Fix Error 403 HTTP STATUS FORBIDDEN SCCM Software Update Patch Package Download Failed ConfigMgr

Fix Error 403 HTTP STATUS FORBIDDEN SCCM Software Update Patch Package Download Failed ConfigMgr. As part of monthly security patching, we had faced an interesting issue.

WSUS sync was completed successfully and we’re able to download some of the patches from the Windows Update service however the .NET patches were not getting downloaded. I’ve seen this kind of issue during SCCM/ConfigMgr software update monthly patch package creation. 

Issue – Fix Error 403 HTTP STATUS FORBIDDEN SCCM

However, most of the time “couple of retries” solved this kind of patch download issue. This time around retry/retries, server restart, etc didn’t really help us. It was giving us Error 403 (HttpSendRequest failed HTTP_STATUS_FORBIDDEN or HTTP_STATUS_DENIED).

Patch My PC
Fix Error 403 HTTP STATUS FORBIDDEN SCCM Software Update Patch Package Download Failed ConfigMgr
Fix Error 403 HTTP STATUS FORBIDDEN SCCM Software Update Patch Package Download Failed ConfigMgr

As a next step, we’ve analysed PatchDownloader.log. As expected we found some clue about the issue. In the PatchDownloader.log located in SCCM site server, we could see that the patch file with “.CAB” extension is getting downloaded without any issue.

However, we’re getting a download error “403 HTTP STATUS FORBIDDEN” for the patch files with the “.EXE” extension. The issues turned out to be with proxy and Firewall box configuration. There are a bunch of networks nated behind the source SCCM server hence network and the proxy team also struggled to get into the root of the issue.

The network team was able to find the “TCP_DENIED/403” log entry and make the necessary settings to “TCP_CLIENT_REFRESH_MISS/200”  !! So network and proxy team helped to resolve the issue. More details and log file samples at the bottom of the post.

1E Nomad

Following are the log file entries which I found in PatchDownloader.log

Fix Error 403 HTTP STATUS FORBIDDEN SCCM Software Update Patch Package Download Failed ConfigMgr
Fix Error 403 HTTP STATUS FORBIDDEN SCCM Software Update Patch Package Download Failed ConfigMgr


More details Fix Error 403 HTTP STATUS FORBIDDEN SCCM?

Download destination = \\ACNCMCAS\SUPackages\Nov\979d1441-d8f7-4844-9a4f-a68abd66a68f.1\MSIPatchRegFix-AMD64.exe . Contentsource = http://wsus.ds.download.windowsupdate.com/msdownload/update/software/secu/2012/10/msipatchregfix-amd64_5011cb29b096fb674a4795ee8fc2f7fdad33863a.exe .

Try username configmgr\ServiceAccount from the registry. Proxy enabled proxy server 10.10.10.12 HttpSendRequest failed HTTP_STATUS_FORBIDDEN or HTTP_STATUS_DENIED. Fix Error 403 HTTP STATUS FORBIDDEN SCCM Software Update Patch Package Download Failed ConfigMgr.

