Jump to content


firstcom

WSUS issues

Recommended Posts

Hi all,

 

I've come across some workstations in our environment that don't show as out of compliance in SCCM, but when you run a Compliance 5 - Specific computer report on it to view updates, they are blank.

 

If you go in to view installed updates on the PC, they aren't up to date or show as failed.

 

Has anyone seen this before and know what steps can be taken to troubleshoot?

 

Thank you!

Share this post


Link to post
Share on other sites


An update on this issue:

 

I re-installed our WSUS environment last night. It re-synced with SCCM. Everything seems to be up and running and 100%. Logs look good.

 

However, the problem persists.

 

* On one example PC, it shows no updates available when you check through WSUS. However, when you check online, there's 80 - some of which are security/critical updates, which is what we target.

* When you pull up this specific PC in SCCM reporting for updates, it shows up blank.

* WindowsUpdates.log suggests "Found 0 updates and 91 categories in search" and "0 updates detected"

 

Does anyone have any clue why this is happening? Windows should not be showing as compliant and the reports for this specific should not show as blank. Updates ARE available.

Share this post


Link to post
Share on other sites

You are not getting results in CM12 it means they are NO scanning for SU using CM12. Review the log files on the client side to figure out what is going one.

You should NOT be looking at WSUS as this can cause problems.

Share this post


Link to post
Share on other sites

WindowsUpdate.log does suggest that it's connecting through my configmanager server. I've been reviewing WindowsUpdate.log in C:\Windows, and UpdatesDeployment.log and UpdatesStore.log.

 

 

You are not getting results in CM12 it means they are NO scanning for SU using CM12. Review the log files on the client side to figure out what is going one.

You should NOT be looking at WSUS as this can cause problems.

Share this post


Link to post
Share on other sites

I can initiate a Software Update Scan, SoftwareDeployment scan, etc and watch the logs process the request...

 

WindowsUpdate.log does suggest that it's connecting through my configmanager server. I've been reviewing WindowsUpdate.log in C:\Windows, and UpdatesDeployment.log and UpdatesStore.log.

 

 

Share this post


Link to post
Share on other sites

In UpdatesDeployment.log, I can see updates getting added to the targeted list. In UpdatesStore.log, I can see it querying the status of updates.

 

In WindowsUpdate.log I can see lines that say "Added Update { ... } to search result..

 

I do see occasional warnings that say ISusInternal::GetUpdateMetadata3 failed, hr=8007000E

 

 

I can initiate a Software Update Scan, SoftwareDeployment scan, etc and watch the logs process the request...

 

Share this post


Link to post
Share on other sites

I am now in the process of deleting all ADR's, deployment packages, and software groups and forcing SCCM to re-sync across the board. We'll see if that works!

Share this post


Link to post
Share on other sites

Are these clients 32 bit clients by chance?

I had this same issue. Kind of an interesting issue if you research the reasons why...but nonetheless....the follow link has the hotfix that will fix it.

 

https://blogs.technet.microsoft.com/configurationmgr/2015/04/15/support-tip-configmgr-2012-update-scan-fails-and-causes-incorrect-compliance-status/

 

 

 

 

Share this post


Link to post
Share on other sites

After uninstalling WSUS, re-installing, and re-syncing, I've deleted all ADRs, deployment packages and software groups. Initialized a re-sync. The impacted PCs are still experiencing the same issue.

 

Garth, et al - any advice on where I can look next? This is, needless to say, frustrating to experience.

 

Thank you!

Share this post


Link to post
Share on other sites

So I found KB3112343 today, which actually describes my issue spot-on. Unfortunately, the patch and a reboot didn't resolve it. I'm really hoping someone on these forums have seen or experienced this!

Share this post


Link to post
Share on other sites

Update #2: I performed a manual "Update Scan" and then "Update Deployment Scan" on one of the impacted workstations after applying the patch, and it seems to be processing updates now! I'm waiting for everything to complete to check for sure..

 

Please be aware of this issue!!! It's very sneaky. SCCM will report that impacted PCs are in compliance when, in fact, the bug is the client being misled into thinking all updates are "not required"!

 

The patch for this bug was NOT considered a security update OR a critical update.

Share this post


Link to post
Share on other sites

This hot fix resolved the issue! What a pain! Glad it's resolved, though!

 

I'd suggest to any SCCM administrators to investigate the aforementioned KB and consider deploying it 100% to their environment. It's a tricky one that required a good eye to catch!

  • Like 1

Share this post


Link to post
Share on other sites

which patch did you apply? KB3112343? how did you apply this update? using wsus or you build a package?

Share this post


Link to post
Share on other sites

I'm actually starting to see this issue AGAIN on the recent Windows Update patches.... Even on PCs with KB3112343 installed. I don't see any other recent Windows Updates specific to Windows Update though.

Share this post


Link to post
Share on other sites

Does anyone has any clues how to fix this issue? I'm having the same problem....

 

When I request an "Software update scan cycle" on some clients I'm having this error message: OnSearchComplete - Failed to end search job. Error = 0x8007000e.

 

I've so far update the client, patch with the KB3112343; WSUS wizard clean up and rebuild the indexes on the SUSDB. Nothing works... This is very frustrating!!

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...

×
×
  • Create New...