View Single Post
  #6 (permalink)  
Old 07-03-2009
MowGreen
 

Posts: n/a
Re: MBSA: error occurred while scanning for security updates. (0x8
Plam,

As both Harry and Engel have kindly pointed out, the MBSA newsgroup
would be the best place to post this issue to.

80240018 Operation failed due to missing user token
80070057 Parameter incorrect
8024001a Policy value is not set

The Protocal Talker failure appears to be the initial error that is
causing the rest of the communication errors.

I'm not entirely clear on the setup being used but it certainly appears
that the system that MBSA can be successfully run on is trying to
contact the MS update server:

2009-07-03 10:53:41:835 1784 15d4 Report Uploading 1 events using cached
cookie, reporting URL =
http://stats.update.microsoft.com/Re...ebService.asmx
2009-07-03 10:53:42:757 1784 15d4 Misc WARNING: Send failed with hr =
80072efd.

What is the Version of the Windows Update Agent and is WSUS deploying
the updates ?

Is their a Local Policy and a Group Policy being applied to the systems?


MowGreen
===============
*-343-* FDNY
Never Forgotten
===============



Ǝиçεl wrote:

> Hi Plam,
>
> Sorry can not find info on that error (0x80070057) maybe one of the others
> on the board have seen it.....
>
> After a MBSA search it doesn't seem that anyone else has posted
> issues with this error 0x80070057, is hard to find reference here
>
> <http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?query=0x80070057&dg=microsoft.public. security.baseline_analyzer&cat=en_US_c7babbb6-8955-4765-bd46-24111b893df4&lang=en&cr=US&pt=&catlist=&dglist=&pt list=&exp=&sloc=en-us>
>
> I suggest try here
>
> <http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.security.baseline _analyzer&cat=en_US_c7babbb6-8955-4765-bd46-24111b893df4&lang=en&cr=US>
>
>
> Luckily there are some pretty experienced and helpful members on this forum
> that can help you out.
>
> Good luck
> -=-
>
>
> "Plam" wrote:
>
>
>>Hi, thanks for your reply,
>>
>>The error generated by MBSA scan was: An error occurred while scanning for
>>security updates. (0x80070057)
>>
>>The Windows Firewall is turned off on all machines that are logged onto the
>>domain. Also I assumed as I am running the MBSA scan from an internal server
>>to machines that are connected to the network which I have full admin access
>>to, the machines I am scanning would not be contacting the external update
>>site? The server seems to be downloading the cab file without any issues.
>>
>>Also I do get the error 80072efd on a machine that is running the MBSA scan
>>without any problems - very strange. The main difference in the log between
>>the working one and the failed one seems to be this error: WARNING: Failed to
>>find token for SID S-1-5-21-2771702539-2635403724-962127515-62252 with hr =
>>80240018. Do you know what this means?
>>
>>Extract of WindowsUpdate.log that works okay:
>>
>>2009-07-03 10:22:03:398 1784 1780 Agent *************
>>2009-07-03 10:22:03:398 1784 1780 Agent ** START ** Agent: Finding updates
>>[CallerId = MBSA]
>>2009-07-03 10:22:03:398 1784 1780 Agent *********
>>2009-07-03 10:22:03:398 1784 1780 Agent * Include potentially superseded
>>updates
>>2009-07-03 10:22:03:398 1784 1780 Agent * Online = Yes; Ignore download
>>priority = No
>>2009-07-03 10:22:03:398 1784 1780 Agent * Criteria = "IsInstalled=0 or
>>IsInstalled=1"
>>2009-07-03 10:22:03:398 1784 1780 Agent * ServiceID =
>>{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}
