Solved

Need Group Policy to permit Windows Update

Posted on 2014-07-17
12
1,382 Views
Last Modified: 2014-07-27
I have joined a Windows 7 workstation to my Samba4 Domain/Active Directory. Since doing so I cannot get Windows updates. I get error 80072EE2 (see attached image). Information on the error basically says I have to add the website:

http://*.update.microsoft.com
https://*.update.microsoft.com
http://download.windowsupdate.com

to my firewall allow list. I don't know how to do that. In the GPO Editor, in Computer Configuration > Administrative Templates > Network\Network Connections > Windows Firewall > Domain Profile > Windows Firewall, I can see options for permitting specific ports, etc., but nothing for Windows Update or URL.

In the "settings" list for Network/Network Connections/Windows Firewall/Domain Profile it has a comment block saying,

Allow unsolicited incoming messages from these IP addresses:  Syntax:
Type "*" to allow messages from any network, or
else type a comma-separated list that contains ..."

but I don't know where to type this comma-separated list.
cannotUpdate.jpg
0
Comment
Question by:jmarkfoley
  • 7
  • 3
  • 2
12 Comments
 
LVL 18

Expert Comment

by:irweazelwallis
ID: 40204217
its unlikely to the be the windows firewall as the default behaviour for outbound traffic is to allow

do you have any perimeter controls i.e. a proxy server
does general internet access work

if you have a look at the windows update log - c:\windows\windowsupdate.log if will give you some more detail
0
 
LVL 1

Author Comment

by:jmarkfoley
ID: 40205619
irweazelwallis: > its unlikely to the be the windows firewall ...

Hmmm, but the error message itself said, "If you receive Windows Update error 80072EE2 while checking for updates, you might have to add the website addresses from which Windows Update downloads update to your firewall exceptions or 'allow' list." That indicates to me that it is not only likely but highly probable it is the firewall. Since my firewall is not managed by domain policies, I believe that must be where I need to change this.

> do you have any perimeter controls i.e. a proxy server

No. And updates did work before joining the domain.

> does general internet access work

Yes.

> if you have a look at the windows update log ... if will give you some more detail

Below is my WindowsUpdate.log from the last attempt. If you look at lines 170 and following you will see the failure with error 80072EE2.


