WSUS and Software updates deployment

[Shieldwolf_0007]

Hello,

Do you guys have any idea why our SCCM could not sync with WSUS and Deploy Software Updates?

Here's the log I found from our SCCM and one of our PC. Your response will be greatly appreciated.

WCM LOG

System.Security.SecurityException: Request for principal permission failed.~~ at Microsoft.UpdateServices.Administration.AdminProxy.CreateUpdateServer(Object[] args)~~ at Microsoft.SystemsManagementServer.WSUS.WSUSServer.ConnectToWSUSServer(String ServerName, Boolean UseSSL, Int32 PortNumber)~~The Zone of the assembly that failed was:~~MyComputer SMS_WSUS_CONFIGURATION_MANAGER 24/05/2019 12:10:08 AM 7792 (0x1E70)

Remote configuration failed on WSUS Server. SMS_WSUS_CONFIGURATION_MANAGER 24/05/2019 12:10:08 AM 7792 (0x1E70)

WSYNCMGR LOG

Sync failed: WSUS server not configured. Please refer to WCM.log for configuration error details.. Source: CWSyncMgr::DoSync SMS_WSUS_SYNC_MANAGER 24/05/2019 11:50:05 AM 7832 (0x1E98)

STATMSG: ID=6703 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_WSUS_SYNC_MANAGER" SYS=SCCMSVR.Domain.com SITE=ATC PID=3668 TID=7832 GMTDATE=Fri May 24 03:50:05.331 2019 ISTR0="CWSyncMgr::DoSync" ISTR1="WSUS server not configured. Please refer to WCM.log for configuration error details." ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0 SMS_WSUS_SYNC_MANAGER 24/05/2019 11:50:05 AM 7832 (0x1E98)

UPDATESHANDLER LOG

CUpdatesAgent::FinalConstruct entered UpdatesHandler 24/05/2019 2:23:36 PM 10564 (0x2944)
Initiating updates scan for checking applicability. UpdatesHandler 24/05/2019 2:23:36 PM 9088 (0x2380)
Successfully initiated scan. UpdatesHandler 24/05/2019 2:23:37 PM 9088 (0x2380)
Updates scan completion received, result = 0x0. UpdatesHandler 24/05/2019 2:24:01 PM 10564 (0x2944)
Method (Discover) called from SDM. UpdatesHandler 24/05/2019 2:24:01 PM 10796 (0x2A2C)
Starting job with id = {DCB79C1C-A1C5-4593-A175-044A5F35C3C0} UpdatesHandler 24/05/2019 2:24:01 PM 10796 (0x2A2C)
Initiating Scan. Forced = (2) UpdatesHandler 24/05/2019 2:24:02 PM 10796 (0x2A2C)
Successfully initiated scan for job ({DCB79C1C-A1C5-4593-A175-044A5F35C3C0}). UpdatesHandler 24/05/2019 2:24:02 PM 10796 (0x2A2C)
Scan completion received for job ({DCB79C1C-A1C5-4593-A175-044A5F35C3C0}). UpdatesHandler 24/05/2019 2:24:11 PM 10564 (0x2944)
Evaluating status of the updates for the job ({DCB79C1C-A1C5-4593-A175-044A5F35C3C0}). UpdatesHandler 24/05/2019 2:24:11 PM 10564 (0x2944)
Successfully sent job ({DCB79C1C-A1C5-4593-A175-044A5F35C3C0}) success completion to the SdmAgent UpdatesHandler 24/05/2019 2:24:11 PM 9088 (0x2380)
CompleteJob received from SDM. UpdatesHandler 24/05/2019 2:24:11 PM 10564 (0x2944)
Complete - Job ({DCB79C1C-A1C5-4593-A175-044A5F35C3C0}) Cleanup. UpdatesHandler 24/05/2019 2:24:11 PM 10564 (0x2944)
CompleteJob - Job ({DCB79C1C-A1C5-4593-A175-044A5F35C3C0}) removed from job manager list. UpdatesHandler 24/05/2019 2:24:11 PM 10564 (0x2944)

