[On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019]

6 minutes ago, Dave-H said:

There's no native way of doing it in XP AFAIK.

I use Glarysoft's Quick Startup. It has a delayed startup feature too. Very good tool and afaik more recent.

 

12 minutes ago, Dave-H said:

You say your Automatic Updates Control Panel applet doesn't work?
Is it all greyed out, or does it not open at all?

No, I meant wuauclt /detectnow doesn't work for me too. No notifying of new updates (and in my case there is one), no shield in systray, no entries in event log. Sorry for confusing!  It's not my day! Automatic Updates Control Panel applet is not greyed out and can be called up but changing settings by this applet has no effect.

[On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019]

2 hours ago, Dave-H said:

wuauclt /detectnow appears to do nothing, and there's no event in the Event Viewer.
I guess that means it's not working!
It doesn't generate the error message either.

As promised I changed my automatic settings for testing purpose. Searching for updates on MU web site shows one important update is missing but Automatic Updates Control Panel File wuaucpl.cpl doesn't work. No pop up of shield in systray, no entries in event manager. I tried different settings and changed proxy configuration but so far without any success.

[On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019]

12 hours ago, Dave-H said:

Well I do have HTTPSProxy running all the time, as I need it to display my e-mails properly in Eudora.

Ok, you have HTTPSProxy running all the time. Therefore you can try to enable option Automatically detect settings in LAN settings of Internet Options to ensure that WUA can find your proxy automatically.

11 hours ago, Dave-H said:

I'm not sure how it could show the yellow shield if it can't connect.

Run as administrator the command wuauclt /detectnow to check the connection with the Windows Update server. If wuauclt.exe succeeds, Event ID 30 is added in Event Viewer.

[On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019]

17 minutes ago, Dave-H said:

So you're not getting the Event Log error messages?

@Dave-H Just for you I'll change my automatic updates setting to "Notify me but don't automatically dowload or install them" and report what will happen and if such entries will appear in my event log. You know we've made our systems a bit comparable. 

[On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019]

1 hour ago, maile3241 said:

Normally you need these updates to fix the error. But I don't know if it works in W2k3.

One thing is clear. The mentioned updates are for Windows XP Embedded and definitely not for Server 2003. So that won't work.  and truth be told a bit off-topic. 

[On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019]

3 hours ago, Dave-H said:

I'm still seeing this in my System Event Log regularly.
I still have automatic updates set to tell me if there are any!
I guess this is because it can't use the proxy.

I disabled automatic updates a long time ago. I thought this app would use IE engine to check for updates. So actually you had to keep HTTPSProxy running generally. I think you don't really want to do that. Therefore disable automatic updates! Unfortunately there will be no more updates in future. But since restoring MU you can check manually for updates at any time.

[On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019]

24 minutes ago, maile3241 said:

Too bad. I'm still wondering how I got it to work without a proxy for a short time in December.

Microsoft had changed a lot in the past. Maybe they had switched back to old ciphers in this short time in Dezember.

[On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019]

2 hours ago, maile3241 said:

Is there a way to update the ciphers to reach the windows update site without a proxy?

Due to the fact that in Windows XP (and 2000 too) you can only use IE or IE engine to access to MU and the ciphers of IE are outdated you have to use ProxHTTPSProxy or HTTPSProxy to add modern, more recent ciphers to IE or IE engine. Therefore is the answer from my point of view: No! 

[On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019]

1 hour ago, Dave-H said:

Thanks largely to you!

You're welcome!

1 hour ago, Dave-H said:

The speed hit is only noticeable if I use 360Chrome with the "Use IE proxy" option enabled.

Did you add HTTPSProxy and ProxHTTPSProxy to MalwareBytes' exclusions list? I have excluded them in Avast.

[On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019]

3 hours ago, Dave-H said:

No it isn't that.

In my Windows XP system Avast Premier is the main security solution in combination with Windows 10 Firewall Control XP. Avast works perfectly but the web protection causes in a lot of cases an huge loss of speed especially while surfing, connecting via VPN or downloading files although a lot of exclusions have been made by me. In such cases switching off web protection is the only way to have full speed again. The older the computer is, the greater the loss. And my computer running Windows XP is 21 years old.

[On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019]

59 minutes ago, Dave-H said:

Just for completeness, now working fine in 360Chrome 13.5.

@Dave-H Great! I'm glad your system has got back all features you wanted to have.

[On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019]

56 minutes ago, xpandvistafan said:

Do you know where to find it? I only find something called extreme explorer when I search it up.

Here:

Just to clarify: 360Chrome = 360 Extreme Explorer

[On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019]

1 hour ago, Dave-H said:

No it doesn't matter, I was just wondering why the loss of speed was so great with a locally running proxy.

The proxy has a lot to do. Checking web sites, generating cerificates, comparing web site addresses with config.ini settings and so on. Poor proxy! 
And there might be another cause for such loss of speed. You're running Mwarebytes 3.5.1.2522. It has a web filter function and this might cause such loss of speed either. Switch off web control function and do your speed test once again!

[On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019]

1 minute ago, Dave-H said:

I was just a bit puzzled. I would expect some loss of speed, but not a third of what it should be!

But for these purposes only speed doesn't matter. Isn't it?

[On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019]

25 minutes ago, Dave-H said:

Do you know why there are two entries for HTTPSProxy.exe in Task Manager?

I do have that too and that's absolutely normal. A lot of programs have one main instance calling up a second one probably with different tasks. For example 360Chrome does the same. First 360Loader.exe calling up 360chrome.exe calling up a second instance of 360chrome.exe and more of them.

