I uninstalled ISA2004 and ever since WSUS has failed to sync with Windows
Update.

In the error log i get this:

WebException: The underlying connection was closed: Unable to connect to the
remote server. ---> System.Net.WebException: The underlying connection was
closed: Unable to connect to the remote server.
at System.Net.HttpWebRequest.CheckFinalStatus()
at System.Net.HttpWebRequest.EndGetRequestStream(IAsyncResult asyncResult)
at System.Net.HttpWebRequest.GetRequestStream()
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String
methodName, Object[] parameters)
at
Microsoft.UpdateServices.ServerSyncWebServices.ServerSync.ServerSyncProxy.GetAuthConfig()
at
Microsoft.UpdateServices.ServerSync.ServerSyncLib.InternetGetServerAuthConfig(ServerSyncProxy proxy, WebServiceCommunicationHelper webServiceHelper)
at
Microsoft.UpdateServices.ServerSync.ServerSyncLib.Authenticate(AuthorizationManager
authorizationManager, Boolean checkExpiration, ServerSyncProxy proxy, Cookie
cookie, WebServiceCommunicationHelper webServiceHelper)
at
Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.InternalGetConfig()
at
Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.CatalogSyncThreadProcessReal(Boolean allowRedirect)


the server name and port (8080) are in the proxy fields in the WSUS sync
options, no username/password though (not needed, right?)

I dont really understand the the above error (google has failed me this
time) so not sure where to look for a solution, short or
uninstalling/reinstalling.

Thanks in advance

Re: WSUS Resync failure since ISA 2004 uninstall by PHason

PHason
Mon Jun 30 11:41:05 PDT 2008

When using ISA you want to use proxy settings to connect to the update
server. With ISA uninstalled, you will want to remove the proxy
settings.

I recently uninstalled ISA and that is what I did to get it to synch
successfully.


On Jun 30, 6:03=A0am, Tobias <Tob...@discussions.microsoft.com> wrote:
> I uninstalled ISA2004 and ever since WSUS has failed to sync with Windows
> Update.
>
> In the error log i get this:
>
> WebException: The underlying connection was closed: Unable to connect to =
the
> remote server. ---> System.Net.WebException: The underlying connection wa=
s
> closed: Unable to connect to the remote server.
> at System.Net.HttpWebRequest.CheckFinalStatus()
> at System.Net.HttpWebRequest.EndGetRequestStream(IAsyncResult asyncResult=
)
> at System.Net.HttpWebRequest.GetRequestStream()
> at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String
> methodName, Object[] parameters)
> at
> Microsoft.UpdateServices.ServerSyncWebServices.ServerSync.ServerSyncProxy=
.G=ADetAuthConfig()
> at
> Microsoft.UpdateServices.ServerSync.ServerSyncLib.InternetGetServerAuthCo=
nf=ADig(ServerSyncProxy proxy, WebServiceCommunicationHelper webServiceHelp=
er)
> at
> Microsoft.UpdateServices.ServerSync.ServerSyncLib.Authenticate(Authorizat=
io=ADnManager
> authorizationManager, Boolean checkExpiration, ServerSyncProxy proxy, Coo=
kie
> cookie, WebServiceCommunicationHelper webServiceHelper)
> at
> Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.InternalGetConfi=
g(=AD)
> at
> Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.CatalogSyncThrea=
dP=ADrocessReal(Boolean allowRedirect)
>
> the server name and port (8080) =A0are in the proxy fields in the WSUS sy=
nc
> options, no username/password though (not needed, right?)
>
> I dont really understand the the above error (google has failed me this
> time) so not sure where to look for a solution, =A0short or
> uninstalling/reinstalling.
>
> Thanks in advance


Re: WSUS Resync failure since ISA 2004 uninstall by Tobias

Tobias
Tue Jul 01 00:51:01 PDT 2008


Thanks for the suggestion. But when i try to remove the proxy info and save
the settings, i get this error

"THe Encryption key cannot be retrieved.

System.Security.Cryptography.CryptographicException: The encryption key
cannot be retrieved. --->
System.Security.Cryptography.CryptographicException: An error occurred in the
DPAPI. HRESULT: 0x8007000D
at Microsoft.UpdateServices.Internal.DataProtectionApi.Decrypt(Byte[]
toDecrypt, Byte[] entropy, EncryptionLevel level)
at
Microsoft.UpdateServices.Internal.EncryptionUtilities.GetEncryptionKeyThread()
--- End of inner exception stack trace ---
at Microsoft.UpdateServices.Internal.EncryptionUtilities.GetEncryptionKey()
at
Microsoft.UpdateServices.Internal.EncryptionUtilities.EncryptString(String
stringToEncrypt)
at
Microsoft.UpdateServices.Internal.BaseApi.UpdateServerConfiguration.set_ProxyPassword(String value)
at
Microsoft.UpdateServices.Internal.BaseApi.UpdateServerConfiguration.SetProxyPassword(String password)
at
Administration.Manage.Subscriptions.SubscriptionProxy.SaveProxyValues(XPostHandler& xPostHandler, IUpdateServerConfiguration& newUpdateServerConfiguration)
at
Administration.Manage.Subscriptions.SubscriptionProxy.SaveSynchronizationValues(XPostHandler& xPostHandler)
at
Administration.Manage.Subscriptions.SubscriptionProxy.ValidateSynchronizationValues(String xPostXml)
at Administration.Manage.Subscriptions.SubscriptionXPost.Page_Load(Object
sender, EventArgs e)

at Microsoft.UpdateServices.Internal.EncryptionUtilities.GetEncryptionKey()
at
Microsoft.UpdateServices.Internal.EncryptionUtilities.EncryptString(String
stringToEncrypt)
at
Microsoft.UpdateServices.Internal.BaseApi.UpdateServerConfiguration.set_ProxyPassword(String value)
at
Microsoft.UpdateServices.Internal.BaseApi.UpdateServerConfiguration.SetProxyPassword(String password)
at
Administration.Manage.Subscriptions.SubscriptionProxy.SaveProxyValues(XPostHandler& xPostHandler, IUpdateServerConfiguration& newUpdateServerConfiguration)
at
Administration.Manage.Subscriptions.SubscriptionProxy.SaveSynchronizationValues(XPostHandler& xPostHandler)
at
Administration.Manage.Subscriptions.SubscriptionProxy.ValidateSynchronizationValues(String xPostXml)
at Administration.Manage.Subscriptions.SubscriptionXPost.Page_Load(Object
sender, EventArgs e)


Any ideas?


"PHason" wrote:

> When using ISA you want to use proxy settings to connect to the update
> server. With ISA uninstalled, you will want to remove the proxy
> settings.
>
> I recently uninstalled ISA and that is what I did to get it to synch
> successfully.
>
>
> On Jun 30, 6:03 am, Tobias <Tob...@discussions.microsoft.com> wrote:
> > I uninstalled ISA2004 and ever since WSUS has failed to sync with Windows
> > Update.
> >
> > In the error log i get this:
> >
> > WebException: The underlying connection was closed: Unable to connect to the
> > remote server. ---> System.Net.WebException: The underlying connection was
> > closed: Unable to connect to the remote server.
> > at System.Net.HttpWebRequest.CheckFinalStatus()
> > at System.Net.HttpWebRequest.EndGetRequestStream(IAsyncResult asyncResult)
> > at System.Net.HttpWebRequest.GetRequestStream()
> > at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String
> > methodName, Object[] parameters)
> > at
> > Microsoft.UpdateServices.ServerSyncWebServices.ServerSync.ServerSyncProxy..G­etAuthConfig()
> > at
> > Microsoft.UpdateServices.ServerSync.ServerSyncLib.InternetGetServerAuthConf­ig(ServerSyncProxy proxy, WebServiceCommunicationHelper webServiceHelper)
> > at
> > Microsoft.UpdateServices.ServerSync.ServerSyncLib.Authenticate(Authorizatio­nManager
> > authorizationManager, Boolean checkExpiration, ServerSyncProxy proxy, Cookie
> > cookie, WebServiceCommunicationHelper webServiceHelper)
> > at
> > Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.InternalGetConfig(­)
> > at
> > Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.CatalogSyncThreadP­rocessReal(Boolean allowRedirect)
> >
> > the server name and port (8080) are in the proxy fields in the WSUS sync
> > options, no username/password though (not needed, right?)
> >
> > I dont really understand the the above error (google has failed me this
> > time) so not sure where to look for a solution, short or
> > uninstalling/reinstalling.
> >
> > Thanks in advance
>
>

Re: WSUS Resync failure since ISA 2004 uninstall by v-terliu

v-terliu
Wed Jul 02 05:22:33 PDT 2008

Hello Customer,

Thank you for posting here. Let's also thank PHason for the input.

According to your description, I understand that your WSUS unable to
download updates after you uninstall the ISA server 2004. If I have
misunderstood the problem, please don't hesitate to let me know.

Based on my research, I suggest we try the following steps to see if we can
resolve this issue:

1. After we remove the ISA server 2004, we need to run the CEICW on SBS to
reconfigure the network:

Go through the follow KB and rerun CEICW carefully.

How to configure Internet access in Windows Small Business Server 2003
http://support.microsoft.com/kb/825763

Detailed steps for your reference:

Two network adapters - manual router connection to broadband

a. On the SBS 2003 Server open the Server Management console. Go to
Standard Management\To Do List.
b. Click the "Connect to the Internet" link.
c. On the Connection Type page, click Broadband, and then click Next.
d. On the Broadband Connection page, under My server uses, click A local
router device with an IP address, and then click Next.
e. On the Router Connection page, next to Preferred DNS server and
Alternate DNS server, type the IP addresses that are provided by your ISP.
In the Local IP address of router box, type the IP address of the router
that the server uses to connect to the router.
f. Click to clear the My server uses a single network connection for both
Internet access and the local network check box, and then click Next.
g. On the Network Connection, You must enable and configure the network
connection to your ISP page, under the Connection Name, click Network
Connection.
h. If your router provides DHCP, click Obtain an IP address automatically
(use DHCP). If your router does not provide DHCP, click Use the following
IP address, and then type the IP address and the subnet mask in accordance
with the router settings. The default gateway is the IP address of the
router.
i. Click Next.

The network connection is now enabled.
j. On the Network Connection, You must click the connection for your ISP
and local network page, click Network Connection under the ISP network
connection.
k. Under the Local network connection, click Server Local Area Connection,
and then click Next.
l. Complete the Configure E-mail and Internet Connection Wizard.

2. After we uninstall the ISA server, we need to remove the proxy settings
on WSUS and client IE.

3. To workaround this issue, you may try going to the WsusPool properties
under Application Pools in IIS Manager, under the Identity tab, change
"Network Service" to "Local System", and then reboot the server for a test.

4. If the issue persists, the WSUS may corrupted when you uninstall the ISA
Server 2004. We need to reinstall the WSUS on SBS:

Please refer to the following steps to reinstall the WSUS from your SBS
Server:

a. Click Control Panel> Click Add or Remove Programs.
b. Click Windows Small Business Server 2003 R2
c. Click Remove.

Notes: These steps just remove WSUS and can't remove any other component in
your Server.

d. Reinstall WSUS from your SBS R2 Technology CD 6.
e. After you reinstall WSUS, please configure it back and see if the
problem persists.

If we cannot resolve the issue after we perform the steps above, please
help me collect some information for further investigation:

1. Please capture screenshots of the error messages and send the pictures
to me at v-terliu@microsoft.com

2. Can you access Internet from the client computers?

3. Can you access Internet from SBS?

4. Gather MPS network report on SBS:

a. Download MPSrepot_network from
http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9
15706/MPSRPT_NETWORK.EXE

b. Run MPSRPT_NETWORK.exe.

c. The tool will automatically collect the information. This procedure will
take 10~15 minutes.

d. Open Windows Explorer, navigate to the folder:
%SystemRoot%\MPSReports\Network\Reports\Cab\

e. Send the .cab file directly to me at v-terliu@microsoft.com

I hope these steps will give you some help.

Thanks and have a nice day!