SCANAGENT LOG

*****ScanByUpdates request received with ForceReScan=2, ScanOptions=0x00000002, WSUSLocationTimeout = 604800 ScanAgent 24/05/2019 2:24:02 PM 10796 (0x2A2C)
- - -Evaluating Update Status... ScanAgent 24/05/2019 2:24:02 PM 10796 (0x2A2C)
Found CategoryID of :e6cf1350-c01b-414d-a61f-263d14d133b4 for Update:c2ea7fb3-7352-4b8b-9e54-4e06802ac7cc ScanAgent 24/05/2019 2:24:02 PM 10796 (0x2A2C)
CScanAgent::ScanByUpdates - Found UpdateClassification e6cf1350-c01b-414d-a61f-263d14d133b4 for Update:c2ea7fb3-7352-4b8b-9e54-4e06802ac7cc ScanAgent 24/05/2019 2:24:02 PM 10796 (0x2A2C)
Found CategoryID of :e6cf1350-c01b-414d-a61f-263d14d133b4 for Update:a970acb7-1129-4e94-9d1a-2e6045b0afc4 ScanAgent 24/05/2019 2:24:02 PM 10796 (0x2A2C)
CScanAgent::ScanByUpdates - Found UpdateClassification e6cf1350-c01b-414d-a61f-263d14d133b4 for Update:a970acb7-1129-4e94-9d1a-2e6045b0afc4 ScanAgent 24/05/2019 2:24:02 PM 10796 (0x2A2C)
Sources are current and valid. TTLs are also valid. ScanAgent 24/05/2019 2:24:02 PM 10796 (0x2A2C)
Sources are Valid, so converting to Offline Scan. ScanAgent 24/05/2019 2:24:02 PM 10796 (0x2A2C)
ScanJob({8389E6DE-91A8-4D67-9045-083EC041548B}): CScanJob::Scan- Requesting Offline Scan with last known location. ScanAgent 24/05/2019 2:24:02 PM 10796 (0x2A2C)
Sources are current and valid. TTLs are also valid. ScanAgent 24/05/2019 2:24:02 PM 10564 (0x2944)
ScanJob({8389E6DE-91A8-4D67-9045-083EC041548B}): CScanJob::Execute- Requesting scan with CategoryIDs=E6CF1350-C01B-414D-A61F-263D14D133B4,E6CF1350-C01B-414D-A61F-263D14D133B4 ScanAgent 24/05/2019 2:24:02 PM 10564 (0x2944)
ScanJob({8389E6DE-91A8-4D67-9045-083EC041548B}): Scan Succeeded, setting flag that performed scan was catscan ScanAgent 24/05/2019 2:24:11 PM 9088 (0x2380)
ScanJob({8389E6DE-91A8-4D67-9045-083EC041548B}): CScanJob::OnScanComplete - Scan completed successfully, ScanType=2 ScanAgent 24/05/2019 2:24:11 PM 9088 (0x2380)
ScanJob({8389E6DE-91A8-4D67-9045-083EC041548B}): CScanJobManager::OnScanComplete -ScanJob is completed. ScanAgent 24/05/2019 2:24:11 PM 9088 (0x2380)
ScanJob({8389E6DE-91A8-4D67-9045-083EC041548B}): CScanJobManager::OnScanComplete - Reporting Scan request complete to clients... ScanAgent 24/05/2019 2:24:11 PM 9088 (0x2380)
- - -Evaluating Update Status... ScanAgent 24/05/2019 2:24:11 PM 10564 (0x2944)
- - Calling back to client on Scan request complete... ScanAgent 24/05/2019 2:24:11 PM 10564 (0x2944)

WUAHandler LOG

OnSearchComplete - Failed to end search job. Error = 0x80244010. WUAHandler 24/05/2019 8:11:00 AM 1364 (0x0554)
Scan failed with error = 0x80244010. WUAHandler 24/05/2019 8:11:00 AM 1364 (0x0554)
Its a WSUS Update Source type ({123D2DFE-5D16-49B4-A734-B7298CF3DC91}), adding it. WUAHandler 24/05/2019 8:41:00 AM 984 (0x03D8)
OS Version is 10.0.17134 WUAHandler 24/05/2019 8:41:00 AM 6588 (0x19BC)

[#2]

@Shieldwolf_0007 

From your wcm.log: "Remote configuration failed on WSUS Server."

You've either misconfigured your SUP, something like using the incorrect port(s), or connectivity between your site server and SUP is blocked or not allowed.

Can you connect from the site server to the WSUS instance on the site system hosting the SUP using the WSUS Admin console?

[#3]

@Deleted Thank you very much for replying. I'll try your suggestions.

Just to give additional information, last 3-4mons, I was able to download software updates from SCCM but couldn't deploy updates. Our client decided to disable SCCM Domain Admin account and replace it with Service Account. I'm not sure if this is related to the issue. For the ports, we are using 8530 and 8531. I've disabled the firewall also from WSUS and SCCM Server.

[#4 · Accepted solution]

The issue is now solved. It was related to a Service account. I've replaced only the accounts from SCCM and WSUS proxy settings.

[#5]

yes