Windows updates failing multiple times - then work....

[kennysarmy]

Happening on PC's as well as laptops.

 

On site WSUS seems to be working OK.

 

But if I boot up a device and check for ONLINE updates it invariably fails after sitting checking for ages - if I keep hitting Retry - eventually it will find some updates and install....

 

Any ideas?

 

Just spent ages with 24 laptops clicking retry after retry and eventually got around 18 of them to work - but the other 6 just keep saying failed.....

 

They all have the same image on them....Windows 7 64 bit.

 

Error code varies - Microsoft message usually says "an unknown error occurred".

 

I could browse fine on each laptop.

[Steve21]

What error code was it? Only generally know ours by code.

 

Steve

[kennysarmy]

One I'm getting is:

 

80244022

[kennysarmy]

and extract from WindowsUpdate.log

 

2015-08-12 12:03:37:321 520 a90 Misc WARNING: Send failed with hr = 80072f78.

2015-08-12 12:03:37:321 520 a90 Misc WARNING: SendRequest failed with hr = 80072f78. Proxy List used: <10.107.93.93:800> Bypass List used : <> Auth Schemes used :

2015-08-12 12:03:37:321 520 a90 Misc FATAL: SOAP/WinHttp - SendRequest: SendRequestUsingProxy failed. error 0x80072f78

2015-08-12 12:03:37:321 520 a90 PT + Last proxy send request failed with hr = 0x80072F78, HTTP status code = 0

2015-08-12 12:03:37:321 520 a90 PT + Caller provided proxy = No

2015-08-12 12:03:37:321 520 a90 PT + Proxy list used = 10.107.93.93:800

2015-08-12 12:03:37:321 520 a90 PT + Bypass list used =

2015-08-12 12:03:37:321 520 a90 PT + Caller provided credentials = No

2015-08-12 12:03:37:321 520 a90 PT + Impersonate flags = 1

2015-08-12 12:03:37:321 520 a90 PT + Possible authorization schemes used = NTLM;

2015-08-12 12:03:37:321 520 a90 PT WARNING: GetAuthorizationCookie failure, error = 0x80072F78, soap client error = 5, soap error code = 0, HTTP status code = 200

2015-08-12 12:03:37:321 520 a90 PT WARNING: Failed to initialize Simple Targeting Cookie: 0x80072f78

2015-08-12 12:03:37:321 520 a90 PT WARNING: PopulateAuthCookies failed: 0x80072f78

2015-08-12 12:03:37:321 520 a90 PT WARNING: RefreshCookie failed: 0x80072f78

2015-08-12 12:03:37:321 520 a90 PT WARNING: RefreshPTState failed: 0x80072f78

2015-08-12 12:03:37:321 520 a90 PT WARNING: Sync of Updates: 0x80072f78

2015-08-12 12:03:37:321 520 a90 PT WARNING: SyncServerUpdatesInternal failed: 0x80072f78

2015-08-12 12:03:37:321 520 a90 Agent * WARNING: Failed to synchronize, error = 0x80072F78

2015-08-12 12:03:37:321 520 a90 Agent * WARNING: Exit code = 0x80072F78

2015-08-12 12:03:37:321 520 a90 Agent *********

2015-08-12 12:03:37:321 520 a90 Agent ** END ** Agent: Finding updates [CallerId = <>: sdiagnhost.exe]

2015-08-12 12:03:37:321 520 a90 Agent *************

2015-08-12 12:03:37:321 520 a90 Agent WARNING: WU client failed Searching for update with error 0x80072f78

2015-08-12 12:03:37:381 580 3f4 COMAPI >>-- RESUMED -- COMAPI: Search [ClientId = ]

2015-08-12 12:03:37:381 580 3f4 COMAPI - Updates found = 0

2015-08-12 12:03:37:381 580 3f4 COMAPI - WARNING: Exit code = 0x00000000, Result code = 0x80072F78

2015-08-12 12:03:37:381 580 3f4 COMAPI ---------

2015-08-12 12:03:37:381 580 3f4 COMAPI -- END -- COMAPI: Search [ClientId = ]

2015-08-12 12:03:37:381 580 3f4 COMAPI -------------

2015-08-12 12:03:37:381 580 1098 COMAPI WARNING: Operation failed due to earlier error, hr=80072F78

2015-08-12 12:03:37:381 580 1098 COMAPI FATAL: Unable to perform synchronous search. (hr=80072F78)

[kennysarmy]

Couple of others failing with codes:

 

80072EE2

and

80072F78

[kennysarmy]

I've just taken one of the affected laptops off the domain, disabled the wireless card and used a LAN cable, removed all references of the laptop from WSUS, DHCP and DNS and it updated....

 

Now to narrow down the issue further....

[Steve21]

Silly question, but is that deffo right proxy? 800 seems an odd port number, but guess could be right

 

Steve

[kennysarmy]

Silly question, but is that deffo right proxy? 800 seems an odd port number, but guess could be right

 

Steve

 

Yep - smoothwall port....definitely 800 - same across all PC's and laptops on site....all have internet access

[kennysarmy]

Well as soon as I move a laptop from it's normal OU to the default "COMPUTER" OU it works - so there is a group policy fouling it up - which is very strange as it's only affecting a particular model of laptop it seems - troubleshoot further tomorrow and try to isolate the exact GPO and setting that's causing this issue....suspect something to do with WSUS ....

[kennysarmy]

It seems my Laptops WSUS Group Policy was causing the error - very strange as it was n't causing errors on ALL makes and models of laptops.

 

I think I'm going to remove the WSUS policy completely and just do manual updates on the laptops as and when.....

 

 

This was the policy for information:

 

 

Automatic Updates detection frequency Enabled

Check for updates at the following

interval (hours): 6

 

Configure Automatic Updates Disabled

Enable client-side targeting Enabled

Target group name for this computer wlaptops

 

No auto-restart with logged on users for scheduled automatic updates installations Enabled

Specify intranet Microsoft update service location Enabled

Set the intranet update service for detecting updates: http://IPADDRESS:8530

Set the intranet statistics server: http://IPADDRESS:8530

 

 

Not sure why this would cause errors when trying to check for updates online - but it was.....with this policy disabled - I can check fine....