Microsoft KB Archive/838177

Knowledge Base

ISA Server logs Event ID 16 when you turn on Automatic Updates in Small Business Server 2000

Article ID: 838177

Article Last Modified on 10/30/2006

---

APPLIES TO

• Microsoft Small Business Server 2000 Standard Edition
• Microsoft BackOffice Small Business Server 2000 Service Pack 1

---

SYMPTOMS

If you install Microsoft Internet Security and Acceleration (ISA) Server 2000 on a computer that is running Microsoft Small Business Server 2000, the Automatic Updates feature may not work on the server.

You may receive the following error message in the Small Business Server 2000 event log:

Type: Warning
Source: Automatic Updates
Category: Download
Event ID: 16
Description:
Unable to connect: Windows is unable to connect to the Automatic Updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection.

The following message may appear in the Windows Update.log file.

Date and Time Error IUENGINE Already tried all proxies. Will not retry. (Error 0x80072EFD)
Date and Time Error IUENGINE Querying software update catalog from https://v4.windowsupdate.microsoft.com/autoupdate/getmanifest.asp (Error 0x80072EFD)

Note The Update.log file is located in the root folder where you installed Windows.

CAUSE

This behavior occurs because the Automatic Update service runs under the Local System account. The Local System account is not a member of the BackOffice Internet Users group and does not have permissions to use the Internet through ISA Server.

WORKAROUND

To work around this behavior, configure two outbound packet filters, and then add an exception to the Microsoft Internet Explorer Web proxy list in ISA Server. To do this, follow these steps.

Create two outbound packet filters in ISA Server

Packet filter 1:

1. Start the ISA Management tool.
2. Click the Access Policy folder, and then click IP Packet Filters.
3. In the Configure Firewall Protection pane, click Create a Packet Filter.
   

The New IP Packet Filter Wizard appears.

1. Type the IP packet filter name that you want, and then click Next.
2. Click Allow packet transmission, and then click Next.
3. Click Custom, click Next, and then, under IP protocol, click TCP.
4. Under Direction, click Outbound. Under Local port, click All ports.
5. Under Remote port, click Fixed port.
6. Under Port number, type 80, and then click Next.
7. Click Default IP addresses for each external interface on the ISA Server computer, and then click Next.
8. Click All remote computers, click Next, and then click Finish.

Packet filter 2:

1. In the Configure Firewall Protection pane, click Create a Packet Filter.
   

The New IP Packet Filter Wizard appears.

1. Type the IP packet filter name that you want, and then click Next.
2. Click Allow packet transmission, and then click Next.
3. Click Custom, and then click Next. Under IP protocol, click TCP.
4. Under Direction, click Outbound. Under Local port, click All ports.
5. Under Remote port, click Fixed port.
6. Under Port number, type 443, and then click Next.
7. Click Default IP addresses for each external interface on the ISA Server computer, and then click Next.
8. Click All remote computers, click Next, and then click Finish.

Add Microsoft.com to the Internet Explorer Web proxy exceptions

Note Follow these steps only on the ISA Server computer.

1. Start Internet Explorer.
2. On the Tools menu, click Internet Options.
3. Click the Connections tab, and then click LAN Settings.
4. Click to select the Use a proxy server for your LAN check box, and then click Advanced.
5. In the Exceptions box, type *.microsoft.com.
6. Click OK in the Proxy Settings dialog box, click OK in the Local Area Network (LAN) Settings dialog box, and then click OK in the Internet Options dialog box.

MORE INFORMATION

For additional information about how to force an update with Automatic Updates, click the following article number to view the article in the Microsoft Knowledge Base:

326693 How to force Automatic Updates 2.2 to perform a detection cycle

For additional information about Automatic Updates, click the following article number to view the article in the Microsoft Knowledge Base:

294871 Description of the Automatic Updates feature in Windows

Keywords: kbdownload kbdownload kbprb KB838177

---

Send feedback to Microsoft

© Microsoft Corporation. All rights reserved.