Content File Download Failed: Access Denied

SYMPTOMS You may see the following error and the download of packages you have set to install may fail, with the following error written to the Application log: Event Type: ErrorEvent Source: Windows Server Update Services Event Category: Synchronization Event ID: 364Description:Content file download failed. Reason: Access is deniedSource File: /msdownload/update/v3-19990518/cabpool/vbs55nen_a76b47d34e497bb2c14ba3cbed923cc042406c8b.exeDestination File: e:\WSUS\WsusContent\C7\6F81BBB0BBEE67DF83295942FAF0BBD8E724BCC7.exe. WORKAROUND This is due to lack of permissions for ‘NT AUTHORITY\NetworkService’ account. Check the file permissions on the root and the folder where update content is downloaded. With the WSUS RC1 release, NETWORK SERVICE needs Read access to the root of the drive, and also needs Modify … Continue reading Content File Download Failed: Access Denied

WSUS: The specified string is invalid. Parameter name: FullDomainName

DESCRIPTION You see the following error while you see the computer reports within Windows Server Update Services (WSUS) – like computers, status of update, reports with computers: Windows Server Update Services encountered an error. The specified string is invalid. Parameter name: FullDomainName SYMPTOMS Windows Server Update Services encountered an error. The specified string is invalid. Parameter name: FullDomainName Details: Microsoft.UpdateServices.Administration.WsusInvalidDataException: The specified string is invalid. Parameter name: FullDomainName —> System.ArgumentException: The specified string is invalid. Parameter name: FullDomainName    at Microsoft.UpdateServices.Internal.StringValidation.ValidateDomainNameString­(String paramName, String value)    at <snip>    at Administration.Computers.List.Page_Load(Object sender, EventArgs e) CAUSE This is due to the apostrophe in the Computer Name … Continue reading WSUS: The specified string is invalid. Parameter name: FullDomainName

WSUS: Automatic Update Client call recorder fails to init with Error 0x80004015

DESCRIPTION You see error 0x80004015 in WindowsUpdate.log and Automatic Update Client fails to update using Windows Server Updates Service, Client call recorder fails to init with error 0x80004015, Failed to initialize WU client: 0x80004015. SYMPTOMS You see the following error in WindowsUpdate.log and Automatic Update Client fails to update using Windows Server Update Service, WSUS 2005-09-26 08:10:27 1724 ac4 Agent FATAL: Client call recorder fails to init with error 0x800040152005-09-26 08:10:27 1724 ac4 Agent * FATAL: Failed to initialize with error 0x80004015 from component Agent2005-09-26 08:10:27 1724 ac4 Service FATAL: Failed to initialize WU client: 0x800040152005-09-26 08:10:27 1724 ac4 Service … Continue reading WSUS: Automatic Update Client call recorder fails to init with Error 0x80004015

WSUS: SelfUpdate Tree is not working

SYMPTOMS You see the following error on WSUSAdmin Page; Check your server configuration=====================One or more Update Service components could not be contacted. Check your server status and ensure that the Windows Server Update Service is running. Non-running services: SelfUpdate And, the following event is logged; Event Type: ErrorEvent Source: Windows Server Update ServicesEvent Category: Update Services Service Event ID: 506User: N/ADescription:The SelfUpdate Tree is not working. Clients may not be able to update to the latest WUA client software and communicate with the Windows Server Update Services (WSUS) Server. THE FACT ·        The SelfUpdate tree MUST be installed into port … Continue reading WSUS: SelfUpdate Tree is not working

WSUS Mandatory Updates

Windows Server Update Services Updates are needed to ensure computers can be updated correctly. If Windows Server Update Services (WSUS) updates are not approved, some updates may not be correctly detected by computers. Currently, this includes Windows Installer 3.1 and Background Intelligent Transfer 2.0 (MSI 3.1 & BITS 2.0)   So, this means Windows Server Update Services Updates are needed to ensure computers can be updated correctly. These updates (MSI 3.1 & BITS 2.0) are mandatory critical updates and they will be automatically downloaded by AU Client.   Where is the option to ‘Automatically approve WSUS updates?’   Open WSUSAdmin … Continue reading WSUS Mandatory Updates

WSUS: Encryption Key Cannot be Retrieved

SYMPTOMS You may see an error when trying to make changes to the synchronization options such as trying to set a proxy server password or changing the time for synchronization. The error looks like: System.Security.Cryptography.CryptographicException: The encryption key cannot be retrieved. —> System.Security.Cryptography.CryptographicException: An error occurred in the DPAPI. HRESULT: 0x800F0005 at Microsoft.UpdateServices.Internal.DataProtectionApi.Decrypt(Byte[] toDecrypt, Byte[] entropy, EncryptionLevel level) atMicrosoft.UpdateServices.Internal.EncryptionUtilities.GetEncryptionKeyThread() This is what you get when you click on the show details button: — End of inner exception stack trace — at Microsoft.UpdateServices.Internal.EncryptionUtilities.GetEncryptionKey()at Microsoft.UpdateServices.Internal.EncryptionUtilities.EncryptString(String stringToEncrypt)at Microsoft.UpdateServices.Internal.BaseApi.UpdateServerConfiguration.set_Proxy Password(String value)<SNIP>.Manage.Subscriptions.SubscriptionProxy.SaveSynchronizationValues(XPostHandler& xPostHandler) at Administration.Manage.Subscriptions.SubscriptionProxy.ValidateSynchronizationValues(String xPostXml)at Administration.Manage.Subscriptions.SubscriptionXPost.Page_Load(Object sender,EventArgse) WORKAROUND On Windows 2003 Server, make sure … Continue reading WSUS: Encryption Key Cannot be Retrieved

