WSUS Still No Status **Fixed**

Windowsupdate.log file I had several of the following errors:

WARNING: SyncUpdates failure, error = 0x8024400D, soap client error = 7, soap error code = 300, HTTP status code = 200

WARNING: SOAP Fault: 0x00012c
WARNING: faultstring:Fault occurred
WARNING: ErrorCode:ConfigChanged(2)
WARNING: Message:(null)


With some research I stumbled across this having to do with SCCM being setup with SUP. Now if you've gone through my older posts you'd see that I had that role at one point and removed it. Well it apparently set the WSUS reporting to none so here is a link to the tool that will fix it.

WSUS Reporting Level

Basically run it at command prompt and select 1 for All. After I did this

SCCM 2007 Deploying Packages

Hmm now this is really starting to bug me. I've basically setup packages and advertisements just about every which way I can think of plus various ways from various sites. The packages never report to SCCM that it was a success. When logging into clients I'd get the New Programs Installed and the software does indeed work. On the clients in windows\system32\ccm\logs opening execmgr.log I see several messages. What I do notice is that my clients report with a status code of 0 and it states success.

So if your also having this issue make sure to check your logs on the client cause it actually may be installed. The programs I'm talking about mostly are Adobe flash, reader, shockwave, java. They all install successful but sccm reports program errors or failures.

Anyone that got successful returns in SCCM feel free to comment.

WSUS Can't connect to Server:Port

Well This post should be before the one below this but the way WSUS was setup here before me was to use port 80. After the crash and the reinstall I had to run the following Script from cmd or run.: cscript c:\Program Files\Update Services\InstallSelfUpdateOnPort80.vbs

After that I was able to connect to http://My-WSUS-Server/iuident.cab and download the file.

WSUS Clients status not yet reported

Well about two days ago our WSUS server had crashed and I pretty much had to reload it. Now the problem I'm having is that all of the clients show as not yet reported. I've checked a couple things and first problem I found was the Virtual Directory named Selfupdate was not in IIS. I had to create that myself and set the rights and paths as follows:

Directory: %ProgramFiles%Update Services\SelfUpdate

Security: Anonymous Access Enabled

Now that is all that I found and it seems there is more to it. You also have to set

Security: Like above but also set Integrated Windows Authentication.

Execute Permissions: Scripts Only

From a client Computer I ran the folowing command:

wuauclt /resetauthorization /detectnow

Before I did the above the log file c:\windows\windowsupdate.log had the following errors/warnings

Cached cookie has expired or a new PID is available

Once I set all the above my client had connected and downloaded new updates. A good link to follow is

IIS Settings For WSUS

SUP Role In SCCM 2007 Sync Error

Ok now maybe I over looked some steps but I have gone back and forth with tons of trys/fixes and I think I finally found the answer. My site is setup like this: Already in place WSUS and a new SCCM2007 server. Here is what I have found and it seems like that is how I was trying to set it up

Server 1 (SCCM) is the server server with WSUS admin console

Server 2 (WSUS) is the WSUS server

On WSUS, add SCCM as a local admin (don't need to do anything else)

On SCCM, ADD a NEW server:

* Name is WSUS

* Specify the WSUS server FQDN

* The only role is SUP

* Make it an active SUP

* Sync with Microsoft Update

* Set the rest of the parameters as desired


So It seems I was trying to add the role to my site server instead of the WSUS server. I never thought to add another server under the site systems. ::Slaps face::
Anyway I'm checking my log file now and its at 96% synching!! woo hoo!

SCCM 2007 Tool Kit

I've found the link for the 2007 toolkit. You can download it from the following link:

SCCM 2007 Toolkit Download

Configuration Management Console Lacks All the Views

Well I was trying to configure a MMC with just certain objects such as just the computer management section. It runs a little wizard and you pick custom and you can select which options you want to show. That part worked but I tried to set it back and no matter what I picked it kept the same options with just the computer settings part.

I basically copied the adminconsole.msc from the install source in SMSSETUP\AdminUI\bin to Drive:\Program Files\Microsoft Configuration Manager\AdminUI\bin

Then I ran my Console and all the settings were back in place. Not sure why re-running the wizard and selecting all the tree didn't fix it.