2014-07-18	17:15:43:226	1160	d3c	AU	#############
2014-07-18	17:15:43:226	1160	d3c	AU	## START ##  AU: Search for updates
2014-07-18	17:15:43:226	1160	d3c	AU	#########
2014-07-18	17:15:43:226	1160	d3c	AU	<<## SUBMITTED ## AU: Search for updates [CallId = {CB59D165-E44F-41FF-997D-4155ECFD9E5A}]
2014-07-18	17:15:43:226	1160	a4c	Agent	*************
2014-07-18	17:15:43:226	1160	a4c	Agent	** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
2014-07-18	17:15:43:226	1160	a4c	Agent	*********
2014-07-18	17:15:43:226	1160	a4c	Agent	  * Online = Yes; Ignore download priority = No
2014-07-18	17:15:43:226	1160	a4c	Agent	  * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
2014-07-18	17:15:43:226	1160	a4c	Agent	  * ServiceID = {7971F918-A847-4430-9279-4A52D1EFE18D} Third party service
2014-07-18	17:15:43:226	1160	a4c	Agent	  * Search Scope = {Machine}
2014-07-18	17:15:43:226	1160	a4c	Misc	Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2014-07-18	17:15:43:257	1160	a4c	Misc	 Microsoft signed: Yes
2014-07-18	17:15:46:003	1160	a4c	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80190194
2014-07-18	17:15:46:003	1160	a4c	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80190194
2014-07-18	17:15:46:003	1160	a4c	Misc	WARNING: DownloadFileInternal failed for http://download.windowsupdate.com/v9/1/windowsupdate/redir/muv4wuredir.cab: error 0x80190194
2014-07-18	17:15:46:003	1160	a4c	Misc	Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2014-07-18	17:15:46:019	1160	a4c	Misc	 Microsoft signed: Yes
2014-07-18	17:15:48:437	1160	a4c	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80190194
2014-07-18	17:15:48:437	1160	a4c	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80190194
2014-07-18	17:15:48:437	1160	a4c	Misc	WARNING: DownloadFileInternal failed for http://download.microsoft.com/v9/1/windowsupdate/redir/muv4wuredir.cab: error 0x80190194
2014-07-18	17:15:48:437	1160	a4c	Misc	Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2014-07-18	17:15:48:468	1160	a4c	Misc	 Microsoft signed: Yes
2014-07-18	17:15:50:823	1160	a4c	Misc	Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2014-07-18	17:15:50:855	1160	a4c	Misc	 Microsoft signed: Yes
2014-07-18	17:15:50:870	1160	a4c	Agent	Checking for updated auth cab for service 7971f918-a847-4430-9279-4a52d1efe18d at http://ds.download.windowsupdate.com/v10/1/microsoftupdate/redir/muauth.cab
2014-07-18	17:15:50:870	1160	a4c	Misc	Validating signature for C:\Windows\SoftwareDistribution\AuthCabs\authcab.cab:
2014-07-18	17:15:50:886	1160	a4c	Misc	 Microsoft signed: Yes
2014-07-18	17:15:53:241	1160	a4c	Misc	Validating signature for C:\Windows\SoftwareDistribution\AuthCabs\authcab.cab:
2014-07-18	17:15:53:273	1160	a4c	Misc	 Microsoft signed: Yes
2014-07-18	17:15:53:273	1160	a4c	Setup	Checking for agent SelfUpdate
2014-07-18	17:15:53:273	1160	a4c	Setup	Client version: Core: 7.6.7600.256  Aux: 7.6.7600.256
2014-07-18	17:15:53:273	1160	a4c	Misc	Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2014-07-18	17:15:53:273	1160	a4c	Misc	 Microsoft signed: Yes
2014-07-18	17:15:53:319	1160	a4c	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80190194
2014-07-18	17:15:53:319	1160	a4c	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80190194
2014-07-18	17:15:53:319	1160	a4c	Misc	WARNING: DownloadFileInternal failed for http://download.windowsupdate.com/v9/1/windowsupdate/redir/muv4wuredir.cab: error 0x80190194
2014-07-18	17:15:53:319	1160	a4c	Misc	Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2014-07-18	17:15:53:319	1160	a4c	Misc	 Microsoft signed: Yes
2014-07-18	17:15:53:382	1160	a4c	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80190194
2014-07-18	17:15:53:382	1160	a4c	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80190194
2014-07-18	17:15:53:382	1160	a4c	Misc	WARNING: DownloadFileInternal failed for http://download.microsoft.com/v9/1/windowsupdate/redir/muv4wuredir.cab: error 0x80190194
2014-07-18	17:15:53:382	1160	a4c	Misc	Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2014-07-18	17:15:53:397	1160	a4c	Misc	 Microsoft signed: Yes
2014-07-18	17:15:53:429	1160	a4c	Misc	Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2014-07-18	17:15:53:460	1160	a4c	Misc	 Microsoft signed: Yes
2014-07-18	17:15:53:460	1160	a4c	Misc	Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2014-07-18	17:15:53:475	1160	a4c	Misc	 Microsoft signed: Yes
