Windows Server 2012 Update Error 80072EFD

Question

Hi

We have Windows Server 2012 running Domain Controller.

Suddenly the server stopped updating and the error is 80072EFD.

We are running WSUS server.

Any solution please?

Regards

Answer 1

Make sure there are no firewall rules or proxy to block Microsoft download URLs in your case the WSUS server
https://learn.microsoft.com/en-us/windows/deployment/update/windows-update-errors

--please don't forget to Accept as answer if the reply is helpful--

Answer 2

is there any possibility that our Domain Controller (DC) will create any problem.

If there's a genuine concern about this then the simplest / safest solution may be to stand up a new one for replacement.

I'd use dcdiag / repadmin tools to verify health correcting all errors found before starting any operations. Then stand up the new 2012, patch it fully, license it, join existing domain, add active directory domain services, promote it also making it a GC (recommended), transfer FSMO roles over (optional), transfer pdc emulator role (optional), use dcdiag / repadmin tools to again verify health, when all is good you can decommission / demote old one.

--please don't forget to Accept as answer if the reply is helpful--

Answer 3

@Yousuf Shahzad
Have you enabled the proxy server for the windows server 2012 client?

Here is a updates of the issue which I want to share with you first. According to the information you provided, the windows server 2012 client tried to connect to the WSUS server with proxy, but the proxy server is empty.
Reference picture:

In addition, I tested it in my lab environment and enable the proxy server in IE browser manually. And I found the following error information in the windowsupdate.log:

I tried to disable the proxy server in my environment and this issue has been resolved.

Also, I found a related link just for your reference:
https://support.microsoft.com/en-us/topic/how-the-windows-update-client-determines-which-proxy-server-to-use-to-connect-to-the-windows-update-web-site-08612ae5-3722-886c-f1e1-d012516c22a1

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 4

1. Please help to review the HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate registry key and confirm the WUServer and WUStatusServer value.
   Navigate to HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate
   Look at the keys in that folder, if they look something like this:
   “WUServer”=http://WSUS's name:8530
   “WUStatusServer”=http://WSUS's name:8530
2. We could follow the below steps If it is configured correctly:
   If this entries are listed under that folder, backup then delete the WindowsUpdate folder:
   Right-click on the folder and select “export” to save.
   Delete the “WindowsUpdate” key from the registry at HKLM\Software\Policies\Microsoft\Windows.
   Restart the Windows Update service. (located in Start > Run > type “services.msc” without quotes)"

Run the gpupdate/force command on the CMD. Then we could import the registry value again.

Please feedback the result if there are any updates.
Rita

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.