security update 补丁更新失败

安装卡在了7月的某一个补丁

windows\windowsupdate.log  找到如下错误

2014-08-03 16:02:45:665 1284 2264 PT +++++++++++  PT: Synchronizing server updates  +++++++++++
2014-08-03 16:02:45:665 1284 2264 PT  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://nlehv10w8sd003.corpad.dsm-group.com:8530/ClientWebService/client.asmx
2014-08-03 16:02:45:743 1284 2264 PT WARNING: Cached cookie has expired or new PID is available
2014-08-03 16:02:45:743 1284 2264 PT Initializing simple targeting cookie, clientId = 42398da4-e1fe-463d-b5a7-1567b059ef16, target group = , DNS name = nlwlw11dc890010.corpad.dsm-group.com
2014-08-03 16:02:45:743 1284 2264 PT  Server URL = http://nlehv10w8sd003.corpad.dsm-group.com:8530/SimpleAuthWebService/SimpleAuth.asmx
2014-08-03 16:02:45:983 1284 2264 PT WARNING: GetCookie failure, error = 0x8024400D, soap client error = 7, soap error code = 300, HTTP status code = 200
2014-08-03 16:02:45:983 1284 2264 PT WARNING: SOAP Fault: 0x00012c
2014-08-03 16:02:45:983 1284 2264 PT WARNING:     faultstring:Fault occurred
2014-08-03 16:02:45:983 1284 2264 PT WARNING:     ErrorCode:ConfigChanged(2)
2014-08-03 16:02:45:983 1284 2264 PT WARNING:     Message:(null)
2014-08-03 16:02:45:983 1284 2264 PT WARNING:     Method:"http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService/GetCookie"
2014-08-03 16:02:45:983 1284 2264 PT WARNING:     ID:1070634a-ef34-4de8-a93c-1baf94fe7e4f
2014-08-03 16:02:46:015 1284 2264 PT WARNING: Cached cookie has expired or new PID is available
2014-08-03 16:02:46:015 1284 2264 PT Initializing simple targeting cookie, clientId = 42398da4-e1fe-463d-b5a7-1567b059ef16, target group = , DNS name = nlwlw11dc890010.corpad.dsm-group.com
2014-08-03 16:02:46:015 1284 2264 PT  Server URL = http://nlehv10w8sd003.corpad.dsm-group.com:8530/SimpleAuthWebService/SimpleAuth.asmx
2014-08-03 16:03:10:682 1284 2264Agent WARNING: Failed to evaluate Installed rule, updateId = {189A8F50-0C3A-4FDF-8BC2-BC23A3EB11FB}.101, hr = 80242013

显示无法evaluation 安装过程

cookie 问题？

看technet library 里面的 WUA 返回码列表  http://technet.microsoft.com/zh-cn/library/cc720442(WS.10).aspx

0x8024400D

WU_E_PT_SOAP_CLIENT

SOAP_E_CLIENT - SOAP client found the message was malformed; fix before resending.

0x80242013

WU_E_UH_BADCBSPACKAGEID

The update metadata contains an invalid CBS package identifier.

CBS的问题？

\\NLWLW11DC890010\c$\Windows\Logs\CBS

2014-08-04 10:50:37, Info                  CBS    Session: 30388161_697458970 initialized by client WindowsUpdateAgent.

2014-08-04 10:50:37, Info                  CBS    Read out cached package applicability for package: Package_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2, ApplicableState: 112, CurrentState:112

2014-08-04 10:50:37, Info                  CBS    Session: 30388161_697688970 initialized by client WindowsUpdateAgent.

2014-08-04 10:50:37, Info                  CBS    Read out cached package applicability for package: Package_for_KB2928120~31bf3856ad364e35~amd64~~6.1.1.2, ApplicableState: 112, CurrentState:112

2014-08-04 10:50:37, Info                  CBS    Session: 30388161_697938970 initialized by client WindowsUpdateAgent.

