OS: Windows 7N 64 bit Ultimate SP1. Personal expertise level: since DOS 3.0. Issue: Windows Update is not able to connect to the update server. Gives error code 8024402C Actions I've taken: every suggest tip and Technet forum posting to date. http://support.microsoft.com/kb/900936 and about a dozen others. Used the 'Fix It' - tried re-registering WUS components via a batch file. Lots of the fixes out there are for Windows XP and not relevant. Other details: I have two other Windows 7 machine which can update without issues. Laptop Windows 7 32bit Ultimate: no issues. Workstation: Windows 7 32 Bit Ultimate. No issues. Initially I thought my new cisco router was causing the issue but my other machines would have the same issue- but they dont. This is a new build. The last patch installed was the Media Featue Pack for Windows 7N on 14/11/2011. Last update patch was KB2533552 on 13/11/2011 (build day with updates applied) This issue is making me feel pretty stupid. I'm going to try and reinstall the last windows app - the media pack. But this is pretty weird. All my IP4 and IP6 settings are set to auto (i.e. DNS/IP etc). Any suggestions would be appreciated. Ed

I would first recommend that you disable IPV6 if you are not using it. It can occasionally cause issues if you do a lot of stuff on the network and it can just make things not work when you aren't ready to implement it. Did you check and ensure that the Windows Update service is started? If the service is disabled, then it isn't going to work. You may have disabled it by accident. And when you researched the error message you got, did you specifically put Windows 7 in the search terms to try and narrow it down? I'll do some research to for you to see if there is something out there that was overlooked, and then I'll post any relevant links I find. But check the service within service manager and ensure that it's set to automatic.

Thanks for replying cron22. Disabled IPV6 - not a bad idea but it had no impact. WU Service is running. It's not disabled and is set to start automatically. I can also post any system logs you need or event viewers. Ed

Ok, did some digging around my event viewer, in particular, my System log. Log Name: System Source: Microsoft-Windows-WindowsUpdateClient Date: 08/01/2012 10:11:28 PM Event ID: 16 Task Category: Automatic Updates Level: Warning Keywords: Connection User: SYSTEM Computer: Gamer-PC Description: Unable to Connect: Windows is unable to connect to the automatic updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection.

Did you check this out: http://windows.microsoft.com/en-US/windows-vista/Windows-Update-error-8024402C?It might help you out. And another thing to check. Have you run a virus scan on that computer lately with both your primary antivirus scanner (what antivirus are you running?), and with both Super AntiSpyware and Malwarebytes anti-malware? You might very well have internet access on that computer, but if there is a trojan or other malicious program in your way, you might very well not be able to receive updates because of it. Post back the MBAM log. We'll worry about SAS later on if we need it.

I would start with downloading the latest windows update agent http://support.microsoft.com/kb/949104 Then try checking your firewall or router to see if you might be blocking windows updates by any chance. Also i do agree with "cron22" viruses are known to block windows update and anti-virus web sites.

I doubt that the router would be the one blocking the updates. If anything, it could be your firewall like he said if you aren't using the Windows Firewall. I happen to use GFI's firewall with their Premium Vipre Internet Security on my server, and if I remember correctly, Windows Update isn't a default exception, and you have to customize every rule. They aim to change that in the current version (I believe that they have though i'm not too sure). I'll ask them about it. What antivirus are you running, anyway? And by the way, if you accepted the trial of MBAM, you know that you are now obligated to purchase it, right?

Ok, MBAM log turned up nothing. Neither did the Super AntiSpyware. Also DL'ed Microsoft's latest antispyware app and it too turned up nothing. I'm running no firewall software - only Microsoft Security Essentials. I've also tried turning off my firewall with no luck. I also installed the latest Windows Update Agent (Which was a brilliant idea Branco) but it didn't fix the issue. Ok - onto EventVwr. Log Name: System Source: Microsoft Antimalware Date: 10/01/2012 8:43:03 AM Event ID: 3002 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Gamer-PC Description: Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection. Ok - this is weird. Why is my antimalware not running. Log Name: System Source: Service Control Manager Date: 10/01/2012 7:55:05 PM Event ID: 7001 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Gamer-PC Description: The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. Not sure if this is related. Log Name: System Source: volmgr Date: 10/01/2012 8:42:27 AM Event ID: 46 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Gamer-PC Description: Crash dump initialization failed! Whaaaa? Weird. This is a seperate issue. This issue is making me feel pretty stupid. Any more suggestions? Also - any more suggestions? Where can I find more on the cron22 virus?

Okay first of all, if you're looking for Cron22, look on my profile. I'm a lot of things, but a computer virus isn't one of them, LOL! That was hilarious. And yes, this stuff is strange. Lets try a couple more malware scanners. And the other issues you are having could possibly be hardware related, though I can't be sure as I have never seen them before. We'll try both Eset's online scanner and then Kaspersky's removal tool. Go to http://eset.com/onlinescan for the scanner, and then run a search for Kaspersky Virus removal tool when finished running Eset. When running Eset, ensure that you are running IE for it is a pain in the butt to run with other browsers. On the scanning page, ensure that scan for potentially unsafe applications, scan the contents of archives, and quarintine (in other words, when this last is unchecked, the program will simply automatically delete anything it finds), are checked. Leave all of the others at their defaults. The log will be found at the root of the C drive I think if I remember correctly, and if nothing was found, then sometimes, there is no log displayed. So if there's nothing for you to post, then that's a good sign. When running Kaspersky's virus removal tool, ensure that everything is checked and the scanner is running with it's full set of options. And then if these don't turn up anything, then chances are we're barking up the wrong tree and we'll go another route.

Lol - I misread your last posting. Too funny - sorry cron. ESET found nothing and Kaspersky is running now but it expects to finish in 2 hours. I'm off to bed but it does seem like something damaged my OS that prevents updates from installing - also hence why my antimalware service isn't running. I think an OS reinstall might be required if Kaspersky finds nothing. I'm spending way to much time to track down this gremlin if Viruses or malware don't show up... Occam's razor may apply here though - usually the simple answer is the correct one. Something simple is turned off or malconfigured. If you can think of anything else - let me know. And BTW - thanks for your help. :)

Microsoft Security Essentials needs to be updated other wise it doesn't work. (catch 22) I left you a script on your other post but i guess you didn't see it. Save it as "AnyName.bat" and run it as administrator. I was managing 5000 computers with it in our network and it worked 99 % of the time. For the 1 % that it didn't work i would update agent and then it worked. Sometimes it may not be the agent at all, it might be the XML that's killing the process. So i would suggest if it doesn't work to download XML parser as well http://www.microsoft.com/download/en/details.aspx?id=6276 @echo off & setLocal EnableDELAYedExpansion echo Stop Bits and Windows Update service net stop wuauserv /Y net stop bits /Y Echo Remove Registry Keys from Windows Update Agent reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v AccountDomainSid /f reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v PingID /f reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v SusClientId /f reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v SusClientIDValidation /f Del "C:\ProgramData\Microsoft\Network\Downloader\qmgr*.dat" CD /D %SystemRoot%\System32 regsvr32.exe /S atl.dll regsvr32.exe /S urlmon.dll regsvr32.exe /S mshtml.dll regsvr32.exe /S shdocvw.dll regsvr32.exe /S browseui.dll regsvr32.exe /S jscript.dll regsvr32.exe /S vbscript.dll regsvr32.exe /S scrrun.dll regsvr32.exe /S msxml.dll regsvr32.exe /S msxml3.dll regsvr32.exe /S msxml6.dll regsvr32.exe /S Msjava.dll regsvr32.exe /S actxprxy.dll regsvr32.exe /S softpub.dll regsvr32.exe /S wintrust.dll regsvr32.exe /S dssenh.dll regsvr32.exe /S rsaenh.dll regsvr32.exe /S gpkcsp.dll regsvr32.exe /S sccbase.dll regsvr32.exe /S slbcsp.dll regsvr32.exe /S cryptdlg.dll regsvr32.exe /S oleaut32.dll regsvr32.exe /S ole32.dll regsvr32.exe /S shell32.dll regsvr32.exe /S initpki.dll regsvr32.exe /S wuapi.dll regsvr32.exe /S wuaueng.dll regsvr32.exe /S wuaueng1.dll regsvr32.exe /S wucltui.dll regsvr32.exe /S wups.dll regsvr32.exe /S wups2.dll regsvr32.exe /S wuweb.dll regsvr32.exe /S qmgr.dll regsvr32.exe /S qmgrprxy.dll regsvr32.exe /S wucltux.dll regsvr32.exe /S muweb.dll regsvr32.exe /S wuwebv.dll echo Remove software distribution folder rd /s /Q %SystemRoot%\SoftwareDistribution echo Start Bits and Windows Update service net start bits net start wuauserv wuauclt /resetauthorization /detectnow exit /B 0

You should definitely try that. I don't want to see you reinstall over a simple thing. And I'm feeling pretty silly right now too as it seems that the both of us are having a brain fart, and brain farts and troubleshooting never work well together LOL. and even if the script he provided doesn't work (which I find that unlikely as it seems to handle all required files), I'll keep looking, even if it's the last deed I do. I live for doing stuff like this for online and offline communities (I am called to assist folks at college before they go to the actual support people quite often).

You're right Brano - I didn't see it ... sorry. MSE strange enough is working fine and updating with no issues. I'll try this script when I'm home. Just a quick question to both of you and cron22 - what services are required for WUS to work properly? It doesn't list any dependancies which I do find odd. Ed

You mean before they place a call to someone who just reads a script from a database? :) I used to do this for a living (OS Architect) but now I'm in management, I haven't touched OS's really since XP in the early 2000's. This WUS is making me feel I've gone from Office 2003 to 2010 and I can't find that bloody tab to add a table. (and we all know how well Office 2007/10 made us feel stupid for the first hour or so of first using it) It has to be something simple... :) Ed

Brano/Cron22 - tried the script. Didn't work. So I resorted to doing a re-install on top of my existing OS. So I popped in my Windows 7-64 bit disk and selected the "Upgrade" path where it would keep all my settings. Guess what - doing a reinstall of the OS didn't resolve my issue. So I'm still stuck at square one. @#(*@*()#*#@ I'm wondering if I'm having some kind of account permissioning issue? I did rename my main account recently (it's an admin) and for example, this account has no access to save anything to the root of C.

Download the xml that i have suggested and run the script again. (http://www.microsoft.com/download/en/details.aspx?id=6276) If it still doesn't work then create a new admin account and login under that account and try to run it. When you run the script elevate it and run it as admin. If it still doesn't work then i would need to see your WindowsUpdate.log.

It would actually be good if you could supply that log. I do believe you can find it under C:\Windows\Log Files\Windowsupdate.log. Maybe that will tell us what's going on, and then maybe this will be wiki-worthy material when we finally discover it? And I really hope though that the script works for you since the only way to ensure a clean install is to reformat your hard drive, and you shouldn't have to do that over Windows update not working. Though sometimes drastic measures serve well in the end if you know what I mean, but I only use that as the absolute last resort.

Here's my windows update log 2012-01-12 16:24:46:325 1036 e58 Misc =========== Logging initialized (build: 7.5.7601.17514, tz: -0700) =========== 2012-01-12 16:24:46:356 1036 e58 Misc = Process: C:\Windows\system32\svchost.exe 2012-01-12 16:24:46:356 1036 e58 Misc = Module: c:\windows\system32\wuaueng.dll 2012-01-12 16:24:46:325 1036 e58 Service ************* 2012-01-12 16:24:46:356 1036 e58 Service ** START ** Service: Service startup 2012-01-12 16:24:46:356 1036 e58 Service ********* 2012-01-12 16:24:46:419 1036 e58 Agent * WU client version 7.5.7601.17514 2012-01-12 16:24:46:419 1036 e58 Agent * Base directory: C:\Windows\SoftwareDistribution 2012-01-12 16:24:46:419 1036 e58 Agent * Access type: No proxy 2012-01-12 16:24:46:419 1036 e58 Agent * Network state: Connected 2012-01-12 16:25:32:721 1036 e58 Report CWERReporter::Init succeeded 2012-01-12 16:25:32:721 1036 e58 Agent *********** Agent: Initializing Windows Update Agent *********** 2012-01-12 16:25:32:721 1036 e58 Agent *********** Agent: Initializing global settings cache *********** 2012-01-12 16:25:32:721 1036 e58 Agent * WSUS server: http://CACALSCCM001.NAL.LOCAL:80 2012-01-12 16:25:32:721 1036 e58 Agent * WSUS status server: http://CACALSCCM001.NAL.LOCAL:80 2012-01-12 16:25:32:721 1036 e58 Agent * Target group: (Unassigned Computers) 2012-01-12 16:25:32:721 1036 e58 Agent * Windows Update access disabled: No 2012-01-12 16:25:32:986 1036 e58 DnldMgr Download manager restoring 0 downloads 2012-01-12 16:25:33:080 1036 e58 AU ########### AU: Initializing Automatic Updates <snip>

OK. Why oh why is WSUS pointing to my machine as it's own self-updating location? why isn't it using the internet? this is soo weird. Off to find the WUS registry key of CACALSCCM001...

Ok, here's the bloody key Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate] "WUServer"="http://CACALSCCM001.NAL.LOCAL:80" "WUStatusServer"="http://CACALSCCM001.NAL.LOCAL:80" [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU] "UseWUServer"=dword:00000001 WTH!!! So the question is, what should these values be to update to Microsoft's WSUS server?

Fixed it myself. New it had to be something REALLY REALLY SIMPLE. Actually, it was so simple, it was obvious when I saw it. [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU] "UseWUServer"=dword:00000001 It was using the WUS decribed in the WUServer key - by setting that key to 0 (turning it off), presto, updates started to download. Solution [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU] "UseWUServer"=dword:00000000 Stop WU service. Re-start WU service. Presto - it starts to DL updates. Thanks for asking me to check my log guys. That helped me lead the way to find the solution. Ed

Just by looking at the name i can see SCCM So you probably have SCCM client software installed on your computer which has redirected the Windows Updates Agent to the SCCM server. Anyways at least the problem is fixed for now but it may revert back to SCCM server unless you remove SCCM Client software.

I'm wondering that perhaps the Windows 7N version of the OS has thr SCCM client as part of it's default configuration? Either way, it was happening since day 1 of the OS install and it's something I missed and I appreciate your help. Ed

That's not usually the case at all. In all the times I have installed Windows, I have never in my life seen that as being the default. Normally it defaults to WUA, and WSUS is only used in corporate environments. Or in the case os SCCM, if SCCM is used, then the SCCM server can also manage patches as what seemed to be occurring.

I've been looking for this answer for months! I bought a new PC Jan 2011 and it updated fairly well for a few months, then wouldn't update again. Looking at the registry, it seems the place I bought it from had set up WUServer to point to their local servers. Maybe at first these servers were public, but now they aren't, which is why update wasn't working for me. Thanks guys. You sorted me out.