Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 7032 Source: WindowsServerUpdateServices

Level
Description
The WSUS administration console was unable to connect to the WSUS Server via the remote API.
Verify that the Update Services service IIS and SQL are running on the server. If the problem persists try restarting IIS SQL and the Update Services Service.
The WSUS administration console was unable to connect to the WSUS Server via the remote API.
Verify that the Update Services service IIS and SQL are running on the server. If the problem persists try restarting IIS SQL and the Update Services Service.
The WSUS administration console was unable to connect to the WSUS Server via the remote API.
Verify that the Update Services service IIS and SQL are running on the server. If the problem persists try restarting IIS SQL and the Update Services Service.
System.Net.Sockets.SocketException -- An existing connection was forcibly closed by the remote host

Source
System

Stack Trace:
<stack trace>
** this exception was nested inside of the following exception **


System.IO.IOException -- Unable to read data from the transport connection: An existing connection was forcibly closed by the remote host.

Source
System

Stack Trace:
<stack trace>
** this exception was nested inside of the following exception **


System.Net.WebException -- The underlying connection was closed: An unexpected error occurred on a receive.

Source
Microsoft.UpdateServices.Administration

Stack Trace:
<stack trace>
Comments
 
Check the permission on your C:\WINDOWS\TEMP folder. NETWORK SERVICE needs to have write access to that folder. In my case, for some reason NETWORK SERVICE was in the list with all the checkboxes unchecked. I gave it write access and all of a sudden my server started working.
From the Stack Trace, it seems like a ASP.NET problem, Id like to suggest you re-register the ASP.NET In IIS:
1. Navigate to "%windir%\Microsoft.net\framework\v2.0.50727".
2. Run "aspnet_regiis I".
3. Run "iisreset"
4. Navigate to "%appdata%\microsoft\mmc", delete WSUS.
Also, Could you check the time of these event, whether the error occured at the same time when you try to open the SCE or WSUS console?

From the Event Viewer, I found:
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {BA126AD1-2166-11D1-B1D0-00805FC1270E} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20). This security permission can be modified using the Component Services administrative tool.

See also:
ME934704 which is related to this symptom, please try the resolutions included in this article (DCOM errors occur approximately every 15 minutes after you install Windows Server 2003 Service Pack 1)

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...