Windows 7 cannot update, error 8024402F

[ShiftF5]

Hi there forum,

I've just spent a whole weekend troubleshooting this issue and I've run out of things to try. We have 6 Windows 7 Professional (x64) computers, all HP EliteDesk desktops, that suddenly will not update. The last successful update appears to have happened in April.

Things I have tried: (all the steps in the before-you-post thread)

1. Installed and run System Update Readiness Tool, rebooted (did not help)
2. sfc /scannow, rebooted (did not help)
3. Error code: 8024402F
4. See CBS log, attached.

Other things I have tried, none of which worked:
- re-synching my computer's clock
- switching from Microsoft Update to Windows Update in the Windows Update Settings (and now Microsoft Update is no longer available to me)
- switching to a public DNS server
- turning off IPV6
- About 3 different Microsoft Fix-Its
- Windows Update troubleshooter
- Stop/start Windows Update and BITS services
- Uninstalling the last successful update, in case that was what caused the problem
- Deleting SoftwareDistribution folder
- Resetting Windows Update components
- Waiting a week
- Probably other things that I've since forgotten

This network also has Windows 10 and Windows Vista machines, and the Vista machines are all updating fine - I just updated Windows Defender definitions on all of them yesterday. (I'll go try one of the Windows 10 ones now)

Any suggestions on why Windows Update has stopped only for Windows 7?

 

[Paul Black]

Hi ShiftF5, welcome to Seven Forums,

Just to let you know that there is no attachement for the CBS log!

I hope this helps!

 

[ShiftF5]

Yeah, I know... it's like 65 MB and I didn't realize the upload had failed until I had already posted, and then I was unable to find my post again to edit it. (Apparently it was "in moderation?") Any suggestions for uploading a 65 MB zip file? Is it allowed? EDIT: Also, Windows 10 and Windows Vista are updating fine on the same network.

 

[Snick]

Hi ShiftF5,

65 mb file would have to be uploaded to One Drive, Google Drive, Dropbox, etc. and post link.

SURT Tool only identifies missing/corrupt cab, mum or manifests, etc. it doesn't fix everything.

Run System Update Readiness Tool again and post CheckSUR.log please. Log is temporary in default location.

Log location: C:\Windows\Logs\CBS

Select the last 1/4 or so of your CBS.log and post and post windowsupdate.log too please

Nic

 

[ShiftF5]

CBS-log.zip - here is the CBS log file only, from the CBS folder I copied out last time (right after an attempt to update). Let me know if the other files in the CBS folder are needed. I'm running SURT now and when the CheckSUR.log is updated, I'll attach that in the next post.

 

[ShiftF5]

Windowsupdate.log

 

[ShiftF5]

CheckSUR.log

 

[Snick]

from your post - switching from Microsoft Update to Windows Update in the Windows Update Settings (and now Microsoft Update is no longer available to me)
???? why did you do this? revert to default setting please.

This is an excerpt from you windowsupdate.log

2018-04-26 17:18:32:875 984 a4c Report REPORT EVENT: {99AFDC34-E00B-4044-ADC5-EAAE2CE76542} 2018-04-26 17:18:28:772-0400 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 <<PROCESS>>: shdserv.exe Success Software Synchronization Windows Update Client successfully detected 14 updates.
2018-04-26 17:18:32:875 984 a4c Report REPORT EVENT: {E6CE7CB6-7A13-44AC-B8D9-5897EFE393AB} 2018-04-26 17:18:29:084-0400 1 167 101 {B2378849-9FDE-4643-9850-94CC1A100A09} 200 0 Microsoft Security Essentials ( Success Content Download Download started.
[FONT=&quot]2018-04-26 17:18:32:875 984 a4c Report REPORT EVENT: {587A8171-439C-4D6F-AAD8-5C874A795CBE} 2018-04-26 17:18:29:303-0400 1 148 101 {00000000-0000-0000-0000-000000000000} 0 80248014 <<PROCESS>>: CompatTelRunner.ex Failure Software Synchronization Windows Update Client failed to detect with error 0x80248014.[/FONT]

From the last excerpt entry Sync Failure repeats over and over until hot fix success near end of log.

