1809 版后如何将客户端重新连接到 WSUS 导致安装后出现问题

1809 版后如何将客户端重新连接到 WSUS 导致安装后出现问题

使用 1809 更新在我们的测试环境中进行一些测试。此系统不连接互联网,仅从 WSUS 获取更新。我尝试停止服务并重命名 SoftwareDistribution 文件夹,但这也无济于事。我已完成故障排除,但没有任何效果。我已将传递优化设置为简单 (99)。

我正在停止尝试使用此 GPO 设置连接到 Internet:

Computer Configuration > Administrative Templates > Windows Components > Windows Update > Do not connect to any Windows Update Internet locations 

运行 powershell 命令后(New-Object -ComObject 'Microsoft.Update.ServiceManager').Services

我得到了结果Windows Server Update Service IsDefautlAUService = True

已修补 11-2018 更新,从 2018.11.13 到 17763.134

我已经对 1809 进行了 Windows 重置,看看是否能解决问题,但问题依然存在。系统不会检查 WSUS 是否有更新,并表示无法连接。由于我们设置了客户端目标,因此它甚至不会重新注册 WSUS。

这就是目前显示的错误。 1809 WSUS 错误

这是我当前的日志。尝试找出错误所在LoadHistoryEventsFromRegistry。Microsoft 没有关于这些问题的信息。

    InitializeSus
2018/12/07 07:30:59.6145871 5316  76    IdleTimer       Non-AoAc machine.  Aoac operations will be ignored.
2018/12/07 07:30:59.6146719 5316  76    Agent           WU client version 10.0.17763.107
2018/12/07 07:30:59.6149469 5316  76    Agent           SleepStudyTracker: Machine is non-AOAC. Sleep study tracker disabled.
2018/12/07 07:30:59.6150268 5316  76    Agent           Base directory: C:\WINDOWS\SoftwareDistribution
2018/12/07 07:30:59.6179939 5316  76    Agent           Datastore directory: C:\WINDOWS\SoftwareDistribution\DataStore\DataStore.edb
2018/12/07 07:30:59.6190270 5316  76    DataStore       JetEnableMultiInstance succeeded - applicable param count: 5, applied param count: 5
2018/12/07 07:31:00.1001631 5316  76    DataStore       Service 3DA21691-E39D-4DA6-8A4B-B43877BCB1B7 added
2018/12/07 07:31:00.1188537 5316  76    DataStore       Service 9482F4B4-E343-43B6-B170-9A65BC822C77 added
2018/12/07 07:31:00.1202710 5316  76    DataStore       Data store successfully created
2018/12/07 07:31:00.1254989 5316  76    Shared          UpdateNetworkState Ipv6, cNetworkInterfaces = 0.
2018/12/07 07:31:00.1260950 5316  76    Shared          UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
2018/12/07 07:31:00.1307344 5316  76    Shared          Network state: Connected
2018/12/07 07:31:00.5661308 5316  76    Agent           Created new random SusClientId 5ee99c27-c788-4ed7-910d-be7ecefcb4d3. Old Id: none.
2018/12/07 07:31:00.5753449 5316  76    Misc            *FAILED* [8024000C] LoadHistoryEventFromRegistry completed
2018/12/07 07:31:00.5756015 5316  76    Shared          UpdateNetworkState Ipv6, cNetworkInterfaces = 0.
2018/12/07 07:31:00.5756166 5316  76    Shared          UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
2018/12/07 07:31:00.5756276 5316  76    Shared          Power status changed
2018/12/07 07:31:00.5819017 5316  76    Agent           WU client refresh cache for DisableWUAccess policy: 1
2018/12/07 07:31:00.5819073 5316  76    Agent           Initializing global settings cache
2018/12/07 07:31:00.5819100 5316  76    Agent           WSUS server: http://WSUS.DOMAIN.460i:8530
2018/12/07 07:31:00.5819125 5316  76    Agent           WSUS status server: http://WSUS.DOMAIN.460i:8530
2018/12/07 07:31:00.5819151 5316  76    Agent           Alternate Download Server: http://IWSUS.DOMAIN.460i:8530
