WARNING: GetConfig failure, error = 0x80244021, soap client error = 10, soap error code = 0, HTTP status code = 502

Hi guy's,

I have recently built a WSUS 2 server and some clients are connecting fine and some are not.

Lookin at the WindowsUpdate log file i see these errors

WARNING: GetConfig failure, error = 0x80244021, soap client error = 10,
soap error code = 0, HTTP status code = 502
WARNING: Sync of Updates: 0x80244021
* WARNING: Failed to synchronize, error = 0x80244021
* WARNING: Exit code = 0x80244021

WARNING: GetConfig failure, error = 0x80244021, soap client error = 10, soap error code = 0, HTTP status code = 502 WARNING: Reporter failed to upload events with hr = 80244021.


any ideas as to why some work and some dont?
The config is the same

thanks

Download the Client Diagnostic Tool from here:

http://www.microsoft.com/windowsserv...s/default.mspx

Run it from the clients that are not connecting and see what the problem is. Can always post the results if you need some help.

The 0x80244021 is an HTTP 502 'Bad Gateway' error. It's caused when the defined proxy server cannot successfully communicate with the destination resource (the WSUS server in this case).

It can also be caused if the client is communicating with a proxy server not designed for communicating with the WSUS server, like the proxy server servicing INTERNET connectivity -- which would happen if the WinHTTP proxy configuration fails to properly bypass the proxy server for <local>resources.

Run the Client Diagnostic Tool and post the results so we can see your full proxy client configuration, which wil most likely define the correct
remediation.

This machine appears to be a registry issue. Note the error at the bottom.
Can you export the key at HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate for further analysis?

This machine is showing the HTTP 502 error as 0x801901f6.

WinHTTP is configured to use a <Direct Connection>. If the proxy server is the only path between this client and the WSUS server, and the proxy server doesn't know how to relay the connection to a port 8530 system, that would account for an HTTP 502 error.

I have found a way round this.
I have switched form using the server's IP to the server's name.

this seemes to have done the trick.

That would seem to be an indication that the bypass definition for the DNS
naming is correctly configured; but the bypass definition(s) for the IP
Addresses are defective.

Yes, the proxy is only needed for external Internet. I disabled the proxy settings in IE, and ran the diagnostics tool again, and it passed everything.

There's the Microsoft Firewall Client for ISA Server running on the clients. I'll try disabling that, and see if it changes anything.

Hi,

I have clients trying to connect to a WSUS server, and I'm seeing the following error message in the WindowsUpdate.log

WARNING: GetConfig failure, error = 0x80244021, soap client error = 10, soap error code = 0, HTTP status code = 502
WARNING: PTError: 0x80244021
WARNING: GetConfig_WithRecovery failed: 0x80244021
WARNING: RefreshConfig failed: 0x80244021
WARNING: RefreshPTState failed: 0x80244021
WARNING: Sync of Updates: 0x80244021
WARNING: SyncServerUpdatesInternal failed: 0x80244021
WARNING: Failed to synchronize, error = 0x80244021
WARNING: Exit code = 0x80244021
WARNING: WU client failed Searching for update with error 0x80244021

I ran the diagnostics tool, and it passed everything. We are using a proxy to access the internet, and here's the proxy info from the diag tool:

Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy
fire1.tail-spin.com:8080
User IE ProxyByPass
*.tail-spin.com;<local>
User IE AutoConfig URL Proxy

User IE AutoDetect
AutoDetect in use

I haven't been able to figure this out on my own, so any ideas or advice would be most appreciated.

Thanks,
Alex

The diagnostics tool uses your proxy information to access the WSUS server, whereas WU uses the winhttp proxy information. Can you access the WSUS server without the proxy?

The 502 status code indicates a problem with a proxy, which is puzzling when there's a direct connection. Is there any king of proxy or firewall software running either on the clients or on the WSUS server?

Well, that's changed the error message I'm getting.

WARNING: Cached cookie has expired or new PID is available
Initializing simple targeting cookie, clientId = ac732f4d-1568-4099-b65d-23b930506b77, target group = , DNS name = avdesktop.tail-spin.com
Server URL = http://roger.tail-spin.com/SimpleAut...impleAuth.asmx
WARNING: SyncUpdates failure, error = 0x8024400E, soap client error = 7, soap error code = 400, HTTP status code = 200
WARNING: SOAP Fault: 0x000190
WARNING: faultstring:Fault occurred
WARNING: ErrorCode:InternalServerError(5)
WARNING: Message:(null)
WARNING: Method:"http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService/SyncUpdates"
WARNING: ID:cb30fb58-cf9c-456b-b56b-01af0e9e9992
WARNING: PTError: 0x8024400e
WARNING: SyncUpdates_WithRecovery failed.: 0x8024400e
WARNING: Sync of Updates: 0x8024400e
WARNING: SyncServerUpdatesInternal failed: 0x8024400e
WARNING: Failed to synchronize, error = 0x8024400E
WARNING: Exit code = 0x8024400E

Thanks, that led me to http://support.microsoft.com/kb/954960, and I'll see where I get from there.