Restore Windows Update for Windows XP / Server 2003

Discussion in 'Windows XP / Older OS' started by daniel_k, Oct 21, 2020.

  1. antonio8909

    antonio8909 MDL Guru

    Feb 16, 2014
    3,111
    1,516
    120
  2. ward201185

    ward201185 MDL Member

    Sep 7, 2019
    136
    18
    10
    maybe make sure you can ping the other vm?
    if you get request timed out then disable the firewall on xp then try pinging it again, if it works then you should prob be able to use xp as the wsus server.
     
  3. antonio8909

    antonio8909 MDL Guru

    Feb 16, 2014
    3,111
    1,516
    120
    I'm using two physical PCs not VMs. I don't know if that could be the reaason why it's failing
     
  4. ward201185

    ward201185 MDL Member

    Sep 7, 2019
    136
    18
    10
    #104 ward201185, Apr 4, 2021
    Last edited: Apr 4, 2021
    well, it should be much easier.
    try seeing if you can ping the ips.
    start by first disabling the firewall on xp then try pinging it.
    it even happened to me on windows 10 and i had to set a custom rule for it in advanced settings for windows firewall.
    i know disabling the firewall is a bad idea but its not like anything bad is gonna happen.
    i dont think you can immediately get exploited unless you have file and sharing enabled in your network and in network setup because thats where nasty stuff come from cause of smb v1 exploits however i think your router should take care of it because it prob had ports tcp 445, 139, 138 and all others filtered maybe ever since the wannacry incident happened.
     
  5. ward201185

    ward201185 MDL Member

    Sep 7, 2019
    136
    18
    10
    also, did you make sure to unblock the php server from xp firewall by clicking unblock once it came up when you run it?
     
  6. antonio8909

    antonio8909 MDL Guru

    Feb 16, 2014
    3,111
    1,516
    120
    After disabling Xp's firewall, WUMT at 2000 says: Error 0x800B0109 A certification chain has been successfully processed, but ends in a root certificate that is not trusted by the trusted provider.

    I'd install the lastest Root Certificates update from Microsoft Catalog just before starting the whole process.

    Thanks
     
  7. ward201185

    ward201185 MDL Member

    Sep 7, 2019
    136
    18
    10
    glad it worked.
    it happened to me on a vm and i found a workaround for it.
    its not only for 2k btw.
    i think you can try this out for xp rtm up to sp2 but make sure you install the latest windows update agent since wumt.exe doesnt like it when you dont have a new or a workable windows update agent installed.
    and by doing that on those versions, make sure you have 7-zip and basically extract the windows update agent exe file, you should be given three files, run the one that says wua-downlevel.exe or something, it should start working, or if you are on home edition, DO NOT RUN IT, extract it too then run wusetup.exe because xp home edition seems to act weird maybe because of how it deals with permissions compared to xp pro.
     
  8. ward201185

    ward201185 MDL Member

    Sep 7, 2019
    136
    18
    10
    also, maybe try to find a way to set a rule for windows firewall to allow connections from windows 2000 instead of keeping it disabled just to be safe.
     
  9. antonio8909

    antonio8909 MDL Guru

    Feb 16, 2014
    3,111
    1,516
    120
    So there isn't a fix to the certificates issue at Windows 2000 rather than installing again?
     
  10. ward201185

    ward201185 MDL Member

    Sep 7, 2019
    136
    18
    10
    theres a root certificate update for windows 2000 but its from 2010 i think.
    what version of windows 2000 do you have and are you sure you have update rollup 1 and sp4?
     
  11. ward201185

    ward201185 MDL Member

    Sep 7, 2019
    136
    18
    10
    try this and see if you can run it.
    download.windowsupdate.com/msdownload/update/v3-19990518/cabpool/rootsupd_a153023b66d29034420aa227ccc2164cff75229e.exe
     
  12. ward201185

    ward201185 MDL Member

    Sep 7, 2019
    136
    18
    10
    it should run silently in the background, you wont notice but you can go to certmgr.msc and go to trusted root certification authorites then certificates then you should have a lot of stuff there.
     
  13. antonio8909

    antonio8909 MDL Guru

    Feb 16, 2014
    3,111
    1,516
    120
    I'm using Windows 2000 Build 2195 SP4 with the update rollup installed

    If I run certmgr.msc it says Certificate stores cannot be enumerated. The system cannot find the file specified

    If I run WUMT now it says: Error 0x80072EFE

    Thanks
     
  14. ward201185

    ward201185 MDL Member

    Sep 7, 2019
    136
    18
    10
    did you have ie6 sp1 installed as well?
    i didnt have this 0x80072efe error when i tried it on 2000 sp4.
     
  15. antonio8909

    antonio8909 MDL Guru

    Feb 16, 2014
    3,111
    1,516
    120
    Yes, IE6 SP1 is installed
     
  16. ward201185

    ward201185 MDL Member

    Sep 7, 2019
    136
    18
    10
    maybe also make sure the windows update agent for the xp server is also up to date?
    you might also need the idn mitigation update and you might need to update the root certificates also on the xp server.
    you can find it in the readme, you'll need a browser or you just download it from another pc and transfer it to the xp that has wsus running.
     
  17. antonio8909

    antonio8909 MDL Guru

    Feb 16, 2014
    3,111
    1,516
    120
    All the files in XP are up to date. I did download and install all updates in XP before trying to update 2000
     
  18. ward201185

    ward201185 MDL Member

    Sep 7, 2019
    136
    18
    10
    oh, hmm.
    maybe restart your win 2k machine and try again.

    maybe also fix the time and date if its incorrectly set as well.
     
  19. ward201185

    ward201185 MDL Member

    Sep 7, 2019
    136
    18
    10
    i assume you have it working rn and thats prob why you arent responding yet cause you are prob busy downloading and installing updates.
     
  20. alvaro_ag

    alvaro_ag MDL Novice

    Oct 30, 2007
    27
    40
    0