wsus 3.0 sp2 - Content file download failed

installed the above successfully, only accept / tick Foreront signature
updates.

Keep getting the error on application eventlog and i m unable to update
signatures to all my fcs clients

================================================
Content file download failed. Reason: The client does not have sufficient
access rights to the requested server object.
Source File:
/msdownload/update/v3-19990518/cabpool/fcsms-kb940060-x86-enu_c81645df158e15780c1f71f95eceb1bf6d79c89c.exe
Destination File:
d:\WSUS_DB\WsusContent\9C\C81645DF158E15780C1F71F95ECEB1BF6D79C89C.exe.
================================================

running on : windows 2003 32bit sp2 with all patches.
i m a local admin to the machine

"IT Staff" <jkklim@hotmail.com> wrote in message
news:uTt847uTKHA.5164@TK2MSFTNGP02.phx.gbl...

> Reason: The client does not have sufficient access rights to the requested
> server object.

> Destination File:
> d:\WSUS_DB\WsusContent\9C\C81645DF158E15780C1F71F95ECEB1BF6D79C89C.exe.

You need to add READ permissions to the D: drive for the NT
AUTHORITY\Network Service account.

This is a known deficiency in the .NET v2.0 installer that fails to set the
correct ACLs for this account.


--
Lawrence Garvin, M.S., MCITP:EA, MCDBA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)

My Blog: http://onsitechsolutions.spaces.live.com
Microsoft WSUS Website: http://www.microsoft.com/wsus
My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin

One question

If i re-install and install onto c:\ drive instead, do i need to apply the
same network service permission on the C:\ drive as well (REad only) ?

"IT STAFF" <jkklim@hotmail.com> wrote in message
news:%23raIHT8TKHA.1372@TK2MSFTNGP02.phx.gbl...
> One question
>
> If i re-install and install onto c:\ drive instead, do i need to apply the
> same network service permission on the C:\ drive as well (REad only) ?

No, the issue only affects non-SYSVOL volumes.


--
Lawrence Garvin, M.S., MCITP:EA, MCDBA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)

My Blog: http://onsitechsolutions.spaces.live.com
Microsoft WSUS Website: http://www.microsoft.com/wsus
My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin

i m using member server with ntfs volume.

What is non-sysvol volumes ?



"Lawrence Garvin [MVP]" <lawrence@news.postalias> wrote in message
news:uYNJfWBUKHA.4484@TK2MSFTNGP02.phx.gbl...
> "IT STAFF" <jkklim@hotmail.com> wrote in message
> news:%23raIHT8TKHA.1372@TK2MSFTNGP02.phx.gbl...
>> One question
>>
>> If i re-install and install onto c:\ drive instead, do i need to apply
>> the same network service permission on the C:\ drive as well (REad only)
>> ?
>
> No, the issue only affects non-SYSVOL volumes.
>
>
> --
> Lawrence Garvin, M.S., MCITP:EA, MCDBA
> Principal/CTO, Onsite Technology Solutions, Houston, Texas
> Microsoft MVP - Software Distribution (2005-2009)
>
> My Blog: http://onsitechsolutions.spaces.live.com
> Microsoft WSUS Website: http://www.microsoft.com/wsus
> My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin
>

IT Staff wrote:

> i m using member server with ntfs volume.
>
> What is non-sysvol volumes ?

SYSVOL is the volume that the operating system is installed on, almost always
C:. So, in most cases, anything other than drive C: is a non-SYSVOL volume.

Harry.

I've installed many times on d:\ drive and c:\ drives and BOTH drives
exhibit same problems.

I do not have firewall installed.

I even applied network service permissions to c:\ and d:\ drive and
reinstall fresh.

What else can go wrong ?



"Harry Johnston [MVP]" <harry@scms.waikato.ac.nz> wrote in message
news:%231WxbwFUKHA.1232@TK2MSFTNGP05.phx.gbl...
> IT Staff wrote:
>
>> i m using member server with ntfs volume.
>>
>> What is non-sysvol volumes ?
>
> SYSVOL is the volume that the operating system is installed on, almost
> always C:. So, in most cases, anything other than drive C: is a
> non-SYSVOL volume.
>
> Harry.

I managed to resolve it.

It's our network firewall gateway that has been blocking it all along. for
every patch that wsus download, it attempts to do a anti-virus scan which
slows down and not able to download it.

"IT STAFF" <jkklim@hotmail.com> wrote in message
news:4B2C3DB6-ECE9-46B0-A316-912D87F78D1B@microsoft.com...
>I managed to resolve it.
>
> It's our network firewall gateway that has been blocking it all along. for
> every patch that wsus download, it attempts to do a anti-virus scan which
> slows down and not able to download it.

I'm happy to hear you found the cause -- but you might also check to see why
the WSUS Server was getting a "does not have sufficient access rights"
error, rather than a *timeout* error, which is what I'd expect from an AV
scanner in the gateway interfering with the download.

I'm not entirely convinced it was merely a slowdown -- the access rights
error suggests that the firewall was blocking the file entirely (and very
well might have been given that this is an =EXE= file being downloaded).



--
Lawrence Garvin, M.S., MCITP:EA, MCDBA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)

My Blog: http://onsitechsolutions.spaces.live.com
Microsoft WSUS Website: http://www.microsoft.com/wsus
My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin