WSUS 客户端无法获取更新，错误为 80072EE2

Question

我们最近为我们的 Windows 工作站（大约 90 个）实施了 WSUS。一些客户端似乎没有问题，而其他客户端在尝试使用 Windows Update 手动检查更新时不断返回错误“80072EE2”。

客户端是Win7 x64 SP1，服务器是Win2008 x86 SP2

我们的工作站使用标准映像，因此系统之间的差异很小。

服务器上的 w3wp.exe 进程会在很长一段时间内达到非常高的 CPU。

在问题客户端的 WindowsUpdate.log 中，我们看到：

2015-12-04  11:12:33:847     968    12ac    PT    Server URL = http://server.domain.com/SimpleAuthWebService/SimpleAuth.asmx
2015-12-04  11:13:37:937     968    12ac    Misc    WARNING: Send failed with hr = 80072ee2.
2015-12-04  11:13:37:937     968    12ac    Misc    WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2015-12-04  11:13:37:937     968    12ac    Misc    FATAL: SOAP/WinHttp - SendRequest: SendRequestUsingProxy failed. error 0x80072ee2
2015-12-04  11:13:37:937     968    12ac    PT    + Last proxy send request failed with hr = 0x80072EE2, HTTP status code = 0
2015-12-04  11:13:37:937     968    12ac    PT    + Caller provided credentials = No
2015-12-04  11:13:37:937     968    12ac    PT    + Impersonate flags = 0
2015-12-04  11:13:37:937     968    12ac    PT    + Possible authorization schemes used = 
2015-12-04  11:13:37:937     968    12ac    PT  WARNING: SyncUpdates failure, error = 0x80072EE2, soap client error = 5, soap error code = 0, HTTP status code = 200
2015-12-04  11:13:37:937     968    12ac    PT  WARNING: PTError: 0x80072ee2
2015-12-04  11:13:37:937     968    12ac    PT  WARNING: SyncUpdates_WithRecovery failed.: 0x80072ee2
2015-12-04  11:13:37:937     968    12ac    PT  WARNING: Sync of Updates: 0x80072ee2
2015-12-04  11:13:37:937     968    12ac    PT  WARNING: SyncServerUpdatesInternal failed: 0x80072ee2
2015-12-04  11:13:37:937     968    12ac    Agent     * WARNING: Failed to synchronize, error = 0x80072EE2
2015-12-04  11:13:37:937     968    12ac    Agent     * WARNING: Exit code = 0x80072EE2

检查 WSUS 服务器 SoftwareDistribution.log，我们看到：

2015-12-04 16:14:36.018 UTC     Error   w3wp.18 ClientImplementation.SyncUpdat
        Syst
em.Threading.ThreadAbortException: Thread was being aborted.
   at Microsoft.UpdateServices.Internal.NativeMethods.ExtractBlobFromMemoryCab
UInt32 cbCompressed, Byte* pCompressed, UInt32& pcbUncompressed, IntPtr& ppUnc
mpressed)
   at Microsoft.UpdateServices.Internal.CabUtilities.ExpandMemoryCabToString(B
te[] src)
   at Microsoft.UpdateServices.Internal.DataAccess.ExecuteSpGetCoreUpdateXml(I
t32[] revisionIds)
   at Microsoft.UpdateServices.Internal.DataAccessCache.GetCoreUpdateXml(Int32
] revisionIds, DataAccess da, Int64 maxXmlPerRequest)
   at Microsoft.UpdateServices.Internal.ClientImplementation.GetSyncInfo(Versi
n clientProtocolVersion, DataAccess dataAccess, Hashtable stateTable, Hashtabl
 deploymentTable, Boolean haveGroupsChanged, Boolean driverSyncNeeded, Boolean
doChunking)
   at Microsoft.UpdateServices.Internal.ClientImplementation.SoftwareSync(Data
ccess dataAccess, UnencryptedCookieData cookieData, Int32[] installedNonLeafUp
ateIds, Int32[] leafUpdateIds, Boolean haveGroupsChanged, Boolean expressQuery
 Guid[] filterCategoryIds, Boolean needTwoGroupOutOfScopeUpdates)
   at Microsoft.UpdateServices.Internal.ClientImplementation.SyncUpdates(Cooki
 cookie, SyncUpdateParameters parameters)
   at Microsoft.UpdateServices.Internal.ClientImplementation.SyncUpdates(Cooki
 cookie, SyncUpdateParameters parameters)
   at Microsoft.UpdateServices.Internal.Client.SyncUpdates(Cookie cookie, Sync
pdateParameters parameters)
   at System.RuntimeMethodHandle._InvokeMethodFast(Object target, Object[] arg
ments, SignatureStruct& sig, MethodAttributes methodAttributes, RuntimeTypeHan
le typeOwner)
   at System.RuntimeMethodHandle.InvokeMethodFast(Object target, Object[] argu
ents, Signature sig, MethodAttributes methodAttributes, RuntimeTypeHandle type
wner)
   at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invo
eAttr, Binder binder, Object[] parameters, CultureInfo culture, Boolean skipVi
ibilityChecks)
   at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invo
eAttr, Binder binder, Object[] parameters, CultureInfo culture)
   at System.Web.Services.Protocols.LogicalMethodInfo.Invoke(Object target, Ob
ect[] values)
   at System.Web.Services.Protocols.WebServiceHandler.Invoke()
   at System.Web.Services.Protocols.WebServiceHandler.CoreProcessRequest()
   at System.Web.Services.Protocols.SyncSessionlessHandler.ProcessRequest(Http
ontext context)
   at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpAppli
ation.IExecutionStep.Execute()
   at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& com
letedSynchronously)
   at System.Web.HttpApplication.PipelineStepManager.ResumeSteps(Exception err
r)
   at System.Web.HttpApplication.BeginProcessRequestNotification(HttpContext c
ntext, AsyncCallback cb)
   at System.Web.HttpRuntime.ProcessRequestNotificationPrivate(IIS7WorkerReque
t wr, HttpContext context)
   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntP
r managedHttpContext, IntPtr nativeRequestContext, IntPtr moduleData, Int32 fl
gs)
   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr man
gedHttpContext, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags)
   at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr pHandle
, RequestNotificationStatus& notificationStatus)
   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntP
r managedHttpContext, IntPtr nativeRequestContext, IntPtr moduleData, Int32 fl
gs)
   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr man
gedHttpContext, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags)
2015-12-04 16:14:36.018 UTC     Warning w3wp.18 SoapUtilities.CreateException
Throw
Exception: actor = http://server.domain.com/ClientWebService/client.asm
, ID=9b1e3f5a-f766-4ba9-bf7e-52c7cfbe1f68, ErrorCode=InternalServerError, Mess
ge=, Client=a39b9446-c45a-4060-851d-9157a2393278

我们尝试过的：

1. 重新启动服务器
2. 将自动更新检查更新周期从 1 小时更改为 10 小时
3. 在服务器上禁用 AV 读写扫描
4. 将问题客户端更新到最新的 WSUS 客户端
5. 手动浏览到上面客户端日志中提到的 URL。（没有问题）

我对 WSUS 还很陌生，所以我不确定我们还能检查什么。任何帮助将不胜感激。

Answer 1

在受影响的客户端中检查注册表

HKLM/软件/策略/Microsoft/Windows/WindowsUpdate

并将 WUServer 和 WUStatusServer 的值与您的 WSUS 实际服务器名称进行比较