Re: Windows Update on Server 2000 through Terminal Services

"Neil Price" <msgt111104@xxxxxxxxxxxxxxxx> wrote in message
news:BB656805-8737-4038-8B19-CFC15D448AC0@xxxxxxxxxxxxx
....
> Details from WindowsUpdate.log for failed item (TS Session):
>
> 2005-08-11 11:07:38 1176 b28 DnldMgr *********** DnldMgr: New download job
> [UpdateId = {1A525ACB-FF8E-4973-AA47-598AD84DE645}.100] ***********
> 2005-08-11 11:07:39 1176 b28 DnldMgr * BITS job initialized, JobId =
> {C9022E6C-8770-402D-9B4F-BBFDB22D61B8}
> 2005-08-11 11:07:39 1176 b28 DnldMgr BITS job
> {C9022E6C-8770-402D-9B4F-BBFDB22D61B8} using proxy = gtproxy2:80;gtproxy2:80,
> bypass = <local>;<local>
> 2005-08-11 11:07:39 1176 b28 DnldMgr * Downloading from
> http://www.download.windowsupdate.com/msdownload/update/v3-19990518/cabpool/10784089.cab
> to
> C:\WINNT\SoftwareDistribution\Download\S-1-5-18\ba5f07d10005bdf6a1af363275005181\6312f4f04ff6aded5598b009787817f91d70e12f (full
> file).
> 2005-08-11 11:07:39 1176 344 DnldMgr WARNING: BITS job
> {C9022E6C-8770-402D-9B4F-BBFDB22D61B8} failed, updateId =
> {1A525ACB-FF8E-4973-AA47-598AD84DE645}.100, hr = 0x80190197, BG_ERROR_CONTEXT
> = 5


S-1-5-18 is the SID for the System Account.

0x80190197 is your intermediate server (whatever you want to call it)
telling WU (in an HTTP 407 response) that it is not authorized
to use the link.

You need to get your server to allow anonymous connections
for the services. There is provision for specific logons in the
services' properties pages but supposedly it is not supported.

http://www.microsoft.com/technet/prodtechnol/winxppro/support/updateauthen.mspx

(Courtesy suraj )