2018/12/07 07:31:00.5819167 5316  76    Agent           Fill Empty Content Urls: No
2018/12/07 07:31:00.5819186 5316  76    Agent           Target group: Update Testing
2018/12/07 07:31:00.5819207 5316  76    Agent           Windows Update access disabled: Yes
2018/12/07 07:31:00.5819227 5316  76    Agent           Do not connect to Windows Update Internet locations: Yes
2018/12/07 07:31:00.5999439 5316  76    Agent           Initializing Windows Update Agent
2018/12/07 07:31:00.6001722 5316  76    Agent           CPersistentTimeoutScheduler | GetTimer, returned hr = 0x80248007
2018/12/07 07:31:00.6001826 5316  76    Agent           CPersistentTimeoutEvent | Resubscribe, no existing/cached timer for Id=29A863E7-8609-4D1E-B7CD-5668F857F1DB.
2018/12/07 07:31:00.6001961 5316  76    Agent           Adding timer: 
2018/12/07 07:31:00.6002034 5316  76    Agent               Timer: 29A863E7-8609-4D1E-B7CD-5668F857F1DB, Expires 2018-12-08 12:31:01, not idle-only, not network-only
2018/12/07 07:31:00.6017327 5316  76    IdleTimer       IdleTimer::NetworkStateChanged. Network connected? Yes
2018/12/07 07:31:00.6152671 5316  2732  DownloadManager HandleScavengeSandboxTask: Cleaning up sandboxes.
2018/12/07 07:31:00.6337411 5316  2732  DownloadManager PurgeExpiredFiles::Found 0 expired files to delete.
2018/12/07 07:31:00.6337679 5316  2732  DownloadManager PurgeExpiredUpdates: Found 0 non expired updates.
2018/12/07 07:31:00.6337761 5316  2732  DownloadManager PurgeExpiredUpdates: Found 0 expired updates.
2018/12/07 07:31:00.6446587 5316  2732  DownloadManager Received power state change notification: Old: <unknown>; New: AC.
2018/12/07 07:31:00.6446609 5316  2732  DownloadManager Power state changed from <unknown> to AC.
2018/12/07 07:32:12.5240857 5660  9008  ComApi          IUpdateServiceManager::AddService2
2018/12/07 07:32:12.5240922 5660  9008  ComApi          Service ID = {7971f918-a847-4430-9279-4a52d1efe18d}
2018/12/07 07:32:12.5240988 5660  9008  ComApi          Allow pending registration = Yes; Allow online registration = Yes; Register service with AU = Yes
2018/12/07 07:32:12.5302886 5316  9004  Agent           *FAILED* [80248014] GetServiceObject couldn't find service '117CAB2D-82B1-4B5A-A08C-4D62DBEE7782'.
2018/12/07 07:32:12.5302932 5316  9004  Agent           *FAILED* [80248014] Method failed [CAgentServiceManager::GetServiceObject:1902]
2018/12/07 07:32:12.5302982 5316  9004  Agent           *FAILED* [80248014] GetServiceObject couldn't find service '855E8A7C-ECB4-4CA3-B045-1DFA50104289'.
2018/12/07 07:32:12.5303011 5316  9004  Agent           *FAILED* [80248014] Method failed [CAgentServiceManager::GetServiceObject:1902]
2018/12/07 07:32:12.5303077 5316  9004  Agent           *FAILED* [80248014] GetServiceObject couldn't find service '7971F918-A847-4430-9279-4A52D1EFE18D'.
2018/12/07 07:32:12.5303106 5316  9004  Agent           *FAILED* [80248014] Method failed [CAgentServiceManager::GetServiceObject:1902]
2018/12/07 07:32:12.5313973 5316  9004  Agent           Failed to retrieve SLS response data for service 117cab2d-82b1-4b5a-a08c-4d62dbee7782, error = 0x8024500c
