WSUS 3.0 SP2 running on Windows Server 2008 R2 Standard 64 Bit
I have enabled Microsoft Security Essentials using the WSUS "Products and Classifactions" option, but clients running MSE are still attempting to get updates from download.windowsupdate.com. This causes the MSE update to fail with 0x80072ee2 on the client. These same clients are getting standard Windows updates from my local WSUS server with no issue.
My company does not use Active Directory/Domains/Group Policies. My research indicates I should change the client registry setting HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Antimalware\Signature Updates\FallbackOrder to InternalDefinitionUpdateServer (It is currently set to MicrosoftUpdateServer|MMPC). When I tried to change this setting on a Windows 7 64-bit client, I get the message "Cannot edit FallbackOrder. Error writing the value's new contents".
This all seems much harder then it should be. Anyone have experience configuring this setup in an environment similar to mine? I'm inluding the Windows Update log from the client.
Roger Grant
Elixir Industries
2012-11-06 07:39:39:958 6728 78 Misc =========== Logging initialized (build: 7.6.7600.256, tz: -0800) ===========
2012-11-06 07:39:39:958 6728 78 Misc = Process: c:\Program Files\Microsoft Security Client\MpCmdRun.exe
2012-11-06 07:39:39:958 6728 78 Misc = Module: C:\Windows\system32\wuapi.dll
2012-11-06 07:39:39:958 6728 78 COMAPI -------------
2012-11-06 07:39:39:958 6728 78 COMAPI -- START -- COMAPI: Search [ClientId = Microsoft Security Essentials (EDB4FA23-53B8-4AFA-8C5D-99752CCA7094)]
2012-11-06 07:39:39:958 6728 78 COMAPI ---------
2012-11-06 07:39:39:960 6728 78 COMAPI <<-- SUBMITTED -- COMAPI: Search [ClientId = Microsoft Security Essentials (EDB4FA23-53B8-4AFA-8C5D-99752CCA7094)]
2012-11-06 07:39:39:960 312 594 Agent *************
2012-11-06 07:39:39:960 312 594 Agent ** START ** Agent: Finding updates [CallerId = Microsoft Security Essentials (EDB4FA23-53B8-4AFA-8C5D-99752CCA7094)]
2012-11-06 07:39:39:961 312 594 Agent *********
2012-11-06 07:39:39:961 312 594 Agent * Online = Yes; Ignore download priority = No
2012-11-06 07:39:39:961 312 594 Agent * Criteria = "(IsInstalled = 0 and IsHidden = 0 and CategoryIDs contains '6b9e8b26-8f50-44b9-94c6-7846084383ec' and CategoryIDs contains 'e0789628-ce08-4437-be74-2495b842f43b')"
2012-11-06 07:39:39:961 312 594 Agent * ServiceID = {7971F918-A847-4430-9279-4A52D1EFE18D} Third party service
2012-11-06 07:39:39:961 312 594 Agent * Search Scope = {Machine}
2012-11-06 07:39:39:963 312 594 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2012-11-06 07:39:39:968 312 594 Misc Microsoft signed: Yes
2012-11-06 07:40:24:228 312 594 Misc WARNING: Send failed with hr = 80072ee2.
2012-11-06 07:40:24:228 312 594 Misc WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-11-06 07:40:24:228 312 594 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://download.windowsupdate.com/v9/1/windowsupdate/redir/muv4wuredir.cab>.
error 0x80072ee2
2012-11-06 07:40:24:228 312 594 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
2012-11-06 07:40:24:229 312 594 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
2012-11-06 07:40:24:229 312 594 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
2012-11-06 07:41:08:502 312 594 Misc WARNING: Send failed with hr = 80072ee2.
2012-11-06 07:41:08:502 312 594 Misc WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-11-06 07:41:08:502 312 594 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://download.windowsupdate.com/v9/1/windowsupdate/redir/muv4wuredir.cab>.
error 0x80072ee2
2012-11-06 07:41:08:503 312 594 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
2012-11-06 07:41:08:503 312 594 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
2012-11-06 07:41:08:503 312 594 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
2012-11-06 07:41:52:772 312 594 Misc WARNING: Send failed with hr = 80072ee2.
2012-11-06 07:41:52:772 312 594 Misc WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-11-06 07:41:52:772 312 594 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://download.windowsupdate.com/v9/1/windowsupdate/redir/muv4wuredir.cab>.
error 0x80072ee2
2012-11-06 07:41:52:773 312 594 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
2012-11-06 07:41:52:773 312 594 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
2012-11-06 07:41:52:773 312 594 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
2012-11-06 07:42:37:040 312 594 Misc WARNING: Send failed with hr = 80072ee2.