2014-07-18	17:15:58:717	1160	a4c	Misc	Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2014-07-18	17:15:58:748	1160	a4c	Misc	 Microsoft signed: Yes
2014-07-18	17:15:58:748	1160	a4c	Misc	Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
2014-07-18	17:15:58:764	1160	a4c	Misc	 Microsoft signed: Yes
2014-07-18	17:15:58:779	1160	a4c	Misc	Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
2014-07-18	17:15:58:795	1160	a4c	Misc	 Microsoft signed: Yes
2014-07-18	17:15:58:842	1160	a4c	Setup	Determining whether a new setup handler needs to be downloaded
2014-07-18	17:15:58:842	1160	a4c	Setup	SelfUpdate handler is not found.  It will be downloaded
2014-07-18	17:15:58:842	1160	a4c	Setup	Evaluating applicability of setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.6.7600.256"
2014-07-18	17:15:59:949	1160	a4c	Setup	Setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.6.7600.256" is already installed.
2014-07-18	17:15:59:949	1160	a4c	Setup	Evaluating applicability of setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~x86~~7.6.7600.256"
2014-07-18	17:15:59:965	1160	a4c	Setup	Setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~x86~~7.6.7600.256" is already installed.
2014-07-18	17:15:59:965	1160	a4c	Setup	Evaluating applicability of setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~x86~~7.6.7600.256"
2014-07-18	17:16:00:012	1160	a4c	Setup	Setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~x86~~7.6.7600.256" is already installed.
2014-07-18	17:16:00:012	1160	a4c	Setup	SelfUpdate check completed.  SelfUpdate is NOT required.
2014-07-18	17:16:01:057	1160	a4c	Misc	Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\muredir.cab:
2014-07-18	17:16:01:073	1160	a4c	Misc	 Microsoft signed: Yes
2014-07-18	17:16:01:088	1160	a4c	Misc	Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\muredir.cab:
2014-07-18	17:16:01:104	1160	a4c	Misc	 Microsoft signed: Yes
2014-07-18	17:16:01:104	1160	a4c	PT	+++++++++++  PT: Synchronizing server updates  +++++++++++
2014-07-18	17:16:01:104	1160	a4c	PT	  + ServiceId = {7971F918-A847-4430-9279-4A52D1EFE18D}, Server URL = https://update.microsoft.com/v6/ClientWebService/client.asmx
2014-07-18	17:16:01:104	1160	a4c	PT	WARNING: Cached cookie has expired or new PID is available
2014-07-18	17:17:07:201	1160	a4c	Misc	WARNING: Send failed with hr = 80072ee2.
2014-07-18	17:17:07:201	1160	a4c	Misc	WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2014-07-18	17:17:07:201	1160	a4c	PT	  + Last proxy send request failed with hr = 0x80072EE2, HTTP status code = 0
2014-07-18	17:17:07:201	1160	a4c	PT	  + Caller provided credentials = No
2014-07-18	17:17:07:201	1160	a4c	PT	  + Impersonate flags = 0
2014-07-18	17:17:07:201	1160	a4c	PT	  + Possible authorization schemes used = 
2014-07-18	17:17:07:201	1160	a4c	PT	WARNING: SyncUpdates failure, error = 0x80072EE2, soap client error = 5, soap error code = 0, HTTP status code = 200
2014-07-18	17:17:07:201	1160	a4c	PT	WARNING: PTError: 0x80072ee2
2014-07-18	17:17:07:201	1160	a4c	PT	WARNING: SyncUpdates_WithRecovery failed.: 0x80072ee2
2014-07-18	17:17:07:201	1160	a4c	PT	WARNING: Sync of Updates: 0x80072ee2
2014-07-18	17:17:07:201	1160	a4c	PT	WARNING: SyncServerUpdatesInternal failed: 0x80072ee2
2014-07-18	17:17:07:201	1160	a4c	Agent	  * WARNING: Failed to synchronize, error = 0x80072EE2
2014-07-18	17:17:07:201	1160	a4c	Agent	  * WARNING: Exit code = 0x80072EE2
2014-07-18	17:17:07:201	1160	a4c	Agent	*********
2014-07-18	17:17:07:201	1160	a4c	Agent	**  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
2014-07-18	17:17:07:201	1160	a4c	Agent	*************
2014-07-18	17:17:07:201	1160	a4c	Agent	WARNING: WU client failed Searching for update with error 0x80072ee2
2014-07-18	17:17:07:232	1160	2fc	AU	>>##  RESUMED  ## AU: Search for updates [CallId = {CB59D165-E44F-41FF-997D-4155ECFD9E5A}]
2014-07-18	17:17:07:232	1160	2fc	AU	  # WARNING: Search callback failed, result = 0x80072EE2
2014-07-18	17:17:07:232	1160	2fc	AU	  # WARNING: Failed to find updates with error code 80072EE2
2014-07-18	17:17:07:232	1160	2fc	AU	#########
2014-07-18	17:17:07:232	1160	2fc	AU	##  END  ##  AU: Search for updates [CallId = {CB59D165-E44F-41FF-997D-4155ECFD9E5A}]
2014-07-18	17:17:07:232	1160	2fc	AU	#############
2014-07-18	17:17:07:232	1160	2fc	AU	Successfully wrote event for AU health state:0
2014-07-18	17:17:07:232	1160	2fc	AU	AU setting next detection timeout to 2014-07-19 02:17:07
