"Scott" <holdencaufield@anonymous.net> wrote in message
news:7399n1d3je1c86gfj443ltb9tl0ob5hg3p@4ax.com
....
>>>>Post the %windir%\WindowsUpdate.log that documents this behavior.
>>> The whole log or just the portion of it that occurs
> This should be it:
>
....
> 2005-11-09 07:55:15 2036 2a8 DnldMgr ***********
> DnldMgr: New download job [UpdateId =
> {84B38FE7-A6CA-4E43-A956-A2C53AC0EC0C}.100] ***********
> 2005-11-09 07:55:15 2036 2a8 DnldMgr * Update is
> not allowed to download due to regulation.
> 2005-11-09 07:55:15 2036 2a8 DnldMgr ***********
> DnldMgr: New download job [UpdateId =
> {4515412A-006E-4D88-A9C1-00ED1969CCDE}.100] ***********
> 2005-11-09 07:55:15 2036 2a8 DnldMgr * Update is
> not allowed to download due to regulation.
> 2005-11-09 07:55:15 2036 2a8 Agent *********
> 2005-11-09 07:55:15 2036 2a8 Agent ** END **
> Agent: Downloading updates [CallerId = AutomaticUpdates]
> 2005-11-09 07:55:15 2036 2a8 Agent *************
> 2005-11-09 07:55:15 2036 2a8 AU AU checked
> download status and it changed: Downloading is paused
> 2005-11-09 07:55:15 2004 7d0 AUClnt AU client got
> new directive = 'Shutdown', serviceId =
> {7971F918-A847-4430-9279-4A52D1EFE18D}, return = 0x00000000


In order to get more clues about what the log is really saying
there are some alternative diagnostics you could employ.

1. The easiest to use would be: bitsadmin /monitor /allusers
E.g. with it (in a cmd window) you could tell if a download is actually
happening.

For example, "Downloading is paused" makes it look as if some
downloading was actually done and more might be done later
when AU resumes.

BTW it would also be relevant for you to report what you see happen
in the notification area regarding the AU icon (aka "yellow shield")
and in the Task Manager Processes tab regarding wuauclt.exe.
Process Explorer is a tool which could help more with the latter
observations if you would like to use it instead.

2. My favorite tool for supplementing this log is FileMon
using a filter such as SoftwareDistribution;update;CatRoot
In addition, if you use its Options: Clock Time and Show Milleseconds
you can fairly easily correlate writes to the WindowsUpdate.log
by pattern matching on the length of the records. (The writes to the log
would be captured because of the update; portion of the above filter.)

3. Supposedly there is a verbose mode for logging. (Ref. KB902093)
However, I have never seen much of anything useful from it. YMMV.


HTH

Robert Aldwinckle
---