Skip to content

Commit e4e85c7

Browse files
authored
Update troubleshoot-windows-update-download-error-codes-associated-with-error-8024a000.md
Edit review per CI 8139
1 parent c4d6ece commit e4e85c7

1 file changed

Lines changed: 28 additions & 21 deletions

File tree

support/windows-server/installing-updates-features-roles/troubleshoot-windows-update-download-error-codes-associated-with-error-8024a000.md

Lines changed: 28 additions & 21 deletions
Original file line numberDiff line numberDiff line change
@@ -19,46 +19,54 @@ appliesto:
1919

2020
## Summary
2121

22-
When scanning for updates on Windows Virtual Machines (VMs), you might encounter error codes such as 0x80072EFD, 0x80072EFE, and 0x80D02002. These errors indicate issues with server connections or download progress. Understanding the symptoms and root causes can help in resolving these errors effectively.
22+
During a scan for updates on Windows Virtual Machines (VMs), you might encounter error codes such as 0x80072EFD, 0x80072EFE, and 0x80D02002. These errors indicate issues that affect server connections or download progress. Understanding the symptoms and root causes can help you to resolve these errors effectively.
2323

2424
:::image type="content" source="media/troubleshoot-windows-update-download-error-codes-associated-with-error-8024a000/cant-install-updates-error-code-8024a000-80072efd-80072efe-errormessage80072efd.png" alt-text="Error message 80072EFD" lightbox="media/troubleshoot-windows-update-download-error-codes-associated-with-error-8024a000/cant-install-updates-error-code-8024a000-80072efd-80072efe-errormessage80072efd.png":::
2525

2626
## Prerequisites
2727

28-
For virtual machines (VMs) running Windows in Azure, make sure that you back up the OS disk. For more information, see [About Azure Virtual Machine restore](/azure/backup/about-azure-vm-restore).
28+
For Microsoft Azure virtual machines (VMs) that run Windows, make sure that you back up the OS disk. For more information, see [About Azure Virtual Machine restore](/azure/backup/about-azure-vm-restore).
2929

3030
## How to identify the issue
3131

32-
### Symptom 1: While scanning for updates, you see error messages indicating a connection issue with the server
32+
### Symptom 1: Error messages during scanning
3333

34+
When you scan for updates on a Windows VM, you receive the following error message or a similar message that indicates a server connection issue:
35+
36+
> Windows could not search for new updates
37+
3438
:::image type="content" source="media/troubleshoot-windows-update-download-error-codes-associated-with-error-8024a000/cant-install-updates-error-code-8024a000-80072efd-80072efe-event16.png" alt-text="System event log 16 indicating connection issue" lightbox="media/troubleshoot-windows-update-download-error-codes-associated-with-error-8024a000/cant-install-updates-error-code-8024a000-80072efd-80072efe-event16.png":::
3539

3640
:::image type="content" source="media/troubleshoot-windows-update-download-error-codes-associated-with-error-8024a000/cant-install-updates-error-code-8024a000-80072efd-80072efe-event25.png" alt-text="Windows Update client Operational event 25" lightbox="media/troubleshoot-windows-update-download-error-codes-associated-with-error-8024a000/cant-install-updates-error-code-8024a000-80072efd-80072efe-event25.png":::
3741

38-
Check the Windows Update logs for error codes at the path: `%windir%\logs\windowsupdate`.
42+
Check the Windows Update logs for error codes at the following location:
43+
44+
`%windir%\logs\windowsupdate`
3945

4046
:::image type="content" source="media/troubleshoot-windows-update-download-error-codes-associated-with-error-8024a000/cant-install-updates-error-code-8024a000-80072efd-80072efe-windowsupdatelogs.png" alt-text="Windows Update logs" lightbox="media/troubleshoot-windows-update-download-error-codes-associated-with-error-8024a000/cant-install-updates-error-code-8024a000-80072efd-80072efe-windowsupdatelogs.png":::
4147

42-
### Symptom 2: Control Panel > System and Security > Windows Updates shows an error code indicating no Internet access to download updates - external sites load, but Microsoft links fail with a TLS error
48+
### Symptom 2: Windows Updates error code indicates no internet access
49+
50+
When you scan for updates, Windows Updates shows an error code that indicates that you have no internet access. External sites load, but Microsoft links fail and return a TLS error message.
4351