2018/12/07 07:32:12.5314154 5316  9004  Agent           *FAILED* [8024500C] Caller Service Recovery failed to opt in to service 117cab2d-82b1-4b5a-a08c-4d62dbee7782 (cV: GdfTDldxRUyC9aLL.1)
2018/12/07 07:32:12.5316674 5316  9004  Agent           Failed to retrieve SLS response data for service 855e8a7c-ecb4-4ca3-b045-1dfa50104289, error = 0x8024500c
2018/12/07 07:32:12.5316725 5316  9004  Agent           *FAILED* [8024500C] Caller Service Recovery failed to opt in to service 855e8a7c-ecb4-4ca3-b045-1dfa50104289 (cV: GdfTDldxRUyC9aLL.2)
2018/12/07 07:32:12.5318996 5316  9004  Agent           Failed to retrieve SLS response data for service 7971f918-a847-4430-9279-4a52d1efe18d, error = 0x8024500c
2018/12/07 07:32:12.5319045 5316  9004  Agent           *FAILED* [8024500C] Caller UpdateOrchestrator failed to opt in to service 7971f918-a847-4430-9279-4a52d1efe18d (cV: GdfTDldxRUyC9aLL.3)
2018/12/07 07:32:12.5319174 5316  9004  Agent           *FAILED* [80248014] GetServiceObject couldn't find service '7971F918-A847-4430-9279-4A52D1EFE18D'.
2018/12/07 07:32:12.5319205 5316  9004  Agent           *FAILED* [80248014] Method failed [CAgentServiceManager::GetServiceObject:1902]
2018/12/07 07:32:12.5322116 5660  9008  ComApi          Deferred service opt-in
2018/12/07 07:32:12.5366676 5660  9008  ComApi          *FAILED* [800704C6] CheckNetworkCostForCostPolicy
2018/12/07 07:33:57.7948349 5660  9008  ComApi          IUpdateServiceManager::AddService2
2018/12/07 07:33:57.7948410 5660  9008  ComApi          Service ID = {7971f918-a847-4430-9279-4a52d1efe18d}
2018/12/07 07:33:57.7948479 5660  9008  ComApi          Allow pending registration = Yes; Allow online registration = Yes; Register service with AU = Yes
2018/12/07 07:33:57.7984642 5316  9004  Agent           *FAILED* [80248014] GetServiceObject couldn't find service '117CAB2D-82B1-4B5A-A08C-4D62DBEE7782'.
2018/12/07 07:33:57.7984751 5316  9004  Agent           *FAILED* [80248014] Method failed [CAgentServiceManager::GetServiceObject:1902]
2018/12/07 07:33:57.7984884 5316  9004  Agent           *FAILED* [80248014] GetServiceObject couldn't find service '855E8A7C-ECB4-4CA3-B045-1DFA50104289'.
2018/12/07 07:33:57.7984960 5316  9004  Agent           *FAILED* [80248014] Method failed [CAgentServiceManager::GetServiceObject:1902]
2018/12/07 07:33:57.7985083 5316  9004  Agent           *FAILED* [80248014] GetServiceObject couldn't find service '7971F918-A847-4430-9279-4A52D1EFE18D'.
2018/12/07 07:33:57.7985156 5316  9004  Agent           *FAILED* [80248014] Method failed [CAgentServiceManager::GetServiceObject:1902]
2018/12/07 07:33:57.7993250 5316  9004  Agent           Failed to retrieve SLS response data for service 117cab2d-82b1-4b5a-a08c-4d62dbee7782, error = 0x8024500c
2018/12/07 07:33:57.7993472 5316  9004  Agent           *FAILED* [8024500C] Caller Service Recovery failed to opt in to service 117cab2d-82b1-4b5a-a08c-4d62dbee7782 (cV: H4qkYaccI0S+sZ8U.1)
2018/12/07 07:33:57.7999318 5316  9004  Agent           Failed to retrieve SLS response data for service 855e8a7c-ecb4-4ca3-b045-1dfa50104289, error = 0x8024500c

