Windows Update Trusted Sites zone issue
I just tried going to Windows Update via Remote Desktop. The machine auto-updated itself to IE7 yesterday, so that may be the issue. However, when I go to Windows Update via the Start Menu, I get:
To continue, you must first add this website to your trusted sites in Internet Explorer.
...
To make this site a trusted website:
- In Internet Explorer, click Tools, and then click Internet Options.
- On the Security tab, click the Trusted Sites icon.
- Click Sites and under Add this website to the zone, copy and paste these website addresses.
You can only add one address at a time and you must click Add after each one:- http://*.update.microsoft.com
- https://*.update.microsoft.com
- http://download.windowsupdate.com
The thing is the sites listed are already in the Trusted Sites zones already. I can Windows Update via the server console, but I don't have any ability to see installed updates, etc. Since you need access to the Windows Update site in order to check the history (unlike Vista), I can't see the list since it complains at the very start.
-- Starfox
All Replies
- Hi,
Simply add trusted sites like this:
http://download.windowsupdate.com and http://*.windowsupdate.com and a like for the others.
My best. abobader wrote: Simply add trusted sites like this:
http://download.windowsupdate.com and http://*.windowsupdate.com and a like for the others.As I said in the first post, the sites the page gives me are already in the trusted sites. My list is:
about:Internet
...
http://download.windowsupdate.com
...
http://<servername>
...
http://www.microsoft.com (no idea why the MS root site is in there...)
https://*.update.microsoft.com
...
https://<servername>
The only other issue I can think of is that Windows Update is going to http://update.microsoft.com/windowsupdate/v6/default.aspx, which wouldn't be covered under any of the existing rules (rule covers *.update.microsoft.com, not update.microsoft.com). But if so, the site should've given instructions on adding update.microsoft.com, not *.update.microsoft.com
-- Starfox
- In internet option> Security> Sites> Trusted sites uncheck the check box "Require sever veification (https) for all sites in this zone"
It never was checked to begin with. This is a very recent install (a few days) that hasn't been tampered with, which is why I posted this to begin with.
-- Starfox
- Since you only need that for Microsoft update (which is trusted) and to get the update, lower the setting:
IE | Tools | Internet Options | Security tab - and lower the internet zone to "medium".
See if that work, then after the update done, set it back as it was before.
My best. abobader wrote: Since you only need that for Microsoft update (which is trusted) and to get the update, lower the setting: I think you misunderstood my question. It wasn't "how do I get Windows Update working" but "why is Windows Update complaining about zone issues on a few-days old install". Not to be snippy or anything, but I (personally) can think of about 10 different ways of getting Windows Update working or getting the update history - none of which is going to be use to the "average joe" when he is going to be comfronted with the same message and followed the instruction provided by the Windows Update web site and still can't get Windows Update working via the Start Menu in the following situation:
1. Automatic Windows Update works
2. Going to Windows Update via the Start Menu causes the error message to appear
3. IE7 was installed on the server via Automatic Windows Update
Telling people to lower the security setting is probably the last solution I'd resort to - Elevated IE security was put into server products for a very good reason. This situation shouldn't have had to happen in the first place, maybe it has been fixed in RTM (we will never know), but if it hasn't either a hotfix or changes to the Windows Update site needs to be made.
-- Starfox
- Starfox,
My suggestion based on my understanding (and turn to be wrong, sorry tho for that), that you have problem getting whs to get the update from Microsoft update site, not to any others. And then to turn the setting back on as in my last words regarding the issue.
Sometimes more update or hotfix solve the issue.
Again, sorry for my misunderstanding the whole subject.
My best.