4452
:::image type="content" source="media/troubleshoot-windows-update-download-error-codes-associated-with-error-8024a000/cant-install-updates-error-code-8024a000-80072efd-80072efe-errormessage80072efe.png" alt-text="Error message 80072EFE" lightbox="media/troubleshoot-windows-update-download-error-codes-associated-with-error-8024a000/cant-install-updates-error-code-8024a000-80072efd-80072efe-errormessage80072efe.png":::
4553

4654
:::image type="content" source="media/troubleshoot-windows-update-download-error-codes-associated-with-error-8024a000/cant-install-updates-error-code-8024a000-80072efd-80072efe-tlserror.png" alt-text="TLS error accessing Microsoft update site" lightbox="media/troubleshoot-windows-update-download-error-codes-associated-with-error-8024a000/cant-install-updates-error-code-8024a000-80072efd-80072efe-tlserror.png":::
4755

48-
## Root cause for Windows Update download error codes
56+
## Cause
4957

50-
**Error code 0x80072EFD**: This error occurs when firewall rules or proxies block Microsoft download URLs, preventing a connection with the server.
58+
**Error code 0x80072EFD**: This error occurs when firewall rules or proxies block Microsoft download URLs and prevent a server connection.
5159

52-
**Error code 0x80072EFE**: This error is caused by issues with TLS ciphers, which disrupt connections to Microsoft sites.
60+
**Error code 0x80072EFE**: This error is caused by issues that affect TLS ciphers. This error disrupts connections to Microsoft sites.
5361

5462
## Resolution or troubleshooting steps
5563

56-
### Mitigation 1: Check network configurations
64+
### Resolution 1: Check network configurations
5765

58-
- Confirm if traffic is routed through a Network Virtual Appliance (NVA).
59-
- Ensure the NVA allows the following Windows Update URLs:
66+
- Verify that traffic is routed through a Network Virtual Appliance (NVA).
67+
- Make sure that the NVA allows the following Windows Update URLs:
6068

61-
```plaintext
69+
```console
6270
http://windowsupdate.microsoft.com
6371
http://*.windowsupdate.microsoft.com
6472
https://*.windowsupdate.microsoft.com
@@ -75,34 +83,33 @@ For virtual machines (VMs) running Windows in Azure, make sure that you back up
7583
https://dl.delivery.mp.microsoft.com
7684
```
7785

78-
- Ensure ports 80 and 443 are open for communication.
86+
- Make sure that ports 80 and 443 are open for communication.
7987

80-
### Mitigation 2: Verify TLS settings.
88+
### Resolution 2: Verify TLS settings
8189

82-
- Open Command Prompt as an admin and run the following command to check if TLS 1.2 is enabled:
90+
- Open an elevated Command Prompt window, and run the following command to check whether TLS 1.2 is enabled:
8391

8492
```shell
8593
reg query HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server
8694
```
8795

88-
Ensure the values are set as follows:
96+
Make sure that the values are set as follows:
8997

9098
```output
9199
Enabled REG_DWORD 0x1
92100
DisabledByDefault REG_DWORD 0x0
93101
```
94102

95-
- If `TLS 1.2` is disabled, modify it to `0x1`.
103+
- If `TLS 1.2` is disabled, change it to `0x1`.
96104

97-
### Mitigation 2.1: Address Group Policy Object (GPO)-related issues
105+
### Resolution 2.1: Fix Group Policy Object (GPO)-related issues
98106

99-
- If external site connectivity is working as expected and previous mitigations don't work, check for the following registry key:
107+
- If external site connectivity is working as expected, and previous mitigations don't work, check for the following registry subkey:
100108

101109
```shell
102110
reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\XXXXXXXX"
103111
```
104112

105-
- Delete all content inside the `XXXXXXXX` hive or folder to test if a GPO is causing the issue.
113+
- Delete all content that's inside the `XXXXXXXX` hive or folder to test whether a GPO is causing the issue.
106114

107115
- If the issue persists, remove the computer object from the Organizational Unit (OU) with SSL cipher configurations.
108-

0 commit comments

Comments
 (0)