Vista Ultimate SP1 x64 in domain (0x80072EFD)

Hi,

I've recently added a laptop with Vista to our domain. The domain has
its own wsus server which usage is enforced through the domain
policies. The laptop can get all the updates if it gets connected to
the network within the domain without any problem.

However, if I connect the laptop to the Internet outside the domain, I
can no longer get any updates. I get an 0x80072EFD error. Looking
around, I found that this means there is no connection with the
server. I would understand if that is subject to our own wsus server
as that one is not available from outside our network. In XP when the
organization's server couldn't be reached, updates were retrieved from
Microsoft through Internet Explorer. Is this no longer possible with
Vista? (I can see logic in that scenario)

In case it should still be possible, any suggestions as to what can
cause this behaviour and how it can be solved? I tried the suggestions
mentioned on http://windowshelp.microsoft.com/Win...a29271033.mspx
and http://support.microsoft.com/?kbid=836941 to no avail.

Yves

[[ Forwarded to WSUS newsgroup
(microsoft.public.windows.server.update_services) via crosspost as a
convenience to OP ]]

p0 wrote:
> I've recently added a laptop with Vista to our domain. The domain has
> its own wsus server which usage is enforced through the domain
> policies. The laptop can get all the updates if it gets connected to
> the network within the domain without any problem.
>
> However, if I connect the laptop to the Internet outside the domain, I
> can no longer get any updates. I get an 0x80072EFD error. Looking
> around, I found that this means there is no connection with the
> server. I would understand if that is subject to our own wsus server
> as that one is not available from outside our network. In XP when the
> organization's server couldn't be reached, updates were retrieved from
> Microsoft through Internet Explorer. Is this no longer possible with
> Vista? (I can see logic in that scenario)
>
> In case it should still be possible, any suggestions as to what can
> cause this behaviour and how it can be solved? I tried the suggestions
> mentioned on
> http://windowshelp.microsoft.com/Win...a29271033.mspx
> and http://support.microsoft.com/?kbid=836941 to no avail.
>
> Yves

> p0 wrote:
>> I've recently added a laptop with Vista to our domain. The domain has
>> its own wsus server which usage is enforced through the domain
>> policies. The laptop can get all the updates if it gets connected to
>> the network within the domain without any problem.
>>
>> However, if I connect the laptop to the Internet outside the domain, I
>> can no longer get any updates. I get an 0x80072EFD error.

See my response to the previous post. This is a natural artifact of using
Group Policy. The URL you have specified for your WSUS Server is (hopefully)
"not reachable" from the Internet.

Policies set registry values. Registry values are STATIC. Merely being "not
connected" to the network does not 'undo' those policies.

>> In XP when the
>> organization's server couldn't be reached, updates were retrieved from
>> Microsoft through Internet Explorer.

Which of course, required *HUMAN* involvement, and the risk that the wrong
updates might be installed, or the needed updates might not be installed --
definitely not an optimal solution to the situation.

>> Is this no longer possible with Vista?

Certainly! Run the Vista WUApp, select the hyperlink to check with
"Microsoft Update" for available updates. Install.



--
Lawrence Garvin, M.S., MCITP(x2), MCTS(x5), MCP(x7), MCBMSP
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)

MS WSUS Website: http://www.microsoft.com/wsus
My Websites: http://www.onsitechsolutions.com;
http://wsusinfo.onsitechsolutions.com
My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin

On 5 dec, 05:17, "Lawrence Garvin \(MVP\)" <lawre...@news.postalias>
wrote:
> > p0 wrote:
> >> I've recently added a laptop with Vista to our domain. The domain has
> >> its own wsus server which usage is enforced through the domain
> >> policies. The laptop can get all the updates if it gets connected to
> >> the network within the domain without any problem.
>
> >> However, if I connect the laptop to the Internet outside the domain, I
> >> can no longer get any updates. I get an 0x80072EFD error.
>
> See my response to the previous post. This is a natural artifact of using
> Group Policy. The URL you have specified for your WSUS Server is (hopefully)
> "not reachable" from the Internet.
>
> Policies set registry values. Registry values are STATIC. Merely being "not
> connected" to the network does not 'undo' those policies.
>
> >> In XP when the
> >> organization's server couldn't be reached, updates were retrieved from
> >> Microsoft through Internet Explorer.
>
> Which of course, required *HUMAN* involvement, and the risk that the wrong
> updates might be installed, or the needed updates might not be installed -- *
> definitely not an optimal solution to the situation.
>
> >> Is this no longer possible with Vista?
>
> Certainly! Run the Vista WUApp, select the hyperlink to check with
> "Microsoft Update" for available updates. Install.
>
> --
> Lawrence Garvin, M.S., MCITP(x2), MCTS(x5), MCP(x7), MCBMSP
> Principal/CTO, Onsite Technology Solutions, Houston, Texas
> Microsoft MVP - Software Distribution (2005-2009)
>
> MS WSUS Website:http://www.microsoft.com/wsus
> My Websites:http://www.onsitechsolutions.com;htt...hsolutions.com
> My MVP Profile:http://mvp.support.microsoft.com/pro...awrence.Garvin

Thanks for the reply. The strange thing is "Use Microsoft update" is
already selected in WUApp, so according to your reply it should work
but still doesn't.

The only thing I can still try is to manually change the
"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Wi ndows\WindowsUpdate
\AU\UseWUServer" value to 0 to see how it works. But that will be for
next week.

Yves