>>2009-07-03 10:22:07:085 1784 1780 PT WARNING: PTError: 0x8024001a
>>2009-07-03 10:22:07:085 1784 1780 PT WARNING: PTError: 0x8024001a
>>2009-07-03 10:22:07:085 1784 1780 PT WARNING: Initialization failed for
>>Protocol Talker Context: 0x8024001a
>>2009-07-03 10:22:07:085 1784 1780 Agent * WARNING: Failed to synchronize,
>>error = 0x8024001A
>>2009-07-03 10:22:07:116 1784 1780 Agent * WARNING: Exit code = 0x8024001A
>>2009-07-03 10:22:07:116 1784 1780 Agent *********
>>2009-07-03 10:22:07:116 1784 1780 Agent ** END ** Agent: Finding updates
>>[CallerId = MBSA]
>>2009-07-03 10:22:07:116 1784 1780 Agent *************
>>2009-07-03 10:22:07:116 1784 1780 Agent WARNING: WU client failed Searching
>>for update with error 0x8024001a
>>2009-07-03 10:22:07:476 1784 1780 Agent *************
>>2009-07-03 10:22:07:491 1784 1780 Agent ** START ** Agent: Finding updates
>>[CallerId = MBSA]
>>2009-07-03 10:22:07:491 1784 1780 Agent *********
>>2009-07-03 10:22:07:491 1784 1780 Agent * Include potentially superseded
>>updates
>>2009-07-03 10:22:07:491 1784 1780 Agent * Online = Yes; Ignore download
>>priority = No
>>2009-07-03 10:22:07:491 1784 1780 Agent * Criteria = "IsInstalled=0 or
>>IsInstalled=1"
>>2009-07-03 10:22:07:491 1784 1780 Agent * ServiceID =
>>{7971F918-A847-4430-9279-4A52D1EFE18D}
>>2009-07-03 10:22:07:507 1784 1780 Misc Validating signature for
>>C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4 B4-E343-43B6-B170-9A65BC822C77\wuredir.cab:
>>2009-07-03 10:22:07:679 1784 1780 Misc Microsoft signed: Yes
>>2009-07-03 10:22:07:695 1784 1780 Misc WARNING: WinHttp:
>>SendRequestToServerForFileInformation failed with 0x80190197
>>2009-07-03 10:22:07:695 1784 1780 Misc WARNING: WinHttp:
>>ShouldFileBeDownloaded failed with 0x80190197
>>2009-07-03 10:22:07:695 1784 1780 Misc WARNING: DownloadFileInternal failed
>>for http://download.windowsupdate.com/v7...r/wuredir.cab:
>>error 0x80190197
>>2009-07-03 10:22:07:695 1784 1780 Misc Validating signature for
>>C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4 B4-E343-43B6-B170-9A65BC822C77\wuredir.cab:
>>2009-07-03 10:22:07:882 1784 1780 Misc Microsoft signed: Yes
>>2009-07-03 10:22:07:898 1784 1780 Misc WARNING: WinHttp:
>>SendRequestToServerForFileInformation failed with 0x80190197
>>2009-07-03 10:22:07:898 1784 1780 Misc WARNING: WinHttp:
>>ShouldFileBeDownloaded failed with 0x80190197
>>2009-07-03 10:22:07:898 1784 1780 Misc WARNING: DownloadFileInternal failed
>>for http://download.microsoft.com/v7/win...r/wuredir.cab: error
>>0x80190197
>>2009-07-03 10:22:07:898 1784 1780 Misc Validating signature for
>>C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4 B4-E343-43B6-B170-9A65BC822C77\wuredir.cab:
>>2009-07-03 10:22:08:116 1784 1780 Misc Microsoft signed: Yes
>>2009-07-03 10:22:08:132 1784 1780 Misc WARNING: WinHttp:
>>SendRequestToServerForFileInformation failed with 0x80190197
>>2009-07-03 10:22:08:132 1784 1780 Misc WARNING: WinHttp:
>>ShouldFileBeDownloaded failed with 0x80190197
>>2009-07-03 10:22:08:132 1784 1780 Misc WARNING: DownloadFileInternal failed
>>for http://www.update.microsoft.com/v7/w...r/wuredir.cab: error
>>0x80190197
>>2009-07-03 10:22:08:132 1784 1780 Agent WARNING: Failed to obtain the
>>authorization cab URLs, hr=0X80190197
>>2009-07-03 10:22:08:132 1784 1780 Agent * WARNING: Online service
>>registration/service ID resolution failed, hr=0x80190197
>>2009-07-03 10:22:08:132 1784 1780 Agent * WARNING: Exit code = 0x80190197
>>2009-07-03 10:22:08:132 1784 1780 Agent *********
