Kaseya Community

Patch scan failed - Check machine's Script Log for more information.

  • Has anyone run into this? The proxy is NOT blocking patch scanning. It began happening suddenly on a site I've had no issues with for almost a year now. Suddently, I'm receiving this in the agent log and cannot see what patches are required: Property = 'search' Code = '12029' - Patch scan failed (Online service registration/service ID resolution failed; A proxy and/or firewall might be interfering with the Windows Update Agent scan process.)



    I would think it'd be a firewall/proxy issue considering the server is OK, but all desktops see this error; yet the firewall configuration has not changed, and nothing is showing up as blocked.


    Legacy Forum Name: Patch scan failed - Check machine's Script Log for more information.,
    Legacy Posted By Username: fccsonline
  • Turns out ISA server (proxy/firewall on server) is blocking, I missed it when I ran the first query... I'm seeing a lot of blocked traffic to IP addresses which when looked up, point towards windows update. So far I've seen 207.46.209.126, 65.55.5.254, 64.4.23.190, 65.55.13.158... Every time I whitelist an IP, another shows up as being blocked. The old rule of *.microsoft.com as being allowed is no longer working for some reason, and I don't know why this started all of the sudden. Has anyone seen this and created a successful rule using ISA server?

    Legacy Forum Name: Patch Management,
    Legacy Posted By Username: fccsonline
  • Checked the ISA configuration according to this thread http://www.kaseya.com/kforum/view_topic.php?id=31&forum_id=13&highlight=isa+server



    It's all good... Still getting a whole bunch of "this":







    Denied Connection
    BMM-SBS 11/27/2007 2:05:26 PM

    Log type: Web Proxy (Forward)

    Status: 12202 The ISA Server denied the specified Uniform Resource Locator (URL).

    Rule: Default rule

    Source: Internal ( 192.168.16.21:0)

    Destination: External ( 209.170.115.114:80)

    Request: GET http://209.170.115.114/v7/windowsupdate/redir/wuredir.cab?0711271905

    Filter information: Req ID: 173e6f5d

    Protocol: http

    User: BMM\TRISTAR062$



    file:///C:/Program%20Files/Microsoft%20ISA%20Server/UI_HTMLs/_image/general/minusImg.gif Additional information

    • Client agent: Windows-Update-Agent
    • Object source: Processing time: 1
    • Cache info: 0x0 MIME type:


    Legacy Forum Name: Patch Management,
    Legacy Posted By Username: fccsonline
  • I was having this same issue. I checked the server and the workstations and all settings were correct. I decided to create a script that execute a shell command:
    proxycfg -p :
    and ran this script on all workstations. Then run the patch scan on these machines (wait a while for the patch scan to complete).
    Issue resolved.
    Don't ask why this works. It just does. I have 3 clients that have this issue. They are no longer failing.

    If you have Vista machines, try this one...
    netsh winhttp set proxy :


    Legacy Forum Name: Patch Management,
    Legacy Posted By Username: Drumplayr