Client Connection Problem to WSUS Errir 80072efd

Hi,

i have a 2000 Adv. Server as PDC with ADS and DNS.... and a 2003 Standard
Server with WSUS.

I set up group policies to update the clients. All policies where updates at
the clients. But still no client seen in WSUS Computer List.
No Firewall or Virusscann between. I also added Access "Domain-Users" to
WSUS Directory.

Here is my logfile. I don't know why, but out clients cannot connect to our
WSUS Server. We have 2000 and XP clients.

Does anyone know why?
Thx.
Tom

2006-04-25 08:19:03 1152 560 AU Triggering AU detection through DetectNow API
2006-04-25 08:19:03 1152 e0 AU #############
2006-04-25 08:19:03 1152 e0 AU ## START ## AU: Search for updates
2006-04-25 08:19:03 1152 e0 AU #########
2006-04-25 08:19:03 1152 e0 AU <<## SUBMITTED ## AU: Search for updates
[CallId = {BAA5ECCF-8245-4EF4-BDBF-7B88C779C276}]
2006-04-25 08:19:03 1152 104 Agent *************
2006-04-25 08:19:03 1152 104 Agent ** START ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2006-04-25 08:19:03 1152 104 Agent *********
2006-04-25 08:19:04 1152 104 Misc WARNING: Send failed with hr = 80072efd.
2006-04-25 08:19:04 1152 104 Misc WARNING: SendRequest failed with hr =
80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes
used : <>
2006-04-25 08:19:04 1152 104 Misc WARNING: WinHttp: SendRequestUsingProxy
failed for <http://192.168.0.10:8530/selfupdate/wuident.cab>. error 0x80072efd
2006-04-25 08:19:04 1152 104 Misc WARNING: WinHttp:
SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efd
2006-04-25 08:19:04 1152 104 Misc WARNING: WinHttp:
SendRequestToServerForFileInformation failed with 0x80072efd
2006-04-25 08:19:04 1152 104 Misc WARNING: WinHttp: ShouldFileBeDownloaded
failed with 0x80072efd
2006-04-25 08:19:05 1152 104 Misc WARNING: Send failed with hr = 80072efd.
2006-04-25 08:19:05 1152 104 Misc WARNING: SendRequest failed with hr =
80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes
used : <>
2006-04-25 08:19:05 1152 104 Misc WARNING: WinHttp: SendRequestUsingProxy
failed for <http://192.168.0.10:8530/selfupdate/wuident.cab>. error 0x80072efd
2006-04-25 08:19:05 1152 104 Misc WARNING: WinHttp:
SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efd
2006-04-25 08:19:05 1152 104 Misc WARNING: WinHttp:
SendRequestToServerForFileInformation failed with 0x80072efd
2006-04-25 08:19:05 1152 104 Misc WARNING: WinHttp: ShouldFileBeDownloaded
failed with 0x80072efd
2006-04-25 08:19:06 1152 104 Misc WARNING: Send failed with hr = 80072efd.
2006-04-25 08:19:06 1152 104 Misc WARNING: SendRequest failed with hr =
80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes
used : <>
2006-04-25 08:19:06 1152 104 Misc WARNING: WinHttp: SendRequestUsingProxy
failed for <http://192.168.0.10:8530/selfupdate/wuident.cab>. error 0x80072efd
2006-04-25 08:19:06 1152 104 Misc WARNING: WinHttp:
SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efd
2006-04-25 08:19:06 1152 104 Misc WARNING: WinHttp:
SendRequestToServerForFileInformation failed with 0x80072efd
2006-04-25 08:19:06 1152 104 Misc WARNING: WinHttp: ShouldFileBeDownloaded
failed with 0x80072efd
2006-04-25 08:19:07 1152 104 Misc WARNING: Send failed with hr = 80072efd.
2006-04-25 08:19:07 1152 104 Misc WARNING: SendRequest failed with hr =
80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes
used : <>
2006-04-25 08:19:07 1152 104 Misc WARNING: WinHttp: SendRequestUsingProxy
failed for <http://192.168.0.10:8530/selfupdate/wuident.cab>. error 0x80072efd
2006-04-25 08:19:07 1152 104 Misc WARNING: WinHttp:
SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efd
2006-04-25 08:19:07 1152 104 Misc WARNING: WinHttp:
SendRequestToServerForFileInformation failed with 0x80072efd
2006-04-25 08:19:07 1152 104 Misc WARNING: WinHttp: ShouldFileBeDownloaded
failed with 0x80072efd
2006-04-25 08:19:07 1152 104 Misc WARNING: DownloadFileInternal failed for
http://192.168.0.10:8530/selfupdate/wuident.cab: error 0x80072efd
2006-04-25 08:19:07 1152 104 Setup FATAL: IsUpdateRequired failed with error
0x80072efd
2006-04-25 08:19:07 1152 104 Report *********** Report: Initializing static
reporting data ***********
2006-04-25 08:19:07 1152 104 Report * OS Version = 5.1.2600.2.0.65792
2006-04-25 08:19:07 1152 104 Report * Computer Brand = Dell Inc.