>>2009-07-03 10:22:08:132 1784 1780 Agent ** END ** Agent: Finding updates
>>[CallerId = MBSA]
>>2009-07-03 10:22:08:132 1784 1780 Agent *************
>>2009-07-03 10:22:08:132 1784 1780 Agent WARNING: WU client failed Searching
>>for update with error 0x80190197
>>2009-07-03 10:22:12:116 1784 1780 Report REPORT EVENT:
>>{9E587435-03AB-4DF1-8DBA-55FB6992A190} 2009-07-03
>>10:22:07:116+1000 1 148 101 {00000000-0000-0000-0000-000000000000} 0 8024001a MBSA Failure Software
>>Synchronization Windows Update Client failed to detect with error 0x8024001a.
>>2009-07-03 10:22:12:116 1784 1780 Report REPORT EVENT:
>>{D1EA9CA5-62EA-41C0-A9FD-6AA0F958F961} 2009-07-03
>>10:22:08:132+1000 1 148 101 {00000000-0000-0000-0000-000000000000} 0 80190197 MBSA Failure Software
>>Synchronization Windows Update Client failed to detect with error 0x80190197.
>>2009-07-03 10:22:14:570 1784 8c0 Misc Validating signature for
>>C:\WINDOWS\SoftwareDistribution\ScanFile\83f3762 d-b9ef-413b-baec-04b4ab1fdd1f\Source.cab:
>>2009-07-03 10:22:19:195 1784 8c0 Misc Microsoft signed: Yes
>>2009-07-03 10:22:19:820 4508 2bc Misc =========== Logging initialized
>>(build: 7.0.6000.374, tz: +1000) ===========
>>2009-07-03 10:22:19:820 4508 2bc Misc = Process:
>>C:\WINDOWS\system32\wuauclt.exe
>>2009-07-03 10:22:19:820 4508 2bc Misc = Module:
>>C:\WINDOWS\system32\wuaueng.dll
>>2009-07-03 10:22:19:820 4508 2bc DtaStor Default service for AU is
>>{7971F918-A847-4430-9279-4A52D1EFE18D}
>>2009-07-03 10:22:21:023 1784 1780 Agent *************
>>2009-07-03 10:22:21:023 1784 1780 Agent ** START ** Agent: Finding updates
>>[CallerId = MBSA]
>>2009-07-03 10:22:21:023 1784 1780 Agent *********
>>2009-07-03 10:22:21:023 1784 1780 Agent * Include potentially superseded
>>updates
>>2009-07-03 10:22:21:023 1784 1780 Agent * Online = Yes; Ignore download
>>priority = No
>>2009-07-03 10:22:21:023 1784 1780 Agent * Criteria = "IsInstalled=0 or
>>IsInstalled=1"
>>2009-07-03 10:22:21:023 1784 1780 Agent * ServiceID =
>>{83F3762D-B9EF-413B-BAEC-04B4AB1FDD1F}
>>2009-07-03 10:22:35:804 1784 1780 PT +++++++++++ PT: Synchronizing server
>>updates +++++++++++
>>2009-07-03 10:22:35:804 1784 1780 PT + Offline serviceId =
>>{83F3762D-B9EF-413B-BAEC-04B4AB1FDD1F}
>>2009-07-03 10:22:35:804 1784 1780 PT WARNING: Cached cookie has expired or
>>new PID is available
>>2009-07-03 10:22:47:085 1784 1780 Agent WARNING: Failed to evaluate
>>Installed rule, updateId = {A901C1BD-989C-45C6-8DA0-8DDE8DBB69E0}.103, hr =
>>8024E001
>>2009-07-03 10:26:39:288 1784 1780 PT +++++++++++ PT: Synchronizing extended
>>update info +++++++++++
>>2009-07-03 10:26:39:288 1784 1780 PT + Offline serviceId =
>>{83F3762D-B9EF-413B-BAEC-04B4AB1FDD1F}
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>2009-07-03 10:26:39:288 1784 1780 OfflSnc WARNING: Failed to add file to the
>>FileLocationList with 0x80240013
>>Added update {C78DBB56-733C-4B76-95BE-CFF5CFFE777A}.100 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{12E9D256-3F20-4298-A451-3F20BEEC6C11}.102 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{9961B757-C506-4AE0-A8F8-CE0477CD7ECE}.102 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{91D6CD5E-F161-4766-94C1-B26C74222683}.103 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{0975455F-D040-4EEC-9013-81D19BF3DD0A}.102 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{8454B161-38E8-46A5-8F95-57D7B3161E0C}.104 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{013F4662-1ED4-4220-B7FC-3B7BEDE068D1}.102 