Since when did Windows update become such a pain to update?<\/p>\n
Just for a little background I’ve had this error on a number of occasions. WSUS is installed and configured within the environment, Windows updates are filtered and applied from WSUS (v3.2) running on Server 2003. The clients are configured using an update GPO. Windows firewall on the domain is turned off.<\/p>\n
Servers are<\/span> allowed<\/span> outbound with no Firewall restrictions on the Cisco ASA<\/p>\n Clients a<\/span>ren\u2019t<\/span> allowed outbound with<\/span> Firewall restrictions on the Cisco ASA. (They have internet access via a Proxy Server and I.E. settings are configured via GPO and a PAC file)<\/p>\n Error: 80072F78<\/strong><\/p>\n After installing a new Windows Server 2008 R2 server I was greeted with this error after adding the server to the domain and performing manual windows updates. The error was displayed after clicking the “Check online for updates from Windows Update<\/em>” – Although I want to apply the updates from WSUS I wanted to ensure that it was obtaining the latest updates as some may not have been approved.<\/p>\nngg_shortcode_0_placeholder\n I checked out some forums and found that this is a known issue with the \u201cauthroot.stl\u201d cert installed. I downloaded a newer version and installed:<\/p>\n This didn’t work straight away until I reset all settings in I.E. 9.0 | after which the error disappeared and I could view the update options (or in my case no updates)<\/p>\nngg_shortcode_1_placeholder\n Although this resolved my issue it may not for all! I did find a number of different error codes and suggested fixes on my internet travels, most of these relating to proxy or connection restrictions. Microsoft have documented some debugging steps here: http:\/\/support.microsoft.com\/kb\/836941<\/a><\/p>\n Download the “Client Diagnostics Tool”<\/strong><\/p>\n <\/strong>http:\/\/technet.microsoft.com\/en-us\/windowsserver\/bb466192.aspx<\/p>\n netsh winhttp reset proxy<\/strong><\/p>\n Update:<\/strong> OK I thought the above would work…\u00a0apparently not!<\/p>\n OK the secret is in this file:<\/p>\n C:\\windows\\windowsupdate.log<\/p>\n Delete the entire registry key HKLM\\Software\\Policies\\Microsoft\\Windows\\WindowsUpdate<\/p>\n Which will revert the WUAgent to the original installed behavior of Automatic Updates\u00a0and then set the desired behavior usign the Control Panel | Windows Update dialog.<\/p>\n\n
\n