1113:58:49:0211356a30Service*********2008-04-1113:58:49:0991356a30Agent * WU client version 7.1.6001.652008-04-1113:58:49:1151356a30Agent * Base directory: C:\WINNT\SoftwareDistribution2008-04-1113:58:49:1301356a30Agent * Access type: No proxy2008-04-1113:58:49:1301356a30Agent * Network state: Connected2008-04-1113:58:51:2391356e40Agent*********** Agent: Initializing Windows Update Agent ***********2008-04-1113:58:51:2551356e40Agent*********** Agent: Initializing global settings cache ***********2008-04-1113:58:51:2551356e40Agent * WSUS server: https://SCEVHDSERVER.domain.com:85312008-04-1113:58:51:2551356e40Agent * WSUS status server: https://SCEVHDSERVER.domain.com:85312008-04-1113:58:51:2551356e40Agent * Target group: (Unassigned Computers)2008-04-1113:58:51:2551356e40Agent * Windows Update access disabled: No2008-04-1113:58:52:1921356a30Report*********** Report: Initializing static reporting data ***********2008-04-1113:58:52:1921356a30Report * OS Version = 5.1.2600.2.0.657922008-04-1113:58:52:7861356a30Report * Computer Brand = VIA Technologies, Inc.2008-04-1113:58:52:7861356a30Report * Computer Model = P4M266-82332008-04-1113:58:52:8171356a30Report * Bios Revision = 6.00 PG2008-04-1113:58:52:8171356a30Report * Bios Name = Phoenix - AwardBIOS v6.00PG2008-04-1113:58:52:8171356a30Report * Bios Release Date = 2004-12-23T00:00:002008-04-1113:58:52:8171356a30Report * Locale ID = 10442008-04-1113:58:52:8951356e40DnldMgrDownload manager restoring 0 downloads2008-04-1113:58:52:9421356e40AU########### AU: Initializing Automatic Updates ###########2008-04-1113:58:52:9571356e40AUAU setting next detection timeout to 2008-04-11 11:58:522008-04-1113:58:53:0041356e40AU # WSUS server: https://SCEVHDSERVER.domain.com:85312008-04-1113:58:53:0041356e40AU # Detection frequency: 222008-04-1113:58:53:0041356e40AU # Approval type: Scheduled (Policy)2008-04-1113:58:53:0041356e40AU # Scheduled install day/time: Every day at 3:002008-04-1113:58:53:0041356e40AU # Auto-install minor updates: Yes (User preference)2008-04-1113:58:53:0041356e40AUSetting AU scheduled install time to 2008-04-12 01:00:002008-04-1113:58:53:0041356e40AUAU finished delayed initialization2008-04-1113:58:53:0041356e40AUTriggering AU detection through DetectNow API2008-04-1113:58:53:0201356e40AUTriggering Online detection (non-interactive)2008-04-1113:58:53:0821356a30AU#############2008-04-1113:58:53:0981356a30AU## START ## AU: Search for updates2008-04-1113:58:53:0981356a30AU#########2008-04-1113:58:53:1921356a30AU<<## SUBMITTED ## AU: Search for updates [CallId = {0401E66E-5F59-4378-ACA4-7211497D6974}]2008-04-1113:58:54:3941356f68Agent*************2008-04-1113:58:54:3941356f68Agent** START ** Agent: Finding updates [CallerId = AutomaticUpdates]2008-04-1113:58:54:4101356f68Agent*********2008-04-1113:58:54:4101356f68Agent * Online = Yes; Ignore download priority = No2008-04-1113:58:54:4101356f68Agent * Criteria = "IsHidden=0 and IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and IsAssigned=1 or IsHidden=0 and IsInstalled=1 and DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and IsAssigned=1 and RebootRequired=1"2008-04-1113:58:54:4101356f68Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}2008-04-1113:58:54:4411356f68MiscValidating signature for