Monday, 18 Jun, 2018

Windows-Update-fifteen-minute-countdown-timer-warns-of-the-restart

Windows-Update-fifteen-minute-countdown-timer-warns-of-the-restart

For a few years, I’ve been haunted by the dreaded Windows Update issue 80072F8F.

I experienced this error whenever one of my Windows 8.1 Pro and Windows Server 2012 R2 computers searched for updates on Windows Update (my computers were originally joined to a Windows 2012 Domain then raised to 2012 R2).

And no, raising the Domain (& Forest) to 2012 R2 didn’t help.

For further details regarding my setup, please refer to:

http://social.technet.microsoft.com/Forums/windows/en-US/f85d7d25-58a1-453b-8653-751ce604401b/possible-bug-windows-update-error-code-80072f8f?forum=w8itprogeneral

To TLS 1.1 and TLS 1.2, copy-paste below code into a reg file (say disable-tls.reg) the run it on all the affected Windows 8 or Windows Server 2012 R2 RDS Hosts:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client] "Enabled"=dword:00000000
"DisabledByDefault"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server] "Enabled"=dword:00000000
"DisabledByDefault"=dword:00000001

And the following to disable 1.1 (to fall back to TLS 1.0):

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client] "Enabled"=dword:00000000
"DisabledByDefault"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server] "Enabled"=dword:00000000
"DisabledByDefault"=dword:00000001

The above changes will disable TLS 1.1 & TLS 1.2, since both TLS 1.1 & TLS 1.2 were both unsupported by Remote Desktop Services until Windows 8.1 or Windows 2012 R2.

Once you add above registry entries:

  • Restart your Windows 8.1 or Windows Server 2012 R2 host then give Windows Update another chance.

 

How did you find out?

I came to this solution by reading and re-reading this post: http://blogs.technet.com/b/win7/archive/2011/11/08/windows-update-error-80072f8f.aspx

QUOTE:

"the Internet Time could not be synchronized with global Update Server. The valid date and time are on the Secure Sockets Layer (SSL) certificate that the Windows Update website uses."

/QUOTE

‘Though, before finding that out, I had to have a quick 2 days holiday to KI to get the inspiration Smile

3/5 - (43 votes)