Plam wrote:

> I have been using MBSA 2.0.1 without any issues for as long as I can
> remember however, in last few days I have been encountering problems with the
> Security Updates Scan.

Note there is a specific newsgroup for MBSA:

microsoft.public.security.baseline_analyzer

You might have better luck there.

Harry.


>
> I have tried using new version MBSA 2.1 but get the same problem. I am
> running the scan from a Windows 2000 SP4 server with internet connection and
> trying to scan PCs over the network (Windows XP SP2, SP3 and Windows 2000
> SP4) which have always worked until now. The strange thing is I have one
> laptop that is working when other machines are failing and the machines have
> same SOE.
>
> Extract of WindowsUpdate.log on failing machine:
>
> 2009-07-03 11:01:43 1612 65c Agent *************
> 2009-07-03 11:01:43 1612 65c Agent ** START ** Agent: Finding updates
> [CallerId = MBSA]
> 2009-07-03 11:01:43 1612 65c Agent *********
> 2009-07-03 11:01:44 1612 65c Agent * WARNING: Failed to synchronize, error
> = 0x8024001A
> 2009-07-03 11:01:44 1612 65c Agent * WARNING: Exit code = 0x8024001A
> 2009-07-03 11:01:44 1612 65c Agent *********
> 2009-07-03 11:01:44 1612 65c Agent ** END ** Agent: Finding updates
> [CallerId = MBSA]
> 2009-07-03 11:01:44 1612 65c Agent *************
> 2009-07-03 11:01:44 1612 65c Agent WARNING: WU client failed Searching for
> update with error 0x8024001a
> 2009-07-03 11:01:44 1612 65c Agent *************
> 2009-07-03 11:01:44 1612 65c Agent ** START ** Agent: Finding updates
> [CallerId = MBSA]
> 2009-07-03 11:01:44 1612 65c Agent *********
> 2009-07-03 11:01:44 1612 65c Misc WARNING: Failed to find token for SID
> S-1-5-21-2771702539-2635403724-962127515-62252 with hr = 80240018.
> 2009-07-03 11:02:06 1612 65c Misc WARNING: Send failed with hr = 80072efd.
> 2009-07-03 11:02:06 1612 65c Misc WARNING: SendRequest failed with hr =
> 80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes
> used : <>
> 2009-07-03 11:02:06 1612 65c Misc WARNING: WinHttp: SendRequestUsingProxy
> failed for
> <http://download.windowsupdate.com/v8/microsoftupdate/redir/muv3muredir.cab>.
> error 0x80072efd
> 2009-07-03 11:02:06 1612 65c Misc WARNING: WinHttp:
> SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efd
> 2009-07-03 11:02:06 1612 65c Misc WARNING: WinHttp:
> SendRequestToServerForFileInformation failed with 0x80072efd
> 2009-07-03 11:02:06 1612 65c Misc WARNING: WinHttp: ShouldFileBeDownloaded
> failed with 0x80072efd
> 2009-07-03 11:02:06 1612 65c Misc WARNING: Failed to find token for SID
> S-1-5-21-2771702539-2635403724-962127515-62252 with hr = 80240018.
> 2009-07-03 11:02:28 1612 65c Misc WARNING: Send failed with hr = 80072efd.
> 2009-07-03 11:02:28 1612 65c Misc WARNING: SendRequest failed with hr =
> 80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes
> used : <>
> 2009-07-03 11:02:28 1612 65c Misc WARNING: WinHttp: SendRequestUsingProxy
> failed for
> <http://download.windowsupdate.com/v8/microsoftupdate/redir/muv3muredir.cab>.
> error 0x80072efd
> 2009-07-03 11:02:28 1612 65c Misc WARNING: WinHttp:
> SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efd
> 2009-07-03 11:02:28 1612 65c Misc WARNING: WinHttp:
> SendRequestToServerForFileInformation failed with 0x80072efd
> 2009-07-03 11:02:28 1612 65c Misc WARNING: WinHttp: ShouldFileBeDownloaded
> failed with 0x80072efd
> 2009-07-03 11:02:28 1612 65c Misc WARNING: Failed to find token for SID
> S-1-5-21-2771702539-2635403724-962127515-62252 with hr = 80240018.
> 2009-07-03 11:02:51 1612 65c Misc WARNING: Send failed with hr = 80072efd.
