Error in event viewer when applying SUS software Policy

[gr8faith]

-Errors are listed in reverse order (most recent on bottom)

SOURCE MsiInstaller
EVENT 10005

Product: Microsoft Windows Update Auto Update -- Microsoft Windows Update Auto Update requires Windows 2000 SP2 or Windows XP.

Also this appears:
SOURCE :Application Management
Event: 102

The install of application Microsoft Windows Update Auto Update from policy SUS failed. The error was : Fatal error during installation.

Also in addition;
SOURCE Application Management
EVENT 108
Failed to apply changes to software installation settings. Software changes could not be applied. A previous log entry with details should exist. The error was : Fatal error during installation.

And finally
SOURCE Userenv
EVENT: 1085
The Group Policy client-side extension Software Installation failed to execute. Please look for any errors reported earlier by that extension.

...what were you trying to do?

Where did you get these errors?

[gr8faith]

I installed SUS on my DC. I wanted to apply the policy to all clients logging into it. The Windows clients(XP,2000) get the SUS client software(when booting the splash logo say "installing managed client windows update client" - should this appear on each boot?; it does.) and really it seems to work, I can change the policy whether the machines automatically reboots or asks the user, and the clients recieve updates I have approved. However, every client recieves these stop messages in their event log.

I'm betting you have some kind of security issue.
That is, the file permissions for the software
are not "EVERYONE:READ".

When you deploy software to W2k, they need to make
a "Null touch" to the sharepoint. If EVERYONE doesnt have READ,
they can't successfully get the package.

[gr8faith]

J - thanks for the tip, I did change the security to everyone read and in the results wizard I get one less error. However, the same 4 instances still appear in the event viewer of each client. The results display reads: "the software installation did not complete policy processing because a system restart is required for the settings to be applied. Group policy will attempt to apply he settings the next time the computet is restarted." - this always appears even after rebooting.

-JB

Well, that is normal for XP. Did you reboot?
Did it work?

If so, this is because XP's fastboot is enabled.

Let me know...

[gr8faith]

Yes, and the problem remains.

Just for laughs.. set the security on the share to "Everyone:Full Control"...

Does it still do it?

[thinman]

gr8faith,

You mentioned earlier that you installed SUS on your DC. However, Jeremy mentioned in his article, "Patching the Holes" the following excerpt:

"Setting up the SUS server components is relatively easy, but a bit tedious. First, you’ll need to earmark a server to do the job of housing and doling out the security and hotfixes you approve. This machine must be a member server running Service Pack 2 (and can’t be a domain controller or Small Business Server.) It also needs to be loaded with IIS 5.0 and Internet Explorer 5.5 (a long download and consequent install.)"

You can find the article here: http://mcpmag.com/Features/article.asp?EditorialsID=336

It isn't recommended to install SUS on a DC.

Just a sidepoint...