I've just installed WSUS on Windows Server 2016 but bear with me, I think my issue needs to be addressed as a Web Server problem.
The WSUS web site is accessible except for the /Content directory. I can't for the life of me find anything that looks wrong:
- For the site and specifically this directory, only Anonymous access is enabled and the account used for Anonymous access is IUSR.
- The WSUSPool Identity is NetworkService, which has full control NTFS permissions on the directory. (WSUS setup sets the permissions automatically at install time.)
- If I try to access a different virtual directory, such as /selfupdate it's successful, but for the /Content directory I get"This error (HTTP 403 Forbidden) means that Internet Explorer was able to connect to the website, but it does not have permission to view the webpage."
- Comparing it to a Windows 2012 R2 WSUS server which has no issues, here are snippets from the IIS logs:
Windows 2012 R2 (successful) server:
2016-10-23 19:21:54 10.91.200.245 GET /Content/6D/01CAEC375C3A480327CD13012A5169F3BF90606D.cab - 8530 - 10.91.50.55 Microsoft-Delivery-Optimization/10.0 - 206 0 0 7767
Windows 2016 server:
2016-10-25 01:15:01 10.92.200.180 HEAD /Content/2C/B6E6F416B29F9DDB779A72C9EE37882178CF1D2C.cab - 8530 - 10.92.0.1 Microsoft+BITS/7.5 - 500 19 183 15
I'm not sure what else to look for. Thanks in advance for suggestions as to further troubleshooting steps or ideas as to the possible cause. I've set up WSUS several times in the past without running into this.