RE: update error message 0 x 80072EFD

I've now got my Windowsupdate working with my Norton firewall enabled.

Previously I had a program rule set up for Microsoft Generic Host Process
for Win32 Services. I think I set this rule up ages ago in response to advice
from one of those sites which examines all those MS services which could be a
security risk and advises on locking them down. So this rule blocked all
communications to & from the MS Generic Host Process.

Then as I mentioned before based upon advice elsewhere in this Group I added
another rule to allow communications just for the specified sites and ports.
I left the other more strict rule in place but I ordered it lower in
precedence. So I decided to try turning off this original rule. At the same
time, I also removed the previously advised entries I had made in IE's
trusted sites panel. I did this only because I want to use only Norton to
manage external access, so I wanted to see if it would work.

So I tried downloading a non-critical update and it worked fine. The only
additional issue is that after I restarted my m/c Norton alerted me that the
Generic Host Process was trying to access the internet, and given that the
option was available, I decided to select Automatic Configuration. On
examination I see that Norton sets up several rules under the program option,
each of which is concerned with specific ports. My original strict rule is
disabled, and the new windowsupdate rule is at the top.

So it's possible that I am incurring a slightly increased risk by opening up
this Generic Host Process, but I figured that Norton should be trustworthy
enough when it comes to known quantities like the Microsoft OS, and at least
it means I can now leave my firewall in place while I do these updates.

Whilst it could be argued that this whole issue is one for Norton, not
Microsoft, given the criticality of the update process, given that Norton are
one of the leading widely used firewalls, and given that MS had made the
change which caused this, it is a pity to say the least they didn't get
together and publish some straightforward advice prominently on both their
web sites.

Finally I would urge anyone not simply to turn off the firewall to run
windowsupdate. Obviously this exposes you to the very vulnerabilities the
firewall protects you from, and if you're on dial-up, downloads can take some
time - especially if you decide to do XP SP2 this way. (Personally I'm
leaving my update on manual, and I'll wait a couple of months before I go for
SP2!).

Good luck.

"liz rokk" wrote:

> I reconfigured my firewall to permit all windows update activity. No luck. I
> then removed the site totally from my firwall. Still no luck. I've listed
> windows update among outlook exp's "Trusted site". Still no luck!!

That's all fine and dandy, but what about those of us that are experiencing
the problem who don't even have a firewall or antivirus running? (I know this
is stupid, but the antivirus I was supplied with by my hosting provider has
been causing issues, and when I had this windows update problem, I
uninstalled it, for now.

Again, somebody please help.

"Neilibeg" wrote:

> I've now got my Windowsupdate working with my Norton firewall enabled.
>
> Previously I had a program rule set up for Microsoft Generic Host Process
> for Win32 Services. I think I set this rule up ages ago in response to advice
> from one of those sites which examines all those MS services which could be a
> security risk and advises on locking them down. So this rule blocked all
> communications to & from the MS Generic Host Process.
>
> Then as I mentioned before based upon advice elsewhere in this Group I added
> another rule to allow communications just for the specified sites and ports.
> I left the other more strict rule in place but I ordered it lower in
> precedence. So I decided to try turning off this original rule. At the same
> time, I also removed the previously advised entries I had made in IE's
> trusted sites panel. I did this only because I want to use only Norton to
> manage external access, so I wanted to see if it would work.
>
> So I tried downloading a non-critical update and it worked fine. The only
> additional issue is that after I restarted my m/c Norton alerted me that the
> Generic Host Process was trying to access the internet, and given that the
> option was available, I decided to select Automatic Configuration. On
> examination I see that Norton sets up several rules under the program option,
> each of which is concerned with specific ports. My original strict rule is
> disabled, and the new windowsupdate rule is at the top.
>
> So it's possible that I am incurring a slightly increased risk by opening up
> this Generic Host Process, but I figured that Norton should be trustworthy
> enough when it comes to known quantities like the Microsoft OS, and at least
> it means I can now leave my firewall in place while I do these updates.
>
> Whilst it could be argued that this whole issue is one for Norton, not
> Microsoft, given the criticality of the update process, given that Norton are
> one of the leading widely used firewalls, and given that MS had made the
> change which caused this, it is a pity to say the least they didn't get
> together and publish some straightforward advice prominently on both their
> web sites.
>
> Finally I would urge anyone not simply to turn off the firewall to run
> windowsupdate. Obviously this exposes you to the very vulnerabilities the
> firewall protects you from, and if you're on dial-up, downloads can take some
> time - especially if you decide to do XP SP2 this way. (Personally I'm
> leaving my update on manual, and I'll wait a couple of months before I go for
> SP2!).
>
> Good luck.
>
> "liz rokk" wrote:
>
> > I reconfigured my firewall to permit all windows update activity. No luck. I
> > then removed the site totally from my firwall. Still no luck. I've listed
> > windows update among outlook exp's "Trusted site". Still no luck!!

Ok so we are all trying to access V5, and alot of people are having problems,
I have a bunch of brand new laptops which just will not update, and one older
one that has updated sucessfully. The only thing loaded on the new machines
is the OS and the NIC drivers, I have tried adding the trusted sites, didn't
work.
I spent 2 hours on the phone with a "Microsoft Technical Rep" last night and
he was very helpful, because he led me to believe I was not insane, because
HE HAD NO IDEA HOW TO FIX IT EITHER ! I will gladly post the case number so
that anyone in Australia can ring 132058 give the number and hassle them as
well. Do you think I should?
Has V5 update turned into a lucky dip, one works, one does not. Or has
Microsoft made a slight error?

"Ian M." wrote:

> That's all fine and dandy, but what about those of us that are experiencing
> the problem who don't even have a firewall or antivirus running? (I know this
> is stupid, but the antivirus I was supplied with by my hosting provider has
> been causing issues, and when I had this windows update problem, I
> uninstalled it, for now.
>
> Again, somebody please help.
>
> "Neilibeg" wrote:
>
> > I've now got my Windowsupdate working with my Norton firewall enabled.
> >
> > Previously I had a program rule set up for Microsoft Generic Host Process
> > for Win32 Services. I think I set this rule up ages ago in response to advice
> > from one of those sites which examines all those MS services which could be a
> > security risk and advises on locking them down. So this rule blocked all
> > communications to & from the MS Generic Host Process.
> >
> > Then as I mentioned before based upon advice elsewhere in this Group I added
> > another rule to allow communications just for the specified sites and ports.
> > I left the other more strict rule in place but I ordered it lower in
> > precedence. So I decided to try turning off this original rule. At the same
> > time, I also removed the previously advised entries I had made in IE's
> > trusted sites panel. I did this only because I want to use only Norton to
> > manage external access, so I wanted to see if it would work.
> >
> > So I tried downloading a non-critical update and it worked fine. The only
> > additional issue is that after I restarted my m/c Norton alerted me that the
> > Generic Host Process was trying to access the internet, and given that the
> > option was available, I decided to select Automatic Configuration. On
> > examination I see that Norton sets up several rules under the program option,
> > each of which is concerned with specific ports. My original strict rule is
> > disabled, and the new windowsupdate rule is at the top.
> >
> > So it's possible that I am incurring a slightly increased risk by opening up
> > this Generic Host Process, but I figured that Norton should be trustworthy
> > enough when it comes to known quantities like the Microsoft OS, and at least
> > it means I can now leave my firewall in place while I do these updates.
> >
> > Whilst it could be argued that this whole issue is one for Norton, not
> > Microsoft, given the criticality of the update process, given that Norton are
> > one of the leading widely used firewalls, and given that MS had made the
> > change which caused this, it is a pity to say the least they didn't get
> > together and publish some straightforward advice prominently on both their
> > web sites.
> >
> > Finally I would urge anyone not simply to turn off the firewall to run
> > windowsupdate. Obviously this exposes you to the very vulnerabilities the
> > firewall protects you from, and if you're on dial-up, downloads can take some
> > time - especially if you decide to do XP SP2 this way. (Personally I'm
> > leaving my update on manual, and I'll wait a couple of months before I go for
> > SP2!).
> >
> > Good luck.
> >
> > "liz rokk" wrote:
> >
> > > I reconfigured my firewall to permit all windows update activity. No luck. I
> > > then removed the site totally from my firwall. Still no luck. I've listed
> > > windows update among outlook exp's "Trusted site". Still no luck!!

Great for you. I don't have any idea how to do what you said. HELP! Where
do I look for such rules and the Mirrosoft Generic Host Process? HELP HELP
Can't believe Microsoft is so bad at this.

"Neilibeg" wrote:

> I've now got my Windowsupdate working with my Norton firewall enabled.
>
> Previously I had a program rule set up for Microsoft Generic Host Process
> for Win32 Services. I think I set this rule up ages ago in response to advice
> from one of those sites which examines all those MS services which could be a
> security risk and advises on locking them down. So this rule blocked all
> communications to & from the MS Generic Host Process.
>
> Then as I mentioned before based upon advice elsewhere in this Group I added
> another rule to allow communications just for the specified sites and ports.
> I left the other more strict rule in place but I ordered it lower in
> precedence. So I decided to try turning off this original rule. At the same
> time, I also removed the previously advised entries I had made in IE's
> trusted sites panel. I did this only because I want to use only Norton to
> manage external access, so I wanted to see if it would work.
>
> So I tried downloading a non-critical update and it worked fine. The only
> additional issue is that after I restarted my m/c Norton alerted me that the
> Generic Host Process was trying to access the internet, and given that the
> option was available, I decided to select Automatic Configuration. On
> examination I see that Norton sets up several rules under the program option,
> each of which is concerned with specific ports. My original strict rule is
> disabled, and the new windowsupdate rule is at the top.
>
> So it's possible that I am incurring a slightly increased risk by opening up
> this Generic Host Process, but I figured that Norton should be trustworthy
> enough when it comes to known quantities like the Microsoft OS, and at least
> it means I can now leave my firewall in place while I do these updates.
>
> Whilst it could be argued that this whole issue is one for Norton, not
> Microsoft, given the criticality of the update process, given that Norton are
> one of the leading widely used firewalls, and given that MS had made the
> change which caused this, it is a pity to say the least they didn't get
> together and publish some straightforward advice prominently on both their
> web sites.
>
> Finally I would urge anyone not simply to turn off the firewall to run
> windowsupdate. Obviously this exposes you to the very vulnerabilities the
> firewall protects you from, and if you're on dial-up, downloads can take some
> time - especially if you decide to do XP SP2 this way. (Personally I'm
> leaving my update on manual, and I'll wait a couple of months before I go for
> SP2!).
>
> Good luck.
>
> "liz rokk" wrote:
>
> > I reconfigured my firewall to permit all windows update activity. No luck. I
> > then removed the site totally from my firwall. Still no luck. I've listed
> > windows update among outlook exp's "Trusted site". Still no luck!!

"Sam P" wrote:

> Great for you. I don't have any idea how to do what you said. HELP! Where
> do I look for such rules and the Mirrosoft Generic Host Process? HELP HELP
> Can't believe Microsoft is so bad at this.


Sam here's what I did, if it fits your situation, I hope it works for you:

This advice assumes that like me you are running Norton Internet Security
(NIS) and that you have the Personal Firewall option enabled. My version of
NIS is 2002, I don’t know if the panels are the same for 2004. Sorry if some
of the advice is obvious, I don’t know what knowledge to assume you have:

·Open up the main NIS panel either by choosing Norton Internet Security from
your Start / Programs menu, or by double-clicking on the globe icon in your
system tray.
·Double-click on the Personal Firewall item
·Select the tab Program Control
·Scroll down to the entry called Microsoft Generic Host Process for Win32
Services, select it, then select Modify
·Select the Program Control panel, and from the dropdown list choose
Manually Configure Internet Access, OK
·You may now see a list of rules already set up automatically by NIS. If
there are rules in place, leave them alone. (The rule you are about to add
needs to be at the top of the list, so when you have added the rule, if it is
not at the top of the list, select to highlight the rule then choose Move Up
until the rule is at the top).
·Select Add, and the Action panel is shown first. Choose Permit
·Select the Connections panel, and choose Connections to and from other
computers
·Select the Computers panel, and choose Only those computers & sites listed
below. Select Add, then choose the ‘Individually’ button
·In the space provided to add computers by name enter
v5.windowsupdate.microsoft.com and enter OK
·Repeat the above process for 2 more sites: download.windowsupdate.com and
c.microsoft.com
·Select the Communications tab
·Choose TCP and UDP protocols and choose Only the types of communications or
ports listed below.
·Select Filter by known ports, scroll down the drop down list and check Port
80. Repeat for Port 443, OK when done.
·Select the Tracking Tab, and choose Create an Event Log Entry (this is
optional)
·Select the Description tab, and overwrite the default with a name to
identify the rule you have created – e.g. v5 Win Update
·Select OK until you see the panel again which lists the rules which have
been created for Microsoft Generic Host Process for Win32. If the new rule is
not at the top, select the rule to highlight it, then click Move Up until the
rule is at the top.
·Ok and exit NIS.

