Issues with Windows Server 2016/Defender updates

Question

Hi, I have issue with Windows Server 2016/Defender updates on a single machine - unfortunately that is MECM 2010 itself hosting MP/SUP/RSP/... roles. All other systems managed by MECM 2010 are fine. Errors I see in logs are.

updatesdeployment.log

GetUpdateInfo - failed to get targeted update, error = 0x87d00215. UpdatesDeploymentAgent 1/9/2021 5:57:51 AM 8232 (0x2028)
GetUpdateInfo - failed to get targeted update, error = 0x87d00215. UpdatesDeploymentAgent 1/9/2021 5:57:51 AM 8232 (0x2028)
GetUpdateInfo - failed to get targeted update, error = 0x87d00215. UpdatesDeploymentAgent 1/9/2021 5:57:51 AM 8232 (0x2028)

windowsupdate.log

2021/01/09 05:58:01.0681044 916 3472 WebServices WS error: There was an error communicating with the endpoint at 'http://ServerFQDN:8530/SimpleAuthWebService/SimpleAuth.asmx'.
2021/01/09 05:58:01.0681057 916 3472 WebServices WS error: The server returned HTTP status code '503 (0x1F7)' with text 'Service Unavailable'.
2021/01/09 05:58:01.0681066 916 3472 WebServices WS error: The service is temporarily overloaded.
2021/01/09 05:58:01.0681080 916 3472 WebServices Web service call failed with hr = 80244022.

Any help would be appreciated. I am able to access service on this URL from browser with proxy we are using in the environment (squid) but I had to enter http://ServerFQDN as exception despite bypass proxy server for local addresses being checked.

Answer 1

@Bojan Zivkovic
Thank you for posting in Microsoft Q&A forum.
How about the wuahandler.log?
Have you tried to upgrade or reinstall the client agent?

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

I have just reinstalled CM client with option to uninstall it before. Having run cycles in CP applet now I have this:

GetUpdateInfo - failed to get targeted update, error = 0x87d00215. UpdatesDeploymentAgent 1/11/2021 3:07:18 AM 11396 (0x2C84)
GetUpdateInfo - failed to get targeted update, error = 0x87d00215. UpdatesDeploymentAgent 1/11/2021 3:07:18 AM 11396 (0x2C84)
GetUpdateInfo - failed to get targeted update, error = 0x87d00215. UpdatesDeploymentAgent 1/11/2021 3:07:18 AM 11396 (0x2C84)

OnSearchComplete - Failed to end search job. Error = 0x80244022. WUAHandler 1/11/2021 3:09:54 AM 11396 (0x2C84)
Scan failed with error = 0x80244022. WUAHandler 1/11/2021 3:09:54 AM 11396 (0x2C84)

So pretty much same as before.

Answer 3

@Bojan Zivkovic
Thank you for your feedback.
Error 0x80244022: Same as HTTP status 503 - the service is temporarily overloaded.
You may check IIS to see if WsusPool is started? And it's recommended to configure the WSUS App pool memory limit with 8-12 GB, or set the private memory limit to 0.

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 4

WsusPool is started and set to 4 GB (before it was 0 but same issues on this server only). Other 90+ are fine.

Answer 5

@Bojan Zivkovic
Please check whether do you've any connectivity issue between the site server and the client?
Also check the proxy or firewall settings.