Clients unable to update, Event ID 506

I am unable to add clients to me WSUS server, nor are any clients able to
update from the WSUS server. All machines are either Windows 2003 SP1 or
Windows XP pro SP2 in a Windows 2003 native AD domain. The following error
is logged on the server:

<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< <<<<<<<<
Event Type: Error
Event Source: Windows Server Update Services
Event Category: Update Services Service
Event ID: 506
Date: 6/9/2005
Time: 11:11:00 PM
User: N/A
Computer: KASHMIR
Description:
The SelfUpdate Tree is not working. Clients may not be able to update to
the latest WUA client software and communicate with the WSUS Server.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>

The following error occurs on the client:

<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< <<<<<<<<<<
Event Type: Error
Event Source: Windows Update Agent
Event Category: Software Sync
Event ID: 16
Date: 6/10/2005
Time: 1:23:56 AM
User: N/A
Computer: ERAYLAP
Description:
Unable to Connect: Windows is unable to connect to the automatic updates
service and therefore cannot download and install updates according to the
set schedule. Windows will continue to try to establish a connection.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 57 69 6e 33 32 48 52 65 Win32HRe
0008: 73 75 6c 74 3d 30 78 30 sult=0x0
0010: 30 30 30 30 30 30 30 20 0000000
0018: 55 70 64 61 74 65 49 44 UpdateID
0020: 3d 7b 30 30 30 30 30 30 ={000000
0028: 30 30 2d 30 30 30 30 2d 00-0000-
0030: 30 30 30 30 2d 30 30 30 0000-000
0038: 30 2d 30 30 30 30 30 30 0-000000
0040: 30 30 30 30 30 30 7d 20 000000}
0048: 52 65 76 69 73 69 6f 6e Revision
0050: 4e 75 6d 62 65 72 3d 30 Number=0
0058: 20 00 .
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

Any help resolving this matter would be appreciated.

Edward Ray

See response inline...

"Edward W. Ray" <edward_ray@hotmail.com> wrote in message
news:uQY09CgbFHA.1360@TK2MSFTNGP10.phx.gbl...

> The following error is logged on the server:

> The SelfUpdate Tree is not working. Clients may not be able to update to
> the latest WUA client software and communicate with the WSUS Server.

Is the selfupdate virtual directory installed on the Default Web Server?
Does it have anonymous access permissions enabled?

> The following error occurs on the client:

> Unable to Connect: Windows is unable to connect to the automatic updates
> service and therefore cannot download and install updates according to the
> set schedule. Windows will continue to try to establish a connection.

Aside from the WUA probably not yet being updated because of the
unavailability of the selfupdate facility, this error message specifically
suggests that the Automatic Updates service on the client is not running.

The Automatic Updates service should be started, set to Automatic start, and
configured to use the Local System account.

> Any help resolving this matter would be appreciated.
>
> Edward Ray
>

See responses

"Lawrence Garvin" <onsitechsolutions@news.postalias> wrote in message
news:%23r65xVjbFHA.1504@TK2MSFTNGP15.phx.gbl...
> See response inline...
>
> "Edward W. Ray" <edward_ray@hotmail.com> wrote in message
> news:uQY09CgbFHA.1360@TK2MSFTNGP10.phx.gbl...
>
>> The following error is logged on the server:
>
>> The SelfUpdate Tree is not working. Clients may not be able to update to
>> the latest WUA client software and communicate with the WSUS Server.
>
> Is the selfupdate virtual directory installed on the Default Web Server?
Yes

> Does it have anonymous access permissions enabled?

Yes. IUSR_MACHINENAME is the user enabled. I gave this users read, execute
permissions on the selfupdate directory

>
>> The following error occurs on the client:
>
>> Unable to Connect: Windows is unable to connect to the automatic updates
>> service and therefore cannot download and install updates according to
>> the set schedule. Windows will continue to try to establish a connection.
>
> Aside from the WUA probably not yet being updated because of the
> unavailability of the selfupdate facility, this error message specifically
> suggests that the Automatic Updates service on the client is not running.

Automatic Updates is running on all clients and memeber servers.

>
> The Automatic Updates service should be started, set to Automatic start,
> and configured to use the Local System account.

