Прокси сервер для обновлений windows — Ваш верный помощник с OS Windows

Ни для кого не секрет, что в том случае, если Ваш ПК с ОС Microsoft выходит в интернет с помощью прокси-сервера, то служба обновления системы Windows Update по-умолчанию не работает. Эта заметка о том, как можно настроить работу системы обновлений Windows на ПК, находящимся за прокси-сервером.

Служба обновлений Windows Update может использовать HTTP прокси-сервер. Однако указания прокси-сервера в настройках Windows Internet Explorer недостаточно для работы службы обновления через проксю. Дело в том, что Windows Update использует Windows HTTP Services (WinHTTP) для поиска обновления, а для загрузки обновлений используется BITS. Служба Windows Update по-умолчанию настроена так, что всегда пытается попасть на сервер обновлений Microsoft напрямую, не используя прокси-сервер, даже если в настройках Internet Explorer он указан.

Однако данная проблема решаема, достаточно настроить системный WinHttp прокси. В ОС Windows XP/2003 WinHttp прокси задавался с помощью утилиты proxycfg.exe. В новых ОС Windows Vista/7/2008 данная утилита упразднена и настройка WinHttp прокси выполняется при помощи команды netsh.

Настройка выполняется при помощи следующей команды: netsh winhttp set proxy <адрес_прокси_сервера>:<порт_прокси_сервера>.

После того, как вы выполните данную команду, ваша ОС Windows 7 будет обновляться, даже находясь за прокси-сервером.

Как вариант, если вы хотите взять настройки прокси из Internet Explorer, можно воспользоваться командой:

netsh winhttp import proxy source=ie

Как вариант возможна также ситуация, когда необходимо перенаправить весь трафик, кроме трафика на Microsoft (системные обновления, активация) на прокси-сервер, тогда можно воспользоваться следующей командой обхода прокси для обновлений Windows.

Сделайте обход прокси для активации и обновлений вот так:

netsh winhttp set proxy proxy-server="your-proxy-srv:3128" bypass-list="*.windowsupdate.com;*.microsoft.com"

Текущие настройки WinHttp можно посмотреть командой:

netsh winhttp show proxy

Сбросить же настройки прокси сервера можно при помощи команды:

Netsh winhttp reset proxy

Кстати netsh отличная утилита командной строки для работы с сетевыми службами и настройками, и каждый профессиональный Windows админ должен уметь ею пользоваться. Я уже не раз упоминал о ней, в статье о графической диагностике сети при помощи netsh, или про управление сервером DHCP Windows Server из командной строки PowerShell.

Источник

It is not a secret for anyone that in the event that your PC running Microsoft OS is connected to the Internet using a proxy server, the Windows Update service doesn’t work by default. This note is about how you can configure the Windows Update system on a PC behind a proxy server.

The Windows Update service can use an HTTP proxy server. However, specifying the proxy server in the Windows Internet Explorer settings is not enough for the update service to work through the proxy. The fact is that Windows Update uses Windows HTTP Services (WinHTTP) to look for updates, and BITS is used to download updates. The Windows Update service is configured by default so that it always tries to access the Microsoft update server directly, without using a proxy server, even if it is specified in Internet Explorer settings.

The configuration is performed using the following command:

netsh winhttp set proxy

After you run this command, your Windows 7 OS will be updated, even when you are behind a proxy server.

Alternatively, if you want to take proxy settings from Internet Explorer, you can use the command:

netsh winhttp import proxy source = ie

As an option, it is also possible that you need to redirect all traffic except for Microsoft traffic (system updates, activation) to a proxy server, then you can use the following proxy bypass command for Windows updates.

Do a proxy bypass for activation and updates like this:

netsh winhttp set proxy proxy-server = “your-proxy-srv: 3128” bypass-list = “*. windowsupdate.com; *. microsoft.com”

The current WinHttp settings can be viewed with the command:

netsh winhttp show proxy
You can reset the proxy server settings using the command:

Netsh winhttp reset proxy

Related post : Windows 7 RSAT for Windows Server

Источник

Главная
Вопрос-ответ

Иногда случается так, что компьютер, который работает в локальной сети компании через прокси-сервер не может получить доступ к обновлениям Microsoft, будь то Windows Update или например обновления для антивируса Security Essentials.

Ранее, в Windows XP для решения этой проблемы использовалась команда proxycfg. Мы не будем вдаваться в подробности всех ключей данной команды, которые можно увидеть набрав в командной строке Windows XP:

proxycfg /?

В нашем случае, достаточно импортировать настройки прокси-сервера из Internet Explorer (при условии, что он настроен) командой:

proxycfg -u

В Windows 7 и Windows 2008 утилита proxycfg удалена, но весь её функционал перенесён в утилиту netsh. И в нашем случае, для импорта настроек прокси-сервера из Internet Explorer нам понадобится команда:

NetSH WinHTTP import Proxy ie

P.S. Все команды должны выполняться в командной строке с правами администратора.

Источник

WSUS Proxy

This is a workaround for Windows XP to connect Windows Update. This was made because the system that XP used to update was discontinued in 2019.

This proxy converts the newer Microsoft Update protocol that uses SHA-2 to checksum to the SHA-1 based protocol that XP uses. It serves the Windows Updates as if it were a Windows Update server for a enterprise that had its own custom updates. This project uses PHP and OpenSSL which allows the proxy to securely connect to Microsoft Update with https.

There are other versions of this proxy floating around on the internet, but those often have links to Google Drive or other user-uploaded sites the extra software they require. They often also bundle PHP binaries. I don’t trust random binaries, so I made this repository. It aims to link to only Microsoft or other reputable sources for its Binaries.

All the other versions of this system that I’ve seen all the proxy on the XP computer, but I didn’t want to go through the hassle of finding Windows XP compatible PHP version, so I set it up to have the proxy be served from a separate computer.

