Nachdem mir viele Jahre google bei meinen Problemen weiterhelfen konnte, bin ich jetzt am Ende mit meinem Latein.
Es geht um einen 2003er R2 Server, Patchlevel ist bei Mitte Dezember, ab da funktioniert der Update Agent nicht mehr. Im WSUS erscheint der Server, erstellt aber keinen Report.
Noch mal genau: der Dienst wird gestartet, läuft. Anschließend setze ich ein wuauclt /detectnow ab, die svchost.exe erzeugt dann ca 2 min. Last und der Dienst wird anschließend beendet. Wie im log ersichtlich:
2014-01-15 14:17:11:586 992 27a0 Misc =========== Logging initialized (build: 7.6.7600.256, tz: +0100) ===========
2014-01-15 14:17:11:586 992 27a0 Misc = Process: C:\WINDOWS\System32\svchost.exe
2014-01-15 14:17:11:586 992 27a0 Misc = Module: C:\WINDOWS\system32\wuaueng.dll
2014-01-15 14:17:11:586 992 27a0 Service *************
2014-01-15 14:17:11:586 992 27a0 Service ** START ** Service: Service startup
2014-01-15 14:17:11:586 992 27a0 Service *********
2014-01-15 14:17:11:602 992 27a0 Agent * WU client version 7.6.7600.256
2014-01-15 14:17:11:602 992 27a0 Agent * Base directory: C:\WINDOWS\SoftwareDistribution
2014-01-15 14:17:11:602 992 27a0 Agent * Access type: No proxy
2014-01-15 14:17:11:602 992 27a0 Agent * Network state: Connected
2014-01-15 14:17:18:601 992 2270 Agent *********** Agent: Initializing Windows Update Agent ***********
2014-01-15 14:17:18:601 992 2270 Agent *********** Agent: Initializing global settings cache ***********
2014-01-15 14:17:18:601 992 2270 Agent * WSUS server: http://srv-sec01
2014-01-15 14:17:18:601 992 2270 Agent * WSUS status server: http://srv-sec01
2014-01-15 14:17:18:601 992 2270 Agent * Target group: 2003
2014-01-15 14:17:18:601 992 2270 Agent * Windows Update access disabled: No
2014-01-15 14:17:18:601 992 2270 DnldMgr Download manager restoring 0 downloads
2014-01-15 14:17:18:601 992 2270 AU ########### AU: Initializing Automatic Updates ###########
2014-01-15 14:17:18:601 992 2270 AU AU setting next detection timeout to 2014-01-15 13:17:18
2014-01-15 14:17:18:601 992 2270 AU AU setting next sqm report timeout to 2014-01-15 13:17:18
2014-01-15 14:17:18:601 992 2270 AU # WSUS server: http://srv-sec01
2014-01-15 14:17:18:601 992 2270 AU # Detection frequency: 6
2014-01-15 14:17:18:601 992 2270 AU # Target group: 2003
2014-01-15 14:17:18:601 992 2270 AU # Approval type: Scheduled (Policy)
2014-01-15 14:17:18:601 992 2270 AU # Scheduled install day/time: Every day at 10:00
2014-01-15 14:17:18:601 992 2270 AU # Auto-install minor updates: Yes (Policy)
2014-01-15 14:17:18:601 992 2270 AU Setting AU scheduled install time to 2014-01-16 09:00:00
2014-01-15 14:17:18:601 992 2270 AU Initializing featured updates
2014-01-15 14:17:18:601 992 2270 AU Found 0 cached featured updates
2014-01-15 14:17:18:648 992 27a0 Report *********** Report: Initializing static reporting data ***********
2014-01-15 14:17:18:648 992 27a0 Report * OS Version = 5.2.3790.2.0.196624
2014-01-15 14:17:18:695 992 27a0 Report * Computer Brand = HP
2014-01-15 14:17:18:695 992 27a0 Report * Computer Model = ProLiant DL180 G6
2014-01-15 14:17:18:695 992 27a0 Report * Bios Revision = O20
2014-01-15 14:17:18:695 992 27a0 Report * Bios Name = Default System BIOS
2014-01-15 14:17:18:695 992 27a0 Report * Bios Release Date = 2010-08-17T00:00:00
2014-01-15 14:17:18:695 992 27a0 Report * Locale ID = 1031
