none
WSUS3.0 SP2出现客户端无法获取补丁的问题 RRS feed

  • 问题

  • Dear all:

          我的服务器环境是2008R2,wsus3.0 SP2,客户端均为win7 x64,网络环境是隔离网,我们在外网搭建了一样的环境,下载补丁后导出到隔离网再导入,来进行客户端的补丁更新。

    问题描述:导入7月补丁后(上一次更新是6月中旬,当时客户端是能正常更新的),wsus上能显示需要更新的客户端,但是所有的客户端一直显示已经为最新,并不下载补丁。



    上网查了下资料,因为刚好7月才出现的问题,根据ms网页"2019 年 Windows 和 WSUS 的 SHA-2 程式碼簽署支援需求"(发不了链接抱歉), 一开始以为是sha-2补丁没打的问题,但是排查之后服务器和客户端均已打上链接内需要的补丁

    客户端执行wuauclt /resetauthorization /detectnow后,日志如下:

    2019-07-19 15:53:41:028 240 95c AU Triggering AU detection through DetectNow API

    2019-07-19 15:53:41:028 240 95c AU Triggering Online detection (interactive)

    2019-07-19 15:53:41:028 240 136c AU #############

    2019-07-19 15:53:41:028 240 136c AU ## START ##  AU: Search for updates

    2019-07-19 15:53:41:028 240 136c AU #########

    2019-07-19 15:53:41:028 240 136c AU <<## SUBMITTED ## AU: Search for updates [CallId = {662F19AE-43CA-4D8C-B1A2-44254F76DC46}]

    2019-07-19 15:53:41:028 240 1140 Agent *************

    2019-07-19 15:53:41:028 240 1140 Agent ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]

    2019-07-19 15:53:41:028 240 1140 Agent *********

    2019-07-19 15:53:41:028 240 1140 Agent   * Online = Yes; Ignore download priority = No

    2019-07-19 15:53:41:028 240 1140 Agent   * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"

    2019-07-19 15:53:41:028 240 1140 Agent   * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed

    2019-07-19 15:53:41:028 240 1140 Agent   * Search Scope = {Machine}

    2019-07-19 15:53:41:028 240 1140 Setup Checking for agent SelfUpdate

    2019-07-19 15:53:41:028 240 1140 Setup Client version: Core: 7.6.7601.24436  Aux: 7.6.7601.24436

    2019-07-19 15:53:41:043 240 1140 Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab with dwProvFlags 0x00000080:

    2019-07-19 15:53:41:059 240 1140 Misc Microsoft signed: NA

    2019-07-19 15:53:41:059 240 1140 Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\TMPA479.tmp with dwProvFlags 0x00000080:

    2019-07-19 15:53:41:075 240 1140 Misc Microsoft signed: NA

    2019-07-19 15:53:41:075 240 1140 Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab with dwProvFlags 0x00000080:

    2019-07-19 15:53:41:075 240 1140 Misc Microsoft signed: NA

    2019-07-19 15:53:41:090 240 1140 Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab with dwProvFlags 0x00000080:

    2019-07-19 15:53:41:090 240 1140 Misc Microsoft signed: NA

    2019-07-19 15:53:41:106 240 1140 Setup Determining whether a new setup handler needs to be downloaded

    2019-07-19 15:53:41:106 240 1140 Setup SelfUpdate handler is not found.  It will be downloaded

    2019-07-19 15:53:41:106 240 1140 Setup Evaluating applicability of setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~amd64~~7.6.7600.320"

    2019-07-19 15:53:41:106 240 1140 Setup Setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~amd64~~7.6.7600.320" is not applicable

    2019-07-19 15:53:41:106 240 1140 Setup Evaluating applicability of setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~amd64~~7.6.7600.320"

    2019-07-19 15:53:41:121 240 1140 Setup Setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~amd64~~7.6.7600.320" is not applicable

    2019-07-19 15:53:41:121 240 1140 Setup Evaluating applicability of setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~amd64~~7.6.7600.320"

    2019-07-19 15:53:41:153 240 1140 Setup Setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~amd64~~7.6.7600.320" is not applicable

    2019-07-19 15:53:41:153 240 1140 Setup SelfUpdate check completed.  SelfUpdate is NOT required.