2006-04-25 08:19:07 1152 104 Report * Computer Model = OptiPlex GX520

2006-04-25 08:19:08 1152 104 Report * Bios Revision = A05
2006-04-25 08:19:08 1152 104 Report * Bios Name = Phoenix ROM BIOS PLUS
Version 1.10 A05
2006-04-25 08:19:08 1152 104 Report * Bios Release Date =
2005-10-13T00:00:00
2006-04-25 08:19:08 1152 104 Report * Locale ID = 1031
2006-04-25 08:19:08 1152 104 Setup WARNING: SelfUpdate: Default Service:
IsUpdateRequired failed: 0x80072efd
2006-04-25 08:19:08 1152 104 Setup WARNING: SelfUpdate: Default Service:
IsUpdateRequired failed, error = 0x80072EFD
2006-04-25 08:19:08 1152 104 Agent * WARNING: Skipping scan, self-update
check returned 0x80072EFD
2006-04-25 08:19:08 1152 104 Agent * WARNING: Exit code = 0x80072EFD
2006-04-25 08:19:08 1152 104 Agent *********
2006-04-25 08:19:08 1152 104 Agent ** END ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2006-04-25 08:19:08 1152 104 Agent *************
2006-04-25 08:19:08 1152 104 Agent WARNING: WU client failed Searching for
update with error 0x80072efd
2006-04-25 08:19:08 1152 104 AU >>## RESUMED ## AU: Search for updates
[CallId = {BAA5ECCF-8245-4EF4-BDBF-7B88C779C276}]
2006-04-25 08:19:08 1152 104 AU # WARNING: Search callback failed, result
= 0x80072EFD
2006-04-25 08:19:08 1152 104 AU #########
2006-04-25 08:19:08 1152 104 AU ## END ## AU: Search for updates [CallId
= {BAA5ECCF-8245-4EF4-BDBF-7B88C779C276}]
2006-04-25 08:19:08 1152 104 AU #############
2006-04-25 08:19:08 1152 104 AU AU setting next detection timeout to
2006-04-25 07:09:22
2006-04-25 08:19:13 1152 104 Report REPORT EVENT:
{F13E108D-2E56-4394-B5E3-A30D6DF2EE43} 2006-04-25
08:19:07+0200 1 148 101 {D67661EB-2423-451D-BF5D-13199E37DF28} 0 80072efd SelfUpdate Failure Software
Synchronization Error: Agent failed detecting with reason: 0x80072efd

Hi,
Post the output of "proxycfg.exe" command.

Happy Patching,
Mohammed Athif Khaleel
http://msmvps.com/athif

proxycfg.exe from our WSUS server:
Aktuelle WinHTTP-Proxyeinstellungen unter:
HKEY_LOCAL_MACHINE\
SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\
WinHttpSettings :

Direktzugriff (kein Proxyserver).


proxycfg.exe from one workstation:
Aktuelle WinHTTP-Proxyeinstellungen unter:
HKEY_LOCAL_MACHINE\
SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\
WinHttpSettings :

Direktzugriff (kein Proxyserver).


Hope this helps...





"Mohammed Athif" wrote:

> Hi,
> Post the output of "proxycfg.exe" command.
>
> Happy Patching,
> Mohammed Athif Khaleel
> http://msmvps.com/athif
>
>

Hi,

Try proxycfg.exe -u on the workstaion (of the log you posted above).

Happy Patching,
Mohammed Athif Khaleel
http://msmvps.com/athif

Ok, I did it. After that I rebooted the machine.
What now?

Here the log from the workstation.


