Re: Windows Server 2008 updates error 80072EFD

(cross-post added to Server Networking)
"Jeff" <(E-Mail Removed)> wrote in message news:95EF78F9-C2B7-4E9F-AA75-(E-Mail Removed)...

> [Subject: Windows Server 2008 updates error 80072EFD]

> First off, I have uninstalled all anti-malware and firewal software, enable
> windows firewall,

> checked proxy settings,


And?


> entered the windows update sites to
> the trusted sites. We have 3 2008 servers all experiencing this same
> problem. Our client systems (Vista and XP) can update fine. We do not use
> WSUS and have verified Group Policies. Have verified that the neccessary
> ports are enabled on our router and firewall.
>
> So basicly I have done what every article on the internet says to do about
> this error code while using windows updates and none work. I am on edge
> about this.


Time to do some diagnosis? You could try using an HTTP tracer
such as Fiddler2 but that will cause some new symptoms about
certificates due to its proxy.

You already imply that there are portions of your network path
where a blockage may occur, e.g. in your router and firewall.
So, what diagnostics can you use in them to help refine your
symptom description?...


FYI

http://support.microsoft.com/kb/838177

(Live Search for
0x80072EFD server update proxy firewall site:support.microsoft.com language:en
)

<quote>
This behavior occurs because the Automatic Update service runs under
the Local System account. The Local System account is not a member of
the BackOffice Internet Users group and does not have permissions to use
the Internet through ISA Server.
</quote>


Otherwise do a full packet trace and protocol analysis.
FWIW I would use netcap and Ethereal for that.


Good luck

Robert Aldwinckle
---

"Robert Aldwinckle" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> (cross-post added to Server Networking)
> "Jeff" <(E-Mail Removed)> wrote in message
> news:95EF78F9-C2B7-4E9F-AA75-(E-Mail Removed)...
>
>> [Subject: Windows Server 2008 updates error 80072EFD]
>
>> First off, I have uninstalled all anti-malware and firewal software,
>> enable
>> windows firewall,
>
>> checked proxy settings,
>
>
> And?
>
>
>> entered the windows update sites to
>> the trusted sites. We have 3 2008 servers all experiencing this same
>> problem. Our client systems (Vista and XP) can update fine. We do not
>> use
>> WSUS and have verified Group Policies. Have verified that the neccessary
>> ports are enabled on our router and firewall.
>>
>> So basicly I have done what every article on the internet says to do
>> about
>> this error code while using windows updates and none work. I am on edge
>> about this.
>
>
> Time to do some diagnosis? You could try using an HTTP tracer
> such as Fiddler2 but that will cause some new symptoms about
> certificates due to its proxy.
>
> You already imply that there are portions of your network path
> where a blockage may occur, e.g. in your router and firewall.
> So, what diagnostics can you use in them to help refine your
> symptom description?...
>
>
> FYI
>
> http://support.microsoft.com/kb/838177
>
> (Live Search for
> 0x80072EFD server update proxy firewall site:support.microsoft.com
> language:en
> )
>
> <quote>
> This behavior occurs because the Automatic Update service runs under
> the Local System account. The Local System account is not a member of
> the BackOffice Internet Users group and does not have permissions to use
> the Internet through ISA Server.
> </quote>
>
>
> Otherwise do a full packet trace and protocol analysis.
> FWIW I would use netcap and Ethereal for that.
>
>
> Good luck
>
> Robert Aldwinckle
> ---
>
>


Besides what you suggested, Robert, I can't see the original post and
replies to see what else was suggested. However I do know that this error is
based on something blocking Windows Updates site URLs or the traffic.Maybe
this article will help.
http://windowshelp.microsoft.com/Win...71033.mspxAlso, I see that the original poster, Jeff, mentioned he uninstalled AV,antispyware and a firewall solution, but enabled the Windows Firewall. Why?Disable the Windows Firewall. Curious, what other type of firewall wasinstalled that was uninstalled? If ZoneAlarm, it leaves DLL and SYS filesthat are still invoked at startup and run in the background preventingcommunications.Jeff also mentioned the following:"Have verified that the neccessary ports are enabled on our router andfirewall."What ports are they? What type of firewall/router is it? The only real portsthat Windows Update uses are 80 & 443.Also, look also in the registry for the HKLM and HKCU Run key to see what isstarting up that may also be blocking communications.--AceThis posting is provided "AS-IS" with no warranties or guarantees andconfers no rights.Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCTMicrosoft Certified (E-Mail Removed)or urgent issues, you may want to contact Microsoft PSS directly. Pleasecheck http://support.microsoft.com for regional support phone numbers."Efficiency is doing things right; effectiveness is doing the rightthings." - Peter F. Drucker