Error 0x800A138F, 0x800C0008 & 0x80072EF1 on all Windows 2003 Ser

Hi all,

I run 3 Windows 2003 Servers (each a standalone Enterprise Server) that have
not been updated in quite a while since we moved to Sydney (Australia) from
Switzerland. Made me suspicious, so I went to the windows update site with
each of them.

Note: There are also 3 Windows XP Pro machines in the same LAN, same network
config, and windowsupdate runs just fine on those machines.

The following happens identically on all 3 servers:

After clicking "scan for updates", the indicator remains at 0%, IE locks up
and after quite some time displays error 0x800A138F. The entries in
windowsupdate.log look like this:

2005-03-27 00:35:49 13:35:49 Success IUENGINE Starting
2005-03-27 00:35:50 13:35:50 Success IUENGINE Determining machine
configuration
2005-03-27 00:35:50 13:35:50 Success IUENGINE Determining machine
configuration
2005-03-27 00:36:02 13:36:02 Success IUENGINE Querying software
update catalog from https://v4.windowsupdate.microsoft.com/getmanifest.asp
2005-03-27 00:38:22 13:38:22 Error IUENGINE Querying software
update catalog from https://v4.windowsupdate.microsoft.com/getmanifest.asp
(Error 0x800C0008)

When windows update runs by itself, scheduled, this is what happens:

2005-03-26 22:24:02 11:24:02 Success IUENGINE Starting
2005-03-26 22:24:05 11:24:05 Success IUENGINE Determining machine
configuration
2005-03-26 22:24:08 11:24:08 Success IUENGINE Querying software
update catalog from
https://v4.windowsupdate.microsoft.c...etmanifest.asp
2005-03-26 22:24:08 11:24:08 Success IUENGINE Determining machine
configuration
2005-03-26 22:24:39 11:24:39 Error IUENGINE Already tried all
proxies. Will not retry. (Error 0x80072EF1)
2005-03-26 22:24:39 11:24:39 Error IUENGINE Querying software
update catalog from
https://v4.windowsupdate.microsoft.c...etmanifest.asp (Error
0x80072EF1)
2005-03-26 22:24:39 11:24:39 Success IUENGINE Shutting down

I have tried all the tricks I found on google:
- adding all update sites to the trusted sites zone
- checked the hosts file, which has no entries
- unchecking "check for certificate revokation", and "expiration"
- deleted the expired certificates from one of the servers
- played with the HTTP 1.1 settings
- uninstalled and reinstalled a fresh load of update files from iuctl.cab
- running from the HTTPS URL rather than the HTTP
- changing the MTU on the LAN adapter to the largest size
- I even went through each and every tip from here
http://www3.telus.net/dandemar/0x800c0005.htm (!!!)

So the only thing that obviously has changed since it stopped working is we
moved to Sydney. Obviously we're with a different ISP, but we don't see any
network problems apart from the windowsupdate issue.

I am at a complete loss on what to do. Thanks for any input!

- Balt

I should also add I downloaded the windows 2003 Sp1 beta on one of the
machines, which will make it use v5 rather than v4 of windowsupdate. But the
same problem persists.

Problem solved!

I had to set the MTU on the machines to 1300.

So, for others, regardless of what your router's MTU is set to, windows 2003
server apparently needs to have its MTU set to the highest value your ISP
supports.

- Balt

"Balt" wrote:

> Hi all,
>
> I run 3 Windows 2003 Servers (each a standalone Enterprise Server) that have
> not been updated in quite a while since we moved to Sydney (Australia) from
> Switzerland. Made me suspicious, so I went to the windows update site with
> each of them.
>
> Note: There are also 3 Windows XP Pro machines in the same LAN, same network
> config, and windowsupdate runs just fine on those machines.
>
> The following happens identically on all 3 servers:
>
> After clicking "scan for updates", the indicator remains at 0%, IE locks up
> and after quite some time displays error 0x800A138F. The entries in
> windowsupdate.log look like this:
>
> 2005-03-27 00:35:49 13:35:49 Success IUENGINE Starting
> 2005-03-27 00:35:50 13:35:50 Success IUENGINE Determining machine
> configuration
> 2005-03-27 00:35:50 13:35:50 Success IUENGINE Determining machine
> configuration
> 2005-03-27 00:36:02 13:36:02 Success IUENGINE Querying software
> update catalog from https://v4.windowsupdate.microsoft.com/getmanifest.asp
> 2005-03-27 00:38:22 13:38:22 Error IUENGINE Querying software
> update catalog from https://v4.windowsupdate.microsoft.com/getmanifest.asp
> (Error 0x800C0008)
>
> When windows update runs by itself, scheduled, this is what happens:
>
> 2005-03-26 22:24:02 11:24:02 Success IUENGINE Starting
> 2005-03-26 22:24:05 11:24:05 Success IUENGINE Determining machine
> configuration
> 2005-03-26 22:24:08 11:24:08 Success IUENGINE Querying software
> update catalog from
> https://v4.windowsupdate.microsoft.c...etmanifest.asp
> 2005-03-26 22:24:08 11:24:08 Success IUENGINE Determining machine
> configuration
> 2005-03-26 22:24:39 11:24:39 Error IUENGINE Already tried all
> proxies. Will not retry. (Error 0x80072EF1)
> 2005-03-26 22:24:39 11:24:39 Error IUENGINE Querying software
> update catalog from
> https://v4.windowsupdate.microsoft.c...etmanifest.asp (Error
> 0x80072EF1)
> 2005-03-26 22:24:39 11:24:39 Success IUENGINE Shutting down
>
> I have tried all the tricks I found on google:
> - adding all update sites to the trusted sites zone
> - checked the hosts file, which has no entries
> - unchecking "check for certificate revokation", and "expiration"
> - deleted the expired certificates from one of the servers
> - played with the HTTP 1.1 settings
> - uninstalled and reinstalled a fresh load of update files from iuctl.cab
> - running from the HTTPS URL rather than the HTTP
> - changing the MTU on the LAN adapter to the largest size
> - I even went through each and every tip from here
> http://www3.telus.net/dandemar/0x800c0005.htm (!!!)
>
> So the only thing that obviously has changed since it stopped working is we
> moved to Sydney. Obviously we're with a different ISP, but we don't see any
> network problems apart from the windowsupdate issue.
>
> I am at a complete loss on what to do. Thanks for any input!
>
> - Balt