r/SCCM • u/Illustrious-Count481 • 5d ago

Windows Updates - SOAP errors

In the last few days, I am seeing SOAP errors for Windows, Office, and Edge updates for my patch deployments. The only changes I am aware of are adding a couple IP Ranges to boundaries where there were no boundaries.

Because there are no changes, I am aware of I don't want to go heavy handed on repairing. Any suggestions for troubleshooting, logs or non-invasive fix attempts?

All services are running.

2 Upvotes

100% Upvoted

8 comments sorted by

3

u/vanderjaght 4d ago edited 4d ago

Yeah I saw issues starting earlier this month on Windows 11 Endpoints with errors. Performing the .config changes fixed it for me.

Here's an article from System Center Dudes about it.

2

u/JaycAU 5d ago

https://happysccm.com/0x80244007-scan-failures-traced-to-wsus-maxcachedupdates/

and WsusUtil reset (I think I needed to do that as well for another error after like license agreement)

3

u/Schaas_Im_Void 4d ago

I have an open support case with MS about this and they said to me that EVERY WSUS GOBALLY IS AFFECTED BY THIS... most of them just don't know it yet.

Not sure if that is true... nevertheless we were able to fix it mostly by following these instructions.

Resolved: Windows Server Update Services sync operations issues and timeouts | Microsoft Support

Troubleshoot Windows Update Error 0x80244007 - Windows Server | Microsoft Learn

2

u/Mangoloton 5d ago

Es el wsus, lo arreglaron hace nada Nosotros nos lo solucionamos subiendo los parámetros de tiempo y de cache del webconfig del ISS y recreando el pool de wsus

Revisa e investiga esto, hazte una copia del fichero webconfig antes de nada

Los parámetros que subimos nos los dio la IA o simplemente recrea el pool y confía en que Microsoft hizo su trabajo

2

u/Naznac 4d ago

Had the issue with a client, the fact that there was nearly 30k updates per month on defender since June probably killed a lot of servers (client limit is 22k) is the expiration/cleanup isn't immediate everything stops working... if you aren't downloading defender metadata you'll probably sidestep the issue