> 2009-07-03 11:02:51 1612 65c Misc WARNING: SendRequest failed with hr =
> 80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes
> used : <>
> 2009-07-03 11:02:51 1612 65c Misc WARNING: WinHttp: SendRequestUsingProxy
> failed for
> <http://download.windowsupdate.com/v8/microsoftupdate/redir/muv3muredir.cab>.
> error 0x80072efd
> 2009-07-03 11:02:51 1612 65c Misc WARNING: WinHttp:
> SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efd
> 2009-07-03 11:02:51 1612 65c Misc WARNING: WinHttp:
> SendRequestToServerForFileInformation failed with 0x80072efd
> 2009-07-03 11:02:51 1612 65c Misc WARNING: WinHttp: ShouldFileBeDownloaded
> failed with 0x80072efd
> 2009-07-03 11:02:51 1612 65c Misc WARNING: Failed to find token for SID
> S-1-5-21-2771702539-2635403724-962127515-62252 with hr = 80240018.
> 2009-07-03 11:03:13 1612 65c Misc WARNING: Send failed with hr = 80072efd.
> 2009-07-03 11:03:13 1612 65c Misc WARNING: SendRequest failed with hr =
> 80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes
> used : <>
> 2009-07-03 11:03:13 1612 65c Misc WARNING: WinHttp: SendRequestUsingProxy
> failed for
> <http://download.windowsupdate.com/v8/microsoftupdate/redir/muv3muredir.cab>.
> error 0x80072efd
> 2009-07-03 11:03:13 1612 65c Misc WARNING: WinHttp:
> SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efd
> 2009-07-03 11:03:13 1612 65c Misc WARNING: WinHttp:
> SendRequestToServerForFileInformation failed with 0x80072efd
> 2009-07-03 11:03:13 1612 65c Misc WARNING: WinHttp: ShouldFileBeDownloaded
> failed with 0x80072efd
> 2009-07-03 11:03:13 1612 65c Misc WARNING: DownloadFileInternal failed for
> http://download.windowsupdate.com/v8...v3muredir.cab:
> error 0x80072efd
> 2009-07-03 11:03:13 1612 65c Misc WARNING: Failed to find token for SID
> S-1-5-21-2771702539-2635403724-962127515-62252 with hr = 80240018.
> 2009-07-03 11:03:15 1612 65c Misc WARNING: Send failed with hr = 80072efd.
> 2009-07-03 11:03:15 1612 65c Misc WARNING: SendRequest failed with hr =
> 80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes
> used : <>
> 2009-07-03 11:03:15 1612 65c Misc WARNING: WinHttp: SendRequestUsingProxy
> failed for
> <http://download.microsoft.com/v8/microsoftupdate/redir/muv3muredir.cab>.
> error 0x80072efd
> 2009-07-03 11:03:15 1612 65c Misc WARNING: WinHttp:
> SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efd
> 2009-07-03 11:03:15 1612 65c Misc WARNING: WinHttp:
> SendRequestToServerForFileInformation failed with 0x80072efd
> 2009-07-03 11:03:15 1612 65c Misc WARNING: WinHttp: ShouldFileBeDownloaded
> failed with 0x80072efd
> 2009-07-03 11:03:15 1612 65c Misc WARNING: Failed to find token for SID
> S-1-5-21-2771702539-2635403724-962127515-62252 with hr = 80240018.
> 2009-07-03 11:03:17 1612 65c Misc WARNING: Send failed with hr = 80072efd.
> 2009-07-03 11:03:17 1612 65c Misc WARNING: SendRequest failed with hr =
> 80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes
> used : <>
> 2009-07-03 11:03:17 1612 65c Misc WARNING: WinHttp: SendRequestUsingProxy
> failed for
> <http://download.microsoft.com/v8/microsoftupdate/redir/muv3muredir.cab>.
> error 0x80072efd
> 2009-07-03 11:03:17 1612 65c Misc WARNING: WinHttp:
> SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efd
> 2009-07-03 11:03:17 1612 65c Misc WARNING: WinHttp:
> SendRequestToServerForFileInformation failed with 0x80072efd
> 2009-07-03 11:03:17 1612 65c Misc WARNING: WinHttp: ShouldFileBeDownloaded
> failed with 0x80072efd
> 2009-07-03 11:03:17 1612 65c Misc WARNING: Failed to find token for SID
> S-1-5-21-2771702539-2635403724-962127515-62252 with hr = 80240018.
