Windows Update Error # 0x80072EFD or 0x80072EFE

[msaltz]

I click the Windows update link in my programs folder and then i choose
Express Install. Windows Update searches for available updates for about 20
sec. Then i get an error screen.
[Error number: 0x80072EFD] or [Error number: 0x80072EFE]
I tried to access the Windows update from other PC's on the network, but i
get the same result. I took the laptop and connected to windows update at
home through the cable internet and had no problems, so i think the problem
has to with a setting in ISA Server 2000, which is the firewall for the
company network.

To attempt to solve this i have tried the following:
1. I made sure the ISA Server 2000 feature pack and service pack 2 was
installed on the server.
2. Added the following trusted site to Internet Explorer on the local
computer: http://*.windowsupdate.microsoft.com,
https://*.windowsupdate.microsoft.com, http://download.windowsupdate.com
3. In ISA Management, on the server, i created a destion set called Windows
Update Destination Set, with the following destinations:
http://*.windowsupdate.microsoft.com, http://download.windowsupdate.com,
https://*.windowsupdate.microsoft.com. For the path on each of these i put
/*. Next i created an Access rule to allow calls to the Windows Update
Destination Set.

None of these solve the problem, any ideas or suggestions on to get windows
update to work through ISA Server 2000?

[Alan]

The following may help, ease or aggravate you even further:
http://forums.isaserver.org/ultimatebb.cgi?ubb=get_topic;f=4;t=000973

[Lucas]

I am having the same situation....
But I already have some machines that has no problem to get on to windows
update and do updates without a problem and the other pair of hands I got
some that goes to windows update and take the basic update, then goes for
option express or advance update....whatever I choose always give me that
error.
I follow every step there is in this forum
1. add the links to trusted sites
2. clear proxy ex: tools tab and so on and open dos net stop ....
3. Lower zone security ....
Nothing works.
ps: I dont have any norton or zonealarm. Behind ISA 2000 sp2.
Much appreciated for the help.

[msaltz]

I fixed my problem with Windows Update v5 and ISA Server 2000.
Here is how I did it.
On ISA Server 2000

- Disable “global” authentication for web proxy requests
1. Open the ISA Manglement MMC
2. Select View, then Advanced
3. Expand Servers and Arrays
4. R-click <ArrayName>, select Properties
5. Select Outgoing Web Requests
6. Uncheck Ask Unauthenticated users for identification
7. Click Apply,
8. When prompted, select Save the changes and restart the service(s)
9. Click OK

- Create a destination set for Windows Update domains
1. Expand <ArrayName> and PolicyElements
2. R-click Destination Sets, select New, then Set
3. Enter WindowsUpdate in the Name field, click Next
4. Click Add
5. Enter *.download.microsoft.com in the Domain field
6. Leave the Path field blank
7. Click OK
8. Repeat steps 4 through 7 for the following domains:
*.windowsupdate.com, *.windowsupdate.microsoft.com,
windowsupdate.microsoft.com
9. Click OK

- Create an anonymous Site and Content rule for Windows Update requests
1. Expand Access Policy
2. R-click Site and Content Rules, select New, then Rule
3. Enter Windows Update in the Name field, click Next
4. Select Allow, click Next
5. Select Allow access based on destination, click Next
6. In the Apply this rule to: drop-down list, select Specified Destination
Set
7. In the Name: drop-down list, select Windows Update
8. Click Next, then Finish

On Client PC's
- Make sure they are using the proxy server
1. Open Internet Explorer
2. Click the Tools menu and choose Internet Options
3. On the Connections tab, click the LAN Settings button
4. Check Automatically Detect Setttings
5. Check Use a proxy server for your LAN
6. Enter the name of the isa server in the address box.
7. Enter the port in the port box. 8080 is the defualt port.
8. Check Bypass prooxy server for local addresses
9. Click OK
10. Click Ok
11. Close Internet Explorer

[Pearce@discussions.microsoft.com Phil Pearce]

I had all the symtpoms you have said.

I followed http://support.microsoft.com/default.aspx?scid=kb;en-gb;885819

Then on the workstation ran

Proxycfg -u

Windows update V5 runs on all workstations

[Shawn]

Okay you can take this with a grain of salt but here was what I did, and it
fixed my problem.

First of all I was running Windows 2000 Server SP4 and getting the
0x80072EFE error on the Windows Update site. All I could find related to it
was something about the ISA server which I did not have.

So here we go...

First I cleared the user's temp folder, then Temporary Internet File folder,
The WUTemp folder. I put security setting of Internet Explorer back to
Default levels, went to the Windows update site. Clicked on Change settings
and disabled Microsoft Update Software. The next page said blah blah...if
you want to re-install this software click here. Clich on it and let it take
you back through the Windows Update process.

It worked for me on 2 out 2 machines. Thanks.

[Tdragone]

THANK YOU; the proxycfg -u still works when all other MS recommendations have
been done and have failed. I didn't even have to reboot.

-Tom D.