SCCM Software Updates not installing to endpoints

%3CLINGO-SUB%20id%3D%22lingo-sub-1656136%22%20slang%3D%22en-US%22%3ESCCM%20Software%20Updates%20not%20installing%20to%20endpoints%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1656136%22%20slang%3D%22en-US%22%3E%3CP%3EHi!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20a%20new%20built%20SCCM(MP%2CDP%2CSUP)(forestA)%2C%20I%20have%20a%20remote%20DP%20on%20the%20other%20forest(forestB).%20I%20am%20currently%20testing%20software%20update%20deployment%20on%20my%20setup%20and%20upon%20checking%20to%20my%20testing%20client%20computer%2C%20the%20computer%20won't%20update.%20I%20have%20created%20sample%20windows%2010%20update%20and%20deploy%20that%20to%20my%20testing%20collection.%20WUAhandler.log%20has%20no%20error%20but%20in%20the%20Updatedeployment.log%20error%20is%20%3CSTRONG%3EGetUpdateInfo%3A%20Failed%20to%20get%20targeted%20update%20error%20%3D%200x87d00215.%26nbsp%3B%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ei%20have%20seen%20this%20link%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fsocial.technet.microsoft.com%2FForums%2Fen-US%2Ff660d3c6-72a6-4ad6-80e3-2b6a5583341a%2Fclients-not-receiving-windows-update%3Fforum%3DConfigMgrCompliance%23%3A~%3Atext%3DAccording%2520to%2520the%2520error%2520code%2Cstatus%2520in%2520the%2520SCCM%2520console%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsocial.technet.microsoft.com%2FForums%2Fen-US%2Ff660d3c6-72a6-4ad6-80e3-2b6a5583341a%2Fclients-not-receiving-windows-update%3Fforum%3DConfigMgrCompliance%23%3A~%3Atext%3DAccording%2520to%2520the%2520error%2520code%2Cstatus%2520in%2520the%2520SCCM%2520console%3C%2FA%3E.%3C%2FP%3E%3CP%3Efor%20the%20error%20code%20receive%20but%20i%20can%20succesfully%20distribute%20the%20content%20in%20the%20remote%20distribution%20point%20in%20the%20other%20forest.%3C%2FP%3E%3CP%3EWhat%20might%20cause%20the%20error%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1666090%22%20slang%3D%22en-US%22%3ERe%3A%20SCCM%20Software%20Updates%20not%20installing%20to%20endpoints%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1666090%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F280839%22%20target%3D%22_blank%22%3E%40christian31%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3E0x87d00215%2C%20it%20means%20%22Item%20not%20found%22.%20Do%20you%20have%20enough%20disk%20space%20on%20the%20remote%20DP%3F%20No%26nbsp%3BMaintenance%20Windows%20on%20the%20device%20collection%3F%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1666822%22%20slang%3D%22en-US%22%3ERe%3A%20SCCM%20Software%20Updates%20not%20installing%20to%20endpoints%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1666822%22%20slang%3D%22en-US%22%3EYes%20i%20have%20enough%20disk%20space%20and%20no%20maintenance%20windows%20on%20the%20device%20collection.%20I%20reinstall%20the%20SCCM%20agent%20and%20this%20issue%20still%20occurs.%20On%20the%20status%20in%20monitoring%20window%20of%20the%20SCCM%20console%2C%20the%20Distribution%20point%20says%20that%20i%20have%20successfully%20distributed%20content%20on%20the%20remote%20DP%20but%20there%20is%20an%20error%20saying%20Failed%20to%20create%20virtual%20directory%3F%20i%20have%20seen%20a%20fix%20to%20this%20by%20restarting%20the%20DP%20and%20distribute%20again%20the%20content%20but%20still%20it%20persist.%20Is%20it%20a%20factor%20also%20for%20the%20updates%20not%20deploying%20to%20client%20computer%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1667118%22%20slang%3D%22en-US%22%3ERe%3A%20SCCM%20Software%20Updates%20not%20installing%20to%20endpoints%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1667118%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F280839%22%20target%3D%22_blank%22%3E%40christian31%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPossible%20cause%20can%20be%20the%20distribution%20Manager%20requires%20that%20IIS%20base%20components%20be%20installed%20on%20the%20local%20Configuration%20Manager%20Site%20Server%20in%20order%20to%20create%20the%20virtual%20directory.%26nbsp%3BVerify%20that%20IIS%20base%20components%20are%20installed%20on%20the%20local%20Configuration%20Manager%20Site%20Server%2C%20and%20IIS%20Web%20Services%20are%20installed%20on%20the%20Distribution%20Point%20Server.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1667120%22%20slang%3D%22en-US%22%3ERe%3A%20SCCM%20Software%20Updates%20not%20installing%20to%20endpoints%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1667120%22%20slang%3D%22en-US%22%3EHi!%3CBR%20%2F%3E%3CBR%20%2F%3EAll%20sccm%20components%20is%20working%20fine..%20I%20have%20seen%20that%20WSUSpool%20on%20IIS%20is%20stopped.%20i%20have%20Started%20it%20and%20seen%20a%20fix%20regarding%20increasing%20Private%20memory%20limit%20to%204GB%20or%20more%20but%20still%20it%20stopping%20when%20client%20computer%20is%20scanning%20for%20update(I%20think).%3C%2FLINGO-BODY%3E
Highlighted
Contributor

Hi!

