Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Windows Update Doesn't Work in Domain Environment


24 Aug 2011   #1

Windows 7 Home Premium x64
 
 
Windows Update Doesn't Work in Domain Environment

I'm trying to set up a new PC around the office, but as soon as I establish a connection to the domain, Windows Update keeps giving me ERROR: 8024402F. This may sound wacky, but I've narrowed the problem down to the clock (as in time). After checking the Event Viewer logs I found this...

Code:
 
Log Name:      Application
Source:        Microsoft-Windows-CAPI2
Date:          8/24/2011 1:02:36 PM
Event ID:      4107
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      LABPC1.******************.com
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.co...uthrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
<Event xmlns="Error">
  <System>
    <Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" EventSourceName="Microsoft-Windows-CAPI2" />
    <EventID Qualifiers="0">4107</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2011-08-24T18:02:36.849214800Z" />
    <EventRecordID>574</EventRecordID>
    <Correlation />
    <Execution ProcessID="1116" ThreadID="2704" />
    <Channel>Application</Channel>
    <Computer>LABPC1.******************.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab</Data>
    <Data>A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
</Data>
  </EventData>
</Event>
As soon as I take the computer off the domain, Windows Update works properly, and I don't see that error message. If I put it back on the domain, and I lose the ability to update and my error log is riddled with the error seen above.

I've tried everything suggested here, to no avail. The reason this is an important matter is because we are running Microsoft Security Essentials as our antivirus, and it gets its virus definitions through Windows Update. Without Windows Update, we have no functioning antivirus.

Thanks for any help, I appreciate it.

EDIT: I've never had this problem before. It's only with this new batch of PCs we bought about a week ago.


My System SpecsSystem Spec
.

24 Aug 2011   #2
JMH

Win 7 Ultimate 64-bit. SP1.
 
 

My System SpecsSystem Spec
26 Aug 2011   #3

Windows 7 Home Premium x64
 
 

None of those had any effect... Im just surprised that with all these seemingly specific error codes, there has never been some sort of library with every error and how it could be fixed. I've been searching for the last 3 days, and have yet to find a mention of this error let alone a way to fix it (I have seven brand new PCs and they're all doing the same thing). Here's the error description.
Quote:

Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.co...uthrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
UPDATE: All these PCs have wireless network cards in them, as well as wired, but both connections give the same results (never really suspected the network card, but I'm tryin' everything...).

EDIT: I've seen some mention of ActiveX Filtering on the firewall, but that isn't it (There's about 40 PCs going through this firewall and none of them are having update issues).

EDIT2: The above error has nothing to do with my Windows Update error... I found a FixIt that solved the problem seen in the event viewer, but Windows Update still spits out 8024402F. Even though Windows Update is giving an error, the event viewer shows no warning or errors... You'd think Windows Update failing would classify as an "event".
My System SpecsSystem Spec
.


26 Aug 2011   #4
JMH

Win 7 Ultimate 64-bit. SP1.
 
 

eaturbrainz
It may be time to consult the " experts" at Microsoft Technical Support re your annoying problem.
See link below.

Help and Support


My System SpecsSystem Spec
26 Aug 2011   #5

Windows 7 Home Premium x64
 
 

I'll try that. Thanks for your help.

When (and if) they give a real solution I'll edit this post with their solution and mark it as solved.
My System SpecsSystem Spec
26 Aug 2011   #6
JMH

Win 7 Ultimate 64-bit. SP1.
 
 

I await the outcome.
Good luck too.
My System SpecsSystem Spec
26 Aug 2011   #7

Microsoft Community Contributor Award Recipient

Windows 8.1 Pro with Media Center
 
 

Just echo from the past... I remember having some WU problems in a domain environment when clocks were not in sync. Long shot, probably not your case, but decided to post when I remembered this.

Kari
My System SpecsSystem Spec
30 Aug 2011   #8
2xg
Microsoft MVP

Win7 & Win8 64bit
 
 

Hello,

I don't know if I'm too late. Do you have WSUS configured? Any GPO Policy for the WU?
My System SpecsSystem Spec
Reply

 Windows Update Doesn't Work in Domain Environment




Thread Tools



Similar help and support threads for2: Windows Update Doesn't Work in Domain Environment
Thread Forum
Altgr doesn't work after windows update, help! General Discussion
Windows Update doesn't work Windows Updates & Activation
Windows Update doesn't work after C: partition restore. Windows Updates & Activation
Windows Update doesn't work Windows Updates & Activation
Windows Update doesn't work after OEM System Restore Windows Updates & Activation
Domain Group Policy 2003 environment & Windows 7 clients System Security
securing windows 7 32/64 bit in a domain environment System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 07:13 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33