Re: windows update thinks my windows 2003 Server is a MAC
Thanks MowGreen, SEP Firewall disabled, win firewall enabled. Bellow is the
log:
2008-07-31 11:49:15:771 860 7c0 AU ########### AU: Uninitializing
Automatic Updates ###########
2008-07-31 11:49:15:817 860 7c0 DnldMgr FATAL:
DM:CBitsJob::SetCallbackHandler: SetNotifyInterface failed with 0x80080008.
2008-07-31 11:48:25:671 884 8bc Misc =========== Logging initialized
(build: 7.0.6000.381, tz: -0600) ===========
2008-07-31 11:48:25:671 884 8bc Misc = Process:
C:\WINDOWS\System32\svchost.exe
2008-07-31 11:48:25:671 884 8bc Misc = Module:
C:\WINDOWS\system32\wuaueng.dll
2008-07-31 11:48:25:671 884 8bc Service *************
2008-07-31 11:48:25:671 884 8bc Service ** START ** Service: Service startup
2008-07-31 11:48:25:671 884 8bc Service *********
2008-07-31 11:48:25:687 884 8bc Agent * WU client version 7.0.6000.381
2008-07-31 11:48:25:687 884 8bc Agent * Base directory:
C:\WINDOWS\SoftwareDistribution
2008-07-31 11:48:25:687 884 8bc Agent * Access type: No proxy
2008-07-31 11:48:25:687 884 8bc Agent * Network state: Connected
2008-07-31 11:49:21:676 884 8bc Agent *********** Agent: Initializing
Windows Update Agent ***********
2008-07-31 11:49:21:676 884 8bc Agent *********** Agent: Initializing
global settings cache ***********
2008-07-31 11:49:21:676 884 8bc Agent * WSUS server:
http://srvptm
2008-07-31 11:49:21:676 884 8bc Agent * WSUS status server:
http://srvptm
2008-07-31 11:49:21:676 884 8bc Agent * Target group: SUS
2008-07-31 11:49:21:676 884 8bc Agent * Windows Update access disabled: No
2008-07-31 11:49:21:697 884 8bc DnldMgr Download manager restoring 0
downloads
2008-07-31 11:49:21:718 884 8bc DnldMgr Retrieved 1 persisted download jobs
2008-07-31 11:49:21:718 884 8bc DnldMgr *********** DnldMgr: Restoring
download [no. 0] ***********
2008-07-31 11:49:21:739 884 8bc DnldMgr * BITS JobId =
{183A62E2-4BE3-4F6D-A54F-CC35B58AFB39}
2008-07-31 11:49:21:739 884 8bc DnldMgr * ServiceId =
{9482F4B4-E343-43B6-B170-9A65BC822C77}
2008-07-31 11:49:21:822 884 8bc DnldMgr * UpdateId =
{4A420F1E-F071-4DF6-957A-7F3F593C3E8F}.102
2008-07-31 11:49:21:864 884 8bc DnldMgr * Restored download job.
2008-07-31 11:49:21:885 884 8bc AU ########### AU: Initializing Automatic
Updates ###########
2008-07-31 11:49:21:885 884 8bc AU # WSUS server:
http://srvptm
2008-07-31 11:49:21:885 884 8bc AU # Detection frequency: 22
2008-07-31 11:49:21:885 884 8bc AU # Target group: SUS
2008-07-31 11:49:21:885 884 8bc AU # Approval type: Scheduled (Policy)
2008-07-31 11:49:21:885 884 8bc AU # Scheduled install day/time: Friday
at 3:00
2008-07-31 11:49:21:885 884 8bc AU # Auto-install minor updates: Yes
(Policy)
2008-07-31 11:49:21:885 884 8bc AU Setting AU scheduled install time to
2008-08-01 09:00:00
2008-07-31 11:49:21:885 884 8bc AU AU finished delayed initialization
2008-07-31 11:49:22:262 884 8bc Report *********** Report: Initializing
static reporting data ***********
2008-07-31 11:49:22:262 884 8bc Report * OS Version = 5.2.3790.2.0.196880
2008-07-31 11:49:22:430 884 8bc Report * Computer Brand = VMware, Inc.
2008-07-31 11:49:22:430 884 8bc Report * Computer Model = VMware Virtual
Platform
2008-07-31 11:49:22:451 884 8bc Report * Bios Revision = 6.00
2008-07-31 11:49:22:451 884 8bc Report * Bios Name = PhoenixBIOS 4.0
Release 6.0
2008-07-31 11:49:22:451 884 8bc Report * Bios Release Date =
2006-04-17T00:00:00
2008-07-31 11:49:22:451 884 8bc Report * Locale ID = 1033
2008-07-31 11:49:24:377 884 ed4 PT WARNING: GetConfig failure, error =
0x80244017, soap client error = 10, soap error code = 0, HTTP status code =
401
2008-07-31 11:49:24:377 884 ed4 PT WARNING: PTError: 0x80244017
2008-07-31 11:49:24:377 884 ed4 PT WARNING: GetConfig_WithRecovery failed:
0x80244017
2008-07-31 11:49:24:377 884 ed4 PT WARNING: RefreshConfig failed: 0x80244017
2008-07-31 11:49:24:377 884 ed4 PT WARNING: RefreshPTState failed: 0x80244017
2008-07-31 11:49:24:398 884 ed4 PT WARNING: PTError: 0x80244017
2008-07-31 11:49:24:398 884 ed4 Report WARNING: Reporter failed to upload
events with hr = 80244017.
