Una vez pruebas a crear una Automatic Deployment Rule para actualizar Windows y la ejecutas, es posible que nos encontremos con «Automatic Deployment Rule download failed«. Este es un error al descargar las actualizaciones mediante ADR bastante común. A continuación, explicaremos cómo identificarlo y la solución mediante la revisión de logs.
Error Automatic Deployment Rules Download Failed en SCCM
Primero de todo, debemos comprobar que desde nuestro Site Server se están enviando y recibido las peticiones a download.windowsupdate.com correctamente y permitir las conexiones en caso de estar bloqueadas.
Una vez comprobadas las comunicaciones, para determinar si este es vuestro problema, podéis leer los logs ruleengine.log y PatchDownloader.log. Estos logs estarán en la carpeta Logs dentro de la instalación de System Center Configuration Manager en vuestro Site Server.
- Ubicación ruleengine.log: C:\Program Files\Microsoft Configuration Manager\Logs\ruleengine.log.
- Ubicación PatchDownloader.log: C:\Program Files\Microsoft Configuration Manager\Logs\PatchDownloader.log
Los errores deberían ser algo así:
List of update content(s) which match the contnt rule criteria = {16817629} SMS_RULE_ENGINE
Downloading content with ID 16817629 in the package SMS_RULE_ENGINE
Failed to download the update from internet. Error = 5 SMS_RULE_ENGINE
Failed to download ContentID 16817629 for UpdateID 16826923. Error code = 5 SMS_RULE_ENGINE
Failed to download any update SMS_RULE_ENGINE
Failed to download update contents. SMS_RULE_ENGINE
No new update was added to the package. Package "ABC00001" would not be updated. SMS_RULE_ENGINE
Failed to run the DownloadAction for the AutoDeployment. SMS_RULE_ENGINE
STATMSG: ID=8706 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_RULE_ENGINE" SYS=MyServer.Contoso.com SITE=ABC PID=5344 TID=8380 GMTDATE=ju. nov. 08 12:10:30.093 2018 ISTR0="SMS Rule Engine" ISTR1="Failed to download one or more content files" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0 SMS_RULE_ENGINE
Creating Software Update Group for ADR SMS_RULE_ENGINE
Parsing Deployment Action XML... SMS_RULE_ENGINE
Parsing Rule XML... SMS_RULE_ENGINE
SQL is: select cis.CI_ID from vCI_ConfigurationItems cis join vProvisionedCIs pci on cis.CI_ID = pci.CI_ID where cis.CI_ID in (16817929, 16819205, 16819885, 16819911, 16826875, 16826923) order by cis.CI_ID SMS_RULE_ENGINE
1 of 6 updates are downloaded and will be added to the Deployment. SMS_RULE_ENGINE
SQL is: select CI_UniqueID from vCI_ConfigurationItems where CI_ID in (16819885) order by CI_ID SMS_RULE_ENGINE
SQL is: select distinct cira.ReferencedCI_ID from v_CIRelation_All cira ~join v_AuthListInfo ugi on cira.CI_ID = ugi.CI_ID~where ugi.CI_UniqueID = 'ScopeId_0B20F666-E6F4-4260-80C4-7EFF269FDD43/AuthList_b0664cd6-8629-4178-ad4e-948300f67d71'~and cira.RelationType = 1 and cira.Level = 1 order by cira.ReferencedCI_ID SMS_RULE_ENGINE
The rule found no new updates. Skipping update group creation or update SMS_RULE_ENGINE
Enforcing Create Deployment Action SMS_RULE_ENGINE
Create Deployment Rule Action XML is: <DeploymentCreationActionXML xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><DeploymentId>{712135a0-0be5-4b59-9f67-9039bd783aa0}</DeploymentId><DeploymentNumber>0</DeploymentNumber><CollectionId>ABC00001</CollectionId><IncludeSub>true</IncludeSub><Utc>false</Utc><Duration>7</Duration><DurationUnits>Days</DurationUnits><AvailableDeltaDuration>0</AvailableDeltaDuration><AvailableDeltaDurationUnits>Hours</AvailableDeltaDurationUnits><SoftDeadlineEnabled>false</SoftDeadlineEnabled><SuppressServers>Checked</SuppressServers><SuppressWorkstations>Unchecked</SuppressWorkstations><PersistOnWriteFilterDevices>Unchecked</PersistOnWriteFilterDevices><AllowRestart>true</AllowRestart><DisableMomAlert>false</DisableMomAlert><GenerateMomAlert>false</GenerateMomAlert><UseRemoteDP>false</UseRemoteDP><UseUnprotectedDP>true</UseUnprotectedDP><UseBranchCache>true</UseBranchCache><RequirePostRebootFullScan>Checked</RequirePostRebootFullScan><EnableDeployment>true</EnableDeployment><EnableWakeOnLan>false</EnableWakeOnLan><AllowDownloadOutSW>false</AllowDownloadOutSW><AllowInstallOutSW>true</AllowInstallOutSW><EnableAlert>false</EnableAlert><AlertThresholdPercentage>0</AlertThresholdPercentage><AlertDuration>2</AlertDuration><AlertDurationUnits>Weeks</AlertDurationUnits><EnableNAPEnforcement>false</EnableNAPEnforcement><UserNotificationOption>DisplayAll</UserNotificationOption><LimitStateMessageVerbosity>false</LimitStateMessageVerbosity><StateMessageVerbosity>10</StateMessageVerbosity><AllowWUMU>false</AllowWUMU><AllowUseMeteredNetwork>false</AllowUseMeteredNetwork></DeploymentCreationActionXML> SMS_RULE_ENGINE
Rule XML is: <AutoDeploymentRule xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"> <DeploymentId></DeploymentId> <DeploymentName>ADR: Windows 10 1703</DeploymentName> <UpdateGroupId>ScopeId_0B20F666-E6F4-4260-80C4-7EFF269FDD43/AuthList_b0664cd6-8629-4178-ad4e-948300f67d71</UpdateGroupId> <UpdateGroupName></UpdateGroupName> <LocaleId>1033</LocaleId> <UseSameDeployment>false</UseSameDeployment> <AlignWithSyncSchedule>false</AlignWithSyncSchedule> <NoEULAUpdates>false</NoEULAUpdates> <EnableAfterCreate>true</EnableAfterCreate> <ScopeIDs><ScopeID>SMS00UNA</ScopeID> </ScopeIDs> <EnableFailureAlert>true</EnableFailureAlert> <IsServicingPlan>false</IsServicingPlan> <IsOldUpdateGroupCurrent>true</IsOldUpdateGroupCurrent> </AutoDeploymentRule> SMS_RULE_ENGINE
Criteria Filter Result XML is: <AutoDeploymentRule xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"> <DeploymentId></DeploymentId> <DeploymentName>ADR: Windows 10 1703</DeploymentName> <UpdateGroupId>ScopeId_0B20F666-E6F4-4260-80C4-7EFF269FDD43/AuthList_b0664cd6-8629-4178-ad4e-948300f67d71</UpdateGroupId> <UpdateGroupName></UpdateGroupName> <LocaleId>1033</LocaleId> <UseSameDeployment>false</UseSameDeployment> <AlignWithSyncSchedule>false</AlignWithSyncSchedule> <NoEULAUpdates>false</NoEULAUpdates> <EnableAfterCreate>true</EnableAfterCreate> <ScopeIDs><ScopeID>SMS00UNA</ScopeID> </ScopeIDs> <EnableFailureAlert>true</EnableFailureAlert> <IsServicingPlan>false</IsServicingPlan> <IsOldUpdateGroupCurrent>true</IsOldUpdateGroupCurrent> </AutoDeploymentRule> SMS_RULE_ENGINE
Parsing Deployment Action XML... SMS_RULE_ENGINE
Parsing Rule XML... SMS_RULE_ENGINE
SQL is: select cis.CI_ID from vCI_ConfigurationItems cis join vProvisionedCIs pci on cis.CI_ID = pci.CI_ID where cis.CI_ID in (16817929, 16819205, 16819885, 16819911, 16826875, 16826923) order by cis.CI_ID SMS_RULE_ENGINE
1 of 6 updates are downloaded and will be added to the Deployment. SMS_RULE_ENGINE
SQL is: select CI_UniqueID from vCI_ConfigurationItems where CI_ID in (16819885) order by CI_ID SMS_RULE_ENGINE
The rule found no new updates. Skipping deployment creation or update SMS_RULE_ENGINE
CRuleHandler: Enforcing Actions for Rule 5 failed! SMS_RULE_ENGINE
CRuleHandler: ResetRulesAndCleanUp() SMS_RULE_ENGINE
Rule result is: 0 SMS_RULE_ENGINE
CRuleHandler::CreateFailureAlert - Alert ID = 16777258 SMS_RULE_ENGINE
Updated Failure Information for Rule: 5 SMS_RULE_ENGINETrying to connect to the \\MyServer.Contoso.com\root\sms\site_ABC namespace on the MyServer.Contoso.com machine.
