AstroSkipper

When I was assisting @Dave-H in restoring access to MU web site, I found a lot of users in different forums (actually it should be called fora) reporting that only unblocking of wuauclt.exe would help fixing several error codes relating to MU, but there were many users too without any success. Therefore sometimes it may help, sometimes not. I will test that next time on my old computer without MU patch. So my preliminary answer is rather no.

Most of all Windows XP users using the POSReady trick had already installed these 4 updates in the past like me, for example. So it can be verified only using a clean install without any POSReady updates.

As requested I added "credits to @maile3241" to step 4, 6 and 7. Applying PosReady.reg in step 5 is generally mandatory for installing POSReady updates and logical, just as updating of Root Certificates. Therefore no credits in these two steps. In fact, credits in step 5 should go to whoever discovered the POSReady trick and to no one else. Same in step 8. Or are you the developer of rootsupd.exe from Microsoft? Generally, credits will be added where something of another person has been done or created. Kind regards, AstroSkipper

You're welcome, indeed! In your case it was fun helping you. Unfortunately I can't say that in all cases. You really read my guide carefully. And therefore you did it! Anyway, I have already updated my guide due to the experiences while assisting you. You can have a look at step 16 if you want. Greetings, AstroSkipper

In any case I'm glad it is finally working for you. It would have surprised me too if my damn guide does not work for you. It's late for me here in Germany. So long! Good night! Kindest regards, AstroSkipper

Now you have to find out what is blocked by Windows Firewall. Add the program WuauClt.exe into the exception list of firewall. Check if ProxHTTPSProxy is able to pass firewall.

Great! Congrats! You did it!

Did you install a security program like Eset, Malwarebytes or Avast? These programs have a lot of features, one of them is a HTTPS Scanning feature and can be problematic if connected via HTTPS.

The meaning of your error code: 0x80072F78 = ERROR_HTTP_INVALID_SERVER_RESPONSE = The server response could not be parsed. Anyway, you have connection problems to MU server. Check your firewall settings and disable security feature called "https scanning " in your security software if existing. Try to disable Windows Firewall temporarily while accessing MU web site. And please upload WindowsUpdate.log!

Ok, but have you checked your activation state now?

I totally agree. No problems here at all. Very strange!

@mina7601 Is your Windows XP already activated?

Please upload your WindowsUpdate.log located in C:\Windows!

Alright, I see, proxy is deactivated. I thought it is activated.

Ok, actually it should look like mine:

As @RainyShadow said above these registry entries can only enable or disable ciphers which already exist in file schannel.dll. Here is a link: https://www.ssl.com/de/wie-man/Wählen-Sie-die-richtigen-Cipher-Suites-in-der-Schannel-DLL/ And replacing files is simple but in most cases it won't work at all. A lot of dll files have dependencies and need special registry entries too. Some people have already tried that. For example here:

Have a look into this thread: It's all about TLS, SSL, ProxHTTPSProxy and a lot of observations relating to schannel.dll where Ciphers are provided.

Well done! We have to do what we are able to. On my old test computer I have already edited the config.ini to my needs. You know I try to do things my way. But anyway, thanks for the hint! Very nice of you!

Thanks, but I will not provide download-links to Russian servers anymore. Sorry, it's very sad but we must make a mark, no matter how small it is! Besides, the changes are minor and can be done by users themselves according to their needs. Generally I try to provide download-links pointing to locations of original sources. But anyway, thanks for your offer! BTW, a modified and updated version of ProxHTTPSProxyMII 1.3a (20150527) for old computers which haven't got a CPU with SSE2 instruction set, will be soon released by me when test phase has been successfully completed.

No new Easter egg from me! Either I've been just a bit too careless while writing and correcting or it is due to a kind of senility! Thanks for reporting again! I'll correct that immediately, of course! No, the fixed version of cacert Updater can be downloaded from first post in my thread in section Downloads: The changes are minor indeed and can be done simply by applying cacert Updater Fixed. BTW the AIO package has been created by @Windows7fan from MDL. Therefore maintaining of it isn't my job. And I totally agree, if actions are performed manually, users get full control because one knows what has been done and what has to be performed next. Very important if verifying of each step is necessary.

That would be great! In the case of publishing I will mention you for html creation, of course. I have a lot of respect for people doing things manually especially using programming languages like HTML4 and CSS. Once again, my honest respect! Nowadays I am more a batch programmer, more often a person modifying and fixing files, although I did more smaller projects in the past when I was much younger. Especially mathematical ones. But for now, kindest regards, AstroSkipper

As I wrote in my guide, everything can be done manually. That's how I did it. By doing things manually you have full control of what you do and verifying is much more easier. Here is the changelog to AIO Update version 1.2.1: "Version 1.2.1 3/6/22: Updated cacert.pem to the latest version. This improves compatibility with most websites including Windows Update." This is a quotation taken from MDL.

I am so sorry! Truth to be told I really thought you are female because of your name Mina (read in forum "Introduce Yourself!") meaning "heaven". Once again, I have to apologize to you! Do not be angry! Appearently I am not a Sherlock Holmes. Wow! You are the only one who has found my easter egg! That means you have really read my guide carefully! Thanks for reporting! Good luck! Hope it will work this time! Kind regards, AstroSkipper

Thanks for your point of view! English isn't my native language too, I am German. But I try to do my best in writing. And truth to be told there is an option called "Google Translator", therefore bad language skills are no acceptable reason to write in poor English strings. Or isn't it?

Hi @maile3241 What do you think about people asking for assistance but being too lazy or whatever in writing reasonable posts? I don't understand that and it annoys me. We all do that to help other people just for fun. But in these cases there is no fun! Apart from that, it is also a question of respect and that's really lacking in some cases, in my opinion!