80244017 ошибка обновления windows через wsus - Доктор Windows

История такая. Около 3х лет стоял и нормально работал WSUS. Некоторое время назад перестал работать, ни консоль не запускалась, ни к базе не подключался, соответственно и клиенты не обновлялись, намертво вобщем, переустановка роли
WSUS не помогала. По этим и некоторым другим причинам было принято решение переустановить серверную ОС полностью, с новым именем (роли на нём некритичные), в политики изменения внесены с новым
именем wsus-сервера.

Сервер: Windows server 2012 R2. Роли: Hyper-V, WSUS.

Заново установили WSUS со встроенной БД, настроили, заново даже скачали контент(т.е. синхронизация проходит нормально), постепенно появились клиенты, предоставили отчёты о состоянии. Затем клиенты пытались установить обновления, неудачно, о чём
и приходили отчёты на WSUS. Со стороны клиента: клиент ищет обновления на wsusе, находит, но при попытке скачивания происходят отказы с ошибкой 80244017.
Причём не скачиваются обновления ни на рабочих станциях, ни на серверах, ни на самом сервере с WSUSом.

WSUS Client Diagnostics Tool выдаёт следующее:

Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is running. . . PASS

GetFileVersion(szEngineDir,&susVersion) failed with hr=0x80070002

Автоматическое устранение неполадок на клиенте положительных результатов не дало. Сканирование системы командой DISM.exe /Online /Cleanup-image /Restorehealth
выполнено успешно (компоненты восстановлены)

Wuauclt.exe /resetauthorization /detectnow пробовали.

Со стороны сервера в журналах такая ошибка:

Каталог содержимого WSUS недоступен.
System.Net.WebException: Удаленный сервер возвратил ошибку: (401) Несанкционированный.
в System.Net.HttpWebRequest.GetResponse()
в Microsoft.UpdateServices.Internal.HealthMonitoring.HmtWebServices.CheckContentDirWebAccess(EventLoggingType type, HealthEventLogger logger)

И такая:

Права доступа для каталога D:WSUS установлены неправильно.

Windowsupdatelog даже за сегодня длинный: https://yadi.sk/i/DYoe-BuNs82Cq

Подскажите, куда копать?

Изменено

30 мая 2016 г. 14:54
Изменен тип
Vasilev VasilMicrosoft contingent staff
2 июня 2016 г. 9:15
Изменен тип
Dmitriy4722
8 июня 2016 г. 10:20

Источник

Recently configured WSUS on Server 2012 RC for a lab environment in preparation for RTM and ran into a configuration problem. Clients were failing to download updates and reporting error 0x80244017. After ensuring my RC installation was updated with KB 2627818 and that the clients had KB 2720211, I double checked that clients could access the WSUS site: https://wsusserver:8531/ClientWebService/client.asmx (you’ll receive a YSOD .NET error if you load that in a web browser, it’s normal). The C:WindowsWindowsUpdate.log file contained the following error information:

WARNING: Download job failed because of proxy auth or server auth.
Error 0x80244017 occurred while downloading update; notifying dependent calls.

After some brief troubleshooting, I came across a post that suggested it was an authentication problem, but anonymous authentication had been configured in IIS appropriately. I compared NTFS permissions of the WSUS folder with a working installation in our production environment, and found that the local Users group did not have permissions. After granting the Users group Read permissions, clients were able to successfully download updates.

Источник

I have a problem with some machines presenting Windows Update error 0x80244017.

Situation:

Small school

Server 2016 STD as a guest under hyper-v. This server is the one and only, so it does everything FSMO, AD, WSUS, DHCP, DNS, etc. Hoping to acquire another server next year to provide backup AD, DHCP, etc. There’s a debian VM as well, running squid proxy
server to limit and log the students’ use of social media and other unwelcome websites. I used a registry patch to configure the proxy settings for IE and Edge, and a Group policy to set Chrome’s proxy settings (long story).

30 laptops W10Pro

I’m performing windows updates during school holidays. All but 3 laptops went OK. This was also the feature upgrade to 1903.

I inspect and approve the updates in WSUS.

I restart each laptop and sign in to the domain with my own account — I’m a member of domain administrators. 3 laptops just will not update, reporting windows update error 0x80244017. I’ve tried all the suggestions that came up with a search of that error:

Local Windows update troubleshooter (settings, update & security, troubleshoot, update troubleshooter)- couldn’t identify the problem

Download the Windows update troubleshooter (run as administrator) — couldn’t identify the problem. The only item identified was «BITS service was already started»

Manual reset of Windows update components — stop wuauserv, stop BITS, stop crypto, rename softwaredistribution data store and download, restart services — didn’t fix the problem

Run SFC /scannow — found but didn’t fix problems. Data in CBS.log is beyond my experience.

Run DISM /online /cleanup-image /restorehealth — crashed at 87.6%. Data in log is beyond my experience.

Manual download and install updated servicing stack KB4512577 — installed, but didn’t fix the problem

Finally used the media creation tool to download and burn W10 1903 ISO to DVD, run in-place upgrade. Great! 1903 is now installed, but it still reports windows update error 0x80244017.

Removed the machine from the domain, renamed it, added it to the domain again, still got the problem.

Enabled the domain «Administrator» account, logged off the machine, logged in to the domain as «Administrator», and bingo! no error, only one or two updates, but it worked. Logged off, and back on again using my account, the error came
back.

So, to my mind, I have an authentication problem somewhere. All the other laptops were updated using my credentials.

Where can I find out what’s gone wrong? I don’t want to continue having to use the domain Administrator account to get these updates done.

cheers

Bernie Dwyer Clarity Computing Services