2014-07-18	17:17:07:232	1160	2fc	AU	Setting AU scheduled install time to 2014-07-19 07:00:00
2014-07-18	17:17:07:232	1160	2fc	AU	Successfully wrote event for AU health state:0
2014-07-18	17:17:07:232	1160	2fc	AU	Successfully wrote event for AU health state:0
2014-07-18	17:17:12:209	1160	a4c	Report	REPORT EVENT: {F19BE9BF-9CBC-4327-9065-0E179BA22498}	2014-07-18 17:17:07:201-0400	1	148	101	{00000000-0000-0000-0000-000000000000}	0	80072ee2	AutomaticUpdates	Failure	Software Synchronization	Windows Update Client failed to detect with error 0x80072ee2.
2014-07-18	17:17:12:224	1160	a4c	Report	CWERReporter::HandleEvents - WER report upload completed with status 0x8
2014-07-18	17:17:12:224	1160	a4c	Report	WER Report sent: 7.6.7600.256 0x80072ee2 00000000-0000-0000-0000-000000000000 Scan 101 Unmanaged
2014-07-18	17:17:12:224	1160	a4c	Report	CWERReporter finishing event handling. (00000000)
2014-07-18	17:21:08:487	4204	dcc	Misc	===========  Logging initialized (build: 7.6.7600.256, tz: -0400)  ===========
2014-07-18	17:21:08:487	4204	dcc	Misc	  = Process: c:\Program Files\Microsoft Security Client\MpCmdRun.exe
2014-07-18	17:21:08:487	4204	dcc	Misc	  = Module: C:\Windows\system32\wuapi.dll
2014-07-18	17:21:08:487	4204	dcc	COMAPI	-------------
2014-07-18	17:21:08:487	4204	dcc	COMAPI	-- START --  COMAPI: Search [ClientId = Microsoft Security Essentials (EDB4FA23-53B8-4AFA-8C5D-99752CCA7094)]
2014-07-18	17:21:08:487	4204	dcc	COMAPI	---------
2014-07-18	17:21:08:502	1160	a4c	Agent	*************
2014-07-18	17:21:08:502	4204	dcc	COMAPI	<<-- SUBMITTED -- COMAPI: Search [ClientId = Microsoft Security Essentials (EDB4FA23-53B8-4AFA-8C5D-99752CCA7094)]
2014-07-18	17:21:08:502	1160	a4c	Agent	** START **  Agent: Finding updates [CallerId = Microsoft Security Essentials (EDB4FA23-53B8-4AFA-8C5D-99752CCA7094)]
2014-07-18	17:21:08:502	1160	a4c	Agent	*********
2014-07-18	17:21:08:502	1160	a4c	Agent	  * Online = Yes; Ignore download priority = No
2014-07-18	17:21:08:502	1160	a4c	Agent	  * Criteria = "(IsInstalled = 0 and IsHidden = 0 and CategoryIDs contains '6b9e8b26-8f50-44b9-94c6-7846084383ec' and CategoryIDs contains 'e0789628-ce08-4437-be74-2495b842f43b')"
2014-07-18	17:21:08:502	1160	a4c	Agent	  * ServiceID = {7971F918-A847-4430-9279-4A52D1EFE18D} Third party service
2014-07-18	17:21:08:502	1160	a4c	Agent	  * Search Scope = {Machine}
2014-07-18	17:21:08:534	1160	a4c	Misc	Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2014-07-18	17:21:08:534	1160	a4c	Misc	 Microsoft signed: Yes
2014-07-18	17:21:08:627	1160	a4c	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80190194
2014-07-18	17:21:08:627	1160	a4c	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80190194
2014-07-18	17:21:08:627	1160	a4c	Misc	WARNING: DownloadFileInternal failed for http://download.windowsupdate.com/v9/1/windowsupdate/redir/muv4wuredir.cab: error 0x80190194
2014-07-18	17:21:08:627	1160	a4c	Misc	Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2014-07-18	17:21:08:643	1160	a4c	Misc	 Microsoft signed: Yes
2014-07-18	17:21:08:736	1160	a4c	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80190194
2014-07-18	17:21:08:736	1160	a4c	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80190194
2014-07-18	17:21:08:736	1160	a4c	Misc	WARNING: DownloadFileInternal failed for http://download.microsoft.com/v9/1/windowsupdate/redir/muv4wuredir.cab: error 0x80190194
2014-07-18	17:21:08:736	1160	a4c	Misc	Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2014-07-18	17:21:08:768	1160	a4c	Misc	 Microsoft signed: Yes
2014-07-18	17:21:09:002	1160	a4c	Misc	Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2014-07-18	17:21:09:033	1160	a4c	Misc	 Microsoft signed: Yes
2014-07-18	17:21:09:048	1160	a4c	Agent	Checking for updated auth cab for service 7971f918-a847-4430-9279-4a52d1efe18d at http://ds.download.windowsupdate.com/v11/2/microsoftupdate/redir/v6-legacy-muauth.cab
2014-07-18	17:21:09:048	1160	a4c	Misc	Validating signature for C:\Windows\SoftwareDistribution\AuthCabs\authcab.cab:
2014-07-18	17:21:09:064	1160	a4c	Misc	 Microsoft signed: Yes
2014-07-18	17:21:09:220	1160	a4c	Misc	Validating signature for C:\Windows\SoftwareDistribution\AuthCabs\authcab.cab:
2014-07-18	17:21:09:251	1160	a4c	Misc	 Microsoft signed: Yes
2014-07-18	17:21:09:251	1160	a4c	Misc	Validating signature for C:\Windows\SoftwareDistribution\AuthCabs\authcab.cab:
2014-07-18	17:21:09:267	1160	a4c	Misc	 Microsoft signed: Yes