    2019-07-19 15:53:41:199 240 1140 PT +++++++++++  PT: Synchronizing server updates  +++++++++++

    2019-07-19 15:53:41:199 240 1140 PT   + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://10.216.18.241/ClientWebService/client.asmx

    2019-07-19 15:54:41:014 240 1140 PT +++++++++++  PT: Synchronizing extended update info  +++++++++++

    2019-07-19 15:54:41:014 240 1140 PT   + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://10.216.18.241/ClientWebService/client.asmx

    2019-07-19 15:54:41:372 240 1140 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80190194

    2019-07-19 15:54:41:372 240 1140 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80190194

    2019-07-19 15:54:41:372 240 1140 Agent WARNING: Fail to download eula file http://**** Agent   * Found 0 updates and 82 categories in search; evaluated appl. rules of 935 out of 2054 deployed entities

    2019-07-19 15:54:41:388 240 1140 Agent *********

    2019-07-19 15:54:41:388 240 1140 Agent **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]

    2019-07-19 15:54:41:388 240 1140 Agent *************

    2019-07-19 15:54:41:388 240 1140 Report REPORT EVENT: {5D79E46A-A2F3-4938-8B13-822EAA8CBE3A} 2019-07-19 15:53:36:348+0800 1 148 101 {00000000-0000-0000-0000-000000000000} 0 80244010 AutomaticUpdates Failure Software Synchronization Windows Update Client failed to detect with error 0x80244010.

    2019-07-19 15:54:41:388 240 135c AU >>##  RESUMED  ## AU: Search for updates [CallId = {662F19AE-43CA-4D8C-B1A2-44254F76DC46}]

    2019-07-19 15:54:41:388 240 135c AU   # 0 updates detected

    2019-07-19 15:54:41:388 240 135c AU #########

    2019-07-19 15:54:41:388 240 135c AU ##  END  ##  AU: Search for updates [CallId = {662F19AE-43CA-4D8C-B1A2-44254F76DC46}]

    2019-07-19 15:54:41:388 240 135c AU #############

    2019-07-19 15:54:41:388 240 135c AU Successfully wrote event for AU health state:0

    2019-07-19 15:54:41:388 240 135c AU Featured notifications is disabled.

    2019-07-19 15:54:41:388 240 135c AU AU setting next detection timeout to 2019-07-19 08:44:45

    2019-07-19 15:54:41:388 240 135c AU Setting AU scheduled install time to 2019-07-19 17:00:00

    2019-07-19 15:54:41:388 240 135c AU Successfully wrote event for AU health state:0

    2019-07-19 15:54:41:388 240 135c AU Successfully wrote event for AU health state:0

    2019-07-19 15:54:41:404 240 1140 Report CWERReporter::HandleEvents - WER report upload completed with status 0x8

    2019-07-19 15:54:41:404 240 1140 Report WER Report sent: 7.6.7601.24436 0x80244010(0) 0000000-0000-0000-0000-000000000000 Scan 0 1 AutomaticUpdates {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} 0

    2019-07-19 15:54:46:396 240 1140 Report REPORT EVENT: {6D14B9AD-19D9-44A8-B6ED-5D9B584D570B} 2019-07-19 15:54:41:388+0800 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Software Synchronization Windows Update Client successfully detected 0 updates.

    2019-07-19 15:54:46:396 240 1140 Report REPORT EVENT: {96DDC69A-C356-4E28-B12F-E8329CB10498} 2019-07-19 15:54:41:388+0800 1 156 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Pre-Deployment Check Reporting client status.



    • 已编辑 vraypk 2019年7月19日 9:13
    2019年7月19日 9:11

全部回复

  • 非常好,我收藏了!
    2019年7月19日 9:19
  • 提供的日志中有这样一段:

    2019-07-19 15:54:41:388 240 1140 Report REPORT EVENT: {5D79E46A-A2F3-4938-8B13-822EAA8CBE3A} 2019-07-19 15:53:36:348+0800 1 148 101 {00000000-0000-0000-0000-000000000000} 0 80244010 AutomaticUpdates Failure Software Synchronization Windows Update Client failed to detect with error 0x80244010.

    The above error will persist and you will have to click check for updates as it will fail with this same error code 3 or 4 times before it starts working. WSUS has a hard coded limit of 200k metadata per trip which results in this error being generated.

    上述错误将持续出现直到在客户端需要反复点击检查更新三到四次后。 WSUS每次行程的硬编码限制为200k元数据,导致生成此错误。

    来源:

    WSUS issue with client updates.

    https://community.spiceworks.com/topic/1949567-wsus-issue-with-client-updates

    Please Note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.



    如果认为回帖者的回答有所帮助,请将之标记为答复,这样可以帮助更多的用户获取有效信息。
    2019年7月22日 6:58
  • 这个错误我知道,之前有碰到过,反复点击更新几次可以解决

    但这次客户端无论点击几次,都是提示已经为最新,但实际当月的补丁并没有下载安装

    2019年7月23日 1:16