WUAHandler.log error OnSearchComplete - Failed to end search job. Error = 0x80240439

Copper Contributor

80% of the systems failing while scanning 20% works 

 WUAHandler.log

Its a WSUS Update Source type ({7EE15F10-3F99-44F6-A92F-F5AAAE34C0E7}), adding it. WUAHandler 7/28/2020 2:00:00 PM 11976 (0x2EC8)
Enabling WUA Managed server policy to use server: http://myserver.domain.local:8530 WUAHandler 7/28/2020 2:00:00 PM 11976 (0x2EC8)
Waiting for 2 mins for Group Policy to notify of WUA policy change... WUAHandler 7/28/2020 2:00:01 PM 11976 (0x2EC8)
Waiting for 30 secs for policy to take effect on WU Agent. WUAHandler 7/28/2020 2:00:04 PM 11976 (0x2EC8)
Added Update Source ({7EE15F10-3F99-44F6-A92F-F5AAAE34C0E7}) of content type: 2 WUAHandler 7/28/2020 2:00:34 PM 11976 (0x2EC8)
Scan results will include all superseded updates. WUAHandler 7/28/2020 2:00:34 PM 11976 (0x2EC8)
Search Criteria is (DeploymentAction=* AND Type='Software') OR (DeploymentAction=* AND Type='Driver') WUAHandler 7/28/2020 2:00:34 PM 11976 (0x2EC8)
Async searching of updates using WUAgent started. WUAHandler 7/28/2020 2:00:40 PM 11976 (0x2EC8)
Async searching completed. WUAHandler 7/28/2020 2:00:41 PM 16952 (0x4238)
OnSearchComplete - Failed to end search job. Error = 0x80240439. WUAHandler 7/28/2020 2:00:41 PM 11976 (0x2EC8)
Scan failed with error = 0x80240439. WUAHandler 7/28/2020 2:00:41 PM 11976 (0x2EC8)

 

WindowsUpdate.log

2020-07-29 17:15:26:958 992 678 PT +++++++++++ PT: Synchronizing server updates +++++++++++
2020-07-29 17:15:26:958 992 678 PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = HTTP://myserver.domain.local:8530/ClientWebService/client.asmx
2020-07-29 17:15:26:958 992 678 IdleTmr WU operation (CAgentProtocolTalker::GetConfig_WithRecovery) started; operation # 6; does use network; is at background priority
2020-07-29 17:15:27:021 992 678 WS WARNING: Nws Failure: errorCode=0x803d0000
2020-07-29 17:15:27:021 992 678 WS WARNING: Original error code: 0x80072f78
2020-07-29 17:15:27:021 992 678 WS WARNING: There was an error communicating with the endpoint at 'HTTP://myserver.domain.local:8530/ClientWebService/client.asmx'.
2020-07-29 17:15:27:021 992 678 WS WARNING: There was an error receiving the HTTP reply.
2020-07-29 17:15:27:021 992 678 WS WARNING: The input data was not in the expected format or did not have the expected value.
2020-07-29 17:15:27:021 992 678 WS WARNING: The server returned an invalid or unrecognized response
2020-07-29 17:15:27:021 992 678 WS WARNING: MapToSusHResult mapped Nws error 0x803d0000 to 0x80240439
2020-07-29 17:15:27:021 992 678 WS WARNING: Web service call failed with hr = 80240439.
2020-07-29 17:15:27:021 992 678 WS WARNING: Current service auth scheme='None'.
2020-07-29 17:15:27:021 992 678 WS WARNING: Proxy List used: '(null)', Bypass List used: '(null)', Last Proxy used: '(null)', Last auth Schemes used: 'None'.
2020-07-29 17:15:27:021 992 678 WS FATAL: OnCallFailure failed with hr=0X80240439
2020-07-29 17:15:27:021 992 678 IdleTmr WU operation (CAgentProtocolTalker::GetConfig_WithRecovery, operation # 6) stopped; does use network; is at background priority
2020-07-29 17:15:27:021 992 678 EP Got WSUS Client/Server URL: "HTTP://myserver.domain.local:8530/ClientWebService/client.asmx"
2020-07-29 17:15:27:021 992 678 PT WARNING: PTError: 0x80240439
2020-07-29 17:15:27:021 992 678 PT WARNING: GetConfig_WithRecovery failed: 0x80240439
2020-07-29 17:15:27:021 992 678 PT WARNING: RefreshConfig failed: 0x80240439
2020-07-29 17:15:27:021 992 678 PT WARNING: RefreshPTState failed: 0x80240439
2020-07-29 17:15:27:021 992 678 PT + SyncUpdates round trips: 0
2020-07-29 17:15:27:021 992 678 PT WARNING: Sync of Updates: 0x80240439
2020-07-29 17:15:27:021 992 678 PT WARNING: SyncServerUpdatesInternal failed: 0x80240439
2020-07-29 17:15:27:021 992 678 Agent * WARNING: Failed to synchronize, error = 0x80240439
2020-07-29 17:15:27:021 992 678 Agent * WARNING: Exit code = 0x80240439
2020-07-29 17:15:27:021 992 678 Agent *********
2020-07-29 17:15:27:021 992 678 Agent ** END ** Agent: Finding updates [CallerId = CcmExec Id = 1]
2020-07-29 17:15:27:021 992 678 Agent *************
2020-07-29 17:15:27:021 992 678 Agent WARNING: WU client failed Searching for update with error 0x80240439
2020-07-29 17:15:27:021 992 678 IdleTmr WU operation (CSearchCall::Init ID 1, operation # 4) stopped; does use network; is not at background priority
2020-07-29 17:15:27:021 992 678 IdleTmr Decremented idle timer priority operation counter to 0
2020-07-29 17:15:27:036 3828 274 COMAPI >>-- RESUMED -- COMAPI: Search [ClientId = CcmExec]
2020-07-29 17:15:27:036 3828 274 COMAPI - Updates found = 0
2020-07-29 17:15:27:036 3828 274 COMAPI - WARNING: Exit code = 0x00000000, Result code = 0x80240439
2020-07-29 17:15:27:036 3828 274 COMAPI ---------
2020-07-29 17:15:27:036 3828 274 COMAPI -- END -- COMAPI: Search [ClientId = CcmExec]
2020-07-29 17:15:27:036 3828 274 COMAPI -------------
2020-07-29 17:15:27:036 3828 274 COMAPI WARNING: Operation failed due to earlier error, hr=80240439
2020-07-29 17:15:27:036 3828 274 COMAPI FATAL: Unable to complete asynchronous search. (hr=80240439)
2020-07-29 17:24:28:050 4468 1578 Misc =========== Logging initialized (build: 7.9.9600.18970, tz: +0400) ===========
2020-07-29 17:24:28:050 4468 1578 Misc = Process: C:\Windows\CCM\CcmExec.exe
2020-07-29 17:24:28:050 4468 1578 Misc = Module: C:\Windows\System32\wuapi.dll
2020-07-29 17:24:28:050 4468 1578 COMAPI -------------
2020-07-29 17:24:28:050 4468 1578 COMAPI -- START -- COMAPI: Init Search [ClientId = CcmExec]
2020-07-29 17:24:28:050 4468 1578 COMAPI ---------
2020-07-29 17:24:28:050 4468 1578 COMAPI -------------
2020-07-29 17:24:28:050 4468 1578 COMAPI -- START -- COMAPI: Search [ClientId = CcmExec]
2020-07-29 17:24:28:050 4468 1578 COMAPI ---------
2020-07-29 17:15:32:070 992 1250 Report REPORT EVENT: {575F43AD-B11F-4B2D-97DB-C33CE55EEDC9} 2020-07-29 17:15:27:021+0400 1 148 [AGENT_DETECTION_FAILED] 101 {00000000-0000-0000-0000-000000000000} 0 80240439 CcmExec Failure Software Synchronization Windows Update Client failed to detect with error 0x80240439.
2020-07-29 17:15:32:070 992 1250 Report WARNING: Failed to get ProtocolVersion: 8024043d
2020-07-29 17:15:32:195 992 1250 Report CWERReporter::HandleEvents - WER report upload completed with WER status 0x8 (hr=0)
2020-07-29 17:15:32:195 992 1250 Report WER Report sent: 7.9.9600.19670 0x80240439(0) 00000000-0000-0000-0000-000000000000 Scan 0 1 CcmExec {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} 0
2020-07-29 17:15:32:195 992 1250 Report CWERReporter finished handling 1 events. (00000000)
2020-07-29 17:24:28:050 992 1a58 IdleTmr WU operation (CSearchCall::Init ID 2) started; operation # 23; does use network; is not at background priority
2020-07-29 17:24:28:050 992 1a58 IdleTmr Incremented idle timer priority operation counter to 1
2020-07-29 17:24:28:050 992 1a58 Agent *** START *** Queueing Finding updates [CallerId = CcmExec Id = 2]
2020-07-29 17:24:28:050 4468 1578 COMAPI <<-- SUBMITTED -- COMAPI: Search [ClientId = CcmExec]
2020-07-29 17:24:28:050 992 13b4 Agent *** END *** Queueing Finding updates [CallerId = CcmExec Id = 2]
2020-07-29 17:24:28:050 992 13b4 Agent *************
2020-07-29 17:24:28:050 992 13b4 Agent ** START ** Agent: Finding updates [CallerId = CcmExec Id = 2]
2020-07-29 17:24:28:050 992 13b4 Agent *********
2020-07-29 17:24:28:050 992 13b4 Agent * Include potentially superseded updates
2020-07-29 17:24:28:050 992 13b4 Agent * Online = Yes; Ignore download priority = Yes
2020-07-29 17:24:28:050 992 13b4 Agent * Criteria = "(DeploymentAction=* AND Type='Software') OR (DeploymentAction=* AND Type='Driver')"
2020-07-29 17:24:28:050 992 13b4 Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
2020-07-29 17:24:28:050 992 13b4 Agent * Search Scope = {Machine}
2020-07-29 17:24:28:050 992 13b4 Agent * Caller SID for Applicability: S-1-5-18
2020-07-29 17:24:28:050 992 13b4 Agent * RegisterService is set
2020-07-29 17:24:28:081 992 13b4 EP Got WSUS Client/Server URL: "HTTP://myserver.domain.local:8530/ClientWebService/client.asmx"
2020-07-29 17:24:28:315 992 13b4 PT +++++++++++ PT: Synchronizing server updates +++++++++++
2020-07-29 17:24:28:315 992 13b4 PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = HTTP://myserver.domain.local:8530/ClientWebService/client.asmx
2020-07-29 17:24:28:315 992 13b4 IdleTmr WU operation (CAgentProtocolTalker::GetConfig_WithRecovery) started; operation # 24; does use network; is at background priority
2020-07-29 17:24:28:331 992 13b4 WS WARNING: Nws Failure: errorCode=0x803d0000
2020-07-29 17:24:28:331 992 13b4 WS WARNING: Original error code: 0x80072f78
2020-07-29 17:24:28:331 992 13b4 WS WARNING: There was an error communicating with the endpoint at 'HTTP://myserver.domain.local:8530/ClientWebService/client.asmx'.
2020-07-29 17:24:28:331 992 13b4 WS WARNING: There was an error receiving the HTTP reply.
2020-07-29 17:24:28:331 992 13b4 WS WARNING: The input data was not in the expected format or did not have the expected value.
2020-07-29 17:24:28:331 992 13b4 WS WARNING: The server returned an invalid or unrecognized response
2020-07-29 17:24:28:331 992 13b4 WS WARNING: MapToSusHResult mapped Nws error 0x803d0000 to 0x80240439
2020-07-29 17:24:28:331 992 13b4 WS WARNING: Web service call failed with hr = 80240439.
2020-07-29 17:24:28:331 992 13b4 WS WARNING: Current service auth scheme='None'.
2020-07-29 17:24:28:331 992 13b4 WS WARNING: Proxy List used: '(null)', Bypass List used: '(null)', Last Proxy used: '(null)', Last auth Schemes used: 'None'.
2020-07-29 17:24:28:331 992 13b4 WS FATAL: OnCallFailure failed with hr=0X80240439
2020-07-29 17:24:28:331 992 13b4 IdleTmr WU operation (CAgentProtocolTalker::GetConfig_WithRecovery, operation # 24) stopped; does use network; is at background priority
2020-07-29 17:24:28:331 992 13b4 EP Got WSUS Client/Server URL: "HTTP://myserver.domain.local:8530/ClientWebService/client.asmx"
2020-07-29 17:24:28:331 992 13b4 PT WARNING: PTError: 0x80240439
2020-07-29 17:24:28:331 992 13b4 PT WARNING: GetConfig_WithRecovery failed: 0x80240439
2020-07-29 17:24:28:331 992 13b4 PT WARNING: RefreshConfig failed: 0x80240439
2020-07-29 17:24:28:331 992 13b4 PT WARNING: RefreshPTState failed: 0x80240439
2020-07-29 17:24:28:331 992 13b4 PT + SyncUpdates round trips: 0
2020-07-29 17:24:28:331 992 13b4 PT WARNING: Sync of Updates: 0x80240439
2020-07-29 17:24:28:331 992 13b4 PT WARNING: SyncServerUpdatesInternal failed: 0x80240439
2020-07-29 17:24:28:331 992 13b4 Agent * WARNING: Failed to synchronize, error = 0x80240439
2020-07-29 17:24:28:331 992 13b4 Agent * WARNING: Exit code = 0x80240439
2020-07-29 17:24:28:331 992 13b4 Agent *********
2020-07-29 17:24:28:331 992 13b4 Agent ** END ** Agent: Finding updates [CallerId = CcmExec Id = 2]
2020-07-29 17:24:28:331 992 13b4 Agent *************
2020-07-29 17:24:28:331 992 13b4 Agent WARNING: WU client failed Searching for update with error 0x80240439
2020-07-29 17:24:28:331 992 13b4 IdleTmr WU operation (CSearchCall::Init ID 2, operation # 23) stopped; does use network; is not at background priority
2020-07-29 17:24:28:331 992 13b4 IdleTmr Decremented idle timer priority operation counter to 0
2020-07-29 17:24:28:331 4468 1578 COMAPI >>-- RESUMED -- COMAPI: Search [ClientId = CcmExec]
2020-07-29 17:24:28:347 4468 1578 COMAPI - Updates found = 0
2020-07-29 17:24:28:347 4468 1578 COMAPI - WARNING: Exit code = 0x00000000, Result code = 0x80240439
2020-07-29 17:24:28:347 4468 1578 COMAPI ---------
2020-07-29 17:24:28:347 4468 1578 COMAPI -- END -- COMAPI: Search [ClientId = CcmExec]
2020-07-29 17:24:28:347 4468 1578 COMAPI -------------
2020-07-29 17:24:28:347 4468 1578 COMAPI WARNING: Operation failed due to earlier error, hr=80240439
2020-07-29 17:24:28:347 4468 1578 COMAPI FATAL: Unable to complete asynchronous search. (hr=80240439)
2020-07-29 17:24:33:331 992 1250 Report REPORT EVENT: {520D7BB5-B7B3-4C9E-96F2-877743C67D01} 2020-07-29 17:24:28:331+0400 1 148 [AGENT_DETECTION_FAILED] 101 {00000000-0000-0000-0000-000000000000} 0 80240439 CcmExec Failure Software Synchronization Windows Update Client failed to detect with error 0x80240439.
2020-07-29 17:24:33:331 992 1250 Report WARNING: Failed to get ProtocolVersion: 8024043d
2020-07-29 17:24:33:425 992 1250 Report CWERReporter::HandleEvents - WER report upload completed with WER status 0x8 (hr=0)
2020-07-29 17:24:33:425 992 1250 Report WER Report sent: 7.9.9600.19670 0x80240439(0) 00000000-0000-0000-0000-000000000000 Scan 0 1 CcmExec {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} 0
2020-07-29 17:24:33:425 992 1250 Report CWERReporter finished handling 1 events. (00000000)
2020-07-29 17:44:21:208 992 88c AU Earliest future timer found:
2020-07-29 17:44:21:208 992 88c AU Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2020-07-29 22:23:34, not idle-only, not network-only
2020-07-29 17:44:22:208 992 14bc AU ########### AU: Uninitializing Automatic Updates ###########
2020-07-29 17:44:22:239 992 14bc WuTask Uninit WU Task Manager
2020-07-29 17:44:22:302 992 14bc AU Earliest future timer found:
2020-07-29 17:44:22:302 992 14bc AU Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2020-07-29 22:23:34, not idle-only, not network-only
2020-07-29 17:44:22:333 992 14bc AU Earliest future timer found:
2020-07-29 17:44:22:333 992 14bc AU Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2020-07-29 22:23:34, not idle-only, not network-only
2020-07-29 17:44:22:395 992 14bc Service *********
2020-07-29 17:44:22:395 992 14bc Service ** END ** Service: Service exit [Exit code = 0x240001]
2020-07-29 17:44:22:395 992 14bc Service *************
2020-07-29 17:44:24:146 992 17a4 Misc =========== Logging initialized (build: 7.9.9600.19670, tz: +0400) ===========
2020-07-29 17:44:24:146 992 17a4 Misc = Process: C:\Windows\system32\svchost.exe
2020-07-29 17:44:24:146 992 17a4 Misc = Module: c:\windows\system32\wuaueng.dll
2020-07-29 17:44:24:146 992 17a4 Service *************
2020-07-29 17:44:24:146 992 17a4 Service ** START ** Service: Service startup
2020-07-29 17:44:24:146 992 17a4 Service *********
2020-07-29 17:44:24:146 992 17a4 IdleTmr Non-AoAc machine. Aoac operations will be ignored.
2020-07-29 17:44:24:146 992 17a4 Agent * WU client version 7.9.9600.19670
2020-07-29 17:44:24:146 992 17a4 Agent WARNING: SleepStudyTracker: Machine is non-AOAC. Sleep study tracker disabled.
2020-07-29 17:44:24:146 992 17a4 Agent * Base directory: C:\Windows\SoftwareDistribution
2020-07-29 17:44:24:146 992 17a4 Agent * Access type: No proxy
2020-07-29 17:44:24:146 992 17a4 Service UpdateNetworkState Ipv6, cNetworkInterfaces = 0.
2020-07-29 17:44:24:146 992 17a4 Service UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
2020-07-29 17:44:24:146 992 17a4 Agent * Network state: Connected
2020-07-29 17:44:24:162 992 17a4 Service UpdateNetworkState Ipv6, cNetworkInterfaces = 0.
2020-07-29 17:44:24:162 992 17a4 Service UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
2020-07-29 17:44:24:178 992 17a4 Agent *********** Agent: Initializing global settings cache ***********
2020-07-29 17:44:24:178 992 17a4 Agent * Endpoint Provider: 00000000-0000-0000-0000-000000000000
2020-07-29 17:44:24:178 992 17a4 Agent * WSUS server: HTTP://myserver.domain.local:8530
2020-07-29 17:44:24:178 992 17a4 Agent * WSUS status server: HTTP://myserver.domain.local:8530
2020-07-29 17:44:24:178 992 17a4 Agent * Target group: (Unassigned Computers)
2020-07-29 17:44:24:178 992 17a4 Agent * Windows Update access disabled: No
2020-07-29 17:44:24:178 992 17a4 Misc WARNING: Network Cost is assumed to be not supported as something failed with trying to get handles to wcmapi.dll
2020-07-29 17:44:24:193 992 17a4 WuTask WuTaskManager delay initialize completed successfully..
2020-07-29 17:44:24:193 992 17a4 AU Timer: CF1ABEC6-7887-4964-BB93-B2E21B31CEC1, Expires 2020-07-29 22:23:34, not idle-only, not network-only
2020-07-29 17:44:24:193 992 17a4 AU Timer: 29A863E7-8609-4D1E-B7CD-5668F857F1DB, Expires 2020-07-29 22:23:34, not idle-only, not network-only
2020-07-29 17:44:24:209 992 17a4 Report CWERReporter::Init succeeded
2020-07-29 17:44:24:209 992 17a4 Agent *********** Agent: Initializing Windows Update Agent ***********
2020-07-29 17:44:24:209 992 17a4 DnldMgr Download manager restoring 0 downloads
2020-07-29 17:44:24:209 992 17a4 AU ########### AU: Initializing Automatic Updates ###########
2020-07-29 17:44:24:209 992 17a4 AU AIR Mode is disabled
2020-07-29 17:44:24:209 992 17a4 AU # AU disabled through Policy
2020-07-29 17:44:24:209 992 17a4 AU # Will interact with non-admins (Non-admins are elevated (User preference))
2020-07-29 17:44:24:209 992 17a4 AU WARNING: Failed to get Wu Exemption info from NLM, assuming not exempt, error = 0x80240037
2020-07-29 17:44:24:209 992 17a4 AU AU finished delayed initialization
2020-07-29 17:44:24:224 992 1a7c DnldMgr Asking handlers to reconcile their sandboxes

@Michiel Overweel

4 Replies

@Abhijitsworld All error codes indicate communication issues between the Windows Update Agent on the affected systems and the WSUS Server/Software Update Point:

 

  • 0x80240439: WU_E_PT_INVALID_FORMAT - The data received does not meet the data contract expectations.
  • 0x80072f78: WININET_E_INVALID_SERVER_RESPONSE - The server returned an invalid or unrecognized response

The PT component reporting the first errors in WindowsUpdate.log is responsible for synchronizing update information from the WSUS Server/SUP to the local datastore, so that may be corrupted. Also check what the difference is between the systems that do scan successfully and the ones that don't: OS version, Windows Update Agent version? Make sure that WSUS/SUP is well maintained. See The complete guide to Microsoft WSUS and Configuration Manager SUP maintenance for more information on that.

Hi @Michiel Overweel 

https://support.microsoft.com/en-us/help/4490644/complete-guide-to-microsoft-wsus-and-configuration-... checked already - no luck.

8530 port not blocked & can access  'HTTP://myserver.mydomain.local:8530/SimpleAuthWebService/SimpleAuth.asmx" from the client. though Windowsupdate.log says WARNING: There was an error communicating with the endpoint at 'HTTP://myserver.mydomain.local:8530/SimpleAuthWebService/SimpleAuth.asmx"

 

cant see any difference between the systems that do scan successfully for OS version, windows update Agent version, IP Sub-net, SMS client version 

tried to recreate SoftwareDistribution on 1-2 failed client but same result.

is there any steps to recreate update information / data-store of WSUS server itself or check if its not corrupted?

 

Thanks & Regards,

 

It was some Intrusion Prevention System (IPS) setting & issue fixed after disabling new setting.

@Abhijitsworld - Can you pl shed more light on this? how did you fix it using IPS Settings? Thanks