This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
SBS2011
WSUS 3.2.7600.226
WSUS sync has started to fail over the last few weeks, initially intermittentl, now I cannot get it to complete at all.
Update source is Microsoft
Console error: Unable to resolve the specified upstream server name.
“WebException: The request failed with HTTP status 404: Not Found.
at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)”
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
at Microsoft.UpdateServices.ServerSyncWebServices.ServerSync.ServerSyncProxy.GetAuthConfig()
at Microsoft.UpdateServices.ServerSync.ServerSyncLib.InternetGetServerAuthConfig(ServerSyncProxy proxy, WebServiceCommunicationHelper webServiceHelper)
at Microsoft.UpdateServices.ServerSync.ServerSyncLib.Authenticate(AuthorizationManager authorizationManager, Boolean checkExpiration, ServerSyncProxy proxy, Cookie cookie, WebServiceCommunicationHelper webServiceHelper)
at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.SyncConfigUpdatesFromUSS()
at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.ExecuteSyncProtocol(Boolean allowRedirect)
This seems to be the key bit of the server log
2021-02-06 07:51:26.046 UTC Info w3wp.29 ClientImplementation..ctor Initializing ClientWebService ProcessID = 18412, Process Start Time = 2/6/2021 6:17:59 AM, Product Version = 3.2.7600.325
2021-02-06 07:51:26.065 UTC Info w3wp.29 AuthorizationManager.GetUpstreamServerUriHeader Found config says USS is MU site
2021-02-06 07:51:26.362 UTC Info WsusService.18 SusService.ValidateServerCertificate CheckValidationResult Succeeds: CertOK
2021-02-06 07:51:26.366 UTC Info WsusService.18 ServerCertificateValidator.IsHostAllowedException Requested host: sws1.update.microsoft.com
2021-02-06 07:51:26.367 UTC Info WsusService.18 ServerCertificateValidator.VerifyServerCertificate SSL validation succeeded.
2021-02-06 07:51:26.546 UTC Warning WsusService.18 WebServiceCommunicationHelper.ProcessWebServiceProxyException ProcessWebServiceProxyException found Exception was WebException. Action: Retry. Exception Details: System.Net.WebException: The request failed with HTTP status 404: Not Found.
So it is connecting to sws1.update.microsoft.com, and SSL validation succeeds. It fails after that with some proxy error.
(I realise that this server should be replaced, and work is in hand to migrate to Azure.)
Any help appreciated. Have been unable to fault the installation.
Thanks
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 55.00000000000001%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ES%3C/text%3E%3C/svg%3E)
Same issue here
WSUS Version: 3.2.7600.226
Windows Server 2008 R2 Enterprise
Failed 2021-02-04 06:56:44.560 UTC:
44.154 Info WsusService.19 SusService.ValidateServerCertificate CheckValidationResult Succeeds: CertOK
44.154 Info WsusService.19 ServerCertificateValidator.IsHostAllowedException Requested host: sws1.update.microsoft.com
44.154 Info WsusService.19 ServerCertificateValidator.VerifyServerCertificate SSL validation succeeded.
44.560 Warning WsusService.19 WebServiceCommunicationHelper.ProcessWebServiceProxyException ProcessWebServiceProxyException found Exception was WebException. Action: Retry. Exception Details: System.Net.WebException: The request failed with HTTP status 404: Not Found.
<snip>
Previous day's success was at 2021-02-03 06:29:56.530 UTC
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(304, 65%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPK%3C/text%3E%3C/svg%3E)
Does anyone know if simply disabling the WSUS service on SBS2011 works?
We have other WSUS servers; switching the workstations to use them would be straightforward, I imagine, but what about switching the SBS box itself over to a different update server?
No need to disable. Re-point clients to new WSUS Server. Delete all computers in old WSUS. Change Sync in old WSUS to Manual (no schedule). It will just tick away idly.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(166.4, 44%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBI%3C/text%3E%3C/svg%3E)
Good day, is anyone having the same syncing issue from back last fall? Mine has quit for about 10 days now without any changes to configuration. Message indicating the MS update servers are too busy??
If anyone has any intel, please share.
