Discussion Locked

Windows V5 Update and Proxy Servers

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

How many Network Administrators have yet to realise that the Automatic Windows Update for XP and Server 2003 is failing everytime because they have a Proxy Server somewhere on their network.

Carry out a Manual Windows Update, preferably on a PC/Server that has already updated to Windows Update V5 and check that it can scan the machine and list the updates.

5 replies

by achen2002

I am surprise that this post (without soluton) is the only one I could find in tech republic, related to this topic, I thought it should be a more popular problem than it is right now.

In my environment, Win2K clients which are using v4 updates have no problem, however WinXP which use v5 can't go out from the proxy.

Any suggestion about what's nessasary to be done in the proxy server??

by achen2002

misha,

Of course we know more or less that what you said is the problem, but how to tune up the Proxy to let this traffice go through??

by achen2002

I have solved this problem, this solution works for WinGate but I am not sure if it will work for the proxy program you're using.

1. From IE, On the Tools (or View) menu, click Internet Options.
2. Click the Advanced tab.
3. Click to select the Use HTTP 1.1 and the Use HTTP 1.1 through proxy connections check boxes.

by johncnr

I added the following to squid.yeslist (external domain table) the four patterns,

1. *.download.microsoft.com
2. *.windowsupdate.com
3. *.windowsupdate.microsoft.com
4. windowsupdate.microsoft.com

With the squid.yeslist regenerated on all four proxy servers, I am no longer prompted for proxy credentials under these two scenaios:

1. Click Start -> Programs -> Windows Update 2. Open IE; Click Tools -> Windows Update

Note that the yeslist and yuklist ACLs are defined in squid.conf to use regular expressions (dstdom_regex) for matching requests against items in the lists. This squid-users mailing list archive entry
(http://www.squid-cache.org/mail-archive/squid-users/200301/0587.html) in combination with the existing acl entries in our squid.conf led me to believe that the patterns above would work.

This discussion is closed to new replies.