WSUS: Script to delete duplicate SID created by Disk Imaging / Disk Cloning

You might notice that some computers are appearing multiple times in WSUSAdmin – Computers and some of them disappear very often. This is due to duplicate SUS client IDs. Take a look at this script which deletes duplicate SUS client IDs found on a computer. These IDs are often found on computers where the operating system was installed using an image-based setup.   Script Code ============================================ @echo offEcho Save the batch file “AU_Clean_SID.cmd”. This batch file will do the following:Echo 1.    Stops the wuauserv serviceEcho 2.    Deletes the AccountDomainSid registry key (if it exists)Echo 3.    Deletes the PingID registry key (if it … Continue reading WSUS: Script to delete duplicate SID created by Disk Imaging / Disk Cloning

WSUS: Script to Manually Configure Automatic Update Client (WUA) for WSUS in a workgroup environment

***This is a sample.***Edit the Code based on your options & requirement.***See NOTES and MORE INFORMATION section below for details. 1. Simple copy and paste the code below into a text file and name it WSUS.reg ============ START Script Code===========Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]“WUServer”=”http://YOUR-WSUS-SERVER““WUStatusServer”=”http://YOUR-WSUS-SERVER““TargetGroupEnabled”=dword:00000001“TargetGroup”=”IT Department““ElevateNonAdmins”=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]“NoAutoUpdate”=dword:00000000“AUOptions”=dword:00000004“ScheduledInstallDay”=dword:00000000“ScheduledInstallTime”=dword:0000000a“NoAutoRebootWithLoggedOnUsers”=dword:00000001“AutoInstallMinorUpdates”=dword:00000001“RebootRelaunchTimeoutEnabled”=dword:00000001“RebootRelaunchTimeout”=dword:0000003c“RescheduleWaitTimeEnabled”=dword:00000001“RescheduleWaitTime”=dword:0000000f“DetectionFrequencyEnabled”=dword:00000001“RebootWarningTimeoutEnabled”=dword:00000001“RebootWarningTimeout”=dword:0000001e“UseWUServer”=dword:00000001“NoAUShutdownOption”=dword:00000000“NoAUAsDefaultShutdownOption”=dword:00000000============ END Script Code=========== 2. WSUS.reg is ready. Now cut and paste the code below into a text file and name it WSUS.bat ============ START Script Code===========@echo off::Echo Save the batch file as “WSUS.bat”. This batch file will do the following:Echo 1.    Stops the Automatic Update Service (wuauserv) service.Echo 2.    Imports WUA settings for … Continue reading WSUS: Script to Manually Configure Automatic Update Client (WUA) for WSUS in a workgroup environment

WSUS: Script to Force the Update Detection from Automatic Update Client (WUA) for updates on WSUS Server

SUMMARY Windows Server Updates Service (WSUS) Script to Force the Update Detection from Automatic Update Client to check for updates on WSUS Server.   WSUS: Script to Force the Update Detection from Automatic Update Client for updates on WSUS Server This script will force the Update Detection from Automatic Update Client to check for updates on WSUS Server. Copy and Paste the code below into a text file and name it AUForceUpdate.cmd=======================================================================@echo offEcho This batch file will Force the Update Detection from the AU client: Echo 1. Stops the Automatic Updates Service (wuauserv)Echo 2. Deletes the LastWaitTimeout registry key (if it … Continue reading WSUS: Script to Force the Update Detection from Automatic Update Client (WUA) for updates on WSUS Server

Error 0x80070643: Windows Server Update Services could not install MSDE 2000 Desktop Engine

DESCRIPTION Error 0x80070643: Fatal error during installation. Microsoft Windows Server Update Services could not install Microsoft SQL Server 2000 Desktop Engine. SYMPTOMS Following Error is logged while installing Microsoft Windows Server Update Services (WSUS) on Microsoft Windows Server 2003 and installation fails; 2005-07-06 10:52:18 Success MWUSSetup Installing WMSDE2005-07-06 10:53:50 Error MWUSSetup WMSDE Installation Failed (Error 0x80070643: Fatal error during installation.)2005-07-06 10:53:50 Error MWUSSetup InstallWMSDE Failed (Error 0x80070643: Fatal error during installation.)2005-07-06 10:53:50 Error MWUSSetup Installation of WMSDE failed (Error 0x80070643: Fatal error during installation.)2005-07-06 10:53:50 Error MWUSSetup PerformInstall failed (Error 0x80070643: Fatal error during installation.)2005-07-06 10:53:50 Success MWUSSetup Rolling back … Continue reading Error 0x80070643: Windows Server Update Services could not install MSDE 2000 Desktop Engine