Hi!.
I have this problem: i select all the updates i want but the computer
doesn`t download them. It gives me this error ( x 80072EFD ).
I don`t have a firewall and i don`t have any antivirus! I want to update my
WIN XP! before i install all the others programs i will use later.
What can i do? HELP ME PLEASE!
Thanks!

pYramid

"Neilibeg" wrote:

>
>
> "Sam P" wrote:
>
> > Great for you. I don't have any idea how to do what you said. HELP! Where
> > do I look for such rules and the Mirrosoft Generic Host Process? HELP HELP
> > Can't believe Microsoft is so bad at this.
>
>
> Sam here's what I did, if it fits your situation, I hope it works for you:
>
> This advice assumes that like me you are running Norton Internet Security
> (NIS) and that you have the Personal Firewall option enabled. My version of
> NIS is 2002, I don’t know if the panels are the same for 2004. Sorry if some
> of the advice is obvious, I don’t know what knowledge to assume you have:
>
> ·Open up the main NIS panel either by choosing Norton Internet Security from
> your Start / Programs menu, or by double-clicking on the globe icon in your
> system tray.
> ·Double-click on the Personal Firewall item
> ·Select the tab Program Control
> ·Scroll down to the entry called Microsoft Generic Host Process for Win32
> Services, select it, then select Modify
> ·Select the Program Control panel, and from the dropdown list choose
> Manually Configure Internet Access, OK
> ·You may now see a list of rules already set up automatically by NIS. If
> there are rules in place, leave them alone. (The rule you are about to add
> needs to be at the top of the list, so when you have added the rule, if it is
> not at the top of the list, select to highlight the rule then choose Move Up
> until the rule is at the top).
> ·Select Add, and the Action panel is shown first. Choose Permit
> ·Select the Connections panel, and choose Connections to and from other
> computers
> ·Select the Computers panel, and choose Only those computers & sites listed
> below. Select Add, then choose the ‘Individually’ button
> ·In the space provided to add computers by name enter
> v5.windowsupdate.microsoft.com and enter OK
> ·Repeat the above process for 2 more sites: download.windowsupdate.com and
> c.microsoft.com
> ·Select the Communications tab
> ·Choose TCP and UDP protocols and choose Only the types of communications or
> ports listed below.
> ·Select Filter by known ports, scroll down the drop down list and check Port
> 80. Repeat for Port 443, OK when done.
> ·Select the Tracking Tab, and choose Create an Event Log Entry (this is
> optional)
> ·Select the Description tab, and overwrite the default with a name to
> identify the rule you have created – e.g. v5 Win Update
> ·Select OK until you see the panel again which lists the rules which have
> been created for Microsoft Generic Host Process for Win32. If the new rule is
> not at the top, select the rule to highlight it, then click Move Up until the
> rule is at the top.
> ·Ok and exit NIS.
>
>
>
>
>
>

pYramid wrote:

> Hi!.
> I have this problem: i select all the updates i want but the computer
> doesn`t download them. It gives me this error ( x 80072EFD ).
> I don`t have a firewall and i don`t have any antivirus! I want to update my
> WIN XP! before i install all the others programs i will use later.
> What can i do? HELP ME PLEASE!
> Thanks!
Hi

Some tips you can try here:

You receive an "Error 0x80072EE2" or "Error 0x80072EFD" error message
when you try to use Windows Update
http://support.microsoft.com/default...b;en-us;836941




