By MBPDLPayday Loans

从WSUS更新补丁失败

今天在一台VM上面解一个项目的bug, copy了一个VM过来以后, 修改组策略, 设置从内网WSUS更新, 可是每次都是只出现一个黄色的盾牌图标, 下载0%, 就停掉了. 补丁一直推不下来. 上WSUSAdmin去看了一下, 在Computers里面, 机器是看到了, 但是补丁没有更新成功. 提示错误代码0x80244019. 先下载了一个ClientDiag.exe的工具. 看了一下, 都正常. 继续在Google上查原因.

看到一个MVP写的blog, 讲到了urlscan, 恍然大悟, 原来是前阵子global做security auditing的时候让俺们装了urlscan. 这个东西会导致.exe文件被block掉. 马上连滚带爬地跑到server上面去看log (C:\WINNT\system32\inetsrv\urlscan) . 呵呵, 果然有很多被挡下来的记录. 嗯, 修改urlscan.ini . 配置节里面在[Allow Extensions]下面添加.exe, [Deny Extensions]下面去掉.exe就好了.

Error 0x80244019 in WindowsUpdate.log

SYMPTOMS

2006-05-11 00:00:17 804 6a0 DnldMgr Failed job file: URL =
http://YOUR-WSUS-SERVER/Content/BE/
89EC21DAC2F85E57261E8BB512611791D115F6BE.EXE,
local path =
C:\WINNT\SoftwareDistribution\Download\S-1-5-18\
69f35ef3f4d9c83474c7aec2474­f2798\Windows2000-KB908531-v2-x86-ENU.EXE
2006-05-11 00:00:17 804 6a0 DnldMgr Error 0x80244019 occurred while downloading update; notifying dependent calls.

# WARNING: Download failed, error =
0x80244019
2006-05-11 00:00:20 804 7bc DnldMgr WARNING: BITS job
{D06ABA6C-A950-40DE-818B-3904C9DB52CC} failed, updateId =
{962462BC-081F-4642-B30E-DB31D53F4B7B}.106, hr = 0x80190194, BG_ERROR_CONTEXT
= 5

# WARNING: Download failed, error =
0x80244019
2006-05-11 00:00:22 804 79c Report REPORT EVENT:
{CA06C2DC-56BA-4A00-B18D-E56C83175D92} 2006-05-11
00:00:17+0500 1 161 101 {2A39150D-E00B-4986-A5B0-5EFF45063DAB} 103 80244019 AutomaticUpdates Failure Content Download Error: Download failed.

DESCRIPTION

Error 0x80244019 translates to SUS_E_PT_HTTP_STATUS_NOT_FOUND – Http status 404 – object not found.

CAUSE

If you have URLScan installed on WSUS Server, then it might block *.exe downloads for WUA. Check URLScan logs under C:\WINNT\system32\inetsrv\urlscan.

WORKAROUND

If URLScan Tool is installed and set to block all *.exe files, then, the client computers (WUA) will not be able to download any of the patches or updates.

In order to correct this problem, you need to edit urlscan.ini to allow *.exe requests, and then restart Internet Information Services (IIS) or restart the WSUS server itself.

Edit the following in the urlscan.ini:

[Allow Extensions]
.exe

And remove “.exe” from
[Deny Extensions]

[Allow Verbs]
GET
HEAD
POST
OPTIONS

MORE INFORMATION

Basic Troubleshooting Steps using SUS with AU
http://www.faqshop.com/sus/default.htm?
http://www.faqshop.com/sus/general/basic%20trobshootting%20sus.htm

Leave a Reply