2006-04-26 15:25:49 1152 490 Misc WARNING: Send failed with hr = 80072efd.
2006-04-26 15:25:49 1152 490 Misc WARNING: SendRequest failed with hr =
80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes
used : <>
2006-04-26 15:25:49 1152 490 PT + Last proxy send request failed with hr =
0x80072EFD, HTTP status code = 0
2006-04-26 15:25:49 1152 490 PT + Caller provided credentials = No
2006-04-26 15:25:49 1152 490 PT + Impersonate flags = 0
2006-04-26 15:25:49 1152 490 PT + Possible authorization schemes used =
2006-04-26 15:25:49 1152 490 PT WARNING: GetConfig failure, error =
0x80072EFD, soap client error = 5, soap error code = 0, HTTP status code = 200
2006-04-26 15:25:49 1152 490 Report WARNING: Reporter failed to upload
events with hr = 80072efd.
2006-04-26 15:34:24 1152 53c AU AU found 0 updates for install at shutdown
2006-04-26 15:34:24 884 98 Misc =========== Logging initialized (build:
5.8.0.2469, tz: +0200) ===========
2006-04-26 15:34:24 884 98 Misc = Process: C:\WINDOWS\Explorer.EXE
2006-04-26 15:34:24 884 98 Misc = Module: C:\WINDOWS\system32\wuaueng.dll
2006-04-26 15:34:24 884 98 Shutdwn Install at shutdown: no updates to
install
2006-04-26 15:34:39 1152 178 AU AU Restart required....
2006-04-26 15:34:39 1152 fc AU ########### AU: Initializing Automatic
Updates ###########
2006-04-26 15:34:39 1152 fc AU # WSUS server: http://192.168.0.10:8530
2006-04-26 15:34:39 1152 fc AU # Detection frequency: 1
2006-04-26 15:34:39 1152 fc AU # Approval type: Scheduled (Policy)
2006-04-26 15:34:39 1152 fc AU # Scheduled install day/time: Every day at
12:00
2006-04-26 15:34:39 1152 fc AU # Auto-install minor updates: Yes (Policy)
2006-04-26 15:34:39 1152 fc AU # AU is paused, not initializing any
handlers
2006-04-26 15:34:45 1152 fc Service *********
2006-04-26 15:34:45 1152 fc Service ** END ** Service: Service exit
[Exit code = 0x240001]
2006-04-26 15:34:45 1152 fc Service *************
2006-04-26 15:35:38 1144 e0 Misc =========== Logging initialized (build:
5.8.0.2469, tz: +0200) ===========
2006-04-26 15:35:38 1144 e0 Misc = Process: C:\WINDOWS\System32\svchost.exe
2006-04-26 15:35:38 1144 e0 Misc = Module: C:\WINDOWS\system32\wuaueng.dll
2006-04-26 15:35:38 1144 e0 Service *************
2006-04-26 15:35:38 1144 e0 Service ** START ** Service: Service startup
2006-04-26 15:35:38 1144 e0 Service *********
2006-04-26 15:35:38 1144 e0 Agent * WU client version 5.8.0.2469
2006-04-26 15:35:38 1144 e0 Agent * SusClientId =
'5123d50a-0a72-47aa-a2a4-e2d3b36a89cf'
2006-04-26 15:35:38 1144 e0 Agent * Base directory:
C:\WINDOWS\SoftwareDistribution
2006-04-26 15:35:38 1144 e0 Agent * Access type: No proxy
2006-04-26 15:35:38 1144 e0 Agent * Network state: Connected
2006-04-26 15:36:24 1144 e0 Agent *********** Agent: Initializing Windows
Update Agent ***********
2006-04-26 15:36:24 1144 e0 Agent *********** Agent: Initializing global
settings cache ***********
2006-04-26 15:36:24 1144 e0 Agent * WSUS server: http://192.168.0.10:8530
2006-04-26 15:36:24 1144 e0 Agent * WSUS status server:
http://192.168.0.10:8530
2006-04-26 15:36:24 1144 e0 Agent * Target group: (Unassigned Computers)
2006-04-26 15:36:24 1144 e0 Agent * Windows Update access disabled: No
2006-04-26 15:36:24 1144 e0 DnldMgr Download manager restoring 0 downloads
2006-04-26 15:36:24 1144 e0 AU ########### AU: Initializing Automatic
Updates ###########
2006-04-26 15:36:24 1144 e0 AU # WSUS server: http://192.168.0.10:8530
2006-04-26 15:36:24 1144 e0 AU # Detection frequency: 1
2006-04-26 15:36:24 1144 e0 AU # Approval type: Scheduled (Policy)
2006-04-26 15:36:24 1144 e0 AU # Scheduled install day/time: Every day at
12:00
2006-04-26 15:36:24 1144 e0 AU # Auto-install minor updates: Yes (Policy)
2006-04-26 15:36:25 1144 5ec Misc WARNING: Send failed with hr = 80072efd.
2006-04-26 15:36:25 1144 5ec Misc WARNING: SendRequest failed with hr =
80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes
used : <>
2006-04-26 15:36:25 1144 5ec PT + Last proxy send request failed with hr =
0x80072EFD, HTTP status code = 0
2006-04-26 15:36:25 1144 5ec PT + Caller provided credentials = No
2006-04-26 15:36:25 1144 5ec PT + Impersonate flags = 0
2006-04-26 15:36:25 1144 5ec PT + Possible authorization schemes used =
2006-04-26 15:36:25 1144 5ec PT WARNING: GetConfig failure, error =
0x80072EFD, soap client error = 5, soap error code = 0, HTTP status code = 200
2006-04-26 15:36:25 1144 5ec Report WARNING: Reporter failed to upload
events with hr = 80072efd.
2006-04-26 15:36:26 1144 5ec Misc WARNING: Send failed with hr = 80072efd.
2006-04-26 15:36:26 1144 5ec Misc WARNING: SendRequest failed with hr =
80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes
used : <>
2006-04-26 15:36:26 1144 5ec PT + Last proxy send request failed with hr =
0x80072EFD, HTTP status code = 0
2006-04-26 15:36:26 1144 5ec PT + Caller provided credentials = No
2006-04-26 15:36:26 1144 5ec PT + Impersonate flags = 0
2006-04-26 15:36:26 1144 5ec PT + Possible authorization schemes used =
2006-04-26 15:36:26 1144 5ec PT WARNING: GetConfig failure, error =
0x80072EFD, soap client error = 5, soap error code = 0, HTTP status code = 200
2006-04-26 15:36:26 1144 5ec Report WARNING: Reporter failed to upload
events with hr = 80072efd.




