Automatic updates failing

Do you use GPO to configure all computers? Do you get errors? Maybe updates are not configured, or configured time is 03:00 and computers are turned off at that time?
Please attach C:\windows\windowsupdate.log file from computer that does not update automaticaly.

To answer your questions yes GPO is used for configuring all computers however windows updates are not amongst those configurations. The error I get on all stations including the server is a 80072EFD. It is not limited to automatic updates either if I simply click the check for updates button it produces this error as well.

As requested I have uploaded the log file you asked for. It has one full segment if you need more of the log file please let me know but I believe this should be sufficient.


WindowsUpdate.log

Do you have a proxy set? If you do, clear it out and try again.

Hi,

Well, The key error you are having is in your log file is "WinHttp: SendRequestUsingProxy failed for". Do you use a proxy? If not type in 'proxycfg.exe -d' on a command line of the server. If so you will need to troubleshoot your proxy access

Also check these two discussions:
http://social.technet.microsoft.com/Forums/en/systemcenterupdates/thread/0f131c49-cb53-48e6-9bcd-a48fa58911d2
http://msmvps.com/blogs/athif/archive/2006/05/08/Error-80072efd.aspx

Regards,
Faraz H. Khan

http://www.experts-exchange.com/Software/Server_Software/Content_Management/Q_23897495.html#a22953403

Error in your log referred here


You may encounter temporary connection-related errors when you use Windows Update or Microsoft Update to install updates

Hi,

Check whether the windows updates checks for updates from Microsoft server or WSUS in GPO.

Because, If all clients look for updates from windows server (if configured) then eventually in would fail.
Make sure, if contacts Microsoft server for updates to install on the machines.

Also you can try the microsoft KB article - http://support.microsoft.com/kb/328010

To check whether you GPO in windows server is configured with WSUS - Read the article -
http://technet.microsoft.com/en-us/library/cc720533(WS.10).aspx

I will be on location at the client who is having this issue tomorrow, I will be going through the comments you guys have suggested then.

it is actually much easier to check if you are using WSUS by running from command prompt:


reg query "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /s

Hi guys, I checked to see if the server is using the WSUS server and it appears as though it is.  I had already checked if it was a 3rd party firewall blocking it by both turning it off and adding the site information to the firewall as allowed.  I attempted the suggestions listed above in regards to the WSUS but I am still getting the same errors.  Please let me know if there is something I can do.  I attempted to change the WSUS server to http://servername to reference port 80 much like the person in this link had done but that did not work http://social.technet.microsoft.com/Forums/en/systemcenterupdates/thread/0f131c49-cb53-48e6-9bcd-a48fa58911d2

C:\Users\controller>reg query "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsU
pdate" /s

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
    WUServer    REG_SZ    http://servername:8530
    WUStatusServer    REG_SZ    http://servername:8530
    ElevateNonAdmins    REG_DWORD    0x1

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
    NoAutoUpdate    REG_DWORD    0x0
    AUOptions    REG_DWORD    0x3
    ScheduledInstallDay    REG_DWORD    0x0
    ScheduledInstallTime    REG_DWORD    0x3
    UseWUServer    REG_DWORD    0x1
    RescheduleWaitTimeEnabled    REG_DWORD    0x1
    RescheduleWaitTime    REG_DWORD    0x1
    RebootWarningTimeoutEnabled    REG_DWORD    0x1
    RebootWarningTimeout    REG_DWORD    0x5
    RebootRelaunchTimeoutEnabled    REG_DWORD    0x1
    RebootRelaunchTimeout    REG_DWORD    0xa
    DetectionFrequencyEnabled    REG_DWORD    0x1
    DetectionFrequency    REG_DWORD    0x1
    AutoInstallMinorUpdates    REG_DWORD    0x1
    NoAutoRebootWithLoggedOnUsers    REG_DWORD    0x0

Please let me know if anyone has any other ideas, thank you.

Post your clientdiag results from a client.

ÿAs per your request:ÿÿ

WSUS Client Diagnostics Tool

Checking Machine State
        Checking for admin rights to run tool . . . . . . . . . PASS
        Automatic Updates Service is running. . . . . . . . . . PASS
        Background Intelligent Transfer Service is running. . . PASS

GetFileVersion(szEngineDir,&susVersion) failed with hr=0x80070002

The system cannot find the file specified.


Press Enter to Complete

You receive a "0x80070002" error code when you download an update from Windows Server Update Services in Windows XP

Question: In step 1 it already has an entry listed for Domain as a string value the data in it is the domain.local

in your gpo, do you have the correct servername listed in specify intranet ?


wsus-specify-intranet-microsoft-.gif

That is currently listed as http://servername:8530

I have also tried http://servername to see if that would make a difference.

just found out that the 0x80070002 error is because clientdiag is for 32 bit only.

have you tried temporarily disabling windows firewall?

Are you using proxy ? suggestion here then

http://www.windowsupdateadvisor.com/error-0x80072efd.html

Did you go over this one posted earlier ?

http://support.microsoft.com/kb/836941

No proxy

And the KB is one of the first things I tried listed in my original question

Hi,

I hope you want the client systems to fetch updates from microsoft update server directly. If my understanding is correct. Please change the option in GPO for WSUS to be disabled.

Let me how do you want the clients systems to receive updates.

From WSUS or Microsoft Update.

still working on this as i have time

It was actually the hardware firewall, thank you for posting in regards to this.