2018-06-27 20:28:08:298 1040 11f8 Report REPORT EVENT: {E8812BD1-A8DF-4A18-9541-725B3487E4D5} 2018-06-27 20:28:03:295-0400 1 183 101 {A9BC65B9-EC5A-47DE-A5D5-F62A038CD496} 501 0 wusa Success Content Install Installation Successful: Windows successfully installed the following update: Hotfix for Windows (KB947821)

Did you manually install KB947821 or change any settings?

Don't need other files in CBS folder, should be persist zip files
CheckSUR.log is clean.

Please copy and paste bold text into your url

[FONT=&quot]http://download.windowsupdate.com/d/msdownload/update/others/2018/06/26745555_27bb04045176bd0375a6ea2b79e260d7a180e3e6.cab[/FONT]

[FONT=&quot]If you get a popup installer, don't install it, just let me know it appeared. (success indicates your access to win update server isn't being blocked)
[/FONT]
Do you have KB3102810 installed on your computer?

Open Windows Update, lower-left corner click installed updates, copy and paste KB3102810 into searchbox upper-right corner. May take a while. If it's not installed, download and install it (latest win update agent)

Update for Windows 7 for x64-based Systems (KB3102810)

Reboot and try win update again.

Nic

 

[townsbg]

Under the update setting change to do not check for updates. Save and then go back and check. That's worked for me several times.

 

[torchwood]

Hi ShiftF5,

The error code usually relates to a Network permissions problem.
According to the CBS report there is a problem with the hash's for IE - a login problem
and within the update log its also reporting a permissions problem

2018-06-23 14:23:14, Info CSI 00000010 Hashes for file member \??\C:\Program Files\Internet Explorer\SIGNUP\install.ins do not match actual file [l:22{11}]"install.ins" :
Found: {l:32 b:vRiA8dLLfZucoVH0kBcAyQH9f9i5F88hZOiKWtquEqk=} Expected: {l:32 b:Jwn5oW343A0ldAPuI/S/LRCC+HsGcbpgp59P+/m/Cjw=}



Misc WARNING: WinHttp: WinHttpQueryHeaders(WINHTTP_QUERY_CONTENT_TYPE) for X-CCC failed. error 0x80072f76
2018-03-29 17:15:17:082 1044 110 PT WARNING: ECP: DownloadCabFile: failed to get CDN Country for error reporting, hr = 0X80072F76
(note the date)
Please check/reset your internet options

What, if anything, changed 28/29 March Security wise - AV, Group policy changes etc.
As the error is only on HP comps did they issue any updates

Roy

 

[Snick]

Thanks for your input Torchwood!

Apparently, OP changed his GP settings
Quote from post #1:
"- switching from Microsoft Update to Windows Update in the Windows Update Settings (and now Microsoft Update is no longer available to me)"

Nic

 

[ShiftF5]

Okay I will try to answer everyone's questions! First Snick

1. Why did I switch from Microsoft Update to Windows Update? Because I extensively Googled my problem and tried everything that worked for other people before posting here.
example: https://www.thewindowsclub.com/windows-update-error-code-0x8024402f
Windows Update error 0x8024402f Solved - Page 2 - Windows 10 Forums
Windows Error Code 8024402F Windows Update encountered an unknown - Microsoft Community

I am not able to revert because the option for getting updates for other products is no longer visible. However, I did not turn this option off on all computers, and the ones where I did not change this setting also don't update with the same issue.

2. Yes, I installed KB947821 (SURT) per the instructions for posting on this forum (and per your request).

3. That URL gives me a CAB file that goes into my downloads folder.

4. Yes, I already have KB3102810 (installed 13/11/2015)

townsbg,

Thanks but all of my computers are already set to Never Update. I always update them manually, I don't want them doing it during the work day. Also, we have Reboot Restore RX Pro installed which was supposed to update on a schedule, but since Reboot Restore doesn't do what we need it to we stopped using it.

