Error message when you visit the WSUS Administrator Web page: "One or more Update Service components could not be contacted. Check your server status and ensure that the Windows Server Update Service is running" (920654)


The information in this article applies to:

  • Microsoft Windows Server Update Services

SYMPTOMS

When you visit the Microsoft Windows Server Update Services (WSUS) Administrator Web page, you receive an error message that resembles the following:
One or more Update Service components could not be contacted. Check your server status and ensure that the Windows Server Update Service is running. Non-running services: SelfUpdate.
Additionally, you experience the following symptoms:
  • The following error message is logged in the System event log:Event ID: 506
    Source: Windows Server Update Services
    Description: The SelfUpdate Tree is not working. Clients may not be able to update to the latest WUA client software and communicate with the WSUS Server.
  • The W3SVC log files contain the following error log entry:
    2005-08-09 20:25:56 128.231.210.123 GET /selfupdate/iuident.cab - 80 - 128.231.210.123 - 403 6 0
  • The Software Distribution log files contain the following error log entries:
    2005-08-09 20:30:58.021 UTC Info wsusservice.156 ThreadEntry SusEventDispatcher.OnSelfUpdateStatusWatchTimer

    2005-08-09 20:30:58.021 UTC Warning wsusservice.156 SusEventDispatcher.CheckSelfUpdateTree Retried 3 times but still received error when checking for SelfUpdate Tree. Error: System.Net.WebException: The remote server returned an error: (403) Forbidden. at System.Net.HttpWebRequest.CheckFinalStatus() at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult) at System.Net.HttpWebRequest.GetResponse() at Microsoft.UpdateServices.Internal.SusEventDispatcher.CheckSelfUpdateTree()

CAUSE

This problem occurs because the directory security settings for the WSUS server default Web site contain an IP address restriction. This restriction denies the server's IP address access to the WSUS Web site.

RESOLUTION

To resolve this problem, remove the IP address restriction. To do this, follow these steps:
  1. Click Start, click Run, type inetmgr, and then click OK.
  2. In the left pane, expand computer_name, and then expand Web Sites.
  3. Right-click the WSUS Administration Web site, and then click Properties.
  4. Click the Directory Security tab, and then click Edit in the IP address and domain name restrictions area.
  5. Click Granted access, and then click OK two times.
Modification Type:MajorLast Reviewed:6/19/2006
Keywords:kbtshoot KB920654 kbAudEndUser kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.