2014-08-04 10:50:37, Info                  CBS    Read out cached package applicability for package: Package_for_KB2736422~31bf3856ad364e35~amd64~~6.1.1.0, ApplicableState: 112, CurrentState:112

2014-08-04 10:50:37, Info                  CBS    Session: 30388161_697978970 initialized by client WindowsUpdateAgent.

2014-08-04 10:50:37, Info                  CBS    Read out cached package applicability for package: Package_for_KB2862152~31bf3856ad364e35~amd64~~6.1.1.1, ApplicableState: 112, CurrentState:112

2014-08-04 10:50:37, Info                  CBS    Session: 30388161_697998970 initialized by client WindowsUpdateAgent.

2014-08-04 10:50:37, Info                  CBS    Read out cached package applicability for package: Package_for_KB2852386~31bf3856ad364e35~amd64~~6.1.1.3, ApplicableState: 112, CurrentState:0

2014-08-04 10:50:37, Info                  CBS    Session: 30388161_698118970 initialized by client WindowsUpdateAgent.

2014-08-04 10:50:37, Info                  CBS    Read out cached package applicability for package: Package_for_KB2647753~31bf3856ad364e35~amd64~~6.1.4.0, ApplicableState: 112, CurrentState:0

2014-08-04 10:50:37, Info                  CBS    Session: 30388161_698158970 initialized by client WindowsUpdateAgent.

2014-08-04 10:50:37, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]

2014-08-04 10:50:38, Info                  CBS    Session: 30388161_708778970 initialized by client WindowsUpdateAgent.

2014-08-04 10:50:38, Info                  CBS    Read out cached package applicability for package: Package_for_KB2584146~31bf3856ad364e35~amd64~~6.1.1.3, ApplicableState: 112, CurrentState:112

擦，系统文件损坏吧，为了一个补丁叫客户重装系统不太值得。

让老子先清空一下对方系统缓存

先停对方bits和windows update 2个服务

删除%windir%\SoftwareDistribution 目录，顺便也等于清空datastore了

在开启服务

果然，CBS日志显示恢复正常了。

2014-08-04 10:50:38, Info                  CBS    Read out cached package applicability for package: Package_for_KB2584146~31bf3856ad364e35~amd64~~6.1.1.3, ApplicableState: 112, CurrentState:112

2014-08-04 11:00:38, Info                  CBS    Reboot mark refs incremented to: 1

2014-08-04 11:00:38, Info                  CBS    Scavenge: Starts

2014-08-04 11:00:38, Info                  CSI    00000009@2014/8/4:09:00:38.925 CSI Transaction @0x15a1f0 initialized for deployment engine {d16d444c-56d8-11d5-882d-0080c847b195} with flags 00000002 and client id [10]"TI6.0_0:0/"

2014-08-04 11:00:38, Info                  CBS    Scavenge: Begin CSI Store

2014-08-04 11:00:39, Info                  CSI    0000000a Performing 1 operations; 1 are not lock/unlock and follow:

  Scavenge (8): flags: 00000017

2014-08-04 11:00:39, Info                  CSI    0000000b Store coherency cookie matches last scavenge cookie, skipping scavenge.

2014-08-04 11:00:39, Info                  CSI    0000000c ICSITransaction::Commit calling IStorePendingTransaction::Apply - coldpatching=FALSE applyflags=7

2014-08-04 11:00:39, Info                  CSI    0000000d Creating NT transaction (seq 2), objectname [6]"(null)"

2014-08-04 11:00:39, Info                  CSI    0000000e Created NT transaction (seq 2) result 0x00000000, handle @0x254

2014-08-04 11:00:39, Info                  CSI    0000000f@2014/8/4:09:00:39.154 CSI perf trace:

CSIPERF:TXCOMMIT;34001

2014-08-04 11:00:39, Info                  CBS    Scavenge: Completed, disposition: 0X1

2014-08-04 11:00:39, Info                  CSI    00000010@2014/8/4:09:00:39.155 CSI Transaction @0x15a1f0 destroyed

2014-08-04 11:00:39, Info                  CBS    Reboot mark refs: 0

2014-08-04 11:00:39, Info                  CBS    Idle processing thread terminated normally

2014-08-04 11:00:39, Info                  CBS    Ending the TrustedInstaller main loop.

