v5 scan for update error 0x80072EFD due to firewall

I recently upgraded Windows Update from v4 to v5.

When I click to start scanning for updates, the progress bar works for about 15 seconds then dumps me in the Error number: 0x80072EFD page. The suggested solutions do not work.

I am running Norton Internet Security 2003 which appears to be preventing it from completing. When I disable the firewall service, Windows Update performs all tasks successfully. The rules in NIS haven't changed since the update from v4 and default Microsoft rules are still listed.

My firewall logs do indicate issues but am still looking for the solution.

Anyone got some thoughts on this? I haven't been able to locate information connecting issues with the new update and a firewall yet.

Thanks.

Hi Jon, thank you for this information -- I will try it this evening.
Justin
New Zealand


"Jon A" wrote:

> I just figured this out, and I am not really a security expert so anyone
> please feel free to correct me, but this works. I was having the same
> problem, but after playing around I found the answer.

I have found that this error is cause by the 'Firewall' preventing (Blocking)
access to the 'Microsoft Generic Host Process for Win32 Services' (svchost).
By changing it from 'Blocked' to 'Permit all', in the Firewall Programme,
the windows updater works perfectly.

................. I am using NIS2004


"Justin_DND" wrote:

> Hi Jon, your suggestion worked perfectly. There are some slight differences
> between Norton Internet Security's 2003 and 2004, but the concepts are
> similar. I was too busy focussing on website restrictions to see this one. It
> stumped Microsoft's Update Support as well.
> Many thanks again, Justin.
>
>
>
>
>
>
> "Jon A" wrote:
>
> > I just figured this out, and I am not really a security expert so anyone
> > please feel free to correct me, but this works. I was having the same
> > problem, but after playing around I found the answer.
> >
> > 1) Open Norton Internet Security and go to the panel where you can configure
> > your firewall.
> > 2) Click on the "advanced" tab, and then the "general" button.
> > 3) Click "add" to create a new rule.
> > 4) This rule will "permit"
> > 5) Connections to and from other computers
> > 6) Add these sites to the list of who to allow.
> > "windowsupdate.microsoft.com", "download.windowsupdate.com" and
> > "v5.windowsupdate.microsoft.com".
> > 7) Allow TCP and UDP traffic, and traffic from any port.
> > 8) Name it "Windows Update Rule"
> > 9) Click finish to complete the rule.
> > 10) Now re-open windows update, and see if that allows you to search for
> > updates.
> >
> > It worked for me, but I am not sure about other people, as I am running NIS
> > 2k4. Also, with such a big release, I am sure symtantec will be putting out a
> > patch that will include windows update in a list of trusted sites. I know
> > that they are currently working to include support for communication between
> > the norton anti-virus and the windows SP2 security center, and we should be
> > seeing that update within a week or two. I hope this helps! Cheers!
> >
> > "Justin_DND" wrote:
> >
> > > I recently upgraded Windows Update from v4 to v5.
> > >
> > > When I click to start scanning for updates, the progress bar works for about 15 seconds then dumps me in the Error number: 0x80072EFD page. The suggested solutions do not work.
> > >
> > > I am running Norton Internet Security 2003 which appears to be preventing it from completing. When I disable the firewall service, Windows Update performs all tasks successfully. The rules in NIS haven't changed since the update from v4 and default Microsoft rules are still listed.
> > >
> > > My firewall logs do indicate issues but am still looking for the solution.
> > >
> > > Anyone got some thoughts on this? I haven't been able to locate information connecting issues with the new update and a firewall yet.
> > >
> > > Thanks.
> > >
> > >
> > >
> > >
> > >

Begin "Jon A" <Jon > quote:

; It worked for me, but I am not sure about other people, as I am running NIS
; 2k4. Also, with such a big release, I am sure symtantec will be putting out a
; patch that will include windows update in a list of trusted sites. I know
; that they are currently working to include support for communication between
; the norton anti-virus and the windows SP2 security center, and we should be
; seeing that update within a week or two. I hope this helps! Cheers!

As of 9/20/04, there has been no update, at least available via Live
Update, to fix this, at least for NPF '02 on XP Pro sp1.

Manually creating the rule works.

--
Jeffrey Kaplan www.gordol.org
The from userid is killfiled Send personal mail to gordol

Guidelines for Legion of Doom Troops: 9. Exercise care in the abuse of
oppressed peoples. Farm implements can be effective weapons in the
hands of a skilled opponent, and some of those little old men can teach
you a thing or two about hand-to-hand combat. It would be just your
luck for the villager you pick on to actually be the Hero masquerading
as one of the villagers.

that's it! thank you!!!

"Justin_DND" wrote:

> Hi Jon, your suggestion worked perfectly. There are some slight differences
> between Norton Internet Security's 2003 and 2004, but the concepts are
> similar. I was too busy focussing on website restrictions to see this one. It
> stumped Microsoft's Update Support as well.
> Many thanks again, Justin.
>
>
>
>
>
>
> "Jon A" wrote:
>
> > I just figured this out, and I am not really a security expert so anyone
> > please feel free to correct me, but this works. I was having the same
> > problem, but after playing around I found the answer.
> >
> > 1) Open Norton Internet Security and go to the panel where you can configure
> > your firewall.
> > 2) Click on the "advanced" tab, and then the "general" button.
> > 3) Click "add" to create a new rule.
> > 4) This rule will "permit"
> > 5) Connections to and from other computers
> > 6) Add these sites to the list of who to allow.
> > "windowsupdate.microsoft.com", "download.windowsupdate.com" and
> > "v5.windowsupdate.microsoft.com".
> > 7) Allow TCP and UDP traffic, and traffic from any port.
> > 8) Name it "Windows Update Rule"
> > 9) Click finish to complete the rule.
> > 10) Now re-open windows update, and see if that allows you to search for
> > updates.
> >
> > It worked for me, but I am not sure about other people, as I am running NIS
> > 2k4. Also, with such a big release, I am sure symtantec will be putting out a
> > patch that will include windows update in a list of trusted sites. I know
> > that they are currently working to include support for communication between
> > the norton anti-virus and the windows SP2 security center, and we should be
> > seeing that update within a week or two. I hope this helps! Cheers!
> >
> > "Justin_DND" wrote:
> >
> > > I recently upgraded Windows Update from v4 to v5.
> > >
> > > When I click to start scanning for updates, the progress bar works for about 15 seconds then dumps me in the Error number: 0x80072EFD page. The suggested solutions do not work.
> > >
> > > I am running Norton Internet Security 2003 which appears to be preventing it from completing. When I disable the firewall service, Windows Update performs all tasks successfully. The rules in NIS haven't changed since the update from v4 and default Microsoft rules are still listed.
> > >
> > > My firewall logs do indicate issues but am still looking for the solution.
> > >
> > > Anyone got some thoughts on this? I haven't been able to locate information connecting issues with the new update and a firewall yet.
> > >
> > > Thanks.
> > >
> > >
> > >
> > >
> > >