2008-07-31 11:49:24:398 884 ed4 PT WARNING: GetConfig failure, error =
0x80244017, soap client error = 10, soap error code = 0, HTTP status code =
401
2008-07-31 11:49:24:398 884 ed4 PT WARNING: PTError: 0x80244017
2008-07-31 11:49:24:398 884 ed4 PT WARNING: GetConfig_WithRecovery failed:
0x80244017
2008-07-31 11:49:24:398 884 ed4 PT WARNING: RefreshConfig failed: 0x80244017
2008-07-31 11:49:24:398 884 ed4 PT WARNING: RefreshPTState failed: 0x80244017
2008-07-31 11:49:24:398 884 ed4 PT WARNING: PTError: 0x80244017
2008-07-31 11:49:24:398 884 ed4 Report WARNING: Reporter failed to upload
events with hr = 80244017.
2008-07-31 11:51:41:126 184 27c Misc =========== Logging initialized
(build: 7.0.6000.381, tz: -0600) ===========
2008-07-31 11:51:41:126 184 27c Misc = Process:
C:\WINDOWS\system32\rundll32.exe
2008-07-31 11:51:41:126 184 27c Misc = Module:
C:\WINDOWS\system32\wuapi.dll
2008-07-31 11:51:41:126 184 27c ARP Connected to update session.
2008-07-31 11:51:41:126 184 27c ARP User is allowed to install published
content.
2008-07-31 11:51:41:168 184 27c ARP Managed service found.
"MowGreen [MVP]" wrote:
> Sorry if I'm being redundant here but, did you disable the Symantec
> firewall, reboot, and then ensure that the native WS2003 firewall was
> enabled ?
>
> Please post the last 50 or so lines of the WindowsUpdate.log from the
> server with the issue. We need to see which Windows Update Agent is
> installed. There was a newer Version of the agent made available that
> should have installed by now, V. 7.1.6001.65.
>
>
> MowGreen [MVP 2003-2008]
> ===============
> *-343-* FDNY
> Never Forgotten
> ===============
>
>
>
> SPA wrote:
>
> > Hi, I’ve done everything on the 3 previous posts with the same result. Diana,
> > I have Symantec End Point in 2 of the servers, on has no problem and the
> > other one does. Thanks anyway.
> >
> > "Diana" wrote:
> >
> >
> >>Hello,
> >>
> >>Are you running Symantec Endpoint?
> >>
> >>If yes, please uninstall the "firewall" feature and than test Windows
> >>Update.
> >>
> >>PS. The windows firewall should still be active.
> >>
> >>Diana
> >>
> >>Diana Smith [MSFT] <diasmith@hotmail.com>
> >>CSS Security Team
> >>
> >>This posting is provided "AS IS" with no warranties, and confers no rights.
> >>
> >>
> >>"Robert Aldwinckle" <robald@techemail.com> wrote in message
> >>news:eXyAiWx8IHA.4588@TK2MSFTNGP02.phx.gbl...
> >>
> >>>"PA Bear [MS MVP]" <PABearMVP@gmail.com> wrote in message
> >>>news:OZBS0Qt8IHA.4532@TK2MSFTNGP05.phx.gbl...
> >>>
> >>>>And http://support.microsoft.com/?kbid=817144 ??
> >>>
> >>>
> >>>That article should refer to one of Eric Lawrence's tools IMO.
> >>>E.g. this diagnostic would show if there is really a problem
> >>>outside of the client:
> >>>
> >>>http://www.fiddlertool.com/useragent.aspx
> >>>
> >>>
> >>>Another possibility which isn't mentioned is that the page could be
> >>>coming from a broken intermediate cache. In that case re-requesting it
> >>>using Ctrl-F5 or switching the protocol to https or trying to fake
> >>>some
> >>>CGI input might force it through to the real server.
> >>>
> >>>OTOH perhaps the site is simply not recognizing that OS and browser
> >>>combination? Then they could try completely spoofing both, e.g with
> >>>KB923196
> >>>
> >>>
> >>>Robert
> >>>---
> >>>
> >>>
> >>>
> >>>
> >>>>SPA wrote:
> >>>>
> >>>>>I got this message on 2 servers, one that has no problem and one with
> >>>>>problems: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.2; .NET CLR
> >>>>>1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR
> >>>>>3.0.04506.648)
> >>>>>
> >>>>>On the server that I deleted the Agent, I got this (still with the
> >>>>>problem):
> >>>>>Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.2)
> >>>>>
> >>>>>Thanks,
> >>>>>
> >>>>>"PA Bear [MS MVP]" wrote:
> >>>>>
> >>>>>
> >>>>>>=> Copy/paste the following into IE Address Bar then press ENTER:
> >>>>>>
> >>>>>> javascript:navigator.userAgent
> >>>>>>
> >>>>>>What Version & Platform information is reported in the resulting
> >>>>>>window?
> >>>>>>
> >>>>>>=> Also see http://support.microsoft.com/?kbid=817144
> >>>
> >>>...
> >>>
> >>>
> >>
>