WSUS 3 is dead (when attempting to sync directly to Microsoft)
https://www.ajtek.ca/blog/no-more-synchronization-for-wsus-3-0-service-pack-2/
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(32, 9%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPG%3C/text%3E%3C/svg%3E)
Can't help but think this is a way of Microsoft forcing users to upgrade their Windows to a newer version. We're not in the position to do that at the moment. Our building is being redeveloped so once done I will probably ditch the servers and move to the cloud but not happening for the next year or so. I'm just going to use the classic Windows Update to keeo it updated.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(294.40000000000003, 13%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDS%3C/text%3E%3C/svg%3E)
We're having the same issue since 2021-02-05; our last successful sync was 2021-02-04 10:45:04.327 UTC.
WSUS Version: 3.2.7600.226
Windows Server 2008 R2 Standard
Our failures look like all the others in this thread. Our last successful looks like this:
2021-02-04 10:45:04.327 UTC Info WsusService.27 ServerCertificateValidator.IsHostAllowedException Requested host: sws1.update.microsoft.com
2021-02-04 10:45:04.327 UTC Info WsusService.27 ServerCertificateValidator.VerifyServerCertificate SSL validation succeeded.
2021-02-04 10:45:04.592 UTC Info WsusService.27 CatalogSyncAgentCore.SyncConfigUpdatesFromUSS Category Sync: Filter: <filter SyncAnchor="2021-02-02 18:45:03.336" GetConfig="1"></filter>
2021-02-04 10:45:05.076 UTC Info WsusService.27 CatalogSyncAgentCore.SyncConfigUpdatesFromUSS Need 182 config updates, 0 are new
2021-02-04 10:45:05.092 UTC Info WsusService.27 CatalogSyncAgentCore.SyncConfigUpdatesFromUSS Category Sync: New Config Anchor: 2021-02-03 18:45:04.645
Also, possible issue here:
https://learn.microsoft.com/en-us/troubleshoot/mem/configmgr/wsus-synchronization-fails-with-soapexception
Thanks
No, its not that one. If you look at the OP you will see it is succesfully connecting the correct MS server.
Requested host: sws1.update.microsoft.com
That is, correct according to that article!
I just checked the last forwarding traffic from my SBS when trying to sync with MS and it checked the following sites: I think these are current?
sws1.update.microsoft.com
statsfe2.update.microsoft.com
go.microsoft.com
Do you have TLS1.0 enabled? If not, make sure you enable TLS1.0 and 1.1. If you recently disabled these to try to harden security on your server, this may be the reason.
Server 2012+ supports TLS 1.2, but I don't believe Server 2008 or 2008R2 does and you have to keep old TLS ciphers open.
Thanks
No recent changes have been made to the installation, the TLS stuff was done ages ago.
Sync failure is a recent issue, and it looks to me like something at MS end, a redirect failing perhaps.
Jim
Does seem that way doesn't it Jim however we are quickly approaching a week since the last successful synchronization with MS. You would think they would have been on top of this issue by now with the number of SBS and 2008 servers out there still?
I really do not want to have to update all workstations to point directly to windows update site. It was so easy to manage from WSUS.
Bob
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(131.20000000000002, 88%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELK%3C/text%3E%3C/svg%3E)
Yes, same here... TLS was enabled years ago and no recent change and suddenly the WSUS sync failing for multiple SBS owners around the globe. It seems something were moved away on MS servers. I have the same error "404 not found" in my WSUS logs as @Bob (ISI) @Anonymous @Shlomi Cohen @Peter Groom See attached log file. [65418-wsus-error.txt][1] [1]: /answers/storage/temp/65418-wsus-error.txt
Thank you for confirming anonymous user you and others are also seeing the same thing so we are all not wasting more hours trying to dismantle and rebuild our WSUS setup. Ugh. If anyone obtains some useful updates or information please post here!
Bob
When I try un-selecting all products and classifications and press OK the window turns red, not allowing it to save without anything selected. I tried changing things up on both products and classes however it still didn't work with manual sync. One thing to note when trying to step through the configuration wizard method and the Upstream server set to 'Microsoft Update' and Proxy not checked, next step is 'Start Connecting' after a couple of seconds mine comes back with 'Unable to resolve the the upstream server name and if you click on details the below is shown.
WebException: The request failed with HTTP status 404: Not Found. at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall) at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters) at Microsoft.UpdateServices.ServerSyncWebServices.ServerSync.ServerSyncProxy.GetAuthConfig() at..
