Windows Update error - 0x80072f8f

I get this error while trying to update a copy of windows7 professional. My time IS correct, syncronized to the windows time server.

I work as a navy contractor. I hardened this machine per DISA's hardening requirements. This means some things get disabled, like "automatic updates" Lots of netowork protocol stuff gets edited in the secuirty policy also. I should (i think) still be able to update the machine by clicking the windows update button though. "BITS" works, and the "windows update" service is up, but no worky.

Second thing it may be... The install is not-yet activated. We have a number of identical machines here and I'm trying to make a depolyable image. After I deploy the image, I can activate each with a seperate license. Would the system NOT being activated be an issue?

I tried the un-hardened fresh install of the operating system and windows update works just fine. It's a security setting or something somewhere.

Any ideas? Please tell me you have ideas.

Make sure data and time in OS and in BIOS are the same & correct.
More details about his error Windows Server 2008 Error Code 0x80072F8F - code-complete

I also found these methods:

1.Use this MS Fix It Common system maintenance tasks

2.Run cmd.exe with administrative previlliges (right click on cmd.exe as admin) and type:

netsh winhttp reset proxy
regsvr32 wintrust.dll
regsvr32 Softpub.dll
regsvr32 Mssip32.dll
regsvr32 Initpki.dll


+ restart

Flavius said:

Make sure data and time in OS and in BIOS are the same & correct.
More details about his error Windows Server 2008 Error Code 0x80072F8F - code-complete

Right. The time doesn't change between images and SOMEHOW an un-hardened system is unable to update but a hardened one is?

This isn't the first time I've had this issue after hardening W7.
And I just verified them, same time.

I just got it to work - sorta. I went into gpedit and changed the WSUS server to the DoD's WSUS server.

Any ideas? What is the default microsoft site and reporting server?

I tried the DLL thing too. initpki.dll isn't found.

To fix the problem just install .net framework 4.0 and reinstall the aplications that still have problems