This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(3.2, 47%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ%3C/text%3E%3C/svg%3E)
SBS2011
WSUS 3.2.7600.226
WSUS sync has started to fail over the last few weeks, initially intermittentl, now I cannot get it to complete at all.
Update source is Microsoft
Console error: Unable to resolve the specified upstream server name.
“WebException: The request failed with HTTP status 404: Not Found.
at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)”
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
at Microsoft.UpdateServices.ServerSyncWebServices.ServerSync.ServerSyncProxy.GetAuthConfig()
at Microsoft.UpdateServices.ServerSync.ServerSyncLib.InternetGetServerAuthConfig(ServerSyncProxy proxy, WebServiceCommunicationHelper webServiceHelper)
at Microsoft.UpdateServices.ServerSync.ServerSyncLib.Authenticate(AuthorizationManager authorizationManager, Boolean checkExpiration, ServerSyncProxy proxy, Cookie cookie, WebServiceCommunicationHelper webServiceHelper)
at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.SyncConfigUpdatesFromUSS()
at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.ExecuteSyncProtocol(Boolean allowRedirect)
This seems to be the key bit of the server log
2021-02-06 07:51:26.046 UTC Info w3wp.29 ClientImplementation..ctor Initializing ClientWebService ProcessID = 18412, Process Start Time = 2/6/2021 6:17:59 AM, Product Version = 3.2.7600.325
2021-02-06 07:51:26.065 UTC Info w3wp.29 AuthorizationManager.GetUpstreamServerUriHeader Found config says USS is MU site
2021-02-06 07:51:26.362 UTC Info WsusService.18 SusService.ValidateServerCertificate CheckValidationResult Succeeds: CertOK
2021-02-06 07:51:26.366 UTC Info WsusService.18 ServerCertificateValidator.IsHostAllowedException Requested host: sws1.update.microsoft.com
2021-02-06 07:51:26.367 UTC Info WsusService.18 ServerCertificateValidator.VerifyServerCertificate SSL validation succeeded.
2021-02-06 07:51:26.546 UTC Warning WsusService.18 WebServiceCommunicationHelper.ProcessWebServiceProxyException ProcessWebServiceProxyException found Exception was WebException. Action: Retry. Exception Details: System.Net.WebException: The request failed with HTTP status 404: Not Found.
So it is connecting to sws1.update.microsoft.com, and SSL validation succeeds. It fails after that with some proxy error.
(I realise that this server should be replaced, and work is in hand to migrate to Azure.)
Any help appreciated. Have been unable to fault the installation.
Thanks
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 55.00000000000001%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ES%3C/text%3E%3C/svg%3E)
Same issue here
WSUS Version: 3.2.7600.226
Windows Server 2008 R2 Enterprise
Failed 2021-02-04 06:56:44.560 UTC:
44.154 Info WsusService.19 SusService.ValidateServerCertificate CheckValidationResult Succeeds: CertOK
44.154 Info WsusService.19 ServerCertificateValidator.IsHostAllowedException Requested host: sws1.update.microsoft.com
44.154 Info WsusService.19 ServerCertificateValidator.VerifyServerCertificate SSL validation succeeded.
44.560 Warning WsusService.19 WebServiceCommunicationHelper.ProcessWebServiceProxyException ProcessWebServiceProxyException found Exception was WebException. Action: Retry. Exception Details: System.Net.WebException: The request failed with HTTP status 404: Not Found.
<snip>
Previous day's success was at 2021-02-03 06:29:56.530 UTC
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(304, 65%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPK%3C/text%3E%3C/svg%3E)
Does anyone know if simply disabling the WSUS service on SBS2011 works?
We have other WSUS servers; switching the workstations to use them would be straightforward, I imagine, but what about switching the SBS box itself over to a different update server?
No need to disable. Re-point clients to new WSUS Server. Delete all computers in old WSUS. Change Sync in old WSUS to Manual (no schedule). It will just tick away idly.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(166.4, 44%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBI%3C/text%3E%3C/svg%3E)
Good day, is anyone having the same syncing issue from back last fall? Mine has quit for about 10 days now without any changes to configuration. Message indicating the MS update servers are too busy??
If anyone has any intel, please share.
WSUS 3 is dead (when attempting to sync directly to Microsoft)
https://www.ajtek.ca/blog/no-more-synchronization-for-wsus-3-0-service-pack-2/
Confirmed working on my test box - 14% done now. I don't know if my email to my contacts made the difference or not, but I'm glad it's working for everyone else.
Working here as well!
It seems that it only happened to a lot of people start using SSL lol
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(297.6, 24%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERH%3C/text%3E%3C/svg%3E)
Hi JimSym,
Thanks for your posting on this forum.
According to this link, the WSUS role which installed on the SBS2011 is out of support.
It is recommended to install the WSUS role on the higher Windows version. We could migrate from the SBS2011 to the Windows Server version.
Here is a link for your reference to migrate from SBS2011 to the Windows Server:
https://learn.microsoft.com/en-us/windows-server-essentials/migrate/migrate-windows-small-business-server-2011-standard-to-windows-server-essentials
Hope the above will be helpful. Please feel free to inform me in time if there are any updates about this issue.
Regards,
Rita
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Hi Rita, thank you for posting. I'm not finding anything on the web indicating MS has shut down their update servers to continue pushing updates to WSUS 3.X systems. Has anyone else found such evidence as of yet? My server has the same issue described as per JimSym's post and started on Feb 4th, 2021.
Bob
Hi Rita
Thanks. I, too, am puzzled. In KB "WSUS synchronization fails with SoapException" dated 8/12/2020 it gives specific instruction for server 2008:
"WSUS servers that are running Windows Server 2008 (without the latest update) or earlier versions may be using the https://update.microsoft.com/v6 or https://www.update.microsoft.com synchronization endpoints. Because these versions of Windows don't support SHA256 certificate authentication, use the following settings in the PowerShell scripts:
PowerShell
$config.MUUrl = " https://sws1.update.microsoft.com"
$config.RedirectorChangeNumber = 3011
ft.com"
$config.RedirectorChangeNumber = 3011"
Why would it do this if it is already past end of support?
Thanks
Jim
Hi Jim, which version of WSUS are you running? I'm on SBS 2011 with WSUS 3.2.7600.325
Bob
SBS2011
WSUS 3.2.7600.226
Hmm, I wonder what upgrades it to 325? Are you on paid-for extended support?
Thanks
Jim
Hi Jim, no not on paid -for extended support. Here is the link to the latest update I had installed.
Doesn't seem to be the issue though as I've been on this update for some time now.
Hopefully, someone can provide some advice on why we are getting this HTTP 404 not found error. If you find anything please post here and I will do the same!
Bob
OK, thanks
So you are having the same issue.
Indeed exactly the same. My WSUS server has been working flawlessly and I keep the database maintained daily, then out of the blue on Feb fourth no sync with the HTTP 404 not found error. I can see on my outbound router the connection to MS update websites is getting there but it's like the MS sites are not replying as the error implies?
Bob
Try unchecking all products and classifications and pressing OK. Attempt to sync manually. Then go back and check only the products and classifications you need in your environment and hit OK.
This has happened in the past, and this process fixed it for most.
I replied below if you can see it,
Bob
Also, it would be prudent to view and confirm you have the SHA256 support
https://support.microsoft.com/en-us/topic/update-to-add-sha-2-code-signing-support-for-windows-server-2008-sp2-f120e4d0-da06-6860-3610-59c5cd0b7cd2