> 2009-07-03 11:03:19 1612 65c Misc WARNING: Send failed with hr = 80072efd.
> 2009-07-03 11:03:19 1612 65c Misc WARNING: SendRequest failed with hr =
> 80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes
> used : <>
> 2009-07-03 11:03:19 1612 65c Misc WARNING: WinHttp: SendRequestUsingProxy
> failed for
> <http://download.microsoft.com/v8/microsoftupdate/redir/muv3muredir.cab>.
> error 0x80072efd
> 2009-07-03 11:03:19 1612 65c Misc WARNING: WinHttp:
> SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efd
> 2009-07-03 11:03:19 1612 65c Misc WARNING: WinHttp:
> SendRequestToServerForFileInformation failed with 0x80072efd
> 2009-07-03 11:03:19 1612 65c Misc WARNING: WinHttp: ShouldFileBeDownloaded
> failed with 0x80072efd
> 2009-07-03 11:03:19 1612 65c Misc WARNING: Failed to find token for SID
> S-1-5-21-2771702539-2635403724-962127515-62252 with hr = 80240018.
> 2009-07-03 11:03:21 1612 65c Misc WARNING: Send failed with hr = 80072efd.
> 2009-07-03 11:03:21 1612 65c Misc WARNING: SendRequest failed with hr =
> 80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes
> used : <>
> 2009-07-03 11:03:21 1612 65c Misc WARNING: WinHttp: SendRequestUsingProxy
> failed for
> <http://download.microsoft.com/v8/microsoftupdate/redir/muv3muredir.cab>.
> error 0x80072efd
> 2009-07-03 11:03:21 1612 65c Misc WARNING: WinHttp:
> SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efd
> 2009-07-03 11:03:21 1612 65c Misc WARNING: WinHttp:
> SendRequestToServerForFileInformation failed with 0x80072efd
> 2009-07-03 11:03:21 1612 65c Misc WARNING: WinHttp: ShouldFileBeDownloaded
> failed with 0x80072efd
> 2009-07-03 11:03:21 1612 65c Misc WARNING: DownloadFileInternal failed for
> http://download.microsoft.com/v8/mic...v3muredir.cab: error
> 0x80072efd
> 2009-07-03 11:03:21 1612 65c Misc WARNING: Failed to find token for SID
> S-1-5-21-2771702539-2635403724-962127515-62252 with hr = 80240018.
> 2009-07-03 11:03:22 1612 65c Misc WARNING: Send failed with hr = 80072efd.
> 2009-07-03 11:03:22 1612 65c Misc WARNING: SendRequest failed with hr =
> 80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes
> used : <>
> 2009-07-03 11:03:22 1612 65c Misc WARNING: WinHttp: SendRequestUsingProxy
> failed for
> <http://update.microsoft.com/v8/microsoftupdate/redir/muv3muredir.cab>. error
> 0x80072efd
> 2009-07-03 11:03:22 1612 65c Misc WARNING: WinHttp:
> SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efd
> 2009-07-03 11:03:22 1612 65c Misc WARNING: WinHttp:
> SendRequestToServerForFileInformation failed with 0x80072efd
> 2009-07-03 11:03:22 1612 65c Misc WARNING: WinHttp: ShouldFileBeDownloaded
> failed with 0x80072efd
> 2009-07-03 11:03:22 1612 65c Misc WARNING: Failed to find token for SID
> S-1-5-21-2771702539-2635403724-962127515-62252 with hr = 80240018.
> 2009-07-03 11:03:23 1612 65c Misc WARNING: Send failed with hr = 80072efd.
> 2009-07-03 11:03:23 1612 65c Misc WARNING: SendRequest failed with hr =
> 80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes
> used : <>
> 2009-07-03 11:03:23 1612 65c Misc WARNING: WinHttp: SendRequestUsingProxy
> failed for
> <http://update.microsoft.com/v8/microsoftupdate/redir/muv3muredir.cab>. error
> 0x80072efd
> 2009-07-03 11:03:23 1612 65c Misc WARNING: WinHttp:
> SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efd
> 2009-07-03 11:03:23 1612 65c Misc WARNING: WinHttp:
> SendRequestToServerForFileInformation failed with 0x80072efd
> 2009-07-03 11:03:23 1612 65c Misc WARNING: WinHttp: ShouldFileBeDownloaded
> failed with 0x80072efd
> 2009-07-03 11:03:23 1612 65c Misc WARNING: Failed to find token for SID
> S-1-5-21-2771702539-2635403724-962127515-62252 with hr = 80240018.
