Kaseya Community

Patch scan failed - Check machine's Script Log for more information.

Posted by LegacyPoster

on Dec 8, 2007 8:35 AM

Has anyone run into this? The proxy is NOT blocking patch scanning. It began happening suddenly on a site I've had no issues with for almost a year now. Suddently, I'm receiving this in the agent log and cannot see what patches are required: Property = 'search' Code = '12029' - Patch scan failed (Online service registration/service ID resolution failed; A proxy and/or firewall might be interfering with the Windows Update Agent scan process.)

I would think it'd be a firewall/proxy issue considering the server is OK, but all desktops see this error; yet the firewall configuration has not changed, and nothing is showing up as blocked.

Legacy Forum Name: Patch scan failed - Check machine's Script Log for more information.,
Legacy Posted By Username: fccsonline

Posted by LegacyPoster

on Nov 28, 2007 10:45 AM

Turns out ISA server (proxy/firewall on server) is blocking, I missed it when I ran the first query... I'm seeing a lot of blocked traffic to IP addresses which when looked up, point towards windows update. So far I've seen 207.46.209.126, 65.55.5.254, 64.4.23.190, 65.55.13.158... Every time I whitelist an IP, another shows up as being blocked. The old rule of *.microsoft.com as being allowed is no longer working for some reason, and I don't know why this started all of the sudden. Has anyone seen this and created a successful rule using ISA server?

Legacy Forum Name: Patch Management,
Legacy Posted By Username: fccsonline

Posted by LegacyPoster

on Nov 28, 2007 11:09 AM

Checked the ISA configuration according to this thread http://www.kaseya.com/kforum/view_topic.php?id=31&forum_id=13&highlight=isa+server

It's all good... Still getting a whole bunch of "this":

Denied Connection
BMM-SBS 11/27/2007 2:05:26 PM

Log type: Web Proxy (Forward)

Status: 12202 The ISA Server denied the specified Uniform Resource Locator (URL).

Rule: Default rule

Source: Internal ( 192.168.16.21:0)

Destination: External ( 209.170.115.114:80)

Request: GET http://209.170.115.114/v7/windowsupdate/redir/wuredir.cab?0711271905

Filter information: Req ID: 173e6f5d

Protocol: http

User: BMM\TRISTAR062$

file:///C:/Program%20Files/Microsoft%20ISA%20Server/UI_HTMLs/_image/general/minusImg.gif Additional information

Client agent:

Object source:

Processing time:

Cache info:

MIME type:

Legacy Forum Name: Patch Management,
Legacy Posted By Username: fccsonline

Posted by LegacyPoster

on Dec 8, 2007 8:35 AM

I was having this same issue. I checked the server and the workstations and all settings were correct. I decided to create a script that execute a shell command:
proxycfg -p :
and ran this script on all workstations. Then run the patch scan on these machines (wait a while for the patch scan to complete).
Issue resolved.
Don't ask why this works. It just does. I have 3 clients that have this issue. They are no longer failing.

If you have Vista machines, try this one...
netsh winhttp set proxy :

Legacy Forum Name: Patch Management,
Legacy Posted By Username: Drumplayr

Patch Scan script failing

Patch scan failed (Unknown error - check WindowsUpdate.log)

Processing patch scan results for [this machine] failed.

Adding Patch Scan results to Script Log

Script checking if Symantec Endpoint Protection AV is outdated two or more days and putting only those machines in report

Patch scan failed - Check machine's Script Log for more information.