Another fix is to make a new MMC and add the System Center Configuration Manager Snap-in.

Installing SCCM 2007

OK i've found a pretty good forum with help on installing and confiuguration of SCCM 2007 on Server 2008 / 2003. Also Has alot of Info on errors, other installs, and just about anything else you could think of to help. So check it out, wont be needing my help since this site has it all :( hehe

SMS, SMS 2007

Installing IIS on server 2003 for SMS

Well found a good link for the correct way to install IIS for SMS on windows server 2003. Follow the link.

Installing IIS

DMP not responding to http error 12152

the following error appeared after a reinstall pf my MP.

MP Control Manager detected DMP is not reponding to HTTP requests. The http error is 12152.

Well This error has to do with Devices. Seems I'm not using this to monitor mobile devices so I haven't found a fix yet and just unistalled the role. I did try and clear it up but no luck as of yet.

I did eventually run across this site with steps to install DMP but I haven't tried. here's the link for that incase you want to give it a whirl.

DMP Step By Step Guide

mp.msi exited with return code: 1603

While installing the MP role on SCCM 2007 my MPsetup.log file showed me the mp.msi exited with return code: 1603 error message. The following fixed that error and my MP installed successfully the next try.

BITS is not installed with IIS. Goto

add/remove programs > add/remove windows components > application Server (click details) > Internet Information Services (Click Details) > *CHECK* Background Intelligent Transfer Service[BITS] Server Extentions

Make sure it checks both options under the details of BITS. Click oks and after the install try installing the MP role again and it should be successful.

SCCM SMP 500 error

Just stumbled across the top solution. I'm going to try it now and see if my error goes away. Seems over night the error has happen 4 times. I'll post updates if it fixes my error

@@@@@@@@@@@@@@
@@@ SOLUTION 1 @@@@
@@@@@@@@@@@@@@

Issue: MP Control fails with HTTP test request failed, status code is 500, 'Internal Server Error' on a Management Point running a 64-bit OS hosting 32-bit (x86) based IIS. The MPControl log contains the following:

Call to HttpSendRequestSync failed for port 80 with status code 500, text: Internal Server Error SMS_MP_CONTROL_MANAGER 1/23/2008 5:53:30 PM 4792 (0x12B8)
Http test request failed, status code is 500, 'Internal Server Error'. SMS_MP_CONTROL_MANAGER 4792 (0x12B8)

The IIS Logs may also show the following:

W3SVC1 192.168.0.35 CCM_POST /ccm_system/request - 80 - 192.168.0.105 ccmhttp 500 0 193
W3SVC1 192.168.0.35 CCM_POST /ccm_system/request - 80 - 192.168.1.109 ccmhttp 500 0 193
W3SVC1 192.168.0.35 GET /SMS_MP/.sms_aut MPLIST 80 - 192.168.0.35 SMS_MP_CONTROL_MANAGER 500 0 193
W3SVC1 192.168.0.35 CCM_POST /ccm_system/request - 80 - 192.168.0.61 ccmhttp 500 0 193

Browsing to http://SiteServer/SMS_MP/.sms_aut?MPlist returns a 500 as well.

Cause: This problem occurs because the ASP.NET registry keys are missing. The ASP.NET registry keys are missing when you install ASP.NET after the Enable32bitAppOnWin64 Microsoft Internet Information Services (IIS) metabase setting is set to a value of 1. Because IIS is configured to run in 32-bit mode, the ASP.NET installation does not create the ASP.NET registry keys in the 64-bit registry. The ASP.NET installation creates the ASP.NET registry keys only in the 32-bit registry.