 

I have a new built SCCM(MP,DP,SUP)(forestA), I have a remote DP on the other forest(forestB). I am currently testing software update deployment on my setup and upon checking to my testing client computer, the computer won't update. I have created sample windows 10 update and deploy that to my testing collection. WUAhandler.log has no error but in the Updatedeployment.log error is GetUpdateInfo: Failed to get targeted update error = 0x87d00215. 

 

i have seen this link https://social.technet.microsoft.com/Forums/en-US/f660d3c6-72a6-4ad6-80e3-2b6a5583341a/clients-not-r....

for the error code receive but i can succesfully distribute the content in the remote distribution point in the other forest.

What might cause the error?

14 Replies
Highlighted

@christian31 

0x87d00215, it means "Item not found". Do you have enough disk space on the remote DP? No Maintenance Windows on the device collection? 

Highlighted
Yes i have enough disk space and no maintenance windows on the device collection. I reinstall the SCCM agent and this issue still occurs. On the status in monitoring window of the SCCM console, the Distribution point says that i have successfully distributed content on the remote DP but there is an error saying Failed to create virtual directory? i have seen a fix to this by restarting the DP and distribute again the content but still it persist. Is it a factor also for the updates not deploying to client computer?
Highlighted

@christian31 

Possible cause can be the distribution Manager requires that IIS base components be installed on the local Configuration Manager Site Server in order to create the virtual directory. Verify that IIS base components are installed on the local Configuration Manager Site Server, and IIS Web Services are installed on the Distribution Point Server.

Highlighted
Hi!

All sccm components is working fine.. I have seen that WSUSpool on IIS is stopped. i have Started it and seen a fix regarding increasing Private memory limit to 4GB or more but still it stopping when client computer is scanning for update(I think).
Highlighted

@christian31 

Can you run this on your DP:

Import-module ServerManager

dism.exe /online /norestart /enable-feature /ignorecheck /featurename:"IIS-WebServerRole" /featurename:"IIS-WebServer" /featurename:"IIS-CommonHttpFeatures" /featurename:"IIS-StaticContent" /featurename:"IIS-DefaultDocument" /featurename:"IIS-DirectoryBrowsing" /featurename:"IIS-HttpErrors" /featurename:"IIS-HttpRedirect" /featurename:"IIS-WebServerManagementTools" /featurename:"IIS-IIS6ManagementCompatibility" /featurename:"IIS-Metabase" /featurename:"IIS-WindowsAuthentication" /featurename:"IIS-WMICompatibility" /featurename:"IIS-ISAPIExtensions" /featurename:"IIS-ManagementScriptingTools" /featurename:"MSRDC-Infrastructure" /featurename:"IIS-ManagementService"

 

Can you verify that SCCM site server computer account are in the Local Administrators group on the server where DP role is to be installed? 

 

 

Highlighted
Hi Alex!

Thanks for assisting. All prerequisites requirements on the remote DP is already installed. also sccm site server computer account is on the remote DP also. I can successfully install SCCM agents and deploy application packages to the client computers. I have a strong feeling that WSUSpool stopping on the IIS server is one that causing my software updates to not be deployed
Highlighted

@christian31 

I'm glad you may have found the root cause! Let me know :) 

Highlighted
Hi Alexander,

Issue still persist. Although WSUSpool is running smoothly. Logs show that software package content was not downloading to the client computer.
Highlighted

@christian31 

Can you share the log? 

Highlighted

@alexandertuvstrom 

i attach the sample screenshot i see in updatedeployment.log file

 

 

Highlighted

@christian31 

Could you share the screenshot of the deployment status on your SUG and the WUAHandler.log file on the clients? 

Highlighted

@alexandertuvstrom 

 

Deployment status for the update Group/collection was in unknown. force to run a cycle from the client workstation and it will say compliant. check the update history and software center, there is no applied update. 

Highlighted

@christian31 

Can you check "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate WUServer" on the device? Correct server?

 

1. Go to C:\Windows\System32\GroupPolicy\Machine and delete Registry.pol.

2. Run Gpupdate /force

3. Start machine policy retrieval in configuration manager client control

Highlighted

@alexandertuvstrom 

 

WUserver is pointing in the sccm SUP and i have run the machine policy retrieval. and it is saying that the client computer is compliant. Checking the installed software update on the client computer it is not installed but it is still says compliant