 

25 minutes ago, Dave-H said:

Also, would you expect using HTTPSProxy to significantly slow down your internet connection speed?

Of course there are a lot of proxies slowing down speed. Due to the fact that I use these proxies for Internet Explorer access or Internet Explorer engine access only it doesn't matter for me.

[On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019]

On 2/11/2022 at 4:42 PM, Dave-H said:

I still wonder why it worked for some and not others.

@Dave-H This can be answered easily. It depends on what the user has done when installing ProxHTTPSProxy CA certficate. If you import ProxHTTPSProxy CA certficate by clicking right mouse button it'll be installed under Trusted Root Certification Authority but for current user. If you import ProxHTTPSProxy CA certficate by using Microsoft Management Console mmc or Internet Options Control Panel applet selecting "show physical stores" of IE you've got the option to point to Trusted Root Certification Authority but for local computer. Therefore all of us installed that certificate under Trusted Root Certification Authority physical store but some of us under account current user and others under account local computer. This is the reason why heinoganda's ProxHTTPS Cert Installer is working for all of us. His installer imports due to automatical selection the certificate PROXCERT.p7b (other format of this certificate) correctly but of course installing the old well known certificate valid until 2025 only. This installer is a modified Roots Certificates Update installer and you know these certificates it has to install are added under account local computer generally.
Furthermore there is a general positive effect for those loving Windows XP (and 2000 or Vista). If correctly integrated into the system we are all now able to use a freshly generated 10 years valid root certificate of ProxHTTPSProxy or HTTPSProxy as long as Windows XP, Internet Explorer access to WWW, TLS 1.2 functionality, Microsoft Update for Windows XP or the user himself still exists. 

[On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019]

20 minutes ago, xpandvistafan said:

I am not too familiar with generating certificates for ProxHTTPSProxy. Where are you supposed to generate it?

As @maile3241 already said opening of ProxHTTPSProxy.exe generates automatically a new CA.crt if none is in its program folder. But first you have to delete all certificates in certs subfolder and update your cacert.pem as described in document file.

[On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019]

23 minutes ago, Dave-H said:

Once you had it to directly work with, you fixed it, thank you again!

You're absolutely right! Talking and philosophizing about a problem you haven't got in your own system is contraproductive. So I produced the problem you all had got and could analyze what was going on. The best way someone can have. Btw I installed ProxHTTPSProxy 3e (you can remember!) for testing purpose and it is working perfectly. 

[On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019]

12 minutes ago, Dave-H said:

You can do it through the Internet Options Control Panel applet if you select "show physical stores" BTW.
Finally, all's well that ends well, and thank you so much everyone, especially of course @AstroSkipper, for sticking with this for so long.
Cheers, Dave.

I already knew the alternative way to import certificates using IE but I want to do it in a clear safe way. It was a really long odyssey to find a final solution. I hope it'll work for all of us. Btw I provided links to Windows Update Reset Tool (Script). Have you already looked into? I think it is an interesting tool if problems due to MU occur.

[On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019]

Final fix of error code 0x80072f8f while accessing WU or MU web site

@Dave-H, @RainyShadow, @maile3241 and all other interested people,
I have definitely solved the problem getting error code 0x80072f8f. I've done a second ProxHTTPSProxy installation just due to testing purpose. I let ProxHTTPSProxy generate a new CA.crt valid until 2032 by deleting old CA.cert file in ProxHTTPSProxy's program folder and opening ProxHTTPSProxy.exe afterwards. Then I installed this root certificate. But it didn't work either. I got error code 0x80072f8f too. I analyzed what had happened and found out it was installed in Trusted Root Certification Authority but for current user only. And that's the cause of the problem. It has to be installed in Trusted Root Certification Authority of local computer anyway. How is it done? Open console by typing mmc, add a snap-in for certificates, then choose for local computer and import your recently generated ProxHTTPSProxy CA certificate to Trusted Root Certification Authority. Finished.
First a screenshot of MU using ProxHTTPSProxy along with recently generated ProxHTTPSProxy CA certificate valid until 2032:

And here is a screenshot of my Trusted Root Certification Authority - local computer:

Hope this will be the final solution to get rid of error code 0x80072f8f forever!

PS: More detailed information relating to ProxHTTPSProxy and HTTPSProxy you can find in this article: 

Kind regards, AstroSkipper

[On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019]

21 minutes ago, maile3241 said:

Right. These are urgently needed, otherwise it won't work. I edited my post above again

Ok, on the one hand you solved your connection problem using HTTPSProxy and that's fine, but on the other hand 2025 is your deadline of accessing to MU web site. @Dave-H won't help that either because the original provided ProxHTTPSProxy root certificate doesn't work for him accessing to MU web site.

[On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019]

4 minutes ago, maile3241 said:

These are mine

Ok, you have installed the same ProxHTTPSProxy root certificate twice, one for ProxHTTPSProxy itself and one for HTTPSProxy. Is that correct?

[On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019]

1 minute ago, maile3241 said:

For me it only works with this one.

So how many ProxHTTPSProxy root certificates do you have installed in your system's Trusted Root Certification Authority? Please have a look and provide a screenshot!

[On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019]

3 minutes ago, maile3241 said:

Correctly.

In my system both proxies generated their own root certificates to work with. I do not use the pregenerated root certificate of ProxHTTPSProxy either and both are working flawlessly. Just a reminder!

[On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019]

7 minutes ago, maile3241 said:

This certificate comes from ProxhttpsProxy. I don't think it's a risk

Just to clarify and to avoid misunderstandings you copied the ProxHTTPSProxy root certificate in HTTPSProxy's program folder to use it there? Are you sure? I can't hardly believe that.