"Mohammed Athif" wrote:

> Hi,
>
> Try proxycfg.exe -u on the workstaion (of the log you posted above).
>
> Happy Patching,
> Mohammed Athif Khaleel
> http://msmvps.com/athif
>
>

I started clientdiag on the workstation and get this result:

WSUS Client Diagnostics Tool

Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is not running. PASS
Wuaueng.dll version 5.8.0.2469. . . . . . . . . . . . . PASS
This version is WSUS 2.0

Checking AU Settings
AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
Option is from Policy settings

Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use

Checking Connection to WSUS/SUS Server
WUServer = http://192.168.0.10:8530
WUStatusServer = http://192.168.0.10:8530
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS

VerifyWUServerURL() failed with hr=0x80072efd

A connection with the server could not be established


What can I do? What IIS Settings should I check? There ist no local firewall
on my server and no firewall in my client. How can I check on which port my
WSUS runs?
How does a client authenticate to the server?

Thx for any idea....
Tom




"Mohammed Athif" wrote:

> Hi,
>
> Try proxycfg.exe -u on the workstaion (of the log you posted above).
>
> Happy Patching,
> Mohammed Athif Khaleel
> http://msmvps.com/athif
>
>

Every research ends with this article:
http://support.microsoft.com/default...d=kb;de;836941

But what I cannot understand is, we have our clients and the WSUS Server in
one network. Why does it make sense to check proxy settings? I don't want to
use the global Update Server from Microsoft. My clients should online use the
local server for updates...

Is it possible that we have a DNS Problem? Our PDC with DNS Server is a
different machine as the WSUS Server. But from the client i get replies for
ip or hostname of the wsus server.

- my hostfiles are empty
- internet exlorer no proxy defined
- no firewall
- no virusscan
- no internet accellerator
- no download manager

I have no ideas...

Tom




"Mohammed Athif" wrote:

> Hi,
>
> Try proxycfg.exe -u on the workstaion (of the log you posted above).
>
> Happy Patching,
> Mohammed Athif Khaleel
> http://msmvps.com/athif
>
>

"tomtetom" <tomtetom@discussions.microsoft.com> wrote in message
news:80A5950E-23A3-497E-A365-C4B39F87792D@microsoft.com...