Automatic Updates is configured via GPO to automatically download and
install updates at the time indicated on the event log error

>
>> Any help resolving this matter would be appreciated.
>>
>> Edward Ray
>>
>
>

Edward,

Are you offered open/save dialog for both of the following URLs? If the
answer is yes, and you are still receiving the error about the SelfUpdate
Tree not working, please zip and send me the %program files%\update
services\logfiles\softwaredistribution.log file.
http://<YourWSUSServer>/selfupdate/iuident.cab
http://<YourWSUSServer>:8530/selfupdate/iuident.cab

--
Don Cottam
Microsoft Corporation
Windows Server Update Services

donco AT microsoft DOT com
(I prefer to communicate through the newsgroup, so please do not email me
unless necessary...but if necessary, don't hesitate to email me. Thx!)

=====================
This posting is provided "AS IS" with no warranties, and confers no rights.
=====================

"Edward W. Ray" <edward_ray@hotmail.com> wrote in message
news:u2YMs8jbFHA.3620@TK2MSFTNGP09.phx.gbl...
> See responses
>
> "Lawrence Garvin" <onsitechsolutions@news.postalias> wrote in message
> news:%23r65xVjbFHA.1504@TK2MSFTNGP15.phx.gbl...
>> See response inline...
>>
>> "Edward W. Ray" <edward_ray@hotmail.com> wrote in message
>> news:uQY09CgbFHA.1360@TK2MSFTNGP10.phx.gbl...
>>
>>> The following error is logged on the server:
>>
>>> The SelfUpdate Tree is not working. Clients may not be able to update
>>> to the latest WUA client software and communicate with the WSUS Server.
>>
>> Is the selfupdate virtual directory installed on the Default Web Server?
> Yes
>
>> Does it have anonymous access permissions enabled?
>
> Yes. IUSR_MACHINENAME is the user enabled. I gave this users read,
> execute permissions on the selfupdate directory
>
>>
>>> The following error occurs on the client:
>>
>>> Unable to Connect: Windows is unable to connect to the automatic updates
>>> service and therefore cannot download and install updates according to
>>> the set schedule. Windows will continue to try to establish a
>>> connection.
>>
>> Aside from the WUA probably not yet being updated because of the
>> unavailability of the selfupdate facility, this error message
>> specifically suggests that the Automatic Updates service on the client is
>> not running.
>
> Automatic Updates is running on all clients and memeber servers.
>
>>
>> The Automatic Updates service should be started, set to Automatic start,
>> and configured to use the Local System account.
>
> Automatic Updates is configured via GPO to automatically download and
> install updates at the time indicated on the event log error
>
>>
>>> Any help resolving this matter would be appreciated.
>>>
>>> Edward Ray
>>>
>>
>>
>
>

"Edward W. Ray" <edward_ray@hotmail.com> wrote in message
news:u2YMs8jbFHA.3620@TK2MSFTNGP09.phx.gbl...

>> Is the selfupdate virtual directory installed on the Default Web Server?

> Yes

Good.

>> Does it have anonymous access permissions enabled?
>
> Yes. IUSR_MACHINENAME is the user enabled.

Good. And I assume "MACHINENAME" is the actual name of the machine that WSUS
is installed on?

> I gave this users read, execute permissions on the selfupdate directory

Why?

The only permissions that need to exist on \Program Files\Update
Services\Selfupdate are Read & Execute for domain users, and Full Control
for domain administrators and SYSTEM.

The IUSR_MACHINENAME account should never be granted explicit permissions to
your filesystem.

>> The Automatic Updates service should be started, set to Automatic start,
>> and configured to use the Local System account.
>
> Automatic Updates is configured via GPO to automatically download and
> install updates at the time indicated on the event log error

Great...

Now, on the client that is not working... go to Start | Run, enter
services.msc; click OK; thsi will open the Services MMC.

Find "Automatic Updates" in the list, it should be the sixth item listed on
a Windows XP system.
Double-click on that line to open a dialog box with detailed information.
- Check that the block that says "Startup Type" is set to Automatic.
- Under that line, check that the line that says "Service Status" says
Started.
- Click on the tab that reads "Log On" The radio button that says "Local
System account" should be checked.

Post back your observations, please.

I think this may be a IIS problem.

When trying to access the http://<YourWSUSServer>/selfupdate/iuident.cab

I got a bunch of TCP SYNs but no response from the IIS server.

Switching to HTTPS got me access to the cab file. This after I disabled
..NET Passport auth, which somehow got enable. windows auth is the only box
check now

Using HTTPS is preferred. I am goinf to change the GPO to
https://MACHINENAME and see if I can auto update.

I will let you know of the results tomorrow.

Edward W. Ray