[1803, au] Broken Microsoft Store but unsure why

[eddyc]

Hi all,

 

We are having an issue with the Microsoft Store on the network on all devices which are running 1803.

 

Basically there is one Administrator who can log in and kick off the updates and install\reinstall apps without an issue. The rest of us who are in the same OU and getting the same policies cannot.

 

We get the following error;

 

 

In fact, it has now broken for the one admin that it was working for too.

 

No firewall changes.

 

Any suggestions would be appreciated.

 

eddyc

Edited November 7, 2018 by eddyc

[CHiLL]

Hi Eddy,

Turns out for me, it was a GPO setting that was killing it. Because we use SCCM (also applies for those using WSUS) for our Windows Updates, we had the following GPO setting enabled:

Computer Configuration > Administrative Templates > Windows Components > Windows Update > Do not connect to any Windows Update Internet locations = Enabled

 

Setting this to 'Not Configured' and running GP Update on my machine instantly allowed the store to download the Netflix app from the store.

 

I don't know what this would mean for our normal Windows Updates, as we only want updates to be obtained from SCCM.

 

I posted this in a similar thread from the other day: http://www.edugeek.net/forums/windows-10/200970-installing-app-store-try-again-later-something-happened-our-end.html

[eddyc]

Hi Eddy,

Turns out for me, it was a GPO setting that was killing it. Because we use SCCM (also applies for those using WSUS) for our Windows Updates, we had the following GPO setting enabled:

Computer Configuration > Administrative Templates > Windows Components > Windows Update > Do not connect to any Windows Update Internet locations = Enabled

 

Setting this to 'Not Configured' and running GP Update on my machine instantly allowed the store to download the Netflix app from the store.

 

I don't know what this would mean for our normal Windows Updates, as we only want updates to be obtained from SCCM.

 

I posted this in a similar thread from the other day: http://www.edugeek.net/forums/windows-10/200970-installing-app-store-try-again-later-something-happened-our-end.html

 

Hi CHiLL,

 

Thanks for this. We have that GPO item set to Disabled and have checked it in a GP result but still getting "try again later, something happened our end" or other errors.

 

Any other suggestions?

 

eddyc

[CHiLL]

Hi CHiLL,

 

Thanks for this. We have that GPO item set to Disabled and have checked it in a GP result but still getting "try again later, something happened our end" or other errors.

 

Any other suggestions?

 

eddyc

Unfortunately I'm out of further suggestions as that worked for me and I stopped looking into it after that!

[eddyc]

Unfortunately I'm out of further suggestions as that worked for me and I stopped looking into it after that!

 

Hi CHiLL

 

So do you have WSUS configured?

 

Would you be able to provide your full update policy so I can see if I have any differences between ours and yours?

 

Cheers

[CHiLL]

Hi CHiLL

 

So do you have WSUS configured?

 

Would you be able to provide your full update policy so I can see if I have any differences between ours and yours?

 

Cheers

The role is installed, but it's completely managed by SCCM as part of SCCM's Software Update Point.

[free780]

How do you have WUDO configured. I would force it via group policy to use Bits.

[eddyc]

How do you have WUDO configured. I would force it via group policy to use Bits.

 

Sorry how would I achieve this? Thanks

[free780]

https://docs.microsoft.com/en-us/windows/deployment/update/waas-delivery-optimization#download-mode

 

Set the download mode to Bypass.

[eddyc]

I've changed that setting and now have the following message coming up, any suggestions would be appreciated.

 

 

Cheers, eddyc

[free780]

I think you have to all a domain unauthenticated and no SSL interception. I can't seem to find it. If you use fiddler and/or smssnif you should be able to find it.

[Arthur]

I can't seem to find it.

https://docs.microsoft.com/en-us/windows/privacy/manage-windows-endpoints#microsoft-store

 

 

https://docs.microsoft.com/en-us/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services#bkmk-windowsstore

 

 

I had a quick look myself using Fiddler and these were the URLs I saw (with storeedgefd.dsx.mp.microsoft.com being the main one)...

 

storeedgefd.dsx.mp.microsoft.com
store-images.s-microsoft.com
account.xbox.com
assets.onestore.ms
login.live.com
storeedgefd.dsx.mp.microsoft.com
universalstore.streaming.mediaservices.windows.net

Edited November 9, 2018 by Arthur

[free780]

Yep I remember back on 1511 *. *. mp.microsoft.com was using a lot of bandwidth. If your a office 365 org I think *. Microsoft.com is recommended to be allowed unauthenticated.