2014-08-04 11:00:39, Info                  CBS    Starting TrustedInstaller finalization.

2014-08-04 11:00:39, Info                  CBS    Ending TrustedInstaller finalization.

updatestore.log 

Update status from update (fe594d9e-9828-451f-aa56-2c2cf431ade3) already exists, will modify existing instance. UpdatesStore 8/4/2014 10:50:50 AM 3640 (0x0E38)

Update status from update (fe964257-d707-48a4-aa8d-099898c3c6b4) already exists, will modify existing instance. UpdatesStore 8/4/2014 10:50:50 AM 3640 (0x0E38)

Update status from update (fed94b63-8619-4676-bcdb-07fd4ee5576c) already exists, will modify existing instance. UpdatesStore 8/4/2014 10:50:50 AM 3640 (0x0E38)

Update status from update (ff1ad742-dbd6-4ee1-94ac-2d1fa9fce5c8) already exists, will modify existing instance. UpdatesStore 8/4/2014 10:50:50 AM 3640 (0x0E38)

Update status from update (ff47ce2c-69c6-4455-9f1f-b72be4011e8f) already exists, will modify existing instance. UpdatesStore 8/4/2014 10:50:50 AM 3640 (0x0E38)

Update status from update (fff5c650-e48c-4eaa-95b5-ad761e082d85) already exists, will modify existing instance. UpdatesStore 8/4/2014 10:50:50 AM 3640 (0x0E38)

Successfully done with SetStatus() operation. UpdatesStore 8/4/2014 10:50:50 AM 3640 (0x0E38)

datastore显示正常

windows\windowsupdate.log

2014-08-04 10:50:49:057 1284 2094 Report CWERReporter finishing event handling. (00000000)

2014-08-04 10:50:49:057 1284 2094 Report CWERReporter finishing event handling. (00000000)

2014-08-04 10:50:49:057 1284 2094 Report CWERReporter finishing event handling. (00000000)

2014-08-04 10:50:49:201 3804 e38 COMAPI  - Updates found = 277

2014-08-04 10:50:49:201 3804 e38 COMAPI ---------

2014-08-04 10:50:49:201 3804 e38 COMAPI --  END  --  COMAPI: Search [ClientId = CcmExec]

2014-08-04 10:50:49:201 3804 e38 COMAPI -------------

2014-08-04 10:50:54:008 1284 2094 Report CWERReporter finishing event handling. (00000000)

不再继续报错了啊

ccmexec.log

SystemTaskProcessor::QueueEvent(PowerChanged, 0) CCMEXEC 8/4/2014 11:01:09 AM 3808 (0x0EE0)

SystemTaskProcessor::QueueEvent(PowerChangedEx, 0) CCMEXEC 8/4/2014 11:01:09 AM 3808 (0x0EE0)

BEGIN ExecuteSystemTasks('PowerChanged') CcmExec 8/4/2014 11:01:09 AM 8712 (0x2208)

Invoking system task 'PowerStateManager_PowerChanged' via ICcmSystemTask2 interface. CcmExec 8/4/2014 11:01:09 AM 8496 (0x2130)

Invoking system task 'PwrMgmtPowerChanged' via ICcmSystemTask2 interface. CcmExec 8/4/2014 11:01:09 AM 8496 (0x2130)

END ExecuteSystemTasks('PowerChanged') CcmExec 8/4/2014 11:01:09 AM 8712 (0x2208)

BEGIN ExecuteSystemTasks('PowerChangedEx') CcmExec 8/4/2014 11:01:09 AM 8712 (0x2208)

Invoking system task 'PwrMgmtPowerChangedEx' via ICcmSystemTask2 interface. CcmExec 8/4/2014 11:01:09 AM 8496 (0x2130)

END ExecuteSystemTasks('PowerChangedEx') CcmExec 8/4/2014 11:01:09 AM 8712 (0x2208)

Raising event:

也恢复正常了。