C:\WINNT\SoftwareDistribution\SelfUpdate\Default\wuident.cab:2008-04-1113:58:54:6441356f68Misc Microsoft signed: Yes2008-04-1113:58:54:8321356f68MiscValidating signature for C:\WINNT\SoftwareDistribution\SelfUpdate\Default\wuident.cab:2008-04-1113:58:54:8321356f68Misc Microsoft signed: Yes2008-04-1113:58:54:9261356f68MiscValidating signature for C:\WINNT\SoftwareDistribution\SelfUpdate\Default\wsus3setup.cab:2008-04-1113:58:54:9411356f68Misc Microsoft signed: Yes2008-04-1113:58:54:9571356f68Setup*********** Setup: Checking whether self-update is required ***********2008-04-1113:58:54:9571356f68Setup * Inf file: C:\WINNT\SoftwareDistribution\SelfUpdate\Default\wsus3setup.inf2008-04-1113:58:55:0191356f68SetupUpdate NOT required for C:\WINNT\system32\cdm.dll: target version = 7.1.6001.65, required version = 7.0.6000.3742008-04-1113:58:55:0191356f68SetupUpdate NOT required for C:\WINNT\system32\wuapi.dll: target version = 7.1.6001.65, required version = 7.0.6000.3742008-04-1113:58:55:0661356f68SetupUpdate NOT required for C:\WINNT\system32\wuapi.dll.mui: target version = 7.1.6001.65, required version = 7.0.6000.3742008-04-1113:58:55:0661356f68SetupUpdate NOT required for C:\WINNT\system32\wuauclt.exe: target version = 7.1.6001.65, required version = 7.0.6000.3742008-04-1113:58:55:0661356f68SetupUpdate NOT required for C:\WINNT\system32\wuaucpl.cpl: target version = 7.1.6001.65, required version = 7.0.6000.3742008-04-1113:58:55:0821356f68SetupUpdate NOT required for C:\WINNT\system32\wuaucpl.cpl.mui: target version = 7.1.6001.65, required version = 7.0.6000.3742008-04-1113:58:55:0821356f68SetupUpdate NOT required for C:\WINNT\system32\wuaueng.dll: target version = 7.1.6001.65, required version = 7.0.6000.3742008-04-1113:58:55:1131356f68SetupUpdate NOT required for C:\WINNT\system32\wuaueng.dll.mui: target version = 7.1.6001.65, required version = 7.0.6000.3742008-04-1113:58:55:1131356f68SetupUpdate NOT required for C:\WINNT\system32\wucltui.dll: target version = 7.1.6001.65, required version = 7.0.6000.3742008-04-1113:58:55:1441356f68SetupUpdate NOT required for C:\WINNT\system32\wucltui.dll.mui: target version = 7.1.6001.65, required version = 7.0.6000.3742008-04-1113:58:55:1441356f68SetupUpdate NOT required for C:\WINNT\system32\wups.dll: target version = 7.1.6001.65, required version = 7.0.6000.3742008-04-1113:58:55:1441356f68SetupUpdate NOT required for C:\WINNT\system32\wups2.dll: target version = 7.1.6001.65, required version = 7.0.6000.3742008-04-1113:58:55:2071356f68SetupUpdate NOT required for C:\WINNT\system32\wuweb.dll: target version = 7.1.6001.65, required version = 7.0.6000.3742008-04-1113:58:55:2071356f68Setup * IsUpdateRequired = No2008-04-1113:59:06:5941356f68PT+++++++++++ PT: Synchronizing server updates +++++++++++2008-04-1113:59:06:5941356f68PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = https://SCEVHDSERVER.domain.com:8531/ClientWebService/client.asmx2008-04-1113:59:06:7031356f68PTWARNING: Cached cookie has expired or new PID is available2008-04-1113:59:06:7031356f68PTInitializing simple targeting cookie, clientId = d54d285a-6593-4549-a497-f58a4db13ceb, target group = , DNS name = client.com2008-04-1113:59:06:7191356f68PT Server URL = https://SCEVHDSERVER.domain.com:8531/SimpleAuthWebService/SimpleAuth.asmx