> Checking Connection to WSUS/SUS Server
> WUServer = http://192.168.0.10:8530
> WUStatusServer = http://192.168.0.10:8530
> UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
>
> VerifyWUServerURL() failed with hr=0x80072efd
>
> A connection with the server could not be established

Tom, the '2efd' error is a CANNOT CONNECT error. The text given at the end
of the CDT output is the most accurate translation available.

In essence this is a infrastructure problem. The WUA records the '2efd'
error when it gets /NO/ response from a webserver at the designated URL.
This can actually happen for a number of reasons, but the bottom line is
that there is not a functioning webserver available at the specified URL.

(a) The web server may exist and be stopped; or the WWW service is not
running.

(b) The port number may be incorrect. (Are you positive the WSUS server is
installed on the alternate port?)

(c) The IP Address may be incorrect.

(d) A router, firewall, or proxy server may be blocking access. (Do you have
any of these devices between the client and WSUS server? If so, does the
device have the necessary access rule in place? NOTE: Normally, this type of
error will return a '403' from the proxy server, but that's not guaranteed,
as it's dependent on the proxy server configuration.)

(e) DNS would be an issue only if you were using a hostname-based URL.
You're not, so DNS is irrelevant, but a defective DNS resolver /can/ produce
a '2efd' error if using a hostname-based URL.

Best testing methodology is to determine if this error is replicatable on
/all/ clients, or only selected clients. If /all/ clients, look to the
server for the cause; if only selected clients, look to the common
infrastructure elements of those clients that do /not/ exist on the working
clients. (e.g. item (d) and (e) above)

--
Lawrence Garvin, M.S., MVP-Software Distribution
Everything you need for WSUS is at
http://technet2.microsoft.com/window...s/default.mspx
And, eveything else is at
http://wsusinfo.onsitechsolutions.com
....

What happens if you try http://192.168.0.10:8530/iuident.cab in IE. It should
pop up a download dialogue.


3:02 -0700, tomtetom <tomtetom@discussions.microsoft.com> wrote:

>Every research ends with this article:
>http://support.microsoft.com/default...d=kb;de;836941
>
>But what I cannot understand is, we have our clients and the WSUS Server in
>one network. Why does it make sense to check proxy settings? I don't want to
>use the global Update Server from Microsoft. My clients should online use the
>local server for updates...
>
>Is it possible that we have a DNS Problem? Our PDC with DNS Server is a
>different machine as the WSUS Server. But from the client i get replies for
>ip or hostname of the wsus server.
>
>- my hostfiles are empty
>- internet exlorer no proxy defined
>- no firewall
>- no virusscan
>- no internet accellerator
>- no download manager
>
>I have no ideas...
>
>Tom
>
>
>
>
>"Mohammed Athif" wrote:
>
>> Hi,
>>
>> Try proxycfg.exe -u on the workstaion (of the log you posted above).
>>
>> Happy Patching,
>> Mohammed Athif Khaleel
>> http://msmvps.com/athif
>>
>>
--
Dave Mills
There are 10 type of people, those that understand binary and those that don't.

Hi,

Make sure ANONYMOUS access is enabled for the following virtual
directories from IIS;
1. ClientWebService
2. Content
3. DssAuthWebService
4. ReportingWebService
5. ServerSyncWebService
6. SimpthAuthWebService
7. SelfUpdate

Happy Patching,
Mohammed Athif Khaleel
http://msmvps.com/athif

Hi Dave,

if I try to open this URL I got in IE an ERROR Page could not be shown... "Server or DNS not Found.".
I tried it from different clients. A ping to the WSUS server or its IP adress works well.

What could that be?

Your WSUS server is not responding ate the IP:port you have configured. Double
check that WSUS is installed on port 8530. Look at the server logs to see if
there are error that help. Run IISReset on the server and check the event logs
for errors.

When you installed WSUS did you get any errors and did you do any additional
configuration for security say.

Exactly that was the problem.

After I changed the rights like Mohammed Athif said I got Connection to the
WSUS server. I was wondering, because I never had to change these rights...

After all I reinstalled WSUS on a different server and it worked from start
well.

Now it works...

Thanks!

Glad it worked!

Happy Patching,
Mohammed Athif Khaleel
http://msmvps.com/athif