What is sls.update.microsoft.com ?

Gents,

Recently I found in the Windowsupdate.log on all Windows 2012 R2 servers the following issue.

Windows Update Client tried to download something from https://sls.update.microsoft.com.

I've not configured that. I configured all servers obtain updates from local WSUS. All WU settings are deployed via GPO.

Can anyone shed a light, _why_ is WU client on Win 2012 R2 downloading something from this url ?

How to turn off that ? All server must obtain all updates from local WSUS. Only WSUS server can obtain updates from Microsoft.

I don't see this issue on Win 2008 R2 servers.

Some details from WindowsUpdate.log:

2015-04-21 15:05:02:306 1368 680 AU Triggering AU detection through DetectNow API
2015-04-21 15:05:02:306 1368 680 AU Triggering Online detection (non-interactive)
2015-04-21 15:05:02:306 1368 680 AU Adding timer:
2015-04-21 15:05:02:306 1368 680 AU     Timer: 31DA7559-FE27-4810-8FF6-987195B1FD98, Expires 2015-04-21 12:05:02, not idle-only, not network-only
2015-04-21 15:05:02:306 1368 207c AU #############
2015-04-21 15:05:02:306 1368 207c AU ## START ##  AU: Search for updates
2015-04-21 15:05:02:306 1368 207c AU #########
2015-04-21 15:05:02:306 1368 207c SLS Retrieving SLS response from server using ETAG "4V8nqvoeoxgpu+6kKNNNGpLr4BCvPTmaz82CIDm5o5g=_1440"...
2015-04-21 15:05:02:306 1368 207c SLS Making request with URL HTTPS://sls.update.microsoft.com/SLS/{9482F4B4-E343-43B6-B170-9A65BC822C77}/x64/6.3.9600.0/0?CH=711&L=en-US&P=&PT=0x8&WUA=7.9.9600.17729
2015-04-21 15:05:02:493 1368 207c EP Got 9482F4B4-E343-43B6-B170-9A65BC822C77 redir SecondaryServiceAuth URL: "117cab2d-82b1-4b5a-a08c-4d62dbee7782"
2015-04-21 15:05:02:493 1368 207c SLS FATAL: SLS:CSLSRequest::RetrieveAdditionalAttributesIfRequired: CoCreateInstance failed with 0x80040154.
2015-04-21 15:05:02:493 1368 207c Agent WARNING: Failed to retrieve SLS response data for service 117cab2d-82b1-4b5a-a08c-4d62dbee7782, error = 0x80040154
2015-04-21 15:05:02:493 1368 207c Agent FATAL: Caller Service Recovery failed to opt in to service 117cab2d-82b1-4b5a-a08c-4d62dbee7782, hr=0X80040154
2015-04-21 15:05:02:493 1368 207c SLS Retrieving SLS response from server using ETAG "4V8nqvoeoxgpu+6kKNNNGpLr4BCvPTmaz82CIDm5o5g=_1440"...
2015-04-21 15:05:02:493 1368 207c SLS Making request with URL HTTPS://sls.update.microsoft.com/SLS/{9482F4B4-E343-43B6-B170-9A65BC822C77}/x64/6.3.9600.0/0?CH=711&L=en-US&P=&PT=0x8&WUA=7.9.9600.17729
2015-04-21 15:05:02:681 1368 207c EP FATAL: EP: Failed to obtain element node, error = 0x80245002
2015-04-21 15:05:02:681 1368 207c EP FATAL: Failed to obtain 9482F4B4-E343-43B6-B170-9A65BC822C77 redir SecondaryServiceAuth URL, error = 0x80245002
2015-04-21 15:05:02:681 1368 207c Agent WARNING: Failed to obtain the authorization cab URL for service 855e8a7c-ecb4-4ca3-b045-1dfa50104289, hr=0
2015-04-21 15:05:02:681 1368 207c IdleTmr WU operation (CSearchCall::Init ID 1) started; operation # 8; does use network; is not at background priority
2015-04-21 15:05:02:681 1368 207c IdleTmr Incremented idle timer priority operation counter to 1
2015-04-21 15:05:02:744 1368 207c Report ***********  Report: Initializing static reporting data  ***********

...

Thanks

April 22nd, 2015 10:23am

Hi Sir,

I have checked that in my lab , that address exists in windowsupdate.log too .

But I can't find a explaination for this address .

And I searched the configuration for WSUS , I found there is a allow list for WSUS server :

https://technet.microsoft.com/en-us/library/bb693717.aspx?f=255&MSPPError=-2147217396

It seems that it is a normal windows update behavior .

Best Regards,

Elton Ji

Free Windows Admin Tool Kit Click here and download it now
April 24th, 2015 1:59am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics