80072F78 MS/Windows Update

[Bob Tucker]

Hi,

Recently, all the PCs and servers on the network behind thge WSingate server have begun to give an 80072F78 error in Windows/MS update. Apparently, this 80072F78 error is a proxy error. MS has a technet article on handling this error in ISA server.

I never saw the problem with Wingate until a week ago. The Kaspersky AV plugin is being used here, so HTTP requests are transparently handled by the WWW proxy service. The Wingate server, which is not a Wingate client, does not experience the error. All PCs and servers behind the Wingate server have the error when attempting to use MS/Windows update. Is there any experience with this?

Kindest Regards,

Bob Tucker

[adrien]

Hi Bob

I had a look for some articles on this.

Do you require authentication for your WWW proxy?

Adrien

[Bob Tucker]

Hi Adrien,

Thank you for the quick response.

I think you are on the right track.

This site had a vanilla setup with respect to the WWW proxy: There was no secuity or authentication required on the WWW proxy except that use was resticted to the internal network. Two months ago, I changed security on the WWW proxy so that some users are restricted to specific websites. The websites that all users can access include MS/Windows update sites and related sites. This setup worked fine until about 10 days ago when all systems began to get a 80072F78 error on MS/Windows update.

Kindest Regards,

Bob Tucker

[adrien]

Hi Bob

the docs I could find on it refer to issues with authentication.

Does the policy that grants everyone access to the MS update (and related) sites require authentication, or can the user be guest for that one?

Also, if those machines are running automatic windows updates, they may have downloaded new versions of the Windows Update Client software which may have some issue.

Adrien

[Bob Tucker]

Hi Adrien,

There is now no authentication required on the WWW proxy - except that users must be on the trusted network. Users are not resticted by system policy. The error continues. I took it up with MS on the TechNet forum that I participate in. The error indciates a a malformed server request according to a level one engineer in Windows Update support.

Tthe Wingate server (which is not a Wingate client) continues to be able to run MS/Windows update normally. All PCs and servers behind the Wingate server give the error.

Kindest regards,

Bob Tucker

[Bob Tucker]

Hi Adrien,

I failed to mention that this problem is independant of how a client connects to the WWW proxy server. The error occurs whether the client configuration is a direct or transparent connecton to the proxy server.

Kindest Regards,

Bob Tucker

[Bob Tucker]

Hi Adrien,


The issue does appear to be a Wingate problem. Any PC brought into the DMZ is able to run MS/Windows update without difficulty. PCs behind the Winagte server fail, and all such PCs error as mentioned.

Regards,

Bob Tucker

[adrien]

Hi Bob

We'll have to try and repro this in the lab. Do you have a version number on the windows update clients you can post?

Regards

Adrien

[Bob Tucker]

Hi Adrien,

All systems on the domain are kept up-to-date with MS Update - which would be Windows update 6.x. Automatic updates are used. MS Update and automatic update no longer work via the proxy server, so I have unchecked the box to transparently handle NAT in the proxy server. Automatic update and MS update work corrrectly - and very quickly - via NAT. Security is handled in system policies - which is the same for NAT and the WWW proxy.

I include the relevant portion of the windowsupdate.log from a system:
2006-10-11 12:04:19 1908 15ec DtaStor Update service properties: service registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-10-11 12:04:19 1908 15ec DnldMgr *********** DnldMgr: New download job [UpdateId = {F1510774-612D-4385-8AB6-701FE5A2CB1E}.105] ***********
2006-10-11 12:04:19 1908 15ec DnldMgr * Queueing update for download handler request generation.
2006-10-11 12:04:19 1908 15ec DnldMgr Generating download request for update {F1510774-612D-4385-8AB6-701FE5A2CB1E}.105
2006-10-11 12:04:30 1908 15ec Handler Windows Patch download for UpdateId = {F1510774-612D-4385-8AB6-701FE5A2CB1E}: selected action is download full-file.
2006-10-11 12:04:30 1908 15ec DnldMgr *********** DnldMgr: New download job [UpdateId = {F1510774-612D-4385-8AB6-701FE5A2CB1E}.105] ***********
2006-10-11 12:04:31 1908 15ec DnldMgr * All files for update were already downloaded and are valid.
2006-10-11 12:04:31 1908 15ec DtaStor Update service properties: service registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-10-11 12:04:31 1908 15ec Agent *********
2006-10-11 12:04:31 1908 15ec Agent ** END ** Agent: Downloading updates [CallerId = AutomaticUpdates]
2006-10-11 12:04:31 1908 15ec Agent *************
2006-10-11 12:04:31 1908 1788 AU >>## RESUMED ## AU: Download update [UpdateId = {A1D1B486-0C12-4CE6-8162-FC9B26ACD757}, succeeded]
2006-10-11 12:04:31 1908 15ec DnldMgr *************
2006-10-11 12:04:31 1908 15ec DnldMgr ** START ** DnldMgr: Downloading updates [CallerId = AutomaticUpdates]
2006-10-11 12:04:31 1908 15ec DnldMgr *********
2006-10-11 12:04:31 1908 15ec DnldMgr * Priority = 2, ServiceId = {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-10-11 12:04:31 1908 15ec DnldMgr * Updates to download = 1
2006-10-11 12:04:31 1908 15ec Agent * Title = Security Update for Microsoft .NET Framework, Version 2.0 (KB922770)
2006-10-11 12:04:31 1908 15ec Agent * UpdateId = {5B93B9A1-DFA4-4321-88A1-8028858D54E0}.102
2006-10-11 12:04:31 1908 15ec Agent * Bundles 1 updates:
2006-10-11 12:04:31 1908 15ec Agent * {4A7CC0C1-CA9E-4A29-9E0F-D54EB640C4B6}.102
2006-10-11 12:04:31 1908 15ec DnldMgr *********** DnldMgr: Downloading regulation Odf ***********
2006-10-11 12:04:31 1908 15ec DnldMgr * ServiceId = {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-10-11 12:04:31 1908 15ec DnldMgr * URL = http://rs.update.microsoft.com/odf/v6odf.xml
2006-10-11 12:05:33 1908 15ec Misc WARNING: Send failed with hr = 80072f78.
2006-10-11 12:05:33 1908 15ec Misc WARNING: SendRequest failed with hr = 80072f78. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2006-10-11 12:05:33 1908 15ec Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://rs.update.microsoft.com/odf/v6odf.xml>. error 0x80072f78
2006-10-11 12:05:33 1908 15ec Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f78
2006-10-11 12:05:33 1908 15ec Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072f78
2006-10-11 12:05:33 1908 15ec Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072f78
2006-10-11 12:06:35 1908 15ec Misc WARNING: Send failed with hr = 80072f78.
2006-10-11 12:06:35 1908 15ec Misc WARNING: SendRequest failed with hr = 80072f78. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2006-10-11 12:06:35 1908 15ec Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://rs.update.microsoft.com/odf/v6odf.xml>. error 0x80072f78
2006-10-11 12:06:35 1908 15ec Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f78
2006-10-11 12:06:35 1908 15ec Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072f78
2006-10-11 12:06:35 1908 15ec Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072f78
2006-10-11 12:07:37 1908 15ec Misc WARNING: Send failed with hr = 80072f78.
2006-10-11 12:07:37 1908 15ec Misc WARNING: SendRequest failed with hr = 80072f78. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2006-10-11 12:07:37 1908 15ec Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://rs.update.microsoft.com/odf/v6odf.xml>. error 0x80072f78
2006-10-11 12:07:37 1908 15ec Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f78
2006-10-11 12:07:37 1908 15ec Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072f78
2006-10-11 12:07:37 1908 15ec Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072f78
2006-10-11 12:08:39 1908 15ec Misc WARNING: Send failed with hr = 80072f78.
2006-10-11 12:08:39 1908 15ec Misc WARNING: SendRequest failed with hr = 80072f78. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2006-10-11 12:08:39 1908 15ec Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://rs.update.microsoft.com/odf/v6odf.xml>. error 0x80072f78
2006-10-11 12:08:39 1908 15ec Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f78
2006-10-11 12:08:39 1908 15ec Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072f78
2006-10-11 12:08:39 1908 15ec Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072f78
2006-10-11 12:08:39 1908 15ec DnldMgr FATAL: DM:CDownloadRegulator::DownloadOdf: WinHttpDownloadFile failed with 0x80072f78.
2006-10-11 12:08:39 1908 15ec DnldMgr * Last proxy send request failed with hr = 0x80072F78, HTTP status code = 0
2006-10-11 12:08:39 1908 15ec DnldMgr * Caller provided credentials = No
2006-10-11 12:08:39 1908 15ec DnldMgr * Impersonate flags = 0
2006-10-11 12:08:39 1908 15ec DnldMgr * Possible authorization schemes used =
2006-10-11 12:08:39 1908 15ec DnldMgr FATAL: DM:CDownloadRegulator::Refresh: DownloadOdf failed with 0x80072f78.
2006-10-11 12:08:39 1908 15ec DnldMgr FATAL: DM:CAgentDownloadManager::DownloadUpdates: Refresh failed with 0x80072f78.
2006-10-11 12:08:39 1908 15ec

Kindest Regards,

Bob Tucker