> 2009-07-03 11:03:24 1612 65c Misc WARNING: Send failed with hr = 80072efd.
> 2009-07-03 11:03:24 1612 65c Misc WARNING: SendRequest failed with hr =
> 80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes
> used : <>
> 2009-07-03 11:03:24 1612 65c Misc WARNING: WinHttp: SendRequestUsingProxy
> failed for
> <http://update.microsoft.com/v8/microsoftupdate/redir/muv3muredir.cab>. error
> 0x80072efd
> 2009-07-03 11:03:24 1612 65c Misc WARNING: WinHttp:
> SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efd
> 2009-07-03 11:03:24 1612 65c Misc WARNING: WinHttp:
> SendRequestToServerForFileInformation failed with 0x80072efd
> 2009-07-03 11:03:24 1612 65c Misc WARNING: WinHttp: ShouldFileBeDownloaded
> failed with 0x80072efd
> 2009-07-03 11:03:24 1612 65c Misc WARNING: Failed to find token for SID
> S-1-5-21-2771702539-2635403724-962127515-62252 with hr = 80240018.
> 2009-07-03 11:03:25 1612 65c Misc WARNING: Send failed with hr = 80072efd.
> 2009-07-03 11:03:25 1612 65c Misc WARNING: SendRequest failed with hr =
> 80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes
> used : <>
> 2009-07-03 11:03:25 1612 65c Misc WARNING: WinHttp: SendRequestUsingProxy
> failed for
> <http://update.microsoft.com/v8/microsoftupdate/redir/muv3muredir.cab>. error
> 0x80072efd
> 2009-07-03 11:03:25 1612 65c Misc WARNING: WinHttp:
> SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efd
> 2009-07-03 11:03:25 1612 65c Misc WARNING: WinHttp:
> SendRequestToServerForFileInformation failed with 0x80072efd
> 2009-07-03 11:03:25 1612 65c Misc WARNING: WinHttp: ShouldFileBeDownloaded
> failed with 0x80072efd
> 2009-07-03 11:03:25 1612 65c Misc WARNING: DownloadFileInternal failed for
> http://update.microsoft.com/v8/micro...v3muredir.cab: error
> 0x80072efd
> 2009-07-03 11:03:25 1612 65c Agent * WARNING: Failed to synchronize, error
> = 0x80072EFD
> 2009-07-03 11:03:25 1612 65c Agent * WARNING: Exit code = 0x80072EFD
> 2009-07-03 11:03:25 1612 65c Agent *********
> 2009-07-03 11:03:25 1612 65c Agent ** END ** Agent: Finding updates
> [CallerId = MBSA]
> 2009-07-03 11:03:25 1612 65c Agent *************
> 2009-07-03 11:03:25 1612 65c Agent WARNING: WU client failed Searching for
> update with error 0x80072efd
> 2009-07-03 11:03:25 1612 65c Report REPORT EVENT:
> {7841616D-1831-4198-8E4D-92F01F332AFD} 2009-07-03
> 11:01:44+1000 1 148 101 {00000000-0000-0000-0000-000000000000} 0 8024001a MBSA Failure Software
> Synchronization Error: Agent failed detecting with reason: 0x8024001a
> 2009-07-03 11:03:30 1612 d8 Report REPORT EVENT:
> {48E0446A-A152-4C0F-A36B-47B195B76ED8} 2009-07-03
> 11:03:25+1000 1 148 101 {00000000-0000-0000-0000-000000000000} 0 80072efd MBSA Failure Software
> Synchronization Error: Agent failed detecting with reason: 0x80072efd
> 2009-07-03 11:03:31 5332 1350 Misc =========== Logging initialized (build:
> 5.8.0.2694, tz: +1000) ===========
> 2009-07-03 11:03:31 5332 1350 Misc = Process:
> C:\WINDOWS\system32\wuauclt.exe
> 2009-07-03 11:03:31 5332 1350 Misc = Module: C:\WINDOWS\system32\wuaueng.dll
> 2009-07-03 11:03:31 5332 1350 DtaStor Default service for AU is
> {7971F918-A847-4430-9279-4A52D1EFE18D}
> 2009-07-03 11:03:31 1612 d8 Agent *************
> 2009-07-03 11:03:31 1612 d8 Agent ** START ** Agent: Finding updates