HTH

Robert
---


>I have the same problem (Win 2000 Server SP4, TS in admin mode) & can confirm
> that it is NOT a proxy problem. When logged in as domain admin via terminal
> services I get 0x8024401B error for all downloads it attempts (the scan
> functionality works correctly). However when logged in as domain admin on
> the console (without any changes to the system or user) the patches all
> downloaded and installed correctly. I have since returned to the TS session
> (same login) and tried to install an optional hardware update ... and it
> fails with 0x8024401B error.
>
> Example Details from WindowsUpdate.log for successful item (Console):
>
> 2005-08-11 10:56:47 432 2b4 DnldMgr *********** DnldMgr: New download job
> [UpdateId = {ECE36A54-7D3A-4935-AD93-D85B77137D15}.100] ***********
> 2005-08-11 10:56:47 432 2b4 DnldMgr * BITS job initialized, JobId =
> {70D2F24F-C995-4499-98DF-005D89497FBC}
> 2005-08-11 10:56:47 432 2b4 DnldMgr BITS job
> {70D2F24F-C995-4499-98DF-005D89497FBC} using proxy = gtproxy2:80;gtproxy2:80,
> bypass = <local>;<local>
> 2005-08-11 10:56:47 432 2b4 DnldMgr * Downloading from
> http://www.download.windowsupdate.com/msdownload/update/v5/psf/windows2000-kb899591-x86-enu_c0661008d11438e5f5f498694e6f421743f0b198.psf
> to
> C:\WINNT\SoftwareDistribution\Download\S-1-5-21-1390067357-1177238915-682003330-500\13b2a74dd74e724931de0d368835e7fa\download\Windows2000-KB899591-x86-ENU.psf.blob
> (1 subranges).
> 2005-08-11 10:56:48 432 2b4 DnldMgr BITS job
> {70D2F24F-C995-4499-98DF-005D89497FBC} completed successfully
>
>
> Details from WindowsUpdate.log for failed item (TS Session):
>
> 2005-08-11 11:07:38 1176 b28 DnldMgr *********** DnldMgr: New download job
> [UpdateId = {1A525ACB-FF8E-4973-AA47-598AD84DE645}.100] ***********
> 2005-08-11 11:07:39 1176 b28 DnldMgr * BITS job initialized, JobId =
> {C9022E6C-8770-402D-9B4F-BBFDB22D61B8}
> 2005-08-11 11:07:39 1176 b28 DnldMgr BITS job
> {C9022E6C-8770-402D-9B4F-BBFDB22D61B8} using proxy = gtproxy2:80;gtproxy2:80,
> bypass = <local>;<local>
> 2005-08-11 11:07:39 1176 b28 DnldMgr * Downloading from
> http://www.download.windowsupdate.com/msdownload/update/v3-19990518/cabpool/10784089.cab
> to
> C:\WINNT\SoftwareDistribution\Download\S-1-5-18\ba5f07d10005bdf6a1af363275005181\6312f4f04ff6aded5598b009787817f91d70e12f (full
> file).
> 2005-08-11 11:07:39 1176 344 DnldMgr WARNING: BITS job
> {C9022E6C-8770-402D-9B4F-BBFDB22D61B8} failed, updateId =
> {1A525ACB-FF8E-4973-AA47-598AD84DE645}.100, hr = 0x80190197, BG_ERROR_CONTEXT
> = 5
> 2005-08-11 11:07:39 1176 344 DnldMgr Progress failure bytes total =
> 196362, bytes transferred = 0
> 2005-08-11 11:07:39 1176 344 DnldMgr Failed job file: URL =
> http://www.download.windowsupdate.com/msdownload/update/v3-19990518/cabpool/10784089.cab,
> local path =
> C:\WINNT\SoftwareDistribution\Download\S-1-5-18\ba5f07d10005bdf6a1af363275005181\6312f4f04ff6aded5598b009787817f91d70e12f
> 2005-08-11 11:07:39 1176 344 DnldMgr WARNING: Download job failed because of
> proxy auth or server auth.
> 2005-08-11 11:07:39 1176 344 DnldMgr *********** DnldMgr: New download job
> [UpdateId = {1A525ACB-FF8E-4973-AA47-598AD84DE645}.100] ***********
> 2005-08-11 11:07:39 1176 344 DnldMgr WARNING: SetCredentials for NEGOTIATE
> AUTH proxy failed with 0x800704dd
>
> 2005-08-11 11:07:39 1176 344 DnldMgr FATAL:
> DM:CAgentDownloadManager::DownloadUpdate: pDownloadJob->Init failed with
> 0x8024401b.
> 2005-08-11 11:07:39 1176 344 DnldMgr WARNING: Got error (hr = 8024401b)
> starting update 0 in call 3. Notifying call.
> 2005-08-11 11:07:39 1176 344 DnldMgr Error 0x8024401b occurred while
> downloading update; notifying dependent calls.

....



.

Relevant Pages

  • Re: secure file uploads and downloads
    ... Have two flags stored somewhere (i.e. ... allow uploads, the other says allow downloads. ... You could also store the flags in $_SESSION; ...
    (comp.lang.php)
  • Re: Interactive Services in Vista - impossible at all?
    ... and add an access-allowed ACE with the obtained sid to Winsta0 & ... i.e. does *not* run on the interactive Winsta. ... even the console GUI session is not running in session 0 ...
    (microsoft.public.platformsdk.security)
  • Re: How to detect if is it system service ?
    ... the account the code is running under, for instance most services run under the system account. ... In Vista and later you could also check the session since services run in Session 0 while normal code runs in other sessions. ... It should pass errors on to the calling program and let that handle the errors. ... However there are some reasons which make this acceptable in this case: it is only done in debug builds and also it is only done when "sky is falling" type of error is detected and it is then easy to attach the debugger to the program and then debug the situation. ...
    (microsoft.public.win32.programmer.kernel)
  • Re: Something I am doing with Session seems funky
    ... > I am reading some data from a database and placing the values into session ... > for each sessitem in Session.Contents ... > AUTH - True ... > UserType - N ...
    (microsoft.public.inetserver.asp.general)
  • Re: How to detect if is it system service ?
    ... the account the code is running under, for instance most services run under the system account. ... In Vista and later you could also check the session since services run in Session 0 while normal code runs in other sessions. ... It should pass errors on to the calling program and let that handle the errors. ... However there are some reasons which make this acceptable in this case: it is only done in debug builds and also it is only done when "sky is falling" type of error is detected and it is then easy to attach the debugger to the program and then debug the situation. ...
    (microsoft.public.win32.programmer.kernel)
Quantcast