Errors noticed in SCCM 2012 Download Software Update Wizard!!!
ERRORS
•There was an error downloading the update. (403)
Warning: Security Update for Microsoft .NET Framework 4.5, 4.5.1 and 4.5.2 on Windows 7, Windows Vista and Windows Server 2008 x86 (KB2978128)
ERRORS
•There was an error downloading the update. (403)
 Warning: Security Update for Microsoft .NET Framework 4 on Windows Server 2003, Vista, Windows 7, Server 2008, Server 2008 R2 x64 (KB2978125)
ERRORS
•There was an error downloading the update. (403)
•There was an error downloading the update. (403)
 Warning: Security Update for Microsoft .NET Framework 4 on Windows Server 2003, Vista, Windows 7, Server 2008 x86 (KB2978125)
ERRORS
•There was an error downloading the update. (403)
•There was an error downloading the update. (403)
Warning: Security Update for Windows Server 2003 x64 Edition (KB3006226)
ERRORS
•There was an error downloading the update. (403)
 Warning: Security Update for Windows Server 2003 (KB3006226)
ERRORS
•There was an error downloading the update. (403)
Warning: Cumulative Security Update for Internet Explorer 6 for Windows Server 2003 x64 Edition (KB3003057)
ERRORS
•There was an error downloading the update. (403)
 Warning: Cumulative Security Update for Internet Explorer 8 for Windows Server 2003 (KB3003057)
ERRORS
•There was an error downloading the update. (403)
 Warning: Cumulative Security Update for Internet Explorer 8 for Windows Server 2003 x64 Edition (KB3003057)
ERRORS
•There was an error downloading the update. (403)
 Warning: Cumulative Security Update for Internet Explorer 7 for Windows Server 2003 x64 Edition (KB3003057)
ERRORS
•There was an error downloading the update. (403)
 Warning: Cumulative Security Update for Internet Explorer 6 for Windows Server 2003 (KB3003057)
ERRORS
•There was an error downloading the update. (403)
 Warning: Cumulative Security Update for Internet Explorer 7 for Windows Server 2003 (KB3003057)
ERRORS
•There was an error downloading the update. (403)
Warning: Security Update for Windows Server 2003 (KB3002885)
ERRORS
•There was an error downloading the update. (403)
 Warning: Security Update for Windows Server 2003 x64 Edition (KB3002885)
ERRORS
•There was an error downloading the update. (403)
Warning: Security Update for Windows Server 2003 x64 Edition (KB2993958)
ERRORS
•There was an error downloading the update. (403)
 Warning: Security Update for Windows Server 2003 (KB2993958)
ERRORS
•There was an error downloading the update. (403)
Warning: Security Update for Windows Server 2003 x64 Edition (KB2992611)
ERRORS
•There was an error downloading the update. (403)
 Warning: Security Update for Windows Server 2003 (KB2992611)
ERRORS
•There was an error downloading the update. (403)
Warning: Security Update for Windows Server 2003 x64 Edition (KB2991963)
ERRORS
•There was an error downloading the update. (403)
 Warning: Security Update for Windows Server 2003 (KB2991963)
ERRORS
•There was an error downloading the update. (403)
 Warning: Security Update for Windows Server 2003 x64 Edition (KB2989935)
ERRORS
•There was an error downloading the update. (403)
 Warning: Security Update for Windows Server 2003 (KB2989935)
ERRORS
•There was an error downloading the update. (403)
 Warning: Security Update for Microsoft .NET Framework 4.5, 4.5.1 and 4.5.2 on Windows 7, Vista, Server 2008, Server 2008 R2 x64 (KB2978128)
ERRORS
•There was an error downloading the update. (403)
 Warning: Security Update for Microsoft .NET Framework 4.5, 4.5.1 and 4.5.2 on Windows 7, Windows Vista and Windows Server 2008 x86 (KB2978128)
ERRORS
•There was an error downloading the update. (403)
 Warning: Security Update for Microsoft .NET Framework 4 on Windows Server 2003, Vista, Windows 7, Server 2008, Server 2008 R2 x64 (KB2978125)
ERRORS
•There was an error downloading the update. (403)
•There was an error downloading the update. (403)
 Warning: Security Update for Microsoft .NET Framework 4 on Windows Server 2003, Vista, Windows 7, Server 2008 x86 (KB2978125)
ERRORS
•There was an error downloading the update. (403)
•There was an error downloading the update. (403)
 Warning: Security Update for Microsoft .NET Framework 2.0 SP2 on Windows Server 2003 (KB2978124)
ERRORS
•There was an error downloading the update. (403)
•There was an error downloading the update. (403)
 Warning: Security Update for Microsoft .NET Framework 2.0 SP2 on Windows Server 2003 for x64-based Systems (KB2978124)
ERRORS
•There was an error downloading the update. (403)
•There was an error downloading the update. (403)
Warning: Security Update for Microsoft .NET Framework 1.1 SP1 on Windows Server 2003 and Windows Server 2003 R2 x86 (KB2978114)
ERRORS
•There was an error downloading the update. (403)

Proxy / Network side logging 

TCP_DENIED/403 0 GET http://wsus.ds.download.windowsupdate.com/msdownload/update/software/secu/2012/10/msipatchregfix-amd64_5011cb29b096fb674a4795ee8fc2f7fdad33863a.exe - DIRECT/wsus.ds.download.windowsupdate.com application/x-dosexec CMF:4 DCF:200000 ERR:10 BLOCK_ADMIN_FILE_TYPE_12-No_Auth_for_IP_Policy-No_Auth_for_IP_Identity-NONE-NONE-NONE-DefaultGroup <iw_swup,9.2,-,"-",-,-,-,1,"-",-,-,-,"-",-,-,"-","-",-,-,iw_swup,-,"-","-","unknown","unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-"> - 376734 -

TCP_CLIENT_REFRESH_MISS/200 178122994 GET http://wsus.ds.download.windowsupdate.com/c/msdownload/update/software/crup/2014/11/mso-x-none_4003f83d82ddccd3c0905c04d80c377e94780c78.cab - DIRECT/wsus.ds.download.windowsupdate.com application/vnd.ms-cab-compressed CMF:4 DCF:0 ERR:0 ALLOW_WBRS_12-No_Auth_for_IP_Policy-No_Auth_for_IP_Identity-NONE-NONE-NONE-DefaultGroup <iw_swup,9.2,-,"-",-,-,-,1,"-",-,-,-,"-",-,-,"-","-",-,-,iw_swup,-,"-","-","unknown","unknown","-","-",13550.37,0,-,"-","-",-,"-",-,-,"-","-"> - 470619 -

Resources

SCCM Related Posts Real World Experiences Of SCCM Admins (anoopcnair.com)

1 thought on “Fix Error 403 HTTP STATUS FORBIDDEN SCCM Software Update Patch Package Download Failed ConfigMgr”

  1. Hi,

    I hope you found the solution a long time ago, but for those who are still stuck with this problem and arrived on this page while seeking a solution :

    DISABLE UAC !

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system]
    “EnableLUA”=dword:00000000

    And reboot

    Reply

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.