The scan process fails when the SMS 2003 Inventory Tool for Microsoft Updates tries to scan Microsoft Windows 2000-based SMS 2003 client computers for compliance

Article translations Article translations
Article ID: 941440 - View products that this article applies to.
Important This article contains information about how to modify the registry. Make sure that you back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:
256986 Description of the Microsoft Windows registry
Expand all | Collapse all

On This Page

SYMPTOMS

Consider the following scenario. The Microsoft Systems Management Server (SMS) 2003 Inventory Tool for Microsoft Updates (ITMU) tries to scan SMS 2003 client computers for compliance. These SMS 2003 client computers are Microsoft Windows 2000-based. In this scenario, the scan process fails.

Additionally, log files that are located on the SMS client computer contain error messages that resemble the following.

The Scanwrapper.log file

ERROR: Failed while processing the executable. Cmdline=["%windir%\system32\VPCache\Packagename\SmsWusHandler.exe"
/Catalog:%windir%\system32\VPCache\Packagename\wsusscn2.cab
/OutputXml:%windir%\system32\VPCache\Packagename\Results.xml],
CurrentDir=[%windir%\system32\VPCache\Packagename], ExitCode=[265] Software
Updates Scan Tool 8/12/2007 3:05:03 PM 884 (0x0374)
Loaded "%windir%\system32\CCM\smscstat.dll"; the module handle is 0x188F0000.
Software Updates Scan Tool 8/12/2007 3:05:03 PM 884 (0x0374)
CreateSMSStatusMessage() succeeded; the status message object handle is 0x00ACF7D0.
Software Updates Scan Tool 8/12/2007 3:05:03 PM 884 (0x0374)
ReportSMSStatusMessage() succeeded.
Software Updates Scan Tool 8/12/2007 3:05:04 PM 884 (0x0374)
ERROR: An error was encountered. Exiting Scan process ... Software Updates Scan Tool 8/12/2007 3:05:04 PM 884 (0x0374)

The Smswushandler.log file

Registering a new scan package service with the Windows Update Agent.
SmsWusHandler 8/12/2007 4:13:01 PM 804 (0x0324)
ERROR : AddScanPackageService() failed, win32 error code = 0 SmsWusHandler
8/12/2007 4:13:02 PM 804 (0x0324)
ERROR: Search() failed with hRes=0x800b0109 SmsWusHandler 8/12/2007 4:13:02 PM
804 (0x0324) 0x800b0109 is the hresult value for the operation. Returning 265 as the exit code. SmsWusHandler 8/12/2007 4:13:02 PM 804 (0x0324)

The WindowsUpdate.log file

2007-08-11 13:05:22:291 652 4e0 Misc
WARNING: Error: 0x800b0109 when verifying trust for %DriveLetter%\WINNT\SoftwareDistribution\ScanFile\498d12b1-5a70-4bf4-af7a-161e9c458e46\Source.cab
2007-08-11 13:05:22:291 652 4e0 Misc WARNING: Digital Signatures on file %DriveLetter%\WINNT\SoftwareDistribution\ScanFile\498d12b1-5a70-4bf4-af7a-161e9c458e46\Source.cab are not trusted: Error 0x800b0109 2007-08-11 13:05:22:291 652 4e0 OfflSnc
WARNING: failed to verify signature for offline cab. hr = 0x800b0109 2007-08-11 13:05:22:501 652 4e0 PT WARNING: PTError: 0x800b0109
2007-08-11 13:05:22:501 652 4e0 Agent WARNING: WU client fails CClientCallRecorder::OpenOfflineSyncSource with error 0x800b0109 2007-08-11 13:05:22:501 1128 4a4 COMAPI WARNING: ISusInternal::OpenOfflineSyncSource failed, hr=800B0109

CAUSE

This issue occurs when the September 2006 release of the Microsoft root certificates update is not successfully installed on the Windows 2000-based SMS client computer. The Microsoft root certificates update that released in September 2006 was not distributed by ITMU. This is because the Microsoft root certificates update was not released as a security update, an update rollup, or a service pack.

RESOLUTION

To resolve this issue, you must download and install the September 2006 release of the Microsoft root certificates update. To do this, follow these steps:
  1. Download the September 2006 release of the Microsoft root certificates update. To do this, follow these steps:
    1. Log on to the SMS Site Server by using an account that has administrative permissions.
    2. In Microsoft Internet Explorer, visit the following Microsoft Web site:
      http://catalog.update.microsoft.com/v7/site/Home.aspx
    3. Copy the following Root Certificates Update number:
      d1b4fccb-384d-489e-a709-845116887f36
    4. On the Microsoft Update Catalog Web page, paste the number in the Search box, and then click Search.
    5. Click Add to add the Root Certificates Update to your basket, and then click view the basket.
    6. Click Download.
    7. In the Download Options dialog box, click Browse to select a folder where you want to save the file, and then click Continue.
    8. When the Download completes, click Close.
  2. Distribute the Microsoft root certificates update by using SMS Software Distribution. To do this, follow these steps:
    1. Click Start, point to All Programs, click Systems Management Server, and then click SMS Administrator Console.
    2. Expand Site Database (SiteCode-SiteName), right-click Packages, click New, and then click Package.
    3. In the Package Properties dialog box, type a name that you want to use for the package, and then click the Data Source tab.
    4. On the Data Source tab, click to select the This package contains source files check box, click Set to specify the source directory, and then click OK.
    5. In the SMS Administrator Console, expand the package that you created, right-click Programs, click New, and then click Program.
    6. Type a name for the new program.
    7. In the Command line box, type the following, and then click OK:
      X86-all-rootsupd_fe44934fd80dd11fec2f0f9b24431658a4f6d589.exe /q:a /r:n
    8. In the SMS Administrator Console, right-click the package, point to All Tasks, and then click Distribute Software.
    9. Follow the steps in the Distribute Software Wizard to specify a distribution point and to advertise the package to all Windows 2000-based SMS client computers.
Note You do not have to restart the SMS client computer after you install this update.

MORE INFORMATION

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall the operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

To determine whether the Microsoft root certificates update is already installed on a Windows 2000-based computer, follow these steps:
  1. Log on to the Windows 2000-based computer by using an account that has administrative permissions.
  2. Click Start, click Run, type regedit, and then click OK.
  3. In Registry Editor, locate and then click the following registry subkey:
    HKEY_LOCAL_MACHINE\ Software\Microsoft\Active Setup\Installed Components\{EF289A85-8E57-408d-BE47-73B55609861A
  4. Make sure that the following subkeys are configured as follows:
    • The value of the Version subkey set to 9.0.2195.0.
    • The value of the IsInstalled subkey is set to 1.
    If these subkeys do not have these values, you must install the Microsoft root certificates update.

Properties

Article ID: 941440 - Last Review: August 15, 2007 - Revision: 1.1
APPLIES TO
  • Microsoft Systems Management Server 2003
Keywords: 
kbtshoot kbexpertiseinter kbprb KB941440

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com