Re: windows update

Hi,

Thanks for your update.

Please help me collect some information to further analyze:

1. Is ISA installed and running on the server?

2. Does the issue occur on the SBS LAN clients?

3. Please give me the screen shot of the error.

4. Please help to collect the GPMC group policy result report from the SBS
server and if the issues also happens in clients please collect the
gpresult report from one problematic client.

Please refer to the following command:

gpresult /z > c:\gpresult.txt

Please add the screen shot and gpresult files to a zip file and send to
v-yanniw@xxxxxxxxxxxxxx

I appreciate your time. I am looking forward to you!

Have a nice day!

Best Regards,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>From: <param@xxxxxxxxxxxxxxxx>
>References: <uVlXqt6mFHA.3568@xxxxxxxxxxxxxxxxxxxx>
<8N3k$GBnFHA.940@xxxxxxxxxxxxxxxxxxxxx>
>Subject: Re: windows update
>Date: Mon, 8 Aug 2005 14:48:28 -0500
>Lines: 190
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
>X-RFC2646: Format=Flowed; Original
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
>Message-ID: <udppvJFnFHA.3408@xxxxxxxxxxxxxxxxxxxx>
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: corp2.lazardgroup.com 70.182.148.88
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:142473
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Jenny, I checked all of the steps below and all looks OK. The SBS box can
>access the internet. I am thinking it has something to do with Group
Policy,
>but I have been through the GPO and still cannot find anything that blocks
>Windows Update. Any Ideas?
>
>thanks!
>
>""Jenny wu [MSFT]"" <v-yanniw@xxxxxxxxxxxxxxxxxxxx> wrote in message
>news:8N3k$GBnFHA.940@xxxxxxxxxxxxxxxxxxxxxxxx
>> Hi,
>>
>> Thanks for posting here.
>>
>> For your description, I understand that you get error when you update SBS
>> server from windowsupdate.com. If I am off base, please don't hesitate to
>> let me know.
>>
>> Based on my experienced, the issue caused by security policy which block
>> upload or download files from windowsupdate.com.
>>
>> Please perform the following steps to try to troubleshooting the issue:
>>
>> Suggestion 1:
>> 1) In IE, click on Tools, and select Internet Options from the
>> drop-down
>> menu.
>>
>> 2) Click on the Security tab. Verify that the Internet Zone is
>> selected
>> and then click the Custom Level button.
>>
>> 3) Under the ActiveX controls and plug-ins section make sure that you
>> have either "Enable" or "Prompt" set for these items:
>>
>> a. Download signed ActiveX controls
>>
>> b. Run ActiveX controls and plug-ins
>>
>> c. Script ActiveX controls marked safe for scripting
>>
>> 4) Click OK on Security Settings. Now click on the Content tab and
>> click
>> the Certificates button.
>>
>> 5) Select the Trusted Root Certification Authorities tab.
>>
>> 6) Check for a certificate called "Microsoft Root Authority".
>>
>> 7) Double-click on it to open its properties.
>>
>> 8) On the General tab, make sure that the Valid from dates are
correct.
>> It should be "1/10/1997 to 12/31/2020"
>>
>> 9) On the Certification Path tab, under the Certificate Status
section,
>> make sure it says "This certificate is OK."
>>
>> 10) Click OK, and now find a certificate called "NO LIABILITY ACCEPTED".
>>
>> 11) On the General tab, make sure that the Valid from dates are correct.
>> It should be "5/12/1997 to 1/8/2004"
>>
>> 12) On the Certification Path tab, under the Certificate Status section,
>> make sure it says "This certificate is OK." Click OK. Click the Close
>> button.
>>
>> 13) Click Ok, and now find a certificate called "GTE CyberTrust Root".
>> You
>> may have more than one of these with the same name. You need to check
the
>> one that has an Expiration date of 2/23/2006.
>>
>> 14) On the General tab, make sure that the Valid from dates are correct.
>> It should be "2/24/1996 to 2/24/2006"
>>
>> 15) On the Certification Path tab, under the Certificate Status section,
