New
#11
Two ideas that come to mind are
1) Are we dealing with the official DVD here from Microsoft? Or a torrent download? etc...? What is the source install medium and where is it from?
2) It could be something in your environment which thus forces the need for the default firewall to be closed but I still can't think of anything. All that is needed for Windows Update to be successful is for Host Process for Windows Services (svchosts.exe) to have permission to access the internet. Nothing else is required. Not even I.E. any longer, on Windows 7.
The Windows Firewall allows that at default so the problem is very strange indeed, unless unofficial install media was used. (For example, modified version of Win 7.)
If you are using a custom automated configuration script in I.E. settings for lan settings as many corporate environments do, that may be causing the issue.