2014-07-18	17:21:09:298	1160	a4c	DtaStor	Update service properties: service registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2014-07-18	17:21:09:610	1160	a4c	Misc	Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\v6-legacy-muredir.cab:
2014-07-18	17:21:09:641	1160	a4c	Misc	 Microsoft signed: Yes
2014-07-18	17:21:09:672	1160	a4c	PT	WARNING: Cached cookie has expired or new PID is available
2014-07-18	17:21:15:413	1160	a4c	PT	WARNING: GetCookie failure, error = 0x8024400D, soap client error = 7, soap error code = 300, HTTP status code = 200
2014-07-18	17:21:15:413	1160	a4c	PT	WARNING: SOAP Fault: 0x00012c
2014-07-18	17:21:15:413	1160	a4c	PT	WARNING:     faultstring:Fault occurred
2014-07-18	17:21:15:413	1160	a4c	PT	WARNING:     ErrorCode:ServerChanged(4)
2014-07-18	17:21:15:413	1160	a4c	PT	WARNING:     Message:(null)
2014-07-18	17:21:15:413	1160	a4c	PT	WARNING:     Method:"http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService/GetCookie"
2014-07-18	17:21:15:413	1160	a4c	PT	WARNING:     ID:10bf6ccd-48ac-4450-8a08-facd393b1f96
2014-07-18	17:21:15:413	1160	a4c	PT	WARNING: PTError: 0x80244015
2014-07-18	17:21:15:413	1160	a4c	PT	WARNING: GetCookie_WithRecovery failed : 0x80244015
2014-07-18	17:21:15:413	1160	a4c	PT	WARNING: RefreshCookie failed: 0x80244015
2014-07-18	17:21:15:413	1160	a4c	PT	WARNING: RefreshPTState failed: 0x80244015
2014-07-18	17:21:15:710	1160	a4c	PT	WARNING: Cached cookie has expired or new PID is available
2014-07-18	17:22:16:191	1160	a4c	Misc	WARNING: Send failed with hr = 80072ee2.
2014-07-18	17:22:16:191	1160	a4c	Misc	WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2014-07-18	17:22:16:191	1160	a4c	PT	  + Last proxy send request failed with hr = 0x80072EE2, HTTP status code = 0
2014-07-18	17:22:16:191	1160	a4c	PT	  + Caller provided credentials = No
2014-07-18	17:22:16:191	1160	a4c	PT	  + Impersonate flags = 0
2014-07-18	17:22:16:191	1160	a4c	PT	  + Possible authorization schemes used = 
2014-07-18	17:22:16:191	1160	a4c	PT	WARNING: RefreshCache failure, error = 0x80072EE2, soap client error = 5, soap error code = 0, HTTP status code = 200
2014-07-18	17:22:16:191	1160	a4c	PT	WARNING: PTError: 0x80072ee2
2014-07-18	17:22:16:191	1160	a4c	PT	WARNING: RefreshCache_WithRecovery failed: 0x80072ee2
2014-07-18	17:22:16:191	1160	a4c	PT	WARNING: SyncCache: Emergency cleanup of the ServerUpdateInfo due to failure in RefreshCache
2014-07-18	17:22:16:378	1160	a4c	PT	WARNING: SyncCache failed: 0x80072ee2
2014-07-18	17:22:16:378	1160	a4c	PT	WARNING: StartCategoryScan failed : 0x80072ee2
2014-07-18	17:22:17:174	1160	a4c	Agent	  * WARNING: Exit code = 0x80072EE2
2014-07-18	17:22:17:174	1160	a4c	Agent	*********
2014-07-18	17:22:17:174	1160	a4c	Agent	**  END  **  Agent: Finding updates [CallerId = Microsoft Security Essentials (EDB4FA23-53B8-4AFA-8C5D-99752CCA7094)]
2014-07-18	17:22:17:174	1160	a4c	Agent	*************
2014-07-18	17:22:17:174	1160	a4c	Agent	WARNING: WU client failed Searching for update with error 0x80072ee2
2014-07-18	17:22:17:174	4204	a74	COMAPI	>>--  RESUMED  -- COMAPI: Search [ClientId = Microsoft Security Essentials (EDB4FA23-53B8-4AFA-8C5D-99752CCA7094)]
2014-07-18	17:22:17:174	4204	a74	COMAPI	  - Updates found = 0
2014-07-18	17:22:17:174	4204	a74	COMAPI	  - WARNING: Exit code = 0x00000000, Result code = 0x80072EE2
2014-07-18	17:22:17:174	4204	a74	COMAPI	---------
2014-07-18	17:22:17:174	4204	a74	COMAPI	--  END  --  COMAPI: Search [ClientId = Microsoft Security Essentials (EDB4FA23-53B8-4AFA-8C5D-99752CCA7094)]
2014-07-18	17:22:17:174	4204	a74	COMAPI	-------------
2014-07-18	17:22:17:174	4204	a58	COMAPI	WARNING: Operation failed due to earlier error, hr=80072EE2
2014-07-18	17:22:17:174	4204	a58	COMAPI	FATAL: Unable to complete asynchronous search. (hr=80072EE2)
2014-07-18	17:22:22:181	1160	a4c	Report	REPORT EVENT: {51D09550-49E2-4F8B-83C5-714FB0809A1A}	2014-07-18 17:22:17:174-0400	1	148	101	{00000000-0000-0000-0000-000000000000}	0	80072ee2	Microsoft Security Essentials (	Failure	Software Synchronization	Windows Update Client failed to detect with error 0x80072ee2.
2014-07-18	17:22:22:197	1160	a4c	Report	CWERReporter::HandleEvents - WER report upload completed with status 0x8
2014-07-18	17:22:22:197	1160	a4c	Report	WER Report sent: 7.6.7600.256 0x80072ee2 00000000-0000-0000-0000-000000000000 Scan 101 Unmanaged
2014-07-18	17:22:22:197	1160	a4c	Report	CWERReporter finishing event handling. (00000000)