2014-01-15 14:17:18:695 992 2270 AU AU finished delayed initialization
2014-01-15 14:17:18:695 992 27a0 AU #############
2014-01-15 14:17:18:695 992 27a0 AU ## START ## AU: Search for updates
2014-01-15 14:17:18:695 992 27a0 AU #########
2014-01-15 14:17:18:695 992 27a0 AU <<## SUBMITTED ## AU: Search for updates [CallId = {991D311B-69BD-4AD3-83C1-70CE08004F9B}]
2014-01-15 14:17:18:695 992 2270 AU Triggering AU detection through DetectNow API
2014-01-15 14:17:18:695 992 2270 AU Will do the detection after current detection completes
2014-01-15 14:17:18:789 992 2090 Report Uploading 1 events using cached cookie, reporting URL = http://srv-sec01/ReportingWebService/ReportingWebService.asmx
2014-01-15 14:17:20:820 992 20c4 AU Triggering AU detection through DetectNow API
2014-01-15 14:17:20:820 992 20c4 AU Will do the detection after current detection completes
2014-01-15 14:17:20:835 992 e04 AU Triggering AU detection through DetectNow API
2014-01-15 14:17:20:835 992 e04 AU Will do the detection after current detection completes
2014-01-15 14:17:32:631 992 2090 Report Reporter successfully uploaded 1 events.
2014-01-15 14:17:32:693 992 2090 Report Uploading 1 events using cached cookie, reporting URL = http://srv-sec01/ReportingWebService/ReportingWebService.asmx
2014-01-15 14:17:32:693 992 2090 Report Reporter successfully uploaded 1 events.
2014-01-15 14:17:32:693 992 2090 Report REPORT EVENT: {FC064479-3DCC-46D0-B7E4-E6C74BAF5EDA} 2014-01-15 14:17:18:601+0100 1 202 102 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Content Install Reboot completed.
2014-01-15 14:17:32:693 992 2090 Agent *************
2014-01-15 14:17:32:693 992 2090 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
2014-01-15 14:17:32:693 992 2090 Agent *********
2014-01-15 14:17:32:693 992 2090 Agent * Online = No; Ignore download priority = No
2014-01-15 14:17:32:693 992 2090 Agent * Criteria = "IsHidden=0 and IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and IsAssigned=1 or IsHidden=0 and IsInstalled=1 and DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and IsAssigned=1 and RebootRequired=1"
2014-01-15 14:17:32:693 992 2090 Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
2014-01-15 14:17:32:693 992 2090 Agent * Search Scope = {Machine}
2014-01-15 14:20:00:085 992 2090 Agent * WARNING: Failed to filter search results, error = 0x8024000B
2014-01-15 14:20:00:085 992 27a0 AU ########### AU: Uninitializing Automatic Updates ###########
2014-01-15 14:20:00:085 992 2090 Agent *********
2014-01-15 14:20:00:085 992 2090 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
2014-01-15 14:20:00:085 992 2090 Agent *************
2014-01-15 14:20:00:303 992 27a0 Service *********
2014-01-15 14:20:00:303 992 27a0 Service ** END ** Service: Service exit [Exit code = 0x240001]
2014-01-15 14:20:00:303 992 27a0 Service *************
Ich habe viele Howtos getestet, dabei habe ich den Agent neu installiert, aktuellste Version. Connect2WSUS habe ich alles getestet.
"Microsoft Fix it 50202" scheint ein Problem mit dem proxy zu haben, die Schritte habe ich manuell durchgeführt.
ClientDiag.exe bringt:
WSUS Client Diagnostics Tool
Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
OpenNamedService(pszService, SERVICE_QUERY_STATUS, &hService) failed with hr=0x80070005
Zugriff verweigert
Press Enter to Complete
Vielleicht hat ja jemand eine Idee