2012-11-06 07:42:37:040 312 594 Misc WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-11-06 07:42:37:040 312 594 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://download.windowsupdate.com/v9/1/windowsupdate/redir/muv4wuredir.cab>.
error 0x80072ee2
2012-11-06 07:42:37:040 312 594 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
2012-11-06 07:42:37:040 312 594 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
2012-11-06 07:42:37:041 312 594 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
2012-11-06 07:42:37:041 312 594 Misc WARNING: DownloadFileInternal failed for
http://download.windowsupdate.com/v9/1/windowsupdate/redir/muv4wuredir.cab: error 0x80072ee2
2012-11-06 07:42:37:041 312 594 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2012-11-06 07:42:37:051 312 594 Misc Microsoft signed: Yes
2012-11-06 07:43:42:319 312 594 Misc WARNING: Send failed with hr = 80072ee2.
2012-11-06 07:43:42:319 312 594 Misc WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-11-06 07:43:42:319 312 594 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://download.microsoft.com/v9/1/windowsupdate/redir/muv4wuredir.cab>.
error 0x80072ee2
2012-11-06 07:43:42:320 312 594 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
2012-11-06 07:43:42:320 312 594 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
2012-11-06 07:43:42:320 312 594 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
2012-11-06 07:44:26:591 312 594 Misc WARNING: Send failed with hr = 80072ee2.
2012-11-06 07:44:26:591 312 594 Misc WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-11-06 07:44:26:591 312 594 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://download.microsoft.com/v9/1/windowsupdate/redir/muv4wuredir.cab>.
error 0x80072ee2
2012-11-06 07:44:26:591 312 594 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
2012-11-06 07:44:26:592 312 594 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
2012-11-06 07:44:26:592 312 594 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
2012-11-06 07:45:10:861 312 594 Misc WARNING: Send failed with hr = 80072ee2.
2012-11-06 07:45:10:861 312 594 Misc WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-11-06 07:45:10:861 312 594 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://download.microsoft.com/v9/1/windowsupdate/redir/muv4wuredir.cab>.
error 0x80072ee2
2012-11-06 07:45:10:861 312 594 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
2012-11-06 07:45:10:862 312 594 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
2012-11-06 07:45:10:862 312 594 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
2012-11-06 07:45:55:140 312 594 Misc WARNING: Send failed with hr = 80072ee2.
2012-11-06 07:45:55:140 312 594 Misc WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-11-06 07:45:55:140 312 594 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://download.microsoft.com/v9/1/windowsupdate/redir/muv4wuredir.cab>.
error 0x80072ee2
2012-11-06 07:45:55:141 312 594 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
2012-11-06 07:45:55:141 312 594 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
2012-11-06 07:45:55:141 312 594 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
2012-11-06 07:45:55:141 312 594 Misc WARNING: DownloadFileInternal failed for
http://download.microsoft.com/v9/1/windowsupdate/redir/muv4wuredir.cab: error 0x80072ee2
2012-11-06 07:45:55:141 312 594 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2012-11-06 07:45:55:152 312 594 Misc Microsoft signed: Yes
2012-11-06 07:45:57:736 312 594 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2012-11-06 07:45:57:747 312 594 Misc Microsoft signed: Yes
2012-11-06 07:45:57:759 312 594 Agent WARNING: could not get the auth file name 0x80070002
2012-11-06 07:45:57:759 312 594 Agent WARNING: Failed to copy the backed up authorization cab for service 7971f918-a847-4430-9279-4a52d1efe18d, keep going. hr=0X80070002
2012-11-06 07:45:57:759 312 594 Agent Checking for updated auth cab for service 7971f918-a847-4430-9279-4a52d1efe18d at
http://ds.download.windowsupdate.com/v10/1/microsoftupdate/redir/muauth.cab
2012-11-06 07:46:42:075 312 594 Misc WARNING: Send failed with hr = 80072ee2.
2012-11-06 07:46:42:075 312 594 Misc WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-11-06 07:46:42:075 312 594 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/v10/1/microsoftupdate/redir/muauth.cab>.
error 0x80072ee2
2012-11-06 07:46:42:076 312 594 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
2012-11-06 07:46:42:076 312 594 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
2012-11-06 07:46:42:076 312 594 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
2012-11-06 07:47:26:707 312 594 Misc WARNING: Send failed with hr = 80072ee2.
2012-11-06 07:47:26:707 312 594 Misc WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-11-06 07:47:26:707 312 594 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/v10/1/microsoftupdate/redir/muauth.cab>.
error 0x80072ee2
2012-11-06 07:47:26:707 312 594 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
2012-11-06 07:47:26:708 312 594 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
2012-11-06 07:47:26:708 312 594 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
2012-11-06 07:48:11:081 312 594 Misc WARNING: Send failed with hr = 80072ee2.
2012-11-06 07:48:11:081 312 594 Misc WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-11-06 07:48:11:081 312 594 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/v10/1/microsoftupdate/redir/muauth.cab>.
error 0x80072ee2
2012-11-06 07:48:11:081 312 594 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
2012-11-06 07:48:11:082 312 594 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
2012-11-06 07:48:11:082 312 594 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
2012-11-06 07:48:55:374 312 594 Misc WARNING: Send failed with hr = 80072ee2.
2012-11-06 07:48:55:374 312 594 Misc WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-11-06 07:48:55:374 312 594 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://ds.download.windowsupdate.com/v10/1/microsoftupdate/redir/muauth.cab>.
error 0x80072ee2
2012-11-06 07:48:55:375 312 594 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
2012-11-06 07:48:55:375 312 594 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
2012-11-06 07:48:55:375 312 594 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
2012-11-06 07:48:55:375 312 594 Misc WARNING: DownloadFileInternal failed for
http://ds.download.windowsupdate.com/v10/1/microsoftupdate/redir/muauth.cab: error 0x80072ee2
2012-11-06 07:48:55:375 312 594 Agent WARNING: Failed to download auth cab for service 7971f918-a847-4430-9279-4a52d1efe18d from
http://ds.download.windowsupdate.com/v10/1/microsoftupdate/redir/muauth.cab, hr=0X80072EE2
2012-11-06 07:48:55:375 312 594 Agent FATAL: Caller Default Service Recovery failed to opt in to service 7971f918-a847-4430-9279-4a52d1efe18d, hr=0X80072EE2
2012-11-06 07:48:55:411 312 594 PT WARNING: PTError: 0x80248014
2012-11-06 07:48:55:412 312 594 Agent * WARNING: Exit code = 0x80248014
2012-11-06 07:48:55:412 312 594 Agent *********
2012-11-06 07:48:55:412 312 594 Agent ** END ** Agent: Finding updates [CallerId = Microsoft Security Essentials (EDB4FA23-53B8-4AFA-8C5D-99752CCA7094)]
2012-11-06 07:48:55:413 312 594 Agent *************
2012-11-06 07:48:55:413 312 594 Agent WARNING: WU client failed Searching for update with error 0x80248014
2012-11-06 07:48:55:414 6728 1d4c COMAPI >>-- RESUMED -- COMAPI: Search [ClientId = Microsoft Security Essentials (EDB4FA23-53B8-4AFA-8C5D-99752CCA7094)]
2012-11-06 07:48:55:415 6728 1d4c COMAPI - Updates found = 0
2012-11-06 07:48:55:415 6728 1d4c COMAPI - WARNING: Exit code = 0x00000000, Result code = 0x80248014
2012-11-06 07:48:55:415 6728 1d4c COMAPI ---------
2012-11-06 07:48:55:415 6728 1d4c COMAPI -- END -- COMAPI: Search [ClientId = Microsoft Security Essentials (EDB4FA23-53B8-4AFA-8C5D-99752CCA7094)]
2012-11-06 07:48:55:415 6728 1d4c COMAPI -------------
2012-11-06 07:48:55:415 6728 1b80 COMAPI WARNING: Operation failed due to earlier error, hr=80248014
2012-11-06 07:48:55:416 6728 1b80 COMAPI FATAL: Unable to complete asynchronous search. (hr=80248014)
2012-11-06 07:49:00:412 312 594 Report REPORT EVENT: {0777437B-0753-43AB-9A8D-1EF766E695F6} 2012-11-06 07:48:55:412-0800 1 148 101 {00000000-0000-0000-0000-000000000000} 0 80248014 Microsoft
Security Essentials ( Failure Software Synchronization Windows Update Client failed to detect with error 0x80248014.
2012-11-06 07:49:00:441 312 594 Report CWERReporter::HandleEvents - WER report upload completed with status 0x8
2012-11-06 07:49:00:441 312 594 Report WER Report sent: 7.6.7600.256 0x80248014 00000000-0000-0000-0000-000000000000 Scan 101 Unmanaged
2012-11-06 07:49:00:441 312 594 Report CWERReporter finishing event handling. (00000000)