Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


643 posts

Ultimate Geek


Topic # 12022 23-Feb-2007 14:00

.. on Windows XP Pro (volume licence).

The PCs are configured to use an HTTP proxy (squid) for Internet access and there is no NAT. (but global-unicast IPv6 connectivity is present, this network is more tightly controlled than most.)

Despite being configured to use the proxy, Windows Update is still trying to use NAT to download updates and about 10 TCP-SYN (half-open connection) to microsoft's update servers will time-out before it will even begin to use the proxy to download the updates. as a result updating stalls for 10 minutes while these connections time out.

I called Microsoft about this, they were not very helpful and diddn't like being told something might be wrong with their product. They told me there was a problem on my proxy - which there is not - and tried to charge me $500 for further support :-\

I would prefer not to let these computer have NAT access to the Internet because of the risk of unauthorised connection out. These are library computers that should only be used for searching a catalog.

This isn't a serious problem just an annoyance because Updating still works (eventually). I just have to start the updates, make some coffee while the attempted NAT connections timeout, then the updates will start rolling in.

Is there a solution to this? I've looked on Microsoft's knowledge base to no avail.




Sniffing the glue holding the Internet together

Create new topic
I iz your trusted friend
5802 posts

Uber Geek
+1 received by user: 140

Mod Emeritus
Trusted
Lifetime subscriber

  Reply # 61756 23-Feb-2007 14:14
Send private message

get a WSUS install and configure the network pcs to look at WSUS for update? that way the WSUS and ill download and store them locally and the network pcs will just need to go to one source (locally) and install.




Internet is my backyard...

 

«Geekzone blog: Tech 'n Chips Takeaway» «Personal blog: And then...»

 

Please read the Geekzone's FUG

 




643 posts

Ultimate Geek


  Reply # 61758 23-Feb-2007 14:20

thanks chiefie! I'm looking at WSUS now. but we don't have a Windows Server, will WSUS install onto XP Pro?




Sniffing the glue holding the Internet together

I iz your trusted friend
5802 posts

Uber Geek
+1 received by user: 140

Mod Emeritus
Trusted
Lifetime subscriber

  Reply # 61767 23-Feb-2007 15:15
Send private message

nope. it has to be installed onto a Windows Server 2003. That's the only down side...

Also, you don't need to have a full blown Windows Server I think... Windows Server 2003 Web Edition should be fine. And use registry to configure the network PCs to look at this WSUS server for updates. Check here to read about WSUS on non-AD network (member server).




Internet is my backyard...

 

«Geekzone blog: Tech 'n Chips Takeaway» «Personal blog: And then...»

 

Please read the Geekzone's FUG

 


4975 posts

Uber Geek
+1 received by user: 1321

Trusted
Microsoft

  Reply # 61843 24-Feb-2007 15:20
Send private message

WSUS requires Windows 2000 SP4 or Windows 2003 (Standard edition or Enterprise in both cases)

Also WSUS clients require a Windows Server CAL to be properly licensed

FYI




643 posts

Ultimate Geek


Reply # 61926 26-Feb-2007 00:13

A kind newsgroup troll posted an answer to my query on Microsoft's support forums.

Windows Update uses 'WinHTTP', or something seperate from IE to download updates so IE's proxy setting does not effect how Windows Update downloads it's updates.

proxycfg -u was the magic command to import my IE proxy settings into WinHTTP's proxy configuration, which is nestled deep in the registry.

Why XP can't be like OSX or Ubuntu and have a simple, system-wide proxy setting (which applications inherit) I don't know. I guess Vista would have fixed the proxy setting to be system-wide anyway. (?)

Thanks for the replies.





Sniffing the glue holding the Internet together

Create new topic

Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.