Best regards,

Terence Liu (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>Thread-Topic: WSUS Resync failure since ISA 2004 uninstall
>thread-index: AcjbTzS/8PrLj/vQRBWAhWB7MHzaqA==
>X-WBNR-Posting-Host: 207.46.19.168
>From: =?Utf-8?B?VG9iaWFz?= <Tobias@discussions.microsoft.com>
>References: <45FAB429-CD92-4881-A197-89B80BDF941F@microsoft.com>
<e748baad-7811-4ba1-8b5c-1892595a0803@k13g2000hse.googlegroups.com>
>Subject: Re: WSUS Resync failure since ISA 2004 uninstall
>Date: Tue, 1 Jul 2008 00:51:01 -0700
>Lines: 100
>Message-ID: <6AFF4F1F-802A-47F9-9F6F-A7C20BA456D9@microsoft.com>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 8bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
>Newsgroups: microsoft.public.windows.server.sbs
>Path: TK2MSFTNGHUB02.phx.gbl
>Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:113585
>NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>
>Thanks for the suggestion. But when i try to remove the proxy info and
save
>the settings, i get this error
>
>"THe Encryption key cannot be retrieved.
>
>System.Security.Cryptography.CryptographicException: The encryption key
>cannot be retrieved. --->
>System.Security.Cryptography.CryptographicException: An error occurred in
the
>DPAPI. HRESULT: 0x8007000D
> at Microsoft.UpdateServices.Internal.DataProtectionApi.Decrypt(Byte[]
>toDecrypt, Byte[] entropy, EncryptionLevel level)
> at
>Microsoft.UpdateServices.Internal.EncryptionUtilities.GetEncryptionKeyThrea
d()
> --- End of inner exception stack trace ---
> at
Microsoft.UpdateServices.Internal.EncryptionUtilities.GetEncryptionKey()
> at
>Microsoft.UpdateServices.Internal.EncryptionUtilities.EncryptString(String
>stringToEncrypt)
> at
>Microsoft.UpdateServices.Internal.BaseApi.UpdateServerConfiguration.set_Pro
xyPassword(String value)
> at
>Microsoft.UpdateServices.Internal.BaseApi.UpdateServerConfiguration.SetProx
yPassword(String password)
> at
>Administration.Manage.Subscriptions.SubscriptionProxy.SaveProxyValues(XPost
Handler& xPostHandler, IUpdateServerConfiguration&
newUpdateServerConfiguration)
> at
>Administration.Manage.Subscriptions.SubscriptionProxy.SaveSynchronizationVa
lues(XPostHandler& xPostHandler)
> at
>Administration.Manage.Subscriptions.SubscriptionProxy.ValidateSynchronizati
onValues(String xPostXml)
> at
Administration.Manage.Subscriptions.SubscriptionXPost.Page_Load(Object
>sender, EventArgs e)
>
> at
Microsoft.UpdateServices.Internal.EncryptionUtilities.GetEncryptionKey()
> at
>Microsoft.UpdateServices.Internal.EncryptionUtilities.EncryptString(String
>stringToEncrypt)
> at
>Microsoft.UpdateServices.Internal.BaseApi.UpdateServerConfiguration.set_Pro
xyPassword(String value)
> at
>Microsoft.UpdateServices.Internal.BaseApi.UpdateServerConfiguration.SetProx
yPassword(String password)
> at
>Administration.Manage.Subscriptions.SubscriptionProxy.SaveProxyValues(XPost
Handler& xPostHandler, IUpdateServerConfiguration&
newUpdateServerConfiguration)
> at
>Administration.Manage.Subscriptions.SubscriptionProxy.SaveSynchronizationVa
lues(XPostHandler& xPostHandler)
> at
>Administration.Manage.Subscriptions.SubscriptionProxy.ValidateSynchronizati
onValues(String xPostXml)
> at
Administration.Manage.Subscriptions.SubscriptionXPost.Page_Load(Object
>sender, EventArgs e)
>
>
>Any ideas?
>
>
>"PHason" wrote:
>
>> When using ISA you want to use proxy settings to connect to the update
>> server. With ISA uninstalled, you will want to remove the proxy
>> settings.
>>
>> I recently uninstalled ISA and that is what I did to get it to synch
>> successfully.
>>
>>
>> On Jun 30, 6:03 am, Tobias <Tob...@discussions.microsoft.com> wrote:
>> > I uninstalled ISA2004 and ever since WSUS has failed to sync with
Windows
>> > Update.
>> >
>> > In the error log i get this:
>> >
>> > WebException: The underlying connection was closed: Unable to connect
to the
>> > remote server. ---> System.Net.WebException: The underlying connection
was
>> > closed: Unable to connect to the remote server.
>> > at System.Net.HttpWebRequest.CheckFinalStatus()
>> > at System.Net.HttpWebRequest.EndGetRequestStream(IAsyncResult
asyncResult)
>> > at System.Net.HttpWebRequest.GetRequestStream()
>> > at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String
>> > methodName, Object[] parameters)
>> > at
>> >
Microsoft.UpdateServices.ServerSyncWebServices.ServerSync.ServerSyncProxy..G
­etAuthConfig()
>> > at
>> >
Microsoft.UpdateServices.ServerSync.ServerSyncLib.InternetGetServerAuthConfÂ
­ig(ServerSyncProxy proxy, WebServiceCommunicationHelper webServiceHelper)
>> > at
>> >
Microsoft.UpdateServices.ServerSync.ServerSyncLib.Authenticate(AuthorizatioÂ
­nManager
>> > authorizationManager, Boolean checkExpiration, ServerSyncProxy proxy,
Cookie
>> > cookie, WebServiceCommunicationHelper webServiceHelper)
>> > at
>> >
Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.InternalGetConfig(Â
­)
>> > at
>> >
Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.CatalogSyncThreadPÂ
­rocessReal(Boolean allowRedirect)
>> >
>> > the server name and port (8080) are in the proxy fields in the WSUS
sync
>> > options, no username/password though (not needed, right?)
>> >
>> > I dont really understand the the above error (google has failed me this
>> > time) so not sure where to look for a solution, short or
>> > uninstalling/reinstalling.
>> >
>> > Thanks in advance
>>
>>
>