"Teri W.",
Without a little more information, it makes it difficult to know how to help
you. If you are inside a corporate network, then your IT department is
almost certainly using a proxy server (also known as a firewall.) They are
aware of the issues in keeping computers running Windows fully patched. A
lot of the variables depend on how updates are pushed out to you. For
example:
1. Does the IT department employ Microsoft Software Update Services to keep
you patched?
2. Does the IT department deploy packages at night, and update computers
this way so that you when you login in the morning, you only occasionally
have to approve an End User license agreement?
3. Does the IT department turn over getting Windows Update packages to you
and every one of your coworkers?
You can make the following recommendations to them concerning their
firewall:
1. On your firewall, create a "Trusted Sites" object related to Windows
Update that is easy to remember.
a. Try to create just one, so that you can easily manipulate this over
time.
b. There should be only 3 domains allowed in this object:
http://*.windowsupdate.microsoft.com
https://*.windowsupdate.microsoft.com
http://download.windowsupdate.com
2. Also on your firewall, create an "Exceptions" object related to Windows
Update.
a. Create just one
b. List the exact same list of domains as in step one.
c. Make sure that your Exception object also excepts the following
services:
1. Win32 Generic Service (svchost.exe)
2. WinHTTP (this is usually allowed by default)
3. Wininet (this also is usually allowed by default)
3. On the clients behind the firewall:
a. Click Start
b. Click Run
c. Type: services.msc
d. Press the <Enter> key, or click OK.
e. Double-click on Automatic Updates service
i. Set the Startup Type to: Automatic
ii. If it is not running, click the Start button
iii. Verify this service is running, and close the properties window
of this service.
f. Double-click on Background Intelligent Transfer Service
i. Set the Startup Type to: Manual (could be Automatic or Manual,
but Manual is recommended)
ii. Other than the previous step, follow the instructions for
Automatic Updates service.
g. Verify that the Event Log service is "Started" just by scrolling
through the Services window list
h. Close the Services window.
Please let me know if this helped you, and let us know what you decided to
do.
Sincerely,
Pat Walters [MSFT]
"Teri W." <Teri W.@discussions.microsoft.com> wrote in message
news:74F40314-366F-4990-AAB3-...
> I can't get windows update or downloads as my network policy settings
> prevent me from doing this how do I adjust settings I already adjusted
file
> and printer sharing.