"Vikas Ahuja [MSFT]" wrote:
> This thread/post message has some resolution for your problem:
> http://communities2.microsoft.com/communities/newsgroups/en-us/default.aspx?&query=0x80072F78&lang=en&cr=US&guid=&sloc=en-us&dg=microsoft.public.windowsupdate&p=1&tid=d9e47824-b473-477d-8e12-3bf1241ed1a5&mid=9ecfcf85-4fe5-4a0b-8ac3-c5e1840659e3
>
>
>
> "SpadeyChops" wrote:
>
> > Is anyone else experiencing this problem when trying to use V5 of the windows
> > update software? I'm currently unable to connect to the website to download
> > any patches - let alone SP2!
> >
> > The Microsoft help center indicates, it's a problem with my Norton Firewall,
> > and that I need to set-up a rule to allow the website access through my
> > firewall. When I try to do this, using the instructions from Symantec I
> > cannot add the Windows update website, as they contain forward slashes in the
> > HTTP header. (Norton prefixes sites with "www."
> >
> > Has anyone else suffered from this, and more importantly been able to get
> > around the problem?! It's driving me nuts!!
In Internet Access Control go onto Microsoft Generic Host Process for Win32
Services (if it isn't already there then add it by browsing for
C:\WINDOWS\system32\svchost.exe), select Modify... Customize Internet
Access or this application (OK), Add, and add the following:-
Action: Permit Internet Access
Connections to and from other computers
Computers: Only the computers and sites listed below -
Single Address - v5.windowsupdate.microsoft.com
Communications:
What protocols? TCP and UDP
What types of communications or ports do you want to permit?
. Only the types...listed below
remote http (port 80)
remote https (port 443)
Description: Generic Host Proc - Windows Update 5 (or call it anything else
you like)
NB re TCP and UDP - some sites say you only need TCP but I found you need
both.
Then go into Internet Explorer, Tools, Internet Options, Security,
highlight Trusted Sites, click on Sites... and in "Add this Web site to the
zone"
enter https://v5.windowsupdate.microsoft.com (NB https) and (important)
uncheck "Require server verification (https:) for all sites in this zone".
Tried the above on their own but found that both were necessary.
Log out of Windows account and back in (or reboot) for changes to take
effect.
If all else fails, disable firewall while searching for and /or downloading
updates.
Frustrated XP User
"Frustrated XP User" <Frustrated XP Us...@discussions.microsoft.com> wrote in
message news:CC1CACEE-5B0D-4E58...@microsoft.com...
Thank you for your detailed fix. Microsoft's expert's answer was to disable
NIS and enable their one! Not having bought NIS and found it successful for
6 months. Norton wanted to charge me money for their support - not a good
idea for a Scot.
The only problem I encountered was when modifying MS Generic Host Process
for Win32, there were a dozen entries to choose from. I decided to create a
new one based on your prompts and then moved it to the top of the list.
On rebooting, I was able to get into windows updates to find that SP2 was
temporarily disabled due to over demand!!!!
"Russell Darling, Haddington, Scotland" <Russell Darling, Haddington,
Scot...@discussions.microsoft.com> wrote in message
news:8F13E78D-1BD4-41AB...@microsoft.com...
Anyway, here is the fix for proxy based firewalls that is working for me,
not all sites may need to be added but this is the rule I have in place that
is working for the V5 site. I also manually downloaded and installed the
BITS 2.0 update, I am still testing updates without this update installed.
I created a rule that didn't require authentication for the following sites:
- www.download.windowsupdate.com
- v5.windowsupdate.microsoft.com
- windowsupdate.microsoft.com
- c.microsoft.com (don't know if this one is needed but recorded it in the
firewall logs).
I'm using Symantec Enterprise Firewall (Raptor), as stated above, I created
a group containing the URLs listed above, setup a rule to access those sites
without authentication and now I can use the Windows Update site. Hopefully
this will help a couple of you!
"Roger K" <roger....@ntlworld.com> wrote in message
news:ScKYc.1008$O23...@newsfe1-win.ntli.net...
"Frank" <bbu...@bqik.net> wrote in message
news:uPbNwdwj...@TK2MSFTNGP12.phx.gbl...
Yes waiting is probably good advice - fools rush in ......?
Frustrated XP User