Fixing Windows update Error 80072EFE.

Situation: The client can’t install Windows update with this Error 80072EFE on their DMZ web server.

Troubleshooting: 1. research online and it could be firewall issue.

2. The company LAN servers and workstations don’t have issue. Only the DMZ servers have this problem.

3. The client just migrated their Cisco ASA firewall to Paloalto firewall.

4. Review the Paloalto firewall settings, we find it misses s DMZ policy to allow accessing Microsoft download website. Creating a firewall policy fixes the problem.

5. Download and install Windows Update Assistant from Microsoft. This step by step video may help:

Can’t download Windows Updates because of firewall

Situation: The client has a problem to download Windows update, even they try to download it manually.

Troubleshooting: we find they just replace their Cisco ASA firewall with Palo Alto firewall. There are the troubleshooting steps.

1. We resolved the URL From where updates were being downloaded to 134.170.51.186.
2. Checked on Firewall and saw that traffic was allowed to this URL and few sessions were identified as incomplete and few as web-browsing.
3. Created a security policy with no Security Profiles and we were able to download Microsoft Updates.
4. Checked Data Filtering Logs an saw that PE File type is blocked.

5. Removed PE from blocked file types and we were able to download Microsoft Updates.

Problem to install Update KB890830 (Windows Malicious Removal Tool)

Situation: When installing Windows updates, you have a problem to install KB 890830 and it blocks other update download,

Troubleshooting: 1. Hind KB 890830 from the Windows update or uninstall it.

2. Just delete the mrt file in Windows\system32\mrt. The launch Windows Update and hide the April 2016 MRT update. Afterward, restart Windows Update search 3 times again.

3. Try to download the Windows updates manually.

4. If you can’t downlaod the Windows Updates manually, check the firewall. This post may help:

Can’t download Windows Updates because of firewall

5. Download and install Windows Update Assistant from Microsoft. This step by step video may help:

Fixing Windows update Error 0x80070643

Situation: When installing Windows update, you may receive this error: 0x80070643

Resolution: 1. Manually update Windows Defender to fix update failures KB2267602 (Definition 1.213.6196.0) – Error 0x80070643
by using this command
“%programfiles%\windows defender\mpcmdrun.exe” -signatureupdate -http
2. Download and install Windows Update Assistant from Microsoft. This step by step video may help:

Fixing Windows Update 0x80244022 error

Situation: when attempting to install Windows updates, you may receive this error: 0x80244022.

Troubleshooting: quoted online: ” The Windows Update 0x80244022 or 0x80072ee2 error occur because Windows cannot connect to Windows Update Servers to receive the updates. This is due to several reasons, like corrupted registry files or keys, incorrect date/time or Firewall settings, etc”. Try these suggestions:

  1. It could be the time issue. Check your date and time settings.
  2. Modify Windows Update Settings in Registry. Run regedit.

Delete HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU,

3. If you have a workstation failed to Windows Update with the error 0x80244022 from a WSUS, go to the WSUS server and open IIS Manager. Click Application Pools, select WsusPool and click Start to restart the Application Pool.

4. Run Windows Update troubleshooter. You can find the troubleshooter using Windows Search. Go to Settings and type “troubleshoot” in the Windows Settings search bar. Click the “Troubleshoot” result.
Locate the Windows Update troubleshooter under “Troubleshoot” and select it. Click the “Run the troubleshooter” button.

5. Delete SoftwareDistribution folder contents. The Software Distribution folder is a temporary folder in which Windows stores update files until they are completely downloaded. Then, Windows starts the update process. In this case, removing SoftwareDistribution folder contents and restarting the Windows Update service might resolve “Windows Update error code 0x80244022”. You need to stop the Windows update service or run this ocmmand; net stop wuauserv. Then deleted “C:\Windows\SoftwareDistribution” directory.

6. Modify Advanced Security Settings in Internet Explorer.
To do that: 1) From Internet Explorer main menu, click: Tools and choose Internet Options.

2) Go to the Advanced tab.

3) Under Security section, uncheck the following:

Check for publisher’s certificate revocation.
Check for server certificate revocation.

4) Click OK

5) Restart Internet Explorer.

6) Try to Update your computer now.

7. Modify Firewall settings / Add exceptions.
If you use a firewall program, disable it until you install updates or add the following Windows Update websites to the exceptions list.

http://.update.microsoft.com https://.update.microsoft.com
http://download.windowsupdate.com

Windows downloading updates 0% forever

Situation: The client has two windows 2016 servers. The Update status shows Downloading updates 0% forever and never completes.

Troubleshooting: 1. Restart the Windows Update services or restart the server.

2. If Windows Defender was failing to update properly through Windows Update,  try to update Windows Defender using this command from a terminal window: “%programfiles%\windows defender\mpcmdrun.exe” -signatureupdate -http

Fixing “The program can’t start because api-ms-win-crt-runtime-l1-1-0.dll is missing”

Situation: When installing software on Windows, you may receive this message: “The program can’t start because api-ms-win-crt-runtime-l1-1-0.dll is missing”.

Troubleshooting: 1. Make sure no Windows or other updates running.

2. Restart the computer and try it.

IE Trusted sites is grayed out on Windows 2012 R2 server

Q: When attempting to add some website to our Windows 2012 R2 server, the Trusted sites is grated out and i can’t add them. Why?

chicagotech.net: You may want to check the group policy settings. Go to ser Settings -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page. If it is enabled, the Trusted sites will be grated out. If you don’t want to disable it, you can modify policy Preferences Registry Items to add the websites. Please refer to this link:

https://blog.thesysadmins.co.uk/group-policy-internet-explorer-security- zones.html

U