Error 0x800700DE when access WindowsUpdate site

We have two servers that started generating the following error today:

Error Message: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid.

Additionally, we found that we were unable to access the WindowsUpdate site from these same two servers.  When we browse to the site, we receive error code 0x800700DE.

We've modified the trusted sites list, rebooted the servers, started BITS, and disabled Symantec Endpoint Protection.  For one of the servers, the reboot allowed access briefly.  The "failed extract" messages seem to have stopped on that server, but we're again unable to access WindowsUpdate without the subject error.

We've searched for info on the error code, but haven't found anything and we searched the EE knowledgebase, but didn't find anything.

Both servers are running 32-bit Win2K3 SP2 and IE8.  We have ~25 servers in our environment and these are the only two having the issue.
SBSIAdminAsked:
Who is Participating?
 
SBSIAdminConnect With a Mentor Author Commented:
Problem solved, I guess.  After uninstalling IE8, it automatically reverted back to IE7.  I then verified that I had access to WindowsUpdate using IE7, which I did.  Automatic Updates prompted me to install a cumulative patch to IE7 that was pushed via WSUS.  After the reboot, I again browsed to WindowsUpdate via IE7.  From there I chose IE8.  After that reboot I confirmed that I was again able to access WindowsUpdate using IE8.
I certainly don't know root cause and I don't know that I ever will.  Strange that it occurred on two servers and was easy to resolve on one of them, but all other servers are Ok.....for now.
Gotta love Microsoft.  Can you say "Job Security"?!  Thanks for all your responses.
0
 
Timothy McCartneySYS ADMINISTR I INFRASCommented:
http://wiki.lunarsoft.net/wiki/Dial-a-fix

Try the above program called Dial-a-Fix. It solves a lot of issues related to updates
0
 
Timothy McCartneySYS ADMINISTR I INFRASCommented:
Unfortunately it's not compatible with IE8 so when you perform all the operations you will get a few error messages, but you can click through these as they pop up.

Alternately, you can try using an older version of IE to connect (without removing IE8)

http://finalbuilds.edskes.net/iecollection.htm

That link is to a suite of IEs that should also help you get windows updates working again
0
[Webinar] Kill tickets & tabs using PowerShell

Are you tired of cycling through the same browser tabs everyday to close the same repetitive tickets? In this webinar JumpCloud will show how you can leverage RESTful APIs to build your own PowerShell modules to kill tickets & tabs using the PowerShell command Invoke-RestMethod.

 
zsaurabhCommented:
Check Windows update, Eventlog and Background Intel Transfer Sevice are running
0
 
cincytopherCommented:
Have you tried this:

Stop Automatic Update Service - "Net stop wuauserv".
Rename/delete "%Windir%\SoftwareDistribution" folder.  
Start Automatic Update Service - "Net start wuauserv".
Force update detection and see if that works.
0
 
Timothy McCartneySYS ADMINISTR I INFRASCommented:
@cincytopher

Take a look at my first post and check out that program. It can perform those operations automatically as well as a slough of other windows update related repairs.
0
 
SBSIAdminAuthor Commented:
I ran Dial-A-Fix on both of my servers and took the option to "Fix Windows Update".  Though I haven't received any of the crypt32 errors in quite a while, I'm still unable to access the WindowsUpdate web site.  I still receive 800700DE.
I then tried cincytopher's suggestion.  Still the same problem.
I then disabled Symantec Endpoint Protection.  Same problem.
Cleared cache.  Same problem.  Had someone else delete my User Profile from the server and then started with a fresh profile.  Re-verified my trusted sites.  Same problem.
Automatic Updates, EventLog, and BITS services are all running.
0
 
Timothy McCartneySYS ADMINISTR I INFRASCommented:
Have you tried installing one of the alternate IEs?
0
 
SBSIAdminAuthor Commented:
Needed to uninstall IE8 in order to backlevel to IE7.  That will require a reboot which will have to wait until later this afternoon when users are off.  I'll go through the exercise, but I'm not understanding why this one server would require this.  Or why IE8 has been working fine for months.  Today these two servers started receiving the crypt32 errors and at first, neither could access WindowsUpdate.  Very strange.  If it works, I'll be turning around and putting IE8 back on since that's our current standard and what is on all of our other servers and clients.  I'm not even bringing IE7 patches down via WSUS anymore since we don't have it on our network.
0
 
Timothy McCartneySYS ADMINISTR I INFRASCommented:
If you'll take note at my second comment. There is a link to an Internet Explorer collection that installs separate from the built in version but still grants full IE functionality. This can be done without removing the current IE8 that you have installed.

Also, have you tried resetting all advanced settings in IE?
Tools>Internet Options>Advanced Tab>Restore Advanced Settings AND Reset
0
All Courses

From novice to tech pro — start learning today.