Open in new window

0
 
LVL 10

Assisted Solution

by:Schuyler Dorsey
Schuyler Dorsey earned 100 total points
ID: 40205748
To confirm whether or not Windows Firewall is the issue, you can temporarily disable the Windows Firewall.

I am however in agreement with the previous poster that it is unlikely to be the issue. The default setting allows ANY outbound connect. The only possibility of there being a problem is if you have changed this behavior either on the machine, via a domain startup script or with a GPO.

I would confirm whether or not other workstations on the domain can do their Windows Updates. If so, it likely rules out network firewall / proxy / web filter.

You could try running Microsoft's automated Windows Update repair on it.
0
 
LVL 1

Author Comment

by:jmarkfoley
ID: 40208231
I tried various combinations of turning the firewall off and removing the workstation from the domain; nothing worked, same 80072EE2 error code. Searching on that error gave all kinds of different solutions from upgrading the NIC driver (which I did), to un-joining, re-joining the domain, which I did several times. That seems like a catch-all error and no one really knows what it means.

Finally, I connected the workstation directly to the Internet, and updates started working. I took down the samba4 domain controller on the Linux host and only left port forwarding of port 3389 to the Windows workstation. That still didn't work.

So, either there is something wrong with the LAN attached NIC in the Linux host, or the switch on the LAN is bad, or the Debian distro does something funny which interferes with MS Update information flowing between the hosts. Debian does have all kinds of "helper" applications pre-configured, some of which I've needed to remove (NetworkManager, avahi, ...) in order to get it working as a server.

