Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
8,133 questions
Azure Windows VM: 'We couldn't connect to the update service'
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(9.6, 89%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ES%3C/text%3E%3C/svg%3E)
Sven
0
Reputation points
Hi,
since a few weeks, two of our domain controllers running as VMs in Azure (Windows Server 2022) don't get any updates anymore. In Windows settings, when trying to search for updates, it says 'We couldn't connect to the update service'. In Event Viewer, it says 'Windows Update failed to check for updates with error 0x80072EFE' or error 0x80240438. Both machines are connected to the internet.
Maybe it's a coincidence, but updates fail since we changed ip addresses for both DCs on their respective network interfaces in Azure. Therefore, we resetted both interfaces as described here, without success. We turned Windows firewall temporarily off, run update troubleshooter, resetted update components as described here, run sfc and DISM (with and without attached upgrade media disk), but all that didn't work.
Any help would be much appreciated.
{count} votes
-
Prrudram-MSFT 26,686 Reputation points2023-09-05T20:11:34.4666667+00:00 Hello @Sven
The error codes you are seeing (0x80072EFE and 0x80240438) indicate that the Windows Update service is having trouble connecting to the update servers. This can be caused by a number of issues, including network connectivity issues, firewall settings, or issues with the Windows Update service itself.
Since you mentioned that the issue started after changing the IP addresses of the domain controllers, it's possible that the issue is related to network connectivity. Here are some steps you can take to troubleshoot the issue:
Check the network connectivity of the domain controllers:
Verify that the domain controllers have a valid IP address and can ping other machines on the network.
Verify that the domain controllers can resolve DNS names2.
Verify that the domain controllers can connect to the internet and can access the Windows Update servers3.
Check the firewall settings:
Verify that the Windows Firewall is not blocking the Windows Update service.
Verify that no third-party firewalls are blocking the Windows Update service.
Check the Windows Update service:
Verify that the Windows Update service is running.
Verify that the Windows Update service is set to Automatic startup type.
Try restarting the Windows Update service.
Check for any pending updates:
Verify that there are no pending updates that need to be installed before new updates can be downloaded.
Try manually downloading and installing any pending updates.
If none of these steps resolve the issue, you may need to contact Microsoft support for further assistance.
-
Prrudram-MSFT 26,686 Reputation points
2023-09-08T07:41:45.26+00:00 Hello @Sven
Any updates? Is there any progress made on this?
-
Sven 0 Reputation points
2023-09-11T11:47:28.4466667+00:00 Hello @Prrudram-MSFT
thanks for your answer.
I can confirm validity of IP addresses, furthermore DCs have access to the internet, can resolve both public and localressource names and ping other local ressources.
Both DCS can contact Windows Update, load and install updates as long as they're not promoted asdomain controllers. So I don't think it's a firewall problem. Corresponding Win Update service is of course running.
-
Prrudram-MSFT 26,686 Reputation points
2023-09-15T06:51:49.87+00:00 Hi @Sven
This issue needs deeper investigation, Azure technical support team will be able to check and help on this. I would recommend you open an azure support case. If you don't have the ability to open a technical support ticket, please let me know and I can help you further with this.
-
Sven 0 Reputation points
2023-09-15T06:55:55.2+00:00 Unfortunately our basic Azure subscription doesn't include technical support.
Sign in to comment
Sign in to answer