forums.wsusoffline.net

Hai @all,

coming from here
viewtopic.php?f=4&t=6882

i got now while updating via WSUS Offline Updater
this "error":



- Notebook is in a domain
- user = domain admin
- WSUSOU is on a Server
- WSUS folder is mounted via d$ as domain admin

Thanks in advance for your help.

According to the Windows Update Error code list the error means

Code: Select all

0x8024000B WU_E_CALL_CANCELLED Operation was cancelled.

Now you just have to find out who does this and why . Is anything stopping the Windows Update service during the search?

Regards
Dalai

Dalai wrote:According to the Windows Update Error code list the error means

Code: Select all

0x8024000B WU_E_CALL_CANCELLED Operation was cancelled.

Now you just have to find out who does this and why . Is anything stopping the Windows Update service during the search?

Regards
Dalai

How do i know? Where can i find this out?
Maybe the task itself? Cause it is originally managed by the WSUS server?

Zero critical events *ever*,
189 error events in the last 24 hours
- 150 CAPI2 (4101) - https://answers.microsoft.com/en-us/windows/forum/windows_7-performance/solved-event-id-4101-capi2-multiple-entries-in/acd8c307-e2f2-47b9-9ce1-34b0a612514b?auth=1
- 1 WMI (10) - https://support.microsoft.com/de-de/help/2545227/event-id-10-is-logged-in-the-application-log-after-you-install-service
- 1 Group Policy (1129) - https://community.spiceworks.com/topic/291388-windows-doesn-t-recognize-domain-until-60-seconds-after-startup
- 1 Netlogon (5719) - https://support.microsoft.com/de-de/help/938449/netlogon-event-id-5719-or-group-policy-event-1129-is-logged-when-you-s
93 warnings
- 44 Kernel-Processor-Power
- 14 Time-Service
- 5 RestartManager

So what do we learn here?
MS protocolls a lot of $....

Nevertheless, i could today install two more updates... and will create event 10010 again (RestartManger)

Thanks again for your help Dalai!

Maybe C:\Windows\WindowsUpdate.log contains the origin of the cancel-request.


If you are known with Handles/APIs and so on, you may try to track it down using SysInternals ProcMon.
https://technet.microsoft.com/en-us/sysinternals/processmonitor.aspx

I agree that WindowsUpdate.log might contain some info that could help track down the culprit.

Regards
Dalai

aker wrote:Maybe C:\Windows\WindowsUpdate.log contains the origin of the cancel-request.


If you are known with Handles/APIs and so on, you may try to track it down using SysInternals ProcMon.
https://technet.microsoft.com/en-us/sysinternals/processmonitor.aspx

Here we go:

Datei von filehorst.de laden

A big THANKS for your help guys!

Mmh, it seems your system uses an internal WSUS server. I'm not sure if this interferes with the search for updates in WSUS Offline, but I guess it's worth a shot to temporarily disable the link to the WSUS and try WSUS Offline again. Perhaps it has also something to do with your other error from the other thread regarding certificates, because I see multiple lines like this in your log:

Code: Select all

2017-08-16   15:26:26:722    360   1198   Misc   Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\wuredir.cab with dwProvFlags 0x00000080:
2017-08-16   15:26:26:738    360   1198   Misc    Microsoft signed: NA
2017-08-16   15:26:26:738    360   1198   Misc   Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\wuredir.cab with dwProvFlags 0x00000080:
2017-08-16   15:26:26:754    360   1198   Misc    Microsoft signed: NA
2017-08-16   15:26:26:754    360   1198   Misc   Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\TMPD84C.tmp with dwProvFlags 0x00000080:
2017-08-16   15:26:26:769    360   1198   Misc    Microsoft signed: NA

To my knowledge all MS catalogs should be signed correctly. This may be the reason why the WU service terminates; it rejects unsigned catalogs.

Regards
Dalai

@Dalai
Normal. Same here.

Code: Select all

2017-07-27   23:33:59:053   5000   1154   Misc   Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\wuredir.cab with dwProvFlags 0x00000080:
2017-07-27   23:33:59:057   5000   1154   Misc    Microsoft signed: NA
2017-07-27   23:33:59:059   5000   1154   Misc   Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\TMPBF64.tmp with dwProvFlags 0x00000080:
2017-07-27   23:33:59:064   5000   1154   Misc    Microsoft signed: NA
2017-07-27   23:33:59:065   5000   1154   Misc   Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\v6-muredir.cab with dwProvFlags 0x00000080:
2017-07-27   23:33:59:069   5000   1154   Misc    Microsoft signed: NA
2017-07-27   23:33:59:101   5000   1154   Misc   Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\v6-muredir.cab with dwProvFlags 0x00000080:
2017-07-27   23:33:59:105   5000   1154   Misc    Microsoft signed: NA
2017-07-27   23:33:59:106   5000   1154   Misc   Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\wuredir.cab with dwProvFlags 0x00000080:
2017-07-27   23:33:59:110   5000   1154   Misc    Microsoft signed: NA
2017-07-27   23:33:59:112   5000   1154   Misc   Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\TMPBFA4.tmp with dwProvFlags 0x00000080:
2017-07-27   23:33:59:117   5000   1154   Misc    Microsoft signed: NA
2017-07-27   23:33:59:118   5000   1154   Misc   Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\wuredir.cab with dwProvFlags 0x00000080:
2017-07-27   23:33:59:122   5000   1154   Misc    Microsoft signed: NA
2017-07-27   23:33:59:123   5000   1154   Misc   Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\TMPBFA5.tmp with dwProvFlags 0x00000080:
2017-07-27   23:33:59:128   5000   1154   Misc    Microsoft signed: NA


@FGlas
I'm more interested in error 0x80248014. This one happened to me while messing around with the Windows Update API. 0x80248014 was triggered here, when trying to remove an UpdateService (using its ServiceID) from the UpdateServiceManager, when it already has been removed or free()ed.

Is the system part of a WSUS server.
Asking because of:

Code: Select all

2017-08-17   15:04:59:277    648   10ec   Report   Uploading 2 events using cached cookie, reporting URL = http://dienste.sw-rottenburg.intra:8530/ReportingWebService/ReportingWebService.asmx

Also I see interfering Windows Update/Automatic Update actions.

Attempt of a fix:
- set Windows Update to "Never search for updates"
- run

Code: Select all

net stop wuauserv

in an administrative CMD
- delete the WindowsUpdate.log (just for getting a clean log)
- reboot
- retry
- if it still fails, post a new log here

Thanks to you both.

I mentioned twice(?) that the notebook is no in a domain and sure there is a WSUS working.
So it is impossible for anyone to change the settings for the Windows updates - they were managed by the "Administrator".
Guess, who this poor guy is...

The only thing i could to is remove the notebook from the domain and test this.
But imho it is not worth a try, we do now know, what is causing the problem.

Thanks again for your help and knowledge and have a nice weekend.
FGlas

.

P.S.: If one of you disagree please let me know. Maybe i can find a bit time to do some of the testing work in the next two weeks...

FGlas wrote:[...] we do now know, what is causing the problem.

Which is ...? So far we only made (educated) guesses.

Regards
Dalai