Note: I previously tried changing the update from Never Update to Automatically Update and back again, but it did not work.

torchwood,

The computers are heavily controlled with Local Group Policy since they are in a public computer lab. I don't recall making any specific changes to GP, especially not to all of them (I have to do each one individually). AV is just Microsoft Security Essentials. I don't recall what could have changed. Actually, we did change ISPs right around the March-April time frame, although if that were an issue wouldn't it affect the Windows Vista and Windows 10 machines too?

Snick,

I only started changing update settings AFTER the update stopped working (within the past week). It was something I tried to fix it.

Hope that helps!

 

[ShiftF5]

torchwood UPDATE: based on your comment, I thought about file corruption, so I re-ran sfc /scannow and also ran DISM /Online /Cleanup-Image /scanhealth but neither command found any problems. I cannot see any obvious issues with Internet Explorer nor with my Internet settings.

 

[Snick]

ShiftF5, thank you for your detailed reply. I believe Torchwood/Roy should take over your issue as he is more experienced than I am.

The M$ address that I had you paste into the url was intended to ascertain whether or not you were able to access the update server from your computer. Sometimes, access is prohibited via a plethora of reasons. That is one more item off the list!

I'll keep researching, and monitor posts on this thread.

Reading you recent post, I gather that your issue affects every computer in the lab (valuable info!!) With what Torchwood indicated, a network issue, it would appear to be right on point. I was inclined toward malware issue, but that is most unlikely on multiple machines. BTW I don't think very highly of M$ Security Essentials (MSE), better than nothing, but not much, in my opinion. I review AV Comparatives and a few other AV test sites that slip my old taxed brain at the moment. Too much hitting the textbooks for upcoming IT exams!

Best free AV at the moment appears to be BitDefender if you judge them by the AV test sites. MSE is utilized as a baseline, and receives less than adequate reviews continually.

WU most often is a bear to diagnose, especially if it's not missing/corrupt files, as is BSOD issues. Repair Install would most likely resolve your problem, but that's usually a last resort and I'd wait for Torchwood for that suggestion.

Here's the link to the tutorial for your perusal.

Repair Install
How to Do a Repair Install to Fix Windows 7

Nic

 

[torchwood]

Hi ShiftF5

I am NOT implying your running non-genuine, but can you run the tool from here, it will tell me where your comps are going to pick up its updates from.
(direct from MS or via a server - yours or your ISP)
Windows Genuine and Activation Issue Posting Instructions - Windows 7 Help Forums

RUN it on the same computer you ran your previous reports

Regarding the ISP change - have a feeling its the root cause.
are they included on your trusted sites setting

As for the IE hash error please compare the rights on the associated Security tab to a comp running Vista
note this error could be machine specific, run the report on another machine to confirm

Roy

 

[ShiftF5]

Snick
Okay, thanks for all of your help.
torchwood
This issue affects all of the Windows 7 computers in our lab, AND it also affects our Windows 7 staff computer on the same network which does not have any GPO settings nor does it have Reboot Restore Pro. It's also a much older Dell Optiplex 3010 computer, and the lab computers are all HP EliteDesk.

Here is the Genuine report you requested:

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-788W3-H689G-6P6GT
Windows Product Key Hash: yr8OHoeXhbT4dc6MxGYjdAStSPY=
Windows Product ID: 00371-OEM-8992671-00008
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {C6A115D3-C0AB-41CE-AE93-46D9D98FA279}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_ldr_escrow.180330-1600
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{C6A115D3-C0AB-41CE-AE93-46D9D98FA279}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-6P6GT</PKey><PID>00371-OEM-8992671-00008</PID><PIDType>2</PIDType><SID>S-1-5-21-2035651771-1749162883-1969856270</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP EliteDesk 705 G1 SFF</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>L06 v02.15</Version><SMBIOSVersion major="2" minor="8"/><Date>20141022000000.000000+000</Date></BIOS><HWID>5A7E3007018400F2</HWID><UserLCID>1009</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-BPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, Professional edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: 50e329f7-a5fa-46b2-85fd-f224e5da7764
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00371-00178-926-700008-02-1033-7601.0000-3372013
Installation ID: 021005445474901025791833679001290860036870463636152572
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: 6P6GT
License Status: Licensed
Remaining Windows rearm count: 0
Trusted time: 30/06/2018 1:44:35 PM

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 6:30:2018 13:40
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: LAAAAAEAAQABAAEAAAACAAAAAQABAAEA7r5AXCT+hNs0cAwintQ6AfTWpkA=

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information: 
  ACPI Table Name	OEMID Value	OEMTableID Value
  APIC			HPQOEM		SLIC-BPC
  FACP			HPQOEM		SLIC-BPC
  HPET			HPQOEM		SLIC-BPC
  MCFG			HPQOEM		SLIC-BPC
  FPDT			HPQOEM		SLIC-BPC
  FIDT			HPQOEM		SLIC-BPC
  SSDT			COMPAQ		WMI
  SLIC			HPQOEM		SLIC-BPC
  MSDM			HPQOEM		SLIC-BPC
  UEFI			HPQOEM		SLIC-BPC
  IVRS			AMD		BANTRY  
  SSDT			COMPAQ		WMI
  SSDT			COMPAQ		WMI
  CRAT			AMD		BANTRY  
  SSDT			COMPAQ		WMI
  SSDT			COMPAQ		WMI

I did phone my ISP this week to inquire if they were filtering ActiveX packets (I read that could be an issue on some routers, but we don't have a router, we're using an old Linux server for routing) and the guy said he had never heard of that. No other customers are reporting any issues. He suggested I take one of the lab computers into the server room and hook it directly to the modem to see if the issue persists. I won't be able to do that today, but I should be able to try tomorrow. I'll let you know how it goes.

 

[torchwood]

Hi ShiftF5,

Thanks that looks OK update request going straight to MS.

Couple of points its highlighted
Bios OUT of Date
Spectre/Meltown patch issued late march v2.30 please update
(this may clear the problem)

this machine appears to have gone non-genuine 3 times, rearm count 0, next time you will have to use the COA product key

ActiveX appears OK, as for the old linux server might be related to SMB1 certificate changes - direct hookup to the modem will confirm/deny this..

Can you run the report from this link - ignore the title please - it produces some really good info
Blue Screen of Death (BSOD) Posting Instructions - Windows 7 Help Forums


Roy

 

[ShiftF5]

torchwood

Well, I have some additional info for you. Today I dismantled one of the desktops, hauled the whole thing up to our server room on the second floor, and hooked it directly to the modem. Lo and behold, it found 25 updates. However, it would not install them due to error 80240016 ("Windows is already installing other updates") and the "Try Again" button did nothing. I shut the computer down (after, surprisingly, waiting for "Windows is installing updates, please do not turn off your computer"), set it all back up at its regular desk, and tried to update again. This time it found 19 updates but still the 80240016 error. After trying multiple times (always with a different number of updates found) and rebooting, this ONE computer is now downloading/installing its updates successfully even though it's connected to the network again....

Out of curiosity, I started up one of its neighbours and sure enough that one is still getting the same error as before (8024402F). I can't really believe my solution here is going to be dismantling each of these desktops one by one, hauling them upstairs and individually getting them started on the modem directly!

I thought connecting them directly to the ISP would answer a question, not provide a new one...

I am going to run the report you suggested on the computer that is still producing the original error. Let me know if you require anything else ...

 

[ShiftF5]

Report attached

 

[Snick]

As I suspected after you stated all 'puters on network had same issue, and Torchwood suspected.