> [CallerId = MBSA]
> 2009-07-03 11:03:31 1612 d8 Agent *********
> 2009-07-03 11:03:41 1612 d8 PT +++++++++++ PT: Synchronizing server
> updates +++++++++++
> 2009-07-03 11:03:41 1612 d8 PT + Offline serviceId =
> {5DD82B9E-FF73-4C5D-87B6-4DA1A2363621}
> 2009-07-03 11:03:47 1612 d8 EEHndlr FATAL: EE Serializer: Encountered
> unknown expression b.LicenseDword
> 2009-07-03 11:03:47 1612 d8 EEHndlr FATAL: Parse failed: error 0x80070057
> 2009-07-03 11:03:47 1612 d8 EEHndlr FATAL: Parse failed with 0x80070057
>
> 2009-07-03 11:03:47 1612 d8 PT WARNING: Sync of Updates: 0x80070057
> 2009-07-03 11:03:47 1612 d8 Agent * WARNING: Failed to synchronize, error
> = 0x80070057
> 2009-07-03 11:03:47 1612 d8 Agent * WARNING: Exit code = 0x80070057
> 2009-07-03 11:03:47 1612 d8 Agent *********
> 2009-07-03 11:03:47 1612 d8 Agent ** END ** Agent: Finding updates
> [CallerId = MBSA]
> 2009-07-03 11:03:47 1612 d8 Agent *************
> 2009-07-03 11:03:47 1612 d8 Agent WARNING: WU client failed Searching for
> update with error 0x80070057
> 2009-07-03 11:03:47 1612 358 Agent WARNING: could not delete
> Software\Microsoft\Windows\CurrentVersion\WindowsU pdate\Services\5dd82b9e-ff73-4c5d-87b6-4da1a2363621 service registry key 0x80070002
> 2009-07-03 11:03:47 1612 358 Agent WARNING: Failed to delete service from
> the backup store, error = 0x80070002
> 2009-07-03 11:03:47 1612 548 Agent WARNING: WU client fails
> CClientCallRecorder::RemoveService with error 0x80248014
> 2009-07-03 11:31:43 1612 4a0 Misc WARNING: Send failed with hr = 80072efd.
> 2009-07-03 11:31:43 1612 4a0 Misc WARNING: SendRequest failed with hr =
> 80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes
> used : <>
> 2009-07-03 11:31:43 1612 4a0 PT + Last proxy send request failed with hr =
> 0x80072EFD, HTTP status code = 0
> 2009-07-03 11:31:43 1612 4a0 PT + Caller provided credentials = No
> 2009-07-03 11:31:43 1612 4a0 PT + Impersonate flags = 0
> 2009-07-03 11:31:43 1612 4a0 PT + Possible authorization schemes used =
> 2009-07-03 11:31:43 1612 4a0 PT WARNING: GetCookie failure, error =
> 0x80072EFD, soap client error = 5, soap error code = 0, HTTP status code = 200
> 2009-07-03 11:31:43 1612 4a0 Report Uploading 2 events using cached cookie,
> reporting URL =
> http://stats.update.microsoft.com/Re...ebService.asmx
> 2009-07-03 11:31:44 1612 4a0 Misc WARNING: Send failed with hr = 80072efd.
> 2009-07-03 11:31:44 1612 4a0 Misc WARNING: SendRequest failed with hr =
> 80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes
> used : <>
> 2009-07-03 11:31:44 1612 4a0 Report WARNING: Failed to upload events to the
> server with hr = 80072efd.
> 2009-07-03 11:31:44 1612 4a0 PT + Last proxy send request failed with hr =
> 0x80072EFD, HTTP status code = 0
> 2009-07-03 11:31:44 1612 4a0 PT + Caller provided credentials = No
> 2009-07-03 11:31:44 1612 4a0 PT + Impersonate flags = 0
> 2009-07-03 11:31:44 1612 4a0 PT + Possible authorization schemes used =
> 2009-07-03 11:31:44 1612 4a0 PT WARNING: ReportEventBatch failure, error =
> 0x80072EFD, soap client error = 5, soap error code = 0, HTTP status code = 200
> 2009-07-03 11:31:44 1612 4a0 Report WARNING: Reporter failed to upload
> events with hr = 80072efd.
>
> Hopefully someone will be able to explain what the problem is.
>
> Thanks
>