Fixing WSUS - When the Best Defense is a Good Offense
*Update - With all the current WSUS issues I suggest folks also have a look at this new article from Microsoft, we are currently investigating its affects as well.
High CPU/High Memory in WSUS following Update Tuesdays
So this morning the Desktop guys started complaining about updates on some machines not working.
I started looking at the machine in question and SCCM seemed fine on the PC.
I checked the WUAhander.log and WindowsUpdate.log and came across the following errors:
WUAhander.log
WindowsUpdates.log
I tried all the Windows update agent tricks in the book as I thought the issue was on the machine.
Then I checked my own workstation and it was doing the same so now start to worry that the WSUS box is on the fritz.
I log in and I am greated with the reset node mmc error when trying to open the WSUS console.
So I restarted the server in the hope that it might do the trick. Upon rebooting it looked fine and then the console stopped working again.
So next I try to figure out whats happening in the event viewer:
Does not mean a lot me so I start to research some of the WSUS error codes. Then one stands out HTTP error 503 and I remember something I read on Eswar's blog
Configmgr OnSearchComplete – Failed to end search job Error 0x80244022 WUAHandler.log
So I checked my Wsuspool in IIS and it was stopped. Starting it only works for a while then it stops again.
So I set out to find out more about HTTP error 503 then I came across the technet blog article:
ConfigMgr 2012 Support Tip: WSUS sync fails with HTTP 503 errors
So I did the changes on my Wsuspool in IIS as follows:
Private Memory Limit: 4194304 (4GB)
When I tried to start the apppool again it gave a error so I did an IISreset and after that everything was working as it should again.
I know this looks like a repeat of the other articles but had to add my experience onto it as well.
Thanks a lot for this post. I came across the same error trying to do an OS deployment with updates in SCCM 1610 and the client logs weren't much help. I found this, and it was the exact same issue.
ReplyDeleteExactly the same issues as you! Thanks for this post!
ReplyDeleteHad the same issue with one server that keep causing the WSUSPool to stop. This fixed my issue. Thanks
ReplyDeleteFixed our servers too, thanks!
ReplyDeleteExactly the same issues as you telling ! Thanks for this post!
ReplyDeleteThanks!!!
ReplyDeleteThanks,resolved
ReplyDeleteThank you, exactly what I needed. Helped me resolve a patching issue
ReplyDeleteThank you, this is really helpful.
ReplyDeleteexactly the same issue, what was the Private Memory before you changed to 4GB?
ReplyDeleteI tried 10 GB and I was having still issues the Application Pool will stop... then tried 0 and now the Application Pool runs at 12 gb 13 gb but the software updates are still failing 0x80244022..
In progress...
Thanks,
DOm
Hi there.
DeleteThe default value is 1843200 (1.8GB) which nowadays is why to little.
We currently running ours on 0 but with the last patch Tuesday those Windows 10 Next version updates made the WSUSPool crash again. There were lots of MVP on twitter saying one should decline them. In short one need to do WSUS maintenance. Get rid of stuff you don't need and maintain.
I suggest looking at these articles, we implemented a bit of everything on our sites so I can't point to just one that is the magic fix.
https://blogs.technet.microsoft.com/configurationmgr/2016/01/26/the-complete-guide-to-microsoft-wsus-and-configuration-manager-sup-maintenance/
http://damgoodadmin.com/2018/04/17/software-update-maintenance-script-updated-all-the-wsusness/
https://blogs.technet.microsoft.com/configurationmgr/2017/08/18/high-cpuhigh-memory-in-wsus-following-update-tuesdays/
https://www.mnscug.org/blogs/sherry-kissinger/512-wsus-administration-wsuspool-web-config-settings-enforcement-via-configuration-items