question

LewisMichael-5409 avatar image
0 Votes"
LewisMichael-5409 asked RitaHu-MSFT commented

Clients not fully connecting to wsus server

I created a new wsus server on my network and now I can't get clients to connect correctly. All of my clients show their hostname in the wsus console, but no ip address, OS just shows Windows 0.0, and last status report is "Not yet reported". When I try to run windows update on a client, I get error 0x8024401c.

I've been through a couple of the guides from WAM ( https://www.ajtek.ca/wsus/client-machines-not-reporting-to-wsus-properly/ & https://www.ajtek.ca/wsus/reset-windows-update-gpo-settings/ ) but am still having trouble. In fact, the computers I tried these scripts on stopped reporting even their hostname to wsus.

One thing to note is that I was able to download the .cab file but can't browse to the Client.asmx page, even from localhost.

I've verified GPO settings. GPO was using a DNS pointer instead of actual server name, so I changed that to the actual fqdn, but it hasn't helped.


windows-server-update-services
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AJTek-Adam-J-Marshall avatar image
0 Votes"
AJTek-Adam-J-Marshall answered LewisMichael-5409 commented

The fact that you can't access the Client.asmx page is the issue. Did you enable SSL?

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SSL was enabled. I noticed that I didn't have a certificate applied, so I did that, but still not working. I can access the Client.asmx page now, though.

0 Votes 0 ·
RitaHu-MSFT avatar image
0 Votes"
RitaHu-MSFT answered RitaHu-MSFT commented

@LewisMichael-5409
Thanks for your posting on Q&A.

One thing to note is that I was able to download the .cab file but can't browse to the Client.asmx page, even from localhost.
You tried to browse to ClientWebService site on the local WSUS server but failed. Am I right? Have you found any error tips?
http://<wsusserver>:8530/ClientWebService/Client.asmx

Could you connect to the WSUS console correctly and sync the updates from MS?

Note that disable the ASP .NET Impersonation authentication in WSUS Administration site.
Reference picture:
126534-6.png

Please keep us in touch if there are any updates of the case.

Regards,
Rita


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


6.png (39.9 KiB)
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I can connect to wsus console both locally and remote. Your screenshot looks just like my actual config. Thanks for the tips, but still no luck.
Also, I noticed that I didn't have a certificate applied, so I did that, but still not working. I can access the Client.asmx page now, though.

0 Votes 0 ·

Thanks for your response.

Could we try to close wsus console and delete the wsus file in %appdata%\Microsoft\MMC first?
126909-1.png

Then we could follow this link to reindex the database.

Then we could connect to the wsus console again t confirm whether the issue will be resolved or not.

Please feedback to me if there are any updates.

Thanks for your time.

Regards,
Rita

0 Votes 0 ·
1.png (13.2 KiB)