Hi, Please check if there is a firewall which blocks the WSUS server. Try to diable the Firewall for a test. For your infomation, if you are using an ISA server, please configure it by following instructions in the article below: How to Configure an ISA Server 2004 Firewall on Small Business Server for System Center Essentialshttp://technet.microsoft.com/en-us/library/bb422892.aspx Thanks.

No firewalls in use. No isa serverNo proxy serverEverything on the same LAN

Hi RVenes, Please give us some more details about this issue except the error message from WSUS Client Diagnostics Tool. Every SCE agent cannot update? Are the managed computers in the same domain with SCE server? Have you installed the agents manually? Could you find the agents in SCE console and what is the status of them? Besides, please also check the ffollowing: Have you ever modified the IIS configurations? Can you make sure the DNS works properly? Thanks.

Hi. I'm back, been away for a few days. I've not modified the IIS, and the DNS is working properly i think. Have no other issues on the network. This is a fresh VHD image, so i have not modified anything except from what is says in the PDF doc. (add the scevhdserver to the domain etc) Every client gives me the error message. I have just a few computers in the SCE group since i am testing this only (Evaluation) I have installed the client from the SCEVHDSERVER and i can see all the clients there. They who i am testing on (witch is in the right OU), have contacted the server. They all is in the same Domain.

Hi, Please open the Application Event Log and look for errors whose source is Windows Server Update Services. You can post the errors here or send it to scedata@microsoft.com, with the following text in the E-mail. I hope that would be helpful. WinHttpDownloadFileToMemory 0x80072efd error in ClientDiag.exe http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=3154463&SiteID=17For Yog.Li - MSFT Please also send me the following log files: 1. C:\Windows\WindowsUpdate.log file from one of the client2. C:\Program Files\Update Services\LogFiles\SoftwareDistribution.log from SCE server3. C:\Program Files\Update Services\LogFiles\Change.log from SCE server Thanks.

Looking over the snippet of log file in this post, it appears that the Windows Update Agent was able to perform a successful sync. Other than using ClientDiag.exe to see this error, do your managed systems appear to be syncing successfully? That specific error generates when the ClientDiag.exe application was unable to connect to the self-update tree. There are a number of reasons why this happened; an internet search on this string indicates variants from IPSec through ClientDiag not honoring the same connection settings the Windows Update Agent uses. Your intial steps (checking the self-update tree directly), as well as seeing what appears to be a successful dectection from an agent lead me to believe that the tool is throwing a false negative to you. I can let the owners of the tool know this, but before deeper diagnostics happen, let's determine if your agents have a problem. /Ty

Was there ever a solution to this problem? I am having the same exact problem. I successfully deployed SCE agents to the clients. I can scan the clients through SCE and it shows they need updates. However the clients cannot download the updates. I can visit the WSUS URL as RVenes was able to but I can't get the updates. Whenever it tries to download one it gets error 0x80072efd. Help? No firewalls anywhere, this problem even occurs on the SCE/WSUS server itself.

I have the same issue except some updates will install while others will not. There doesn't seem to be a pattern. Very frustrated with the SCE product.

Hello, Error 0x80072efd translates to ERROR_INTERNET_CANNOT_CONNECT which means 'The attempt to connect to the server failed'.Open the WindowsUpdate.log and find out on which server the agent was looking for updates. Is it the FQDN name of your SCE server? If yes, navigate to https://<SCEServerFQDN>:8531/SimpleAuthWebService/SimpleAuth.asmx. If you do not see a page with ping and getauthorizationcookie displayed then your proxy server settings are the root cause of this issue. Use the following commands to delete the proxy. Press ENTER after each command. Proxycfg -uproxycfg -dnet stop wuauservnet start wuauserv If it is not your SCE server, I'm afraid some other GPOs or program changed the configuration. Run rsop.msc on clients to check whether the GPOs: SCE Managed Computers Group Policy& System Center Essentials All Computers Policy had been applied correctly on clients. Check that the client is configured to use the SCE server for Windows Updates. The following registry entries should be set to https://<SCEServerFQDN>:8531 HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\WUServerHKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\WUStatusServer After everything done, run wuauclt /detectnow and wuauclt /reportnow on the SCE agents. Besides, we'd recommend that you start up a new thread for this issue. We generally focus on one topic in one thread because in this way it will be better for other community members to participate in the discussion, and to search/find specific answers more efficiently in the future.Thanks,Yog Li - MSFT