Update Agent Install

Microsoft.Windows.Server.UpdateServices.3.Server.InstallUpdateAgentState (UnitMonitor)

Knowledge Base article:

Summary

Clients need to install or upgrade the correct version of Windows Automatic Update software.

Resolutions

Clients are not installing updates. This may be because of configuration issues.

Possible resolutions include:

Check the default DCOM impersonation level on the Windows 2000 client.

Start dcomcnfg.exe (in the <windir>\system32 directory).
The Distributed COM Configuration Properties window appears.
Click the Default Properties tab.
Make sure that Enable Distributed COM on this computer is selected.
Make sure that Default Impersonation Level is set to Identify.

Check the default DCOM impersonation level on the Windows Vista or Windows XP client.

Start dcomcnfg.exe (in the <windir>\system32 directory).
Under Component Services, expand the Computers node.
Right-click My Computer and click Properties.
Click the Default Properties tab.
Make sure that Enable Distributed COM on this computer is selected.
Make sure that Default Impersonation Level is set to Identify.

Check the default DCOM access permissions.

Open a command window.
Type reg delete HKLM\SOFTWARE\Microsoft\Ole /v DefaultAccessPermission /f

Additional

Look for the corresponding error event

Open a command window.
Type cd <WSUSInstallDir>\Tools
Type wsusutil checkhealth
Type eventvwr
Review the Application log for the most recent events from source Windows Server Update Services and event id 13010.

Element properties:

Target

Microsoft.Windows.Server.UpdateServices.3.Server

Parent Monitor

Microsoft.Windows.Server.UpdateServices.3.Server.ClientRollup

Category

AvailabilityHealth

Enabled

True

Alert Generate

True

Alert Severity

Error

Alert Priority

Normal

Alert Auto Resolve

True

Monitor Type

Microsoft.Windows.3SingleEventLog3StateUnitMonitorType

Remotable

True

Accessibility

Internal

Alert Message

Update Agent Install

RunAs

Default

Source Code:

<UnitMonitor ID="Microsoft.Windows.Server.UpdateServices.3.Server.InstallUpdateAgentState" Accessibility="Internal" Enabled="true" Target="Microsoft.Windows.Server.UpdateServices.3.Server" ParentMonitorID="Microsoft.Windows.Server.UpdateServices.3.Server.ClientRollup" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.3SingleEventLog3StateUnitMonitorType" ConfirmDelivery="false">

  <Category>AvailabilityHealth</Category>

  <AlertSettings AlertMessage="Microsoft.Windows.Server.UpdateServices.3.Server.InstallUpdateAgentState.AlertMessage">

    <AlertOnState>Warning</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="InstallUpdateAgentError" MonitorTypeStateID="FirstEventRaised" HealthState="Error"/>

    <OperationalState ID="InstallUpdateAgentWarn" MonitorTypeStateID="SecondEventRaised" HealthState="Warning"/>

    <OperationalState ID="InstallUpdateAgentOK" MonitorTypeStateID="ThirdEventRaised" HealthState="Success"/>

  </OperationalStates>

  <Configuration>

    <FirstComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</FirstComputerName>

    <FirstLogName>Application</FirstLogName>

    <FirstExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery>PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value>Windows Server Update Services</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery>EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value>13012</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </FirstExpression>

    <SecondComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</SecondComputerName>

    <SecondLogName>Application</SecondLogName>

    <SecondExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery>PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value>Windows Server Update Services</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery>EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value>13011</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </SecondExpression>

    <ThirdComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ThirdComputerName>

    <ThirdLogName>Application</ThirdLogName>

    <ThirdExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery>PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value>Windows Server Update Services</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <RegExExpression>

            <ValueExpression>

              <XPathQuery>EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>MatchesRegularExpression</Operator>

            <Pattern>^(13010|501|10000)$</Pattern>

          </RegExExpression>

        </Expression>

      </And>

    </ThirdExpression>

  </Configuration>

</UnitMonitor>