Re: Windows Update and ISA Server 2000

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: uhhuhyea (uhhuhyea_at_discussions.microsoft.com)
Date: 12/28/04 

Date: Tue, 28 Dec 2004 11:07:06 -0800

The windowsupdate.log shows:
Error: Agent failed detecting with reason: 0x80244021

"Robert Aldwinckle" wrote:

> "uhhuhyea" <uhhuhyea@discussions.microsoft.com> wrote in message
> news:DB988277-C8F7-4945-8F2F-3FA6ABCE2CA5@microsoft.com...
> > We are currently having the know problem of ISA server 2000 not allowing
> > Windows Update to complete. We use user authentication and can not change
> > this. I can make an exception for the windows update site but the only guides
> > I have saw say that you must allow anoymous access to http and https and that
> > turns off the user authentication.
>
> I think you should challenge the use of the word "must".
>
> My view is that this may be being inferred (falsely) because it happens to work.
>
> I have suggested to others that perhaps they could find a workaround
> using the information contained in a related KB article.
>
>
> <extract>
> Have a look at KB842309.
>
> <title>KB842309 - An update is available for Background Intelligent Transfer Service (BITS) 2.0 for Windows XP</title>
>
> Specifically look at the paragraph which begins:
> "This problem occurs when all the following conditions are true."
> Logically that implies that if you change one of those conditions
> that the problem may stop occurring.
>
>
> For example, it sounds as if you have successfully negated
> the third condition:
> "The file transfer is performed through a Windows-based server
> or a Windows-based Internet Proxy Server that requires
> Integrated Windows authentication."
> but if instead you wanted to preserve authentication then you
> would have to try to make changes to negate one of the other
> two conditions.
> </extract>
>
>
> Others I have pointed this out to seem not to understand my point.
> So to be clear, I am *not* suggesting that you need the update
> that the KB article was written for; I am just pointing out that there
> seems to be information in there which could be used to find an
> alternate workaround and which would thus contradict the assumption
> I want you to challenge.
>
>
> > Is there a way of allowing users to
> > anonymously access the windows update site while making them authenticate for
> > every other site?
>
>
> Perhaps you will be able to tell us...
>
>
> Good luck
>
> Robert Aldwinckle
> ---
>
>
>

Relevant Pages

  • Re: Windows Update and ISA Server 2000
    ... We use user authentication and can not change ... I can make an exception for the windows update site but the only guides ...
    (microsoft.public.windowsupdate)
  • Re: Windows Update and ISA Server 2000
    ... We use user authentication and can not change ... I can make an exception for the windows update site but the only guides ...
    (microsoft.public.windowsupdate)
  • Re: Windows Update and ISA Server 2000
    ... > We are currently having the know problem of ISA server 2000 not allowing ... We use user authentication and can not change ... I can make an exception for the windows update site but the only guides ...
    (microsoft.public.windowsupdate)
  • Re: Windows Update v5 issues and workaround
    ... recommendations may not work as expected because of the way ISA 2000 matches requests to rules. ... Disable authentication for Windows Update requests. ... Repeat steps 5 through 9 for each network object where you allow Web Proxy requests Create an anonymous Access Rule for Windows Update 1. ...
    (microsoft.public.isa.clients)
  • Re: Windows Update v5 issues and workaround
    ... recommendations may not work as expected because of the way ISA 2000 matches requests to rules. ... Disable authentication for Windows Update requests. ... Repeat steps 5 through 9 for each network object where you allow Web Proxy requests Create an anonymous Access Rule for Windows Update 1. ...
    (microsoft.public.isa.enterprise)