PENDING Software update deployment - Status "unknown"

[merlin_world]

Hi,
I'm having issue when trying to check status of software deployment. After one week, 90% of computers show the status "unknown" but the updates are installed correctly. Also, by checking the WUAHandler.log and UpdateStore.log on the clients, everything seems normal.
In the end, it seems like the deployment is working fine, client sends proper info, but the server somehow is not processing that info. Please help!

 

[MJ-Tech]

Unknown devices are available in VPN sites?

 

[merlin_world]

Unknown devices are available in VPN sites?

No, only local network devices...

 

[MJ-Tech]

I suspect the issue may be related to the DNS , please ensure if you are able to ping the client hostname and ip address? both should be matched.

 

[merlin_world]

No, DNS, seems perfectly fine, the clients are accessible normally, either by hostname or IP, and are both matching.

 

[MJ-Tech]

Pl check the status of the affected devices, (Note: if there is short duration between Last offline and online, then inform user(s) to keep the machine online and reboot to refresh actions)



If the above case is fine, then perform below activity in one of the affected machines and verify the status,

• Remove CM client
• Ensure you have deleted all ccm runtime files and logs
• Reboot
• Install CM client with correct parameter
• Reboot
• check the status after 30 minutes.

Also ensure SCCM ports are enabled.

 

[merlin_world]

Hi, thank you for mentioning this. I have a very strange behavior on this; machines seem like going into standby or something, but they are turned on 24/7, no sleep mode. What can be the cause of this?

 

[MJ-Tech]

Try disable deep sleep control in BIOS and set Never on both -menus',


If the issue persists, it is worth checking the power settings by comparing work vs affected machines.

 

[merlin_world]

Yes, but what puzzles me is that the machine is in status "Active" and I can connect normally, but the "Last online time" is 2AM in the morning?

 

[MJ-Tech]

Issue is with time zone?

 

[merlin_world]

No, time zone is okay...

 

[merlin_world]

HI. I still haven't managed to sort it out and I'm going crazy here. In the meantime, I even updated SCCM infrastructure to 2207 with latest hotfix, but still the situation is the same.
It seems that the root problem is that the clients are not reporting status on any topic. For example, here is a status for specific software update. Almost all clients have unknown status. Not sure where to start with troubleshoot? Can it be related to certificates? Only HTTP is used for client communication.

 

[merlin_world]

Further errors found in wuahandler.log. Seems that there are some HTTP time-out errors when trying to access SUP during scan

 

[MMajeres]

Could it be a firewall change blocking the port listed as your WUA managed server?

 

[merlin_world]

No, it doesn't seem so. I tried to access SUP server on 8530 port and it works.