Home
»
Discussion Forums
»
Patch Management - VSA
»
Patch scan failed - Check machine's Script Log for more information.
Subscribe via RSS
Share this
Similar Posts
Patch Scan script failing
by
LegacyPoster
on
Apr 17, 2008
Patch scan failed (Unknown error - check WindowsUpdate.log)
by
LegacyPoster
on
Dec 13, 2007
Processing patch scan results for [this machine] failed.
by
Houston Technology Group
on
May 9, 2013
Not Answered
Adding Patch Scan results to Script Log
by
LegacyPoster
on
Mar 5, 2009
Script checking if Symantec Endpoint Protection AV is outdated two or more days and putting only those machines in report
by
Daniel
on
Feb 12, 2012
Not Answered
View More
Details
3
Replies
0
Subscribers
Posted
over 13 years ago
Patch Management - VSA
Patch scan failed - Check machine's Script Log for more information.
Posted by
LegacyPoster
on
Dec 8, 2007 8:35 AM
Has anyone run into this? The proxy is NOT blocking patch scanning. It began happening suddenly on a site I've had no issues with for almost a year now. Suddently, I'm receiving this in the agent log and cannot see what patches are required: Property = 'search' Code = '12029' - Patch scan failed (Online service registration/service ID resolution failed; A proxy and/or firewall might be interfering with the Windows Update Agent scan process.)
I would think it'd be a firewall/proxy issue considering the server is OK, but all desktops see this error; yet the firewall configuration has not changed, and nothing is showing up as blocked.
Legacy Forum Name: Patch scan failed - Check machine's Script Log for more information.,
Legacy Posted By Username: fccsonline
You have posted to a forum that requires a moderator to approve posts before they are publicly available.
Posted by
LegacyPoster
on
Nov 28, 2007 10:45 AM
Turns out ISA server (proxy/firewall on server) is blocking, I missed it when I ran the first query... I'm seeing a lot of blocked traffic to IP addresses which when looked up, point towards windows update. So far I've seen 207.46.209.126, 65.55.5.254, 64.4.23.190, 65.55.13.158... Every time I whitelist an IP, another shows up as being blocked. The old rule of *.microsoft.com as being allowed is no longer working for some reason, and I don't know why this started all of the sudden. Has anyone seen this and created a successful rule using ISA server?
Legacy Forum Name: Patch Management,
Legacy Posted By Username: fccsonline
You have posted to a forum that requires a moderator to approve posts before they are publicly available.
Posted by
LegacyPoster
on
Nov 28, 2007 11:09 AM
Checked the ISA configuration according to this thread
http://www.kaseya.com/kforum/view_topic.php?id=31&forum_id=13&highlight=isa+server
It's all good... Still getting a whole bunch of "this":
Denied Connection
BMM-SBS 11/27/2007 2:05:26 PM
Log type:
Web Proxy (Forward)
Status:
12202 The ISA Server denied the specified Uniform Resource Locator (URL).
Rule:
Default rule
Source:
Internal ( 192.168.16.21:0)
Destination:
External ( 209.170.115.114:80)
Request:
GET
http://209.170.115.114/v7/windowsupdate/redir/wuredir.cab?0711271905
Filter information:
Req ID: 173e6f5d
Protocol:
http
User:
BMM\TRISTAR062$
file:///C:/Program%20Files/Microsoft%20ISA%20Server/UI_HTMLs/_image/general/minusImg.gif
Additional information
Client agent:
Windows-Update-Agent
Object source:
Processing time:
1
Cache info:
0x0
MIME type:
Legacy Forum Name: Patch Management,
Legacy Posted By Username: fccsonline
You have posted to a forum that requires a moderator to approve posts before they are publicly available.
Posted by
LegacyPoster
on
Dec 8, 2007 8:35 AM
I was having this same issue. I checked the server and the workstations and all settings were correct. I decided to create a script that execute a shell command:
proxycfg -p :
and ran this script on all workstations. Then run the patch scan on these machines (wait a while for the patch scan to complete).
Issue resolved.
Don't ask why this works. It just does. I have 3 clients that have this issue. They are no longer failing.
If you have Vista machines, try this one...
netsh winhttp set proxy :
Legacy Forum Name: Patch Management,
Legacy Posted By Username: Drumplayr
You have posted to a forum that requires a moderator to approve posts before they are publicly available.