WSUS 2016 server, does not download upgrade files (*.esd) for windows 10.

Question

Hi,

Hope someone here can help me out.

Setup:
Windows 2016 + WSUS feature
Database built in.
Disk free space for wsus updates: 1TB
WSUS is not running through a proxy
Cisco firewall is in front of the WSUS server
Windows 10 is chosen as product, classification: Upgrades

Issue:
WSUS downloads all patches without any issue except for all files ending with .esd

Additional information:
When approving an .esd update, wsus does not download it. On the console you have the error:
The files for this update failed to download.

Error 364, task category 2 is appearing in the application log.
"The server does not support the necessary HTTP protocol. Background intelligent service (BITS) require that the server support the Range protocol header."
This error only appears when downloading .esd files, not .cab files.

We do not have a sonnic firewall in front of the wsus server (Which is described as an issue in articles)

Server 2012 has similar error and a patch can remedy it, but there is no similar patch for 2016.

Tried:
Changed MIME for .esd from default application/vnd.ms-cap.compressed to application/octet-stream
Running bits in foreground
Checking for corrupt internal wsus database
Disabling Antivirus
Checking that traffic flows to/from internet (Which it does, nothing is blocked at all)
Checked that all required URL's/IPs are opened in the firewall

Be ware, it is ONLY .esd files that it can not download, .cap files are not an issue, so answers like repairing OS,
running chkdsk, or issues that prevents wsus to download all patches, are not valid answers, and a vaste of time looking into.
The answer I am looking for should only be related to .esd files.

Answer 1

do you have access to your WSUS DB?
if yes you can query the download URL
by

select * from susdb.dbo.tbfile where Filename like '%.esd%'

the you can use the column MUURL to see the full download link

if you like to use PS, try this

https://www.shellhacks.com/windows-powershell-download-file-from-url/

regards

btw.
did you check the Configuation from your IIS ?

https://www.windows-faq.de/2016/08/24/windows-10-feature-updates-mit-wsus-verteilen-application-octet-stream/

| Please Mark This As Answer if it solved your issue |
| Please Vote This As Helpful if it helps to solve your issue |
| Disclaimer: This posting is provided with no warranties and confers no rights. |
| 48° 0' 22.723" N 11° 40' 59.336" E |

Klaus

Answer 2

HI Frank

Can you manually download the * .esd files from the Windows Update catalog - using PowerShell or using IE or another browser?

Answer 3

Hi,

I have tried to find the .esd files on windows update, but cant find them.
Do you know if they are present, and if so, can you give me hint what to search for?

Also do you know if the esd files are located another place than the normal windows update repository that wsus gets patches from?
We have only opened for the URL's/IPs that microsoft documents as nessecary,

Answer 4

Hi,

Or maybe you know an example of a powershell command I can use.

Answer 5

If you have WAM, you can try using:

.\Clean-WSUS.ps1 -DirtyDatabaseCheck