I am trying to run the "wuauclt /updatenow" command through the "run program" object.
After I run this policy, nothing happens.
In the windowsupdate.log I find these events:
2011-10-19 11:43:25:810 780 368 AU ############# 2011-10-19 11:43:25:810 780 368 AU ## START ## AU: Search for updates 2011-10-19 11:43:25:810 780 368 AU ######### 2011-10-19 11:43:25:810 780 368 AU <<## SUBMITTED ## AU: Search for updates [CallId = {29B4B9D4-0BFC-4646-B464-C651EE46312C}] 2011-10-19 11:43:25:810 780 bb4 Agent ************* 2011-10-19 11:43:25:810 780 bb4 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates] 2011-10-19 11:43:25:810 780 bb4 Agent ********* 2011-10-19 11:43:25:810 780 bb4 Agent * Online = No; Ignore download priority = No 2011-10-19 11:43:25:810 780 bb4 Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1" 2011-10-19 11:43:25:810 780 bb4 Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed 2011-10-19 11:43:25:810 780 bb4 Agent * Search Scope = {Machine} 2011-10-19 11:43:26:795 780 bb4 Agent Update {3F7E6622-0F75-442A-88F7-FE5BE8C91715}.104 is pruned out due to potential supersedence 2011-10-19 11:43:26:795 780 bb4 Agent * Added update {57AFC029-ED53-42AC-AE9C-0B19AD5DF3AB}.102 to search result 2011-10-19 11:43:26:795 780 bb4 Agent Update {979BBDEF-4083-4803-9292-85E5DA9B0632}.102 is pruned out due to potential supersedence 2011-10-19 11:43:26:795 780 bb4 Agent * Added update {5B92CCF0-3865-4FF9-828F-FF8CF1A4D985}.101 to search result 2011-10-19 11:43:26:795 780 bb4 Agent * Added update {6882E4AF-446C-4B61-A2CF-EB664DBE01B8}.100 to search result 2011-10-19 11:43:26:795 780 bb4 Agent * Found 3 updates and 54 categories in search; evaluated appl. rules of 265 out of 670 deployed entities 2011-10-19 11:43:26:795 780 bb4 Agent ********* 2011-10-19 11:43:26:795 780 bb4 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates] 2011-10-19 11:43:26:795 780 bb4 Agent ************* 2011-10-19 11:43:26:795 780 e10 AU >>## RESUMED ## AU: Search for updates [CallId = {29B4B9D4-0BFC-4646-B464-C651EE46312C}] 2011-10-19 11:43:26:795 780 e10 AU # 3 updates detected 2011-10-19 11:43:26:795 780 e10 AU ######### 2011-10-19 11:43:26:795 780 e10 AU ## END ## AU: Search for updates [CallId = {29B4B9D4-0BFC-4646-B464-C651EE46312C}] 2011-10-19 11:43:26:795 780 e10 AU ############# 2011-10-19 11:43:26:795 780 e10 AU Featured notifications is disabled. 2011-10-19 11:43:26:795 780 e10 AU Successfully wrote event for AU health state:0 2011-10-19 11:43:26:810 780 e10 AU Successfully wrote event for AU health state:0 2011-10-19 11:43:31:795 780 bb4 Report CWERReporter finishing event handling. (00000000)
2011-10-19 11:51:42:767 780 f78 Service WARNING: GetUserTokenFromSessionId failed with error 800703f0 for session 0 2011-10-19 11:51:42:767 780 f78 AU AU received approval from Ux for 3 updates 2011-10-19 11:51:42:767 780 f78 AU WARNING: ProgressUx is not applicable for session 0 2011-10-19 11:51:42:767 780 f78 Service WARNING: GetUserTokenFromSessionId failed with error 800703f0 for session 0 2011-10-19 11:51:42:767 780 f78 AU UpdateDownloadProperties: 0 download(s) are still in progress. 2011-10-19 11:51:42:767 780 f78 AU Triggering Offline detection (non-interactive) 2011-10-19 11:51:42:767 780 f78 Service WARNING: GetUserTokenFromSessionId failed with error 800703f0 for session 0 2011-10-19 11:51:42:767 780 f78 AU AU setting pending client directive to 'Install Complete Ux' 2011-10-19 11:51:42:767 780 f78 AU WARNING: Pending directive, 'Install Complete Ux', is not applicable 2011-10-19 11:51:42:767 780 f78 AU WARNING: ApproveUpdatesInternal failed with hr:8024000c 2011-10-19 11:51:42:767 780 f78 AU WARNING: UpdateNow failed with hr:8024000c
2011-10-13 16:56:33:317 780 a54 AU Successfully wrote event for AU health state:0 2011-10-13 16:56:33:317 780 a54 AU Featured notifications is disabled. 2011-10-13 16:56:33:317 780 a54 AU AU setting next detection timeout to 2011-10-13 18:41:58 2011-10-13 16:56:33:317 780 a54 AU Successfully wrote event for AU health state:0 2011-10-13 16:56:33:411 780 a54 AU Successfully wrote event for AU health state:0 2011-10-13 16:56:33:457 780 e20 Report CWERReporter finishing event handling. (00000000) 2011-10-13 16:56:38:317 780 e20 Report CWERReporter finishing event handling. (00000000) 2011-10-13 16:56:46:411 780 368 AU Launched new AU client for directive 'Install Approval', session id = 0x2 2011-10-13 16:56:46:411 1496 58c Misc =========== Logging initialized (build: 7.4.7600.226, tz: +0200) =========== 2011-10-13 16:56:46:411 1496 58c Misc = Process: C:\Windows\system32\wuauclt.exe 2011-10-13 16:56:46:411 1496 58c AUClnt Launched Client UI process 2011-10-13 16:56:46:426 1496 58c Misc =========== Logging initialized (build: 7.4.7600.226, tz: +0200) =========== 2011-10-13 16:56:46:426 1496 58c Misc = Process: C:\Windows\system32\wuauclt.exe 2011-10-13 16:56:46:426 1496 58c Misc = Module: C:\Windows\system32\wucltux.dll 2011-10-13 16:56:46:426 1496 58c CltUI AU client got new directive = 'Install Approval', serviceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, return = 0 2011-10-13 17:04:28:745 780 e20 Report Uploading 3 events using cached cookie, reporting URL = http://wsus.xxx.xxx:8530/ReportingWebService/ReportingWebService.asmx 2011-10-13 17:04:28:745 780 e20 Report Reporter successfully uploaded 3 events. 2011-10-13 17:05:04:339 780 d30 AU WARNING: UpdateNow failed with hr:80070005
As you can read, there are 3 updates ready for deployment, so the connection to our wsus server seems to be working.
Details:
Opalis service account is local admin.
Both opalis and the target server are w2k8 R2 x64. (clean installs previous month)
I've tried de "Program execution" with the whole path (c:\windows...etc), instead of the "Command execution" mode, same problem.
I've tried running a batch file on the target server from opalis, same problem.
I've changed the "Advanced" and the Security credentials to my Admin account (also local admin), same problem.
If I run the command (and batch) by hand on the target server, it works.
What am I doing wrong? And is this the best way to do it through opalis, or am I re-inventing the wheel? ;)
We want to do it with Opalis, 'cause we want to be able to stop services, monitor if users are logged in, put scom in maintenance mode, create an event log...etc
Thanks!