Error code 80244019 while installing Windows Update

Question

I'm posting this to hopefully helpout anyone else who might encounter this.

I have a Win2008r2 domain, and my clients decided to stop talking to the WSUS server. All indications were that they were communicating, with some even showing up as having new updates. However, clicking 'Install updates' would result in a "failed to install" and then the box would show new updates ready to install.

My clients could ping the WSUS server, and no firewalls network devices were blocking traffic on 8530 (the WSUS update port). I was stumped as to why the clients were not seeing the new updates that the WSUS server said were pending.

Solution 1

The solution depends on your configuration, and theres some things you should check first:

• Ensure BITS service is running: net start BITS
• Ensure Windows Update service is running: net start wuauserv
• Ensure that your machine has a unique SusClientID (especially if the system is a clone). You can delte the key, run the 3 commands below, and restart the machine to regenerate it: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate
• Reset the authorization cookie on your client: wuauclt /ResetAuthorization /DetectNow
• Run wuauclt /ReportNow on your client to make sure it can sync with WSUS
• Ensure your current policies on your client is applied (the /boot is optional): gpupdate /force /boot

If you use a proxy server you should also:

• Ensure WinHTTP services is running: netsh start WinHttpAutoProxySvc
• Verify WinHTTP proxy settings are set correctly (my proxy settings are deployed via group policy): netsh WinHTTP import proxy source=IE

In my case the proxy settings on WinHTTP were not correctly imported, and manually forcing the import fixed the issue. I hope this may save someone else the headache it caused me. It should be noted you will have to use an Administrative Command Prompt to run the commands above.

Solution 2

I post this answer in the hope of helping some poor soul get unstuck since I have not seen this solution anywhere on the web :

Situation : W2012R2 Datacenter acting mostly as Hyper-V server, lost Windows Update from MS servers (not WSUS), for no reason I could identify. (The hosted installations could get their updates just fine).

I tried the various classic solution, as described on MS websites, with no luck (Fixit and all that)

I eventually put things back to work by :

1. WU - Change settings
2. Disable updating, uncheck both check boxes under the combo
3. when I validated, I unexpectedly got a working "check for update session" running (I had just disabled updates ? and it starts updating ???)
4. Installed the update provided (they were critical)
5. rebooted
6. set back to "install automatically" + "give me recommended updates the same way..."
7. it worked !!!

As far as I can diagnose the problem, it seems like the trouble was with "Give me updates for other Microsoft products when I update Windows", I had no "other products" and it may have confused WU ?

I guess I absentmindedly checked the box while reviewing some emergency security patch.

Anyway if i check it again, I'm back in trouble.

Worth a try anyway, its not a lot of work.

Solution 3

I had a similar error to the ones reported. In my case, the machines were not reporting to the WSUS server (virtual server running Windows 2012 R2 over vSphere), and suddenly the WSUS server stopped to update itself through Windows Update.

This is what solved the WU problem:

• Firstly, I executed the following commands, as instructed by Kyle:

  1. net start BITS (the service was already running)
  2. net start wuauserv (the service was also running)
  3. wuauclt /ResetAuthorization /DetectNow
  4. Run wuauclt /ReportNow
  5. gpupdate /force /boot

• Finally, I unchecked the option "give me recommended updates the same way..." like instructed by Michel de Becdelièvre. The steps, goes like this:

  1. Go to: WU -> Change settings
  2. Uncheck "give me recommended updates the same way..." option (and ensure that both check boxes are unmarked) and accept.
  3. Execute an online scan for updates on WU.

I still have to work on the machines not reporting to WSUS (probably some GPO related stuff) but now the server updates beautifully!

Solution 4

Instead of specifying port 8530 explicitly (8531 for HTTPS) to WSUS URL published in GPO, I've manually added an additional binding to "WSUS Administration" website in IIS to use "http" protocol on TCP port 80. This way there was no need to change GPO, firewall rules etc.

For example: My published "Specify intranet Microsoft update service location" in GPO remains set to "http://wsus" ("wsus" is a CNAME alias for the company's WSUS server). Website binding would then be:

• Type: http
• IP Address: All Unassigned
• Port: 80
• Hostname: "wsus" (without quotes)

View more solutions

Comments

[Reaces]

I edited your answer to remove the comment. to Josh. If you want to add a reply to him, use the site until you have the required reputation and comment on his answer. The chances of him seeing the reply in your answer a year after the fact are slim to say the least.

[spiffytech]

This happened to me after cloning a virtual machine. The SusClientID delete/regenerate steps worked for me.

[omni]

Running Windows Server 2012 R2 on Hyper-V. Didn't clone my VM or anything, but Windows Update just stopped working and this fixed it. Thanks!