SUS - Software Update Services from Microsoft

[CrimeScene]

Hello to all,

BACKGROUND:
I have successfully installed my SUS server and it is fetching updates from the windows update server. I know this by looking at the SUS Admin console which has shown (1) new updates requiring approval and (2) success messages in the Synchronization Log. I have synchronization set to run daily at 4am.

I have also configured Group Policy to enforce Auto Updates on my clients that log into our domain server, understanding that SUS only applies to XP, 2k and 2k3 systems. I know that my GP policy is in effect as my client's System Properties / Auto Update features are grayed-out and preset to Auto Install at 5am.

ISSUE:
I have mixed results at my XP clients, or at least I think I do. I haven't been able to locate any definitive resources on the web that discuss - in detail - how one can be assured that clients are actually being updated. If anyone would be willing to share ideas on this, it would be appreciated.

Here's the contents from MY computer's %windir%\Windows Update.log From what I can tell, it looks like it ran successfully. My user account has administrator rights locally:

--------------------
2004-02-25 07:01:12 12:01:12 Success IUCTL Starting
2004-02-25 07:01:12 12:01:12 Success IUCTL Downloaded iuident.cab from

http://kingsus

to C:\Program Files\WindowsUpdate\V4
2004-02-25 07:01:12 12:01:12 Success IUENGINE Starting
2004-02-25 07:01:12 12:01:12 Success IUENGINE Determining machine configuration
2004-02-25 07:01:14 12:01:14 Success IUENGINE Querying software update catalog from

http://kingsus/autoupdate/getmanifest.asp

2004-02-25 07:01:14 12:01:14 Success IUENGINE Determining machine configuration
2004-02-25 07:01:14 12:01:14 Success IUENGINE Querying software update catalog from

http://kingsus/autoupdate/getmanifest.asp

2004-02-25 07:01:14 12:01:14 Success IUENGINE Determining machine configuration
2004-02-25 07:01:14 12:01:14 Success IUENGINE Querying software update catalog from

http://kingsus/autoupdate/getmanifest.asp

2004-02-25 07:01:15 12:01:15 Success IUENGINE Determining machine configuration
2004-02-25 07:01:15 12:01:15 Error IUENGINE Querying software update catalog from

http://kingsus/autoupdatedrivers/getmanifest.asp

(Error 0x80190194)
2004-02-25 07:01:15 12:01:15 Success IUENGINE Shutting down
2004-02-25 07:01:15 12:01:15 Success IUCTL Shutting down
--------------------

However, here's the log from an XP client that consistently shows errors. The client-user account has power-user rights locally, although it still produced the same errors when set to administrator rights locally:

--------------------
2004-02-25 14:01:23 19:01:23 Success IUCTL Starting
2004-02-25 14:01:23 19:01:23 Success IUCTL Downloaded iuident.cab from

http://kingsus

to C:\Program Files\WindowsUpdate\V4
2004-02-25 14:01:23 19:01:23 Success IUENGINE Starting
2004-02-25 14:01:23 19:01:23 Error IUENGINE Library download error. Will retry. (Error 0x80190193)
2004-02-25 14:01:23 19:01:23 Error IUENGINE Library download error. Will retry. (Error 0x80190193)
2004-02-25 14:01:23 19:01:23 Error IUENGINE Library download error. Will retry. (Error 0x80190193)
2004-02-25 14:01:23 19:01:23 Success IUENGINE Determining machine configuration
2004-02-25 14:01:23 19:01:23 Success IUENGINE Querying software update catalog from

http://kingsus/autoupdate/getmanifest.asp

2004-02-25 14:01:23 19:01:23 Success IUENGINE Determining machine configuration
2004-02-25 14:01:23 19:01:23 Success IUENGINE Querying software update catalog from

http://kingsus/autoupdate/getmanifest.asp

2004-02-25 14:01:23 19:01:23 Success IUENGINE Determining machine configuration
2004-02-25 14:01:24 19:01:24 Success IUENGINE Querying software update catalog from

http://kingsus/autoupdate/getmanifest.asp

2004-02-25 14:01:25 19:01:25 Success IUENGINE Determining machine configuration
2004-02-25 14:01:25 19:01:25 Error IUENGINE Querying software update catalog from

http://kingsus/autoupdatedrivers/getmanifest.asp

(Error 0x80190194)
2004-02-25 14:01:25 19:01:25 Success IUENGINE Shutting down
2004-02-25 14:01:25 19:01:25 Success IUCTL Shutting down
--------------------

I understand that the "

http://kingsus/autoupdatedrivers/getmanifest.asp"

will always produce an error since SUS cannot deliver drivers. That part isn't a concern for me.

