WSUS not working

Quartz · 24 Apr 2019 at 19:55

I've got WSUS installed on a WSE 2016 server. It's configured to receive updates from Microsoft.

But my clients don't see it. The error in Event Viewer is Windows Update failed to check for updates with error 0x80240438. The client is not seen in WSUS admin. There are no errors listed in the WindowsUpdate event log on the server.

I've set the update location in the registry using GPEdit using the FQDN. It doesn't appear to be a firewall issue - the error persists if the firewall is off on both ends. Anonymous authentication is on in IIS but I cannot browse to http://myserver.mydomain:8530/ClientWebService/client.asmx

I've tried running GPUpdate /force and wuauclt /resetauthorisation /detectnow and wuauclt /reportnow

I am, of course, missing something obvious. What?

Quartz · 25 Apr 2019 at 14:24

Anyone?

andshrew · 25 Apr 2019 at 21:47

If you can't browse that URL by FQDN can you access it with the IP address?

On the server itself can you browse to http://localhost:8530/ClientWebService/client.asmx

Quartz · 25 Apr 2019 at 22:43

andshrew said:
If you can't browse that URL by FQDN can you access it with the IP address?

No, I cannot. The server - a HP Microserver has two IP addresses and I've checked both.

On the server itself can you browse to http://localhost:8530/ClientWebService/client.asmx

Yes, I can. I get a Client Service web page.

andshrew · 26 Apr 2019 at 22:00

Have you checked the bindings in IIS Manager? Try just attaching the site to one of the IP addresses.

Quartz · 26 Apr 2019 at 23:04

Progress! That's worked in that I can now browse to the URL and revealed that I had a typo in my firewall rule, but now I have to use the IP address in the browser and WSUS admin and the test client is still not seen. And now I'm getting a 503 error on the website. I think I'll just restart. I've screwed something up somewhere.