>> make sure it says "This certificate is OK."
>>
>> 16) Click OK on the certificate, click the Close button on the
>> Certificates screen, and then click on the Advanced tab.
>>
>> 17) Scroll down the list and make sure there are check marks in the
boxes
>> next to:
>>
>> a. Use HTTP 1.1
>> b. Use SSL 2.0
>> c. Use SSL 3.0
>>
>> 18) Close all open browsers, then connect to the Windows Update site and
>> try to run the scan for updates. Try to test, how about the result?
>>
>> Suggestion 2:
>>
>> If the issue persists, please check following settings:
>>
>> 1. Do you install ISA? Do you put http://*.update.microsoft.com;
>> https://*.update.microsoft.com; http://download.micrososftupdate.com in
>> your Trusted Sites zone?
>>
>> 2. Do you install any other third-party firewall? Is it set to allow ms
>> updates?
>>
>> 3. Please check all the group policy to ensure you can not block ms
update
>> websites.
>>
>> If all the settings are set correct, the issue persists. Please help me
>> collect some information to further analyze:
>>
>> 1. Can you access internet successfully?
>>
>> Strictly followed the instructions in the KB article below to run CEICW:
>> 825763 How to configure Internet access in Windows Small Business Server
>> 2003
>> http://support.microsoft.com/?id=825763
>>
>> 2. Do you find error event log? Please paste the detail error event log
to
>> the newsgroup.
>>
>> 3. Please send me the file c:\WinNT\Windows update.log to
>> v-yanniw@xxxxxxxxxxxxx
>>
>>
>> I appreciate your time and effort to test. I am currently standing by for
>> you about the test result. I am always happy to be of further assistance.
>>
>> Have a nice day!
>>
>> Best Regards,
>>
>> Jenny Wu
>> Microsoft CSS Online Newsgroup Support
>> Get Secure! - www.microsoft.com/security
>> ======================================================
>> This newsgroup only focuses on SBS technical issues. If you have issues
>> regarding other Microsoft products, you'd better post in the
corresponding
>> newsgroups so that they can be resolved in an efficient and timely
manner.
>> You can locate the newsgroup here:
>> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>>
>> When opening a new thread via the web interface, we recommend you check
>> the
>> "Notify me of replies" box to receive e-mail notifications when there are
>> any updates in your thread. When responding to posts via your newsreader,
>> please "Reply to Group" so that others may learn and benefit from your
>> issue.
>>
>> Microsoft engineers can only focus on one issue per thread. Although we
>> provide other information for your reference, we recommend you post
>> different incidents in different threads to keep the thread clean. In
>> doing
>> so, it will ensure your issues are resolved in a timely manner.
>>
>> For urgent issues, you may want to contact Microsoft CSS directly. Please
>> check http://support.microsoft.com for regional support phone numbers.
>>
>> Any input or comments in this thread are highly appreciated.
>> ======================================================
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>> --------------------
>>>From: <param@xxxxxxxxxxxxxxxx>
>>>Subject: windows update
>>>Date: Sun, 7 Aug 2005 18:52:54 -0500
>>>Lines: 9
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
>>>X-RFC2646: Format=Flowed; Original
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
>>>Message-ID: <uVlXqt6mFHA.3568@xxxxxxxxxxxxxxxxxxxx>
>>>Newsgroups: microsoft.public.windows.server.sbs
>>>NNTP-Posting-Host: corp2.lazardgroup.com 70.182.148.88
>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP10.phx.gbl
>>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:142187
>>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>>
>>>Hi all, I am trying to update my SBS server from windowsupdate.com and I
>> get
>>>this:-
>>>
>>>"Network policy settings prevent you from using this website to get
>> updates
>>>for your computer."
>>>
>>>Any ideas?
>>>
>>>
>>>
>>
>
>
>

.