Windows Store Updates stuck - Cannot install apps (High Traffic)

[Warwick_Tech]

Dear All,

 

Following a few threads on here and so far no luck -

 

We are seeing a huge amount of traffic to;

tlu.dl.delivery.mp.microsoft.com and windowsupdate.com, so we applied a bandwidth cap, but this only treated the symptom, not the cause; so after rooting around I've found every machine on our network has stuck windows store updates (at least 4-5 downloads in progress)

 

When you bypass the Smoothwall they download fine, however no matter what I try, transparent, no authentication, they refuse to continue if directed to the smoothwall box.

 

How the internet is setup -

Staff take their devices home so we use a proxy.pac file and 'Automatically detect settings' on IE via Kerberos tickets.

Students have store and updates deactivated by GP

 

Things I've tried -

Adding Microsoft addresses to the proxy.pac bypass

Added all Microsoft addresses to HTTPS Bypass, No authentication etc.

Prompt to transfer IE settings to windows (netsh winhttp import proxy source =ie) always reports as correct, or transparent

Setting proxy in GPO for Metro Apps

 

Symptoms -

Store opens fine, with our custom store as an option, but any new App or update will grind to a halt and consume bandwidth

 

I know there are a lot of options out there, but I'm not getting anywhere fast - I also know a lot more people are experiencing this.

 

Wierdly I remember the store working before fine, but only in the last 6 months or so this has happened on 1607 and 1709

Edited November 24, 2017 by Warwick_Tech

[sjatkn]

Check with Smoothwall, or ask again in the Direct Support forum. I had a similar problem yesterday when a script that uses BITS downloaded some files the proxy server multiplied the downloads. This proxy multiplication is a known problem and a fix in in the works but not yet ready. At the moment though I think the only fix is to put a bandwidth limit on the domains in question.

[Warwick_Tech]

Smoothwall are escalating it to second line support - Isn't it always the case a fix is 'coming'

 

I also forgot to mention above I've been experimenting with this GP to see if there's any difference