Clients cannot obtain updates from the Microsoft Windows Server Update Services server because the SelfUpdate service does not run (920653)

RESOLUTION

Make sure that anonymous access is enabled for the Default Web Site virtual directory, for the ClientWebService virtual directory, and for the SelfUpdate virtual directory in Microsoft Internet Information Services

1. On the server that runs Microsoft Windows Server Update Services, click Start, click Run, type %SystemRoot%\System32\inetsrv\iis.msc in the Open box, and then click OK.
2. In Internet Information Services (IIS) Manager, expand the Server Name node, and then expand the Web Sites node.
3. Locate and then click the Default Web Site virtual directory.
4. On the Action menu, click Properties.
5. In the Default Web Site Properties dialog box, click the Directory Security tab.
6. In the Authentication and access control area, click Edit.
7. In the Authentication Methods dialog box, click to select the Enable anonymous access check box, and then click to select the Enable anonymous access check box.
8. In the Authentication Methods dialog box, click OK.
9. In the Default Web Site Properties dialog box, click OK.
10. Repeat steps 3 through 9 for the following virtual directories:
    • ClientWebService
    • SelfUpdate
11. On the File menu, click Exit.

Configure Microsoft Windows SharePoint Services to enable the required SelfUpdate services to run

1. On the server that runs Microsoft Windows Server Update Services, click Start, point to Administrative Tools, and then click SharePoint Central Administration.
2. Click Virtual Server Configuration, and then click Configure Virtual Server Settings.
3. Click Default Web Site.
4. Click Virtual Server Management, and then click Define managed paths.
5. In the Add a New Path area, click Excluded path.
6. In the Path box, type /iuident.cab, and then click OK.
7. Repeat step 6, but type the following instead of /iuident.cab:
   • /wutrack.bin
   • /clientwebservice
   • /selfupdate
8. On the File menu, click Close.

Verify that the WinHTTP registry settings are configured correctly on the client.
For more information, click the following article number to view the article in the Microsoft Knowledge Base:

900935 How the Windows Update client determines which proxy server to use to connect to the Windows Update Web site