Submit a ticketCall us

Quickly Address Software Vulnerabilities
Patch Manager is an intuitive patch management software which extends the capabilities of WSUS and SCCM to not only patch Windows® servers and workstations, and Microsoft® applications, but also other 3rd-party applications which are commonly exploited by hackers. Learn more about our patch management solution.

 

Home > Success Center > Patch Manager > HTTP Status 401 error when testing the WSUS connection to Patch Manager

HTTP Status 401 error when testing the WSUS connection to Patch Manager

Overview

When you configure and test the Microsoft® Windows® Server Update Services (WSUS) server connection in the SolarWinds Patch Manager Admin Console, the following error message displays:

Could not connect to server: WSUS. The request failed with HTTP status 401: Unauthorized.
WSUSConnection::Unable to connect to the WSUS Server.

Environment

All SolarWinds Patch Manager versions

Cause

The SolarWinds Patch Manager environment is not set up correctly. 

Resolution

Resolve the issue based on your WSUS configuration.

See the Microsoft TechNet website for more information about troubleshooting 401.1 authentication problems. 

Patch Manager and WSUS are installed on separate servers

If the WSUS server is not configured on the SolarWinds Patch Manager server, perform the following steps to troubleshoot the connection and the error message:

  1. Verify that the user account displayed in the error message has administrator access to the WSUS server and did not change their password.

    If the user updated the account password on the WSUS server, update the credential in the WSUS credential library. See the Microsoft TechNet website for information about configuring WSUS. 

  2. If you are using a DNS alias for the WSUS server, verify that SolarWinds Patch Manager is using the server name as the connection name.
    1. Log in to the SolarWinds Patch Manager Admin Console.
    2. In the Patch Manager menu, expand Enterprise and select Update Services.
    3. Click Add or Configure WSUS Server in the Actions pane.
    4. Verify that the Server Name and Connection Name fields contain the same value.

      For example:

    5. Click Save to save your changes (if required). 
  3. On the SolarWinds Patch Manager server, open the Local Security Policy editor in the Windows Server® operating system. 
  4. Under Security Settings, expand Local Policies and select Security Options. 
  5. Verify that the following policy is set to Disabled:
    Network access: Do not allow storage of passwords and credentials for network authentication
  6. Verify that the following policy is set to Classic or Guest only:
    Network access: Sharing and security model for local accounts
  7. Close the Local Security Policy editor. 
  8. Open the SolarWinds Patch Manager Admin Console.
  9. In the Patch Manager menu, expand Enterprise and select Update Services. 
  10. Click Add or Modify WSUS Server in the Actions pane. 
  11. Click the Server Name drop-down menu and select the WSUS server.
    For example, SPM-MGOM.
  12. Click Test Connection to verify the connection between SolarWinds Patch Manager and the WSUS server.

    Connect Succeeded displays in the Success window.

  13. Close the window. 

Patch Manager and WSUS are installed on the same server

In this configuration, you may encounter a loopback security check. This Microsoft security feature prevents applications from using a fully qualified domain name (FQDN) to access web applications hosted on the same server. Perform the following steps to specify the host name mapped to the loopback address.

Back up the SolarWinds Patch Manager server before you edit the Windows Registry with Registry Editor. 

  1. On the SolarWinds Patch Manager server, stop the Internet Information Services (IIS) Admin service. 
  2. Open the Registry Editor. 
  3. Navigate to:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters 
  4. Set the DisableStrictNameChecking registry entry to 1.
    See the Microsoft TechNet website for more information about connecting to an SMB share.  
  5. Navigate to:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0
  6. Create a new Multi-String Value called BackConnectionHostNames.
  7. Right-click BackConnectionHostNames and click Modify.
  8. In the Value data field, type the host name for the sites on the local computer, and then click OK.
  9. Close the Registry Editor. 
  10. Restart the IIS Admin service.

    If the issue is not resolved, complete the procedures in the previous section.

Last modified
10:03, 21 Mar 2017

Tags

Classifications

Public
Powered by MindTouch ®