• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 492
  • Last Modified:

Automatic updates failing

The server is running 2008 server standard and all machines in the network are vista x64.  Manual updates work (Check online for updates from Microsoft Update), however automated updates are not working at the moment (Check for updates).

I attempted to resolve the issue using the following MS KBs:

    * http://windows.microsoft.com/en-CA/windows-vista/Windows-Update-error-80072efd
    * http://support.microsoft.com/kb/836941
    * http://support.microsoft.com/kb/971058

I added the trusted sites to both the software firewalls and the hardware firewall to no resolve.  I was hoping that someone has resolved an issue similar to this.
0
cetomas
Asked:
cetomas
  • 9
  • 6
  • 3
  • +4
1 Solution
 
Vaidas911Commented:
Do you use GPO to configure all computers? Do you get errors? Maybe updates are not configured, or configured time is 03:00 and computers are turned off at that time?
Please attach C:\windows\windowsupdate.log file from computer that does not update automaticaly.
0
 
cetomasAuthor Commented:
To answer your questions yes GPO is used for configuring all computers however windows updates are not amongst those configurations. The error I get on all stations including the server is a 80072EFD. It is not limited to automatic updates either if I simply click the check for updates button it produces this error as well.

As requested I have uploaded the log file you asked for. It has one full segment if you need more of the log file please let me know but I believe this should be sufficient.


WindowsUpdate.log
0
 
MidnightOneCommented:
Do you have a proxy set? If you do, clear it out and try again.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
farazhkhanCommented:
Hi,

Well, The key error you are having is in your log file is "WinHttp: SendRequestUsingProxy failed for". Do you use a proxy? If not type in 'proxycfg.exe -d' on a command line of the server. If so you will need to troubleshoot your proxy access

Also check these two discussions:
http://social.technet.microsoft.com/Forums/en/systemcenterupdates/thread/0f131c49-cb53-48e6-9bcd-a48fa58911d2
http://msmvps.com/blogs/athif/archive/2006/05/08/Error-80072efd.aspx

Regards,
Faraz H. Khan
0
 
John GriffithConsultantCommented:
Apologies... hit submit too soon.
Are you running a 3rd party firewall like NIS, N360, KIS, MCAfee...?  It is most likely the firewall blocking a port.  Disable firewall and try Windows Updates again -
www.update.microsoft.com
0
 
Donald StewartNetwork AdministratorCommented:
0
 
AbdulRahim085Commented:
Hi,

Check whether the windows updates checks for updates from Microsoft server or WSUS in GPO.

Because, If all clients look for updates from windows server (if configured) then eventually in would fail.
Make sure, if contacts Microsoft server for updates to install on the machines.

Also you can try the microsoft KB article - http://support.microsoft.com/kb/328010
0
 
AbdulRahim085Commented:
To check whether you GPO in windows server is configured with WSUS - Read the article -
http://technet.microsoft.com/en-us/library/cc720533(WS.10).aspx
0
 
cetomasAuthor Commented:
I will be on location at the client who is having this issue tomorrow, I will be going through the comments you guys have suggested then.
0
 
Donald StewartNetwork AdministratorCommented:
it is actually much easier to check if you are using WSUS by running from command prompt:


reg query "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /s
0
 
cetomasAuthor Commented:
Hi guys, I checked to see if the server is using the WSUS server and it appears as though it is.  I had already checked if it was a 3rd party firewall blocking it by both turning it off and adding the site information to the firewall as allowed.  I attempted the suggestions listed above in regards to the WSUS but I am still getting the same errors.  Please let me know if there is something I can do.  I attempted to change the WSUS server to http://servername to reference port 80 much like the person in this link had done but that did not work http://social.technet.microsoft.com/Forums/en/systemcenterupdates/thread/0f131c49-cb53-48e6-9bcd-a48fa58911d2

C:\Users\controller>reg query "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsU
pdate" /s

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
    WUServer    REG_SZ    http://servername:8530
    WUStatusServer    REG_SZ    http://servername:8530
    ElevateNonAdmins    REG_DWORD    0x1

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
    NoAutoUpdate    REG_DWORD    0x0
    AUOptions    REG_DWORD    0x3
    ScheduledInstallDay    REG_DWORD    0x0
    ScheduledInstallTime    REG_DWORD    0x3
    UseWUServer    REG_DWORD    0x1
    RescheduleWaitTimeEnabled    REG_DWORD    0x1
    RescheduleWaitTime    REG_DWORD    0x1
    RebootWarningTimeoutEnabled    REG_DWORD    0x1
    RebootWarningTimeout    REG_DWORD    0x5
    RebootRelaunchTimeoutEnabled    REG_DWORD    0x1
    RebootRelaunchTimeout    REG_DWORD    0xa
    DetectionFrequencyEnabled    REG_DWORD    0x1
    DetectionFrequency    REG_DWORD    0x1
    AutoInstallMinorUpdates    REG_DWORD    0x1
    NoAutoRebootWithLoggedOnUsers    REG_DWORD    0x0

Please let me know if anyone has any other ideas, thank you.
0
 
Donald StewartNetwork AdministratorCommented:
Post your clientdiag results from a client.
0
 
cetomasAuthor Commented:
ÿAs per your request:ÿÿ

WSUS Client Diagnostics Tool

Checking Machine State
        Checking for admin rights to run tool . . . . . . . . . PASS
        Automatic Updates Service is running. . . . . . . . . . PASS
        Background Intelligent Transfer Service is running. . . PASS

GetFileVersion(szEngineDir,&susVersion) failed with hr=0x80070002

The system cannot find the file specified.


Press Enter to Complete
0
 
cetomasAuthor Commented:
Question: In step 1 it already has an entry listed for Domain as a string value the data in it is the domain.local
0
 
Donald StewartNetwork AdministratorCommented:
in your gpo, do you have the correct servername listed in specify intranet ?


wsus-specify-intranet-microsoft-.gif
0
 
cetomasAuthor Commented:
That is currently listed as http://servername:8530

I have also tried http://servername to see if that would make a difference.
0
 
Donald StewartNetwork AdministratorCommented:
just found out that the 0x80070002 error is because clientdiag is for 32 bit only.

have you tried temporarily disabling windows firewall?

Are you using proxy ? suggestion here then

http://www.windowsupdateadvisor.com/error-0x80072efd.html

Did you go over this one posted earlier ?

http://support.microsoft.com/kb/836941
0
 
cetomasAuthor Commented:
No proxy

And the KB is one of the first things I tried listed in my original question
0
 
AbdulRahim085Commented:
Hi,

I hope you want the client systems to fetch updates from microsoft update server directly. If my understanding is correct. Please change the option in GPO for WSUS to be disabled.

Let me how do you want the clients systems to receive updates.

From WSUS or Microsoft Update.
0
 
cetomasAuthor Commented:
still working on this as i have time
0
 
cetomasAuthor Commented:
It was actually the hardware firewall, thank you for posting in regards to this.
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

  • 9
  • 6
  • 3
  • +4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now