--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scr...r/default.mspx

Torgeir,

I know the advise given is well meant and can certainly prove to be
worthwhile, but don't you agree, that basically this whole thing is turning
into a BIG JOKE?
MS claiming to be introducing more 'trustworthy computing' and a better way
for all windows users to 'stay on top of security' by providing the next
version of Windows Update. ("Want to be secure in 3 easy steps"?!)
Next thing you know is that half the world needs to start tinkering with
their security settings in the direction of 'less secure' (opening up ports
in firewalls, adding domainnames/urls to exception lists, etc.)
Fortunately a lot of people are just savvy enough to 'know' (understand)
what they are doing given the right directions, but I feel really sorry for
the big masses of 'ignorant' user (no offence intended, just being realistic)
who just wants to enjoy his hundreds of $ investment in hard- and software.
They are *not* waiting for this kind of mess and are just lulled into a very
false sense of security, no matter how elaborate the knowledgebase article on
"how to get your Windows update working (again) in 6 easy methods with
numerous sub-steps".
This is the ticket the average user has been waiting for.

I just hope that "by offering comments and/or materials through this page
you give Microsoft full permission to use them freely to improve our
products", is not just a legal thing, but that they really, really do
something to get this particular act together and improve the product to a
point where it becomes usable.

In the meantime, I personally opted to order the SP2 CD, applied it and I'm
going to keep my (non MS) firewall correctly configured (no way I'm going to
compromise *my* firewall settings) and my AV up to date and forget about
Windows Update all together until trustworthy computing can be trusted again
to work under normal computing circumstances.

Just my take on this.

Peter



"Torgeir Bakken (MVP)" wrote:

> pYramid wrote:
>
> > Hi!.
> > I have this problem: i select all the updates i want but the computer
> > doesn`t download them. It gives me this error ( x 80072EFD ).
> > I don`t have a firewall and i don`t have any antivirus! I want to update my
> > WIN XP! before i install all the others programs i will use later.
> > What can i do? HELP ME PLEASE!
> > Thanks!
> Hi
>
> Some tips you can try here:
>
> You receive an "Error 0x80072EE2" or "Error 0x80072EFD" error message
> when you try to use Windows Update
> http://support.microsoft.com/default...b;en-us;836941
>
>
>
>
> --
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/scr...r/default.mspx
>

I followed the instructions on the link listed exactly, and I'm still having
the trouble, on 2 different computers. This is getting really frustrating,
especially considering there is a JPG-virus patch out there that I can't
download!



"Torgeir Bakken (MVP)" wrote:

> pYramid wrote:
>
> > Hi!.
> > I have this problem: i select all the updates i want but the computer
> > doesn`t download them. It gives me this error ( x 80072EFD ).
> > I don`t have a firewall and i don`t have any antivirus! I want to update my
> > WIN XP! before i install all the others programs i will use later.
> > What can i do? HELP ME PLEASE!
> > Thanks!
> Hi
>
> Some tips you can try here:
>
> You receive an "Error 0x80072EE2" or "Error 0x80072EFD" error message
> when you try to use Windows Update
> http://support.microsoft.com/default...b;en-us;836941
>
>
>
>
> --
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/scr...r/default.mspx
>

That "Chrystmas gift" from MS was so ugly. After all recomendations I still
can't download any updates

"barrydt" wrote:

> I followed the instructions on the link listed exactly, and I'm still having
> the trouble, on 2 different computers. This is getting really frustrating,
> especially considering there is a JPG-virus patch out there that I can't
> download!
>
>
>
> "Torgeir Bakken (MVP)" wrote:
>
> > pYramid wrote:
> >
> > > Hi!.
> > > I have this problem: i select all the updates i want but the computer
> > > doesn`t download them. It gives me this error ( x 80072EFD ).
> > > I don`t have a firewall and i don`t have any antivirus! I want to update my
> > > WIN XP! before i install all the others programs i will use later.
> > > What can i do? HELP ME PLEASE!
> > > Thanks!
> > Hi
> >
> > Some tips you can try here:
> >
> > You receive an "Error 0x80072EE2" or "Error 0x80072EFD" error message
> > when you try to use Windows Update
> > http://support.microsoft.com/default...b;en-us;836941
> >
> >
> >
> >
> > --
> > torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> > Administration scripting examples and an ONLINE version of
> > the 1328 page Scripting Guide:
> > http://www.microsoft.com/technet/scr...r/default.mspx
> >