正在寻找有关如何让我的客户端回调我的 WSUS 服务器的想法。此外,我找不到有关此“服务”的信息。据我所知,它是指向在线 WU 的网络连接的链接。如果有人能告诉我有关 WSUS 如何使用这些服务 ID 或这些故障是什么的信息,我将不胜感激。

更新 1: 这是我找到的最新消息。WSUS 服务器显示 1809 更新是系统需要安装的最后一个更新。更新安装后,计算机重新启动,但此后,没有一个更新签入。如下面的屏幕截图所示。 WSUS 视图

受影响计算机的注册表显示,问题所来自的服务 ID 出现在待处理的注册表项中。不确定这意味着什么。我从 WSUS 中删除了此屏幕截图的计算机并清除了 WSUS ID 注册表项,然后尝试重新连接它。WSUS 服务器尚未看到这台计算机,但日志中出现了相同的错误。请参见下面的屏幕截图。 註冊

失败的服务 ID:

     2018/12/07 07:32:12.5302886 5316  9004  Agent           *FAILED* [80248014] GetServiceObject couldn't find service '117CAB2D-82B1-4B5A-A08C-4D62DBEE7782'.
    2018/12/07 07:32:12.5302932 5316  9004  Agent           *FAILED* [80248014] Method failed [CAgentServiceManager::GetServiceObject:1902]
    2018/12/07 07:32:12.5302982 5316  9004  Agent           *FAILED* [80248014] GetServiceObject couldn't find service '855E8A7C-ECB4-4CA3-B045-1DFA50104289'.
    2018/12/07 07:32:12.5303011 5316  9004  Agent           *FAILED* [80248014] Method failed [CAgentServiceManager::GetServiceObject:1902]
    2018/12/07 07:32:12.5303077 5316  9004  Agent           *FAILED* [80248014] GetServiceObject couldn't find service '7971F918-A847-4430-9279-4A52D1EFE18D'.
    2018/12/07 07:32:12.5303106 5316  9004  Agent           *FAILED* [80248014] Method failed [CAgentServiceManager::GetServiceObject:1902]
    2018/12/07 07:32:12.5313973 5316  9004  Agent           Failed to retrieve SLS response data for service 117cab2d-82b1-4b5a-a08c-4d62dbee7782, error = 0x8024500c
    2018/12/07 07:32:12.5314154 5316  9004  Agent           *FAILED* [8024500C] Caller Service Recovery failed to opt in to service 117cab2d-82b1-4b5a-a08c-4d62dbee7782 (cV: GdfTDldxRUyC9aLL.1)
    2018/12/07 07:32:12.5316674 5316  9004  Agent           Failed to retrieve SLS response data for service 855e8a7c-ecb4-4ca3-b045-1dfa50104289, error = 0x8024500c
    2018/12/07 07:32:12.5316725 5316  9004  Agent           *FAILED* [8024500C] Caller Service Recovery failed to opt in to service 855e8a7c-ecb4-4ca3-b045-1dfa50104289 (cV: GdfTDldxRUyC9aLL.2)
    2018/12/07 07:32:12.5318996 5316  9004  Agent           Failed to retrieve SLS response data for service 7971f918-a847-4430-9279-4a52d1efe18d, error = 0x8024500c
    2018/12/07 07:32:12.5319045 5316  9004  Agent           *FAILED* [8024500C] Caller UpdateOrchestrator failed to opt in to service 7971f918-a847-4430-9279-4a52d1efe18d (cV: GdfTDldxRUyC9aLL.3)
    2018/12/07 07:32:12.5319174 5316  9004  Agent           *FAILED* [80248014] GetServiceObject couldn't find service '7971F918-A847-4430-9279-4A52D1EFE18D'.
    2018/12/07 07:32:12.5319205 5316  9004  Agent           *FAILED* [80248014] Method failed [CAgentServiceManager::GetServiceObject:1902]

基于此微软的文章 其中 2 个 ID 是 MU(Microsoft Update)和 Store。WSUS ID(3DA21691....)未显示为待处理,也没有密钥可供检查。

组策略设置显示我已禁用与外界的所有连接,因为该系统未连接到互联网。 组策略

最后有证据表明他们没有撤回更新,因为 1 月份的更新已获批准,但尚未撤回。他们还不算需要它们,因为机器已经有几个月没有检查了。 更新

仍在寻找更多信息以了解系统未连接到 WSUS 服务器的原因。1809 更新后,我没有进行任何防火墙更改或配置更改,因此更新显然破坏了通信。

答案1

看起来我们的错误报告已经提交给修复小组并且四月更新已经修复了这个问题。

2019-适用于 Windows 10 版本 1809 或基于 x64 的系统的 04 累积更新 (KB4493509)

此更新安装后已重新连接我的客户端,更新现在已从 WSUS 返回。希望这在您的环境中也能发挥作用。

答案2

如果您使用的是 WSUS 服务器 3.0 SP2 或更低版本,请确保计算机不强制执行 SHA1 降级,因为 WSUS 3.0 提供的更新是 SHA1 签名的。WSUS 服务器的修复将于二月发布。

一些上下文信息; https://support.microsoft.com/en-us/help/4472027/2019-sha-2-code-signing-support-requirement-for-windows-and-wsus

相关内容