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{1E59F963-12F5-4BFD-A73D-366921779C28}.102 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{C549AD65-F3B3-42E6-B0D7-6FE55576F2BB}.102 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{BC8E1666-737B-415E-A038-FBF842E5BAE8}.103 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{5C9AF266-A92D-4A20-BE8D-B5FEEC7ADD19}.100 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{8418F76B-302D-4A1B-B9E2-F018CFE56AE1}.103 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{278BB66C-CE54-40FB-A5A2-AE55804C3917}.106 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{B00FE76D-8C87-48A2-9D5D-FD2D1336698C}.100 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{DD2CC470-501A-4BF2-BC57-88C8F52439EB}.11 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{6ADAE970-39E2-4B94-8337-C49401FF07FA}.100 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{09C1F073-C82F-400A-BB9B-1559BC8DFC64}.102 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{D1F84C75-F914-4FC7-94D5-446DC7987844}.102 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{7255E676-4830-42CA-B30D-1A23E22B1C9A}.108 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{60D8E377-4268-49E3-9193-8CF31BFB0DC5}.100 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{F4789278-6AB5-4CE6-AC4E-51A01746669B}.104 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{4CDB577B-FDD1-49D4-87CC-3808AD20ACBC}.102 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{18250E7C-B36E-4162-838D-1C4B408D8B73}.102 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{94D1CE7E-B5B0-49AB-A127-BD7E684AF2D4}.100 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{E0A7FC7E-FF6E-4559-990B-4B4A01F0AD39}.100 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{BEEAF67F-53D9-46E2-8C06-DDF108D5D631}.100 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{0B0C5180-371F-4F70-97D3-BF7601811F89}.103 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{4B689082-CA9C-46CC-B2FC-720FEDE21299}.10 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{0F4FB382-5878-48C5-B7A4-C70F8EB0D7C6}.102 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{C8F8E983-CE29-4854-B00A-4B25EC26B60F}.101 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{7FF134C3-2D92-4A71-95C8-AFB47C6548F2}.100 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{AEBBC1C3-D659-484B-AE67-B2572C2D84CF}.100 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{215D1FC7-5808-4743-93E5-7E913818F1CC}.101 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{2047D1C8-619D-4D22-9351-97D912F33EB7}.103 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{AD955CC9-3A14-4175-9145-171B20230BF9}.100 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{D6C96BC9-5CD0-4CB8-9614-6BB691E6FFD9}.100 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{B20C7AC9-F972-480C-9601-DE0486342506}.11 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{57ADACC9-C673-40B7-A946-6671AB71AD23}.101 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{70E702CB-5D44-494D-8594-476AC774CD51}.100 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{5D2787CB-BCB5-439D-B734-3E6F1B21B2DD}.105 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{1D1CC0CB-AC23-4F49-80CB-DA1DE2368DA3}.104 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{015984CC-2265-47B6-B255-1818F9937F20}.102 to search result
>>2009-07-03 10:26:46:351 1784 1780 Agent * Added update
>>{FD8054CE-C8D8-4C5C-93D3-B98C707BFE0F}.102 to search result

Reply With Quote