The error "(Error 0x80190193)" states (at susserver.com) that the IIS webserver has no default page defined. This is untrue, as an index.html page does exist -and- is accessible from all of my clients upon browsing to

http://kingsus.

**UPDATE: My file was originally named "index.html", but when looking at IIS Manager, Web Sites, autoupdate properties, Documents tab, that name was not listed under Enable Default Content Page. I have since renamed my file to "index.htm" in lieu of adding my original filename to this list. However, this did not resolve the issue.

Per my IIS settings, do I need to install BITS Server Extensions? When I installed IIS for the purposes of utilizing SUS, I merely took the defaults by checking "Application Server" in the Windows Components Wizard window. This installed Application Server Console, COM+ access and IIS.

Here's the current IIS log data, as found on the server in folder "C:\WINDOWS\system32\LogFiles\W3SVC1". As you can see, these two clients are communicating with the server / IIS. Obviously, I've hidden any IP addresses from this post:

---------------------------
ENTRIES RELATED TO MY COMPUTER (whose "%windir%\Windows Update.log" appears to report success):
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2004-02-25 11:55:47
#Fields: date time s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs-host sc-status sc-substatus sc-win32-status
2004-02-25 11:55:47 KINGSUS [MyServerIP] HEAD /iuident.cab 0402251201 80 - [MyClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 11:55:47 KINGSUS [MyServerIP] GET /iuident.cab 0402251201 80 - [MyClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 11:55:47 KINGSUS [MyServerIP] HEAD /selfupdate/AU/x86/XP/en/wuaucomp.cab 0402251201 80 - [MyClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 11:55:47 KINGSUS [MyServerIP] GET /selfupdate/AU/x86/XP/en/wuaucomp.cab 0402251201 80 - [MyClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 11:55:47 KINGSUS [MyServerIP] HEAD /iuident.cab 0402251201 80 - [MyClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 11:55:47 KINGSUS [MyServerIP] GET /wutrack.bin V=2&U=c48c5d529c5c42479396b231b73d50c0&C=iu&A=n&I=&D=&P=5.1.a28.2.100.1.0&L=en-US&S=s&E=00000000&M=&X=040225120112656 80 - [MyClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 11:55:49 KINGSUS [MyServerIP] POST /autoupdate/getmanifest.asp - 80 - [MyClientIP] Mozilla/4.0+(compatible;+Win32;+WinHttp.WinHttpRequest.5) kingsus 200 0 0
2004-02-25 11:55:49 KINGSUS [MyServerIP] POST /autoupdate/getmanifest.asp - 80 - [MyClientIP] Mozilla/4.0+(compatible;+Win32;+WinHttp.WinHttpRequest.5) kingsus 200 0 0
2004-02-25 11:55:49 KINGSUS [MyServerIP] POST /autoupdate/getmanifest.asp - 80 - [MyClientIP] Mozilla/4.0+(compatible;+Win32;+WinHttp.WinHttpRequest.5) kingsus 200 0 0
2004-02-25 11:55:50 KINGSUS [MyServerIP] GET /wutrack.bin V=2&U=c48c5d529c5c42479396b231b73d50c0&C=au&A=d&I=&D=&P=5.1.a28.2.100.1.0&L=en-US&S=s&E=00000000&M=items%3D0&X=040225120115500 80 - [MyClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 11:55:50 KINGSUS [MyServerIP] POST /autoupdatedrivers/getmanifest.asp |-|0|404_Not_Found 80 - [MyClientIP] Mozilla/4.0+(compatible;+Win32;+WinHttp.WinHttpRequest.5) kingsus 404 0 0