Resolution: To resolve this problem, follow these steps for 32-bit or 64-bit mode:

To enable 64-bit mode:

1. Click Start, click Run, type cmd, and then click OK.

2. To enable the 64-bit mode, type the following command, and then press ENTER:

cscript %SYSTEMDRIVE%\inetpub\adminscripts\adsutil.vbs SET W3SVC/AppPools/Enable32bitAppOnWin64 0

3. Type the following command, and then press ENTER:

cd C:\WINDOWS\Microsoft.NET\Framework64\v2.0.50727

4. To install the 64-bit version of ASP.NET, type the following command, and then press ENTER:

aspnet_regiis -i

5. Type the following command, and then press ENTER:

iisreset

----

To enable the 32-bit mode:

1. Type the following command, and then press ENTER:

cscript %SYSTEMDRIVE%\inetpub\adminscripts\adsutil.vbs SET W3SVC/AppPools/Enable32bitAppOnWin64 1

2. Type the following command, and then press ENTER:

cd C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727

3. To install the 32-bit version of ASP.NET, type the following command, and then press ENTER:

aspnet_regiis -i

4. Type the following command, and then press ENTER:

iisreset


@@@@@@@@@@@@@@
@@@ SOLUTION 2 @@@@
@@@@@@@@@@@@@@

In management Console I just started getting the following error:

SMP Control Manager detected SMP is not responding to HTTP requests. The http status code and text is 500, Internal Server Error

So far the fix that works 99% of the time is as follows

1. Remove the MP role and reporting role by highlighting the roles on the server and deleting them. Check MPSetup.log to make sure it is fully uninstalled.

2. Remove IIS

3. Reboot

4. Delete the Inetpub folder (C:\inetpub) I renamed to inetpub_OLD for safety

5. Reinstall IIS - I used server management and added the application server role back. Make sure to enable WEBDAV in the IIS console under web service extentions. **ALSO** add remove windows component and make sure BITS gets installed. otherwise error 1603 will show in the MPsetup.log

6. Add back the reporting point.

7. Add back the MP role and check the box to allow clients to use the MP. Check The MPSetup.log to make sure it install is successful.

8. Watch the MPcontrol.log file. May take up to 20 minutes for the normal HTTP 200 messages to appear, but it should work and communications should resume with your clients.

So thats it. Main things to check are the logs to make sure the install and unisntalls are successful other wise other errors may occur. I usually do a search for the log files. Also make sure BITS and WEBDAV are setup correct. WEBDAV just needs to be allowed. BITS needs to be seleted

MMC cannot open the file drive:\SMS\bin\i386\sms.msc

Have you ever tried to run your SMS console and the following error appears?

MMC cannot open the file (drive):\SMS\bin\i386\sms.msc
This may be because the file does not exist, is not an MMC console, or was created by a later version of MMC. This may also be because you do not have sufficient rights to the file.

Happened to me twice so far and the fix is pretty simple. You must browse to C:\Documents and Settings\(username)\Application Data\Microsoft\MMC\SMS and rename the sms file in that folder. I usually do a _old to keep just incase. After the rename just run the console again and it will recreate the file..

Thats it. From a little research it seems to happen when remoted to the SMS server and having the server lock / lose connecting while the console is still running.

Sccm 2007

For those that don't now what sccm means it is System Center Configuration Manager. Its pretty much the upgrade from SMS 2003. Its just about the same pain in the neck to install and configure.. I found a few sites that had semi-walkthroughs on installing and configuration. I followed step by step and basically still was faced with many errors. SQL actually was piece of cake as I haven't had to touch it since I clicked finish...

So after about 2 and a half days I think I've finally got it fully installed and working. After the second day of researching errors and trying various fixes about 1/4 of my clients were accepted and installed. I've been trying to clear the error messages and worry about the warnings at another time. So far I've had to reinstall IIS about 2 - 3 times and make sure WEBDAV was allowed. I've also had to remove roles and reinstall them from the System Management Console. I think I redid the MP about 2 - 3 times as well. I was getting 500 and 501 errors about every hour and for the last 3 hours it hasn't come back yet ::crosses fingers::

Basically for anyone trying to get it installed and are seeing MP or SMP errors, those are your roles so you may just need to uninstall the role, check the log files to make sure it finishes successfully, then reinstall the role. Also I had my boundries setup for AD but it seemed to work better with IP subnet. Well I'll find out tomorrow if I'm all set to go on and try other tasks such as software updates and pushes. Remote management seems to be working. I'll try and get some reference links to the sites that did help me..

Good Luck!!