Connected to \\MyServer.Contoso.com\root\sms\site_ABC
Download destination = \\MyServer.Contoso.com\SCCM\Updates\ADR\ADR Windows 10 1703\e2bdf884-bc71-4498-923b-b3c5dd89eeea.1\Windows10.0-KB4091663-v5-x64.cab .
Contentsource = http://download.windowsupdate.com/d/msdownload/update/software/updt/2018/09/windows10.0-kb4091663-v5-x64_58e4580d5144211b9e9acb0d6037242a3aa3c8cb.cab .
Failed to create directory \\MyServer.Contoso.com\SCCM\Updates\ADR\ADR Windows 10 1703\e2bdf884-bc71-4498-923b-b3c5dd89eeea.1\Windows10.0-KB4091663-v5-x64.cab, error 5
CreateLinkToExistingFile() failed for ContentID 1611846. hRes = 0x80070005 .
Downloading content for ContentID = 16811846, FileName = Windows10.0-KB4091663-v5-x64.cab.
Failed to create directory \\MyServer.Contoso.com\SCCM\Updates\ADR\ADR Windows 10 1703\e2bdf884-bc71-4498-923b-b3c5dd89eeea.1\, error 5
ERROR: DownloadContentFiles() failed with hr=0x80070005En los logs ruleengine.log y PatchDownloader.log podemos ver que nos están indicando los códigos de error «Enforcing Actions for Rule 5 failed» y «ERROR: DownloadContentFiles() failed with hr=0x80070005» (0x80070005), que son acceso denegado. Deberemos revisar los permisos en la carpeta donde hemos indicado que se descarguen los KBs.
Un dato a tener en cuenta: Cuando descargamos las actualizaciones desde la consola, se usa la cuenta con la que estemos usando la cuenta en ese momento (nuestro usuario administrador). Y cuando la ADR se ejecuta automáticamente, usa la cuenta máquina del Primary Site Server. Esta segunda cuenta es la que debe tener permisos de escritura y lectura sobre la carpeta tanto a nivel de NTFS como de Share.
Una vez revisados los permisos de la ADR, al ejecutar de nuevo la Automatic Deployment Rule, se debería ejecutar satisfactoriamente. Podemos abrir los logs ruleengine.log y PatchDownloader.log para seguir el proceso de descarga:
Download http://officecdn.microsoft.com/pr/b8f9b850-328d-4355-9145-c59439a0c4cf/office/data/16.0.10730.20205/s641027.cab in progress: 12 percent complete Software Updates Patch Downloader
Download http://officecdn.microsoft.com/pr/b8f9b850-328d-4355-9145-c59439a0c4cf/office/data/16.0.10730.20205/s641027.cab in progress: 24 percent complete Software Updates Patch Downloader
Download http://officecdn.microsoft.com/pr/b8f9b850-328d-4355-9145-c59439a0c4cf/office/data/16.0.10730.20205/s641027.cab in progress: 36 percent complete Software Updates Patch Downloader
Download http://officecdn.microsoft.com/pr/b8f9b850-328d-4355-9145-c59439a0c4cf/office/data/16.0.10730.20205/s641027.cab in progress: 48 percent complete Software Updates Patch Downloader
Download http://officecdn.microsoft.com/pr/b8f9b850-328d-4355-9145-c59439a0c4cf/office/data/16.0.10730.20205/s641027.cab in progress: 60 percent complete Software Updates Patch Downloader
Download http://officecdn.microsoft.com/pr/b8f9b850-328d-4355-9145-c59439a0c4cf/office/data/16.0.10730.20205/s641027.cab in progress: 72 percent complete Software Updates Patch Downloader
Download http://officecdn.microsoft.com/pr/b8f9b850-328d-4355-9145-c59439a0c4cf/office/data/16.0.10730.20205/s641027.cab in progress: 84 percent complete Software Updates Patch Downloader
Download http://officecdn.microsoft.com/pr/b8f9b850-328d-4355-9145-c59439a0c4cf/office/data/16.0.10730.20205/s641027.cab in progress: 96 percent complete Software Updates Patch Downloader
Download http://officecdn.microsoft.com/pr/b8f9b850-328d-4355-9145-c59439a0c4cf/office/data/16.0.10730.20205/s641027.cab to C:\Windows\TEMP\CAB3AF9.tmp returns 0 Software Updates Patch Downloader