-------------------------
ENTRIES RELATED TO THE OTHER CLIENT COMPUTER DISCUSSED (whose "%windir%\Windows Update.log" reports failure):
2004-02-25 18:58:08 KINGSUS [MyServerIP] HEAD /iuident.cab 0402251901 80 - [OtherClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 18:58:08 KINGSUS [MyServerIP] GET /iuident.cab 0402251901 80 - [OtherClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 18:58:08 KINGSUS [MyServerIP] HEAD /selfupdate/AU/x86/XP/en/wuaucomp.cab 0402251901 80 - [OtherClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 18:58:08 KINGSUS [MyServerIP] GET /selfupdate/AU/x86/XP/en/wuaucomp.cab 0402251901 80 - [OtherClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 18:58:08 KINGSUS [MyServerIP] HEAD /iuident.cab 0402251901 80 - [OtherClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 18:58:08 KINGSUS [MyServerIP] GET /wutrack.bin V=2&U=85f94d534e32a348b0774e04e2c22a42&C=iu&A=n&I=&D=&P=5.1.a28.2.100.1.0&L=en-US&S=s&E=00000000&M=&X=040225190123065 80 - [OtherClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 18:58:08 KINGSUS [MyServerIP] POST /autoupdate/getmanifest.asp - 80 - [OtherClientIP] Mozilla/4.0+(compatible;+Win32;+WinHttp.WinHttpRequest.5) kingsus 200 0 0
2004-02-25 18:58:08 KINGSUS [MyServerIP] POST /autoupdate/getmanifest.asp - 80 - [OtherClientIP] Mozilla/4.0+(compatible;+Win32;+WinHttp.WinHttpRequest.5) kingsus 200 0 0
2004-02-25 18:58:09 KINGSUS [MyServerIP] POST /autoupdate/getmanifest.asp - 80 - [OtherClientIP] Mozilla/4.0+(compatible;+Win32;+WinHttp.WinHttpRequest.5) kingsus 200 0 0
2004-02-25 18:58:09 KINGSUS [MyServerIP] GET /wutrack.bin V=2&U=85f94d534e32a348b0774e04e2c22a42&C=au&A=d&I=&D=&P=5.1.a28.2.100.1.0&L=en-US&S=s&E=00000000&M=items%3D0&X=040225190124705 80 - [OtherClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 18:58:10 KINGSUS [MyServerIP] POST /autoupdatedrivers/getmanifest.asp |-|0|404_Not_Found 80 - [OtherClientIP] Mozilla/4.0+(compatible;+Win32;+WinHttp.WinHttpRequest.5) kingsus 404 0 0
---------------------------

I've also looked at the "C:\Program Files\WindowsUpdate\V4\iuhist.xml" file for downloaded updates, but I don't believe it specifies from where it pulled each update (windows update server versus my SUS server).

If I've failed to disclose any other settings, please ask.

Thanks in advance for any insight.

 

[rye8261]

I have a sus reporting tool that i got from

http://193.78.132.15/

you can download the scripts at the bottom of the page. I use it and love it. You can look at the demo he has on the and see what it does. It will tell you who was updated, when and you can see if there are any problems.

let me know if you have any questions.

Also, check out

http://forums.susserver.com

for more help.

 

[CrimeScene]

Thanks for the tip. I don't prefer to download anything from a site that doesn't have a domain name (only an IP); it's a matter of distrust.

I've also logged this same inquiry in the forums at susserver.com, but apparently (due to no response for some time) there aren't any visitors qualified to answer my detailed question.

I plan to write the person who gave a recent LiveMeeting conference at Microsoft, but I'm not holding my breath for an answer.

 

[pgoss]

There is no canned version that does any reporting of successful install of the patches via SUS. If you want reports my suggestion is to pay money and get SMS 2003. It has the SUS functionality built-in and does reporting. If that option is out, i have heard through the grapevine that SUS 2.0 (the next release) will have reporting built in. Don't quote me on that though.

 

[Stiddy]

http://www.susserver.com/Software/SUSreporting/

this should help you but you need SQL, or you can goto

http://www.pdxconsulting.com/sus/

and upload your IIS log files to see what is going on at the SUS server if you are willing to send up that file.