My next step is to install a Slackware distro on that computer, no Samba4 DC, no dhcpd, no bind, and see if the Workstation can get updates. I have that exact Slackware configuration on several other systems and there is no problem with updates. This is my first time trying to update Windows using Debian as the router.

I'll post results.
0
 
LVL 18

Assisted Solution

by:irweazelwallis
irweazelwallis earned 400 total points
ID: 40208398
going back a step does basic internet access work.
If you put telnet on the windows box can you use telnet or curl to connect to windows update or anything else

then you can tell if its DNS resolution, routing or ports or something on the debian box
0
 
LVL 1

Author Comment

by:jmarkfoley
ID: 40209855
irweazelwallis: > does basic internet access work.

Yes, everything else seems to work

> can you use telnet or curl to connect to windows update

hmmm, how would I telnet to windows update? What port is that?

Anyway, I've installed Slackware in place of Debian for the router and it seems to work now. So, I think there must have been something going on with Debian. Not definitive yet since the Slackware is very stripped down. I will install DHCPD and Bind9 next and still if it still works. Then on to Samba4 and the domain controller. It could be any of those things causing an issue as well.

stay tooned! (but if you can tell me about telnetting to windows update, I'm interested)
0
 
LVL 1

Author Comment

by:jmarkfoley
ID: 40210776
Tested with dhcpd and bind. Still having no problems updating. Will test with Samba4 DC/AD on the morrow.
0
 
LVL 18

Expert Comment

by:irweazelwallis
ID: 40210953
to use telnet you would do the following from the command line

telnet URL port

i.e. telnet download.windowsupdate.com 80



•      http://windowsupdate.microsoft.com
•      http://download.windowsupdate.com
•      http://download.microsoft.com
•      http://wustat.windows.com
•      http://ntservicepack.microsoft.com
0
 
LVL 1

Accepted Solution

by:
jmarkfoley earned 0 total points
ID: 40213358
irweazelwallis: Ah, I see, you're just telnetting to the http port. For some reason I was thinking there was a special "MS Update" port.

Anyway, I've successfully created a Domain Controller/Active Directory, joined XP and Windows workstations, created a new users, and basically got it back to where I noticed having problems updating. I then tried some updates ... and it worked!!!! So all this must have had something to do with a bug or interference by something in the Debian distro of Linux!

I've been using Slackware for years, but wanted to move to Debian because it seemed to have a much easier package update mechanism (apt-get) and have lots more already ported packages out there. But, Slackware has always been very bullet-proof and this whole exercise of starting from scratch with Slackware went much smoother than when I did it with Debian. So, back to Slackware for servers at least.

Sorry for the wild goose chase!
0
 
LVL 1

Author Closing Comment

by:jmarkfoley
ID: 40222257
I sorted out my own self-inflicted problem.

irweazelwallis, Schuyler Dorsey thanks for participating.
0
 
LVL 10

Expert Comment

by:Schuyler Dorsey
ID: 40222564
Great! What did the problem end up being?
0
 
LVL 1

Author Comment

by:jmarkfoley
ID: 40222890
Not sure, really. I solved it by installing Slackware instead of Debian. Debian pre-installs lots of helper programs that are good for portable clients, but no so much for servers. For example I uninstalled NetworkManager because it tends to ignore the network settings in /etc/network/interefaces. avahi messes up DNS, minissdpd auto-discovers and configures network UPnP (Universal Plug-n-Play) devices and will end up generating lots of errors in syslog. Dovecot is a POP3 email server, not used in my scenario. I'm sure there must be others and my guess is that one of them must mess up both Remote Desktop Connection and Microsoft Update when the Linux/Debian server is used as a router.

Again, don't know the root cause, but installing the more stripped-down Slackware fixed the problem.
0

Join & Write a Comment

This article will review the basic installation and configuration for Windows Software Update Services (WSUS) in a Windows 2012 R2 environment.  WSUS is a Microsoft tool that allows administrators to manage and control updates to be approved and ins…
Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
In this Micro Tutorial viewers will learn how they can get their files copied out from their unbootable system without need to use recovery services. As an example non-bootable Windows 2012R2 installation is used which has boot problems.
This tutorial will walk an individual through the process of installing of Data Protection Manager on a server running Windows Server 2012 R2, including the prerequisites. Microsoft .Net 3.5 is required. To install this feature, go to Server Manager…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now