Requirements

Windows OS: Windows XP / Server 2003 or later.
Server OS: Something that can run PHP.

polarbub was able to get it working on Windows XP SP3 without the Visual C++ Redistributable, the Root Certificates Update, Internet Explorer 7/8, Microsoft IDN Mitigation APIs, or Windows Update MiniTool. He just used the Windows Update Agent.

If those get taken down they can be acquired from the Microsoft CDN directly through the x86 and x64 links. If those stop working too the Wayback Machine may be helpful. The date to put into the Wayback Machine should be around 25/4/2023.

Latest Version of Windows Update Agent for Windows 7 SP1 or Windows Server 2008 R2 SP1 (Version 7.6.7600.320 works on XP). (x86) (x64).
Microsoft Visual C++ 2012 Redistributable (x86) (x64)
Root Certificates Update Password S4QH5TIefi7m9n1XLyTIZ3V5hSv4se1XB6jJZpH5TfB6vkJ8hfRxU7DWB2p or the steps to DIY it can be found here.
Internet Explorer 7/8, or Microsoft IDN Mitigation APIs
(x86) (x64) I was unable to find a Microsoft link to the Microsoft IDN Mitigation APIs. Internet Explorer 8 can be found here. The Wayback Machine must be used to download it.
Windows Update MiniTool version 20.12.2016. This can be found on the RU-Board. Under the large download link there is a smaller one that has version 20.12.2016. There is also an outdated english thread on the MDL form. You do need to make a free account to read it.

UPDATES TO NOT INSTALL

Internet Explorer 8. It will cause explorer.exe to not start correctly on startup. The way to recover from this is detailed here.
Windows XP EOL Notification. This can just be annoying. It will pop up and tell you to install newer Windows.

How To Use

Navigate to the Proxy folder on the server computer.
Modify the extension= line in the php.ini file to have the correct php_curl module. The one that is currently there is for Arch Linux.
Start the proxy server with php -c php.ini -S <your pc's ip address>:<port> -t .. The default port is 8530. Here is a command that uses that: php -c php.ini -S <your pc's ip address>:8530 -t ..
In Control Panel -> Automatic Updates. Set it to Notify me, but don't automatically download or install them.
Install Windows Update Agent on Windows XP system
Run add_wsus.bat <your pc's ip address> [<server port>]
Restart the Windows XP system
Run wuauclt /detectnow to scan for updates. In the proxy server’s log you should be able to see it connecting if it is working.
After a while a yellow update shield will appear in the tray.
Click on it and install the Update(s). Make sure to not select the updates mentioned above
You may have to do multiple rounds of updates if some need to be installed before other.

Instead of step 8-11 you can use the Windows Update MiniTool. I don’t recommend it because it seems a little sketch. It is closed-source software that is distributed through a forum in a foreign language for me (Russian).

Start the Windows Update MiniTool (WUMT). It may take a while to open.
Make sure that the dropdown on the left is set to Windows Server Update Service not Windows Update
Set the Automatic Updates dropdown to Managed By Administrator. This lets you control this in Control Panel not WUMT.
Press the check for updates button. It is in the top left below the filters and looks like a refresh symbol. In the proxy server’s log you should be able to see it connecting if it is working.
Once the available updates have been found it will list them.
Select the updates that you want. Make sure to not select the update mentioned above
Press Download and Install This is a down arrow with a line below it.

Removal

You can stop the php server with Ctrl + C
To stop Windows XP from checking the WSUS Proxy you can run remove_wsus.bat
Restart the XP machine

Notes

There seems to be someone running this proxy server at http://wsus.gimme.money:8530. They might just be hosting this proxy for free, or it might be giving you malware. It seems a little suspect to me so I didn’t use it.

Links that polarbub found useful for research

Windows XP Keys

Guides

https://msfn.org/board/topic/183498-general-and-specific-solutions-for-problems-regarding-auwumu-in-windows-xp/ A list of different methods that I should have just used in the first place. Just scroll down a bit.
https://www.youtube.com/watch?v=2IHJBLlW1j8, https://adventuresinnostalgia.blogspot.com/2022/04/automatic-updates-for-windows-xp-in-2021.html, and https://download.ru/files/q1ttVqHt. Self hosted proxy and WUMT. One source for this proxy.
https://www.youtube.com/watch?v=X_KMOECR7cw, https://docs.google.com/document/d/152geaMY-Ey98CRHX_IGV9vtLvpJloxUa/edit, and
https://docs.google.com/document/d/1A3TrHO_LED06-lmco-yMYRo2J3ZPOi0O/edit. Uses wsus.gimme.money:8530 and wuauclt /detectnow
https://docs.google.com/document/d/16lsXHuEVpODV8n3C3S7CTZriA2g0ilk1P7bDxBXucs8/edit Uses wsus.gimme.money:8530 and wuauclt /detectnow or WUMT
https://www.youtube.com/watch?v=vdIVMwV9MCk and http://i430vx.net/files/wsusstuff/ Seems to be the guy that is hosting wsus.gimme.money:8530. Uses wuauclt /detectnow
https://www.reddit.com/r/windowsxp/comments/lhtoxa/guide_how_to_fully_update_windows_xp_with_windows/ and https://drive.google.com/file/d/1p80TCHFZcmjWlwXvkM31QpJvj5ioqTsd/view. Self hosted proxy and WUMT. The other source for this proxy.
https://msfn.org/board/topic/178377-on-decommissioning-of-update-servers-for-2000-xp-and-vista-as-of-july-2019/page/53/#comment-1211932 Other method 1
https://msfn.org/board/topic/183498-general-and-specific-solutions-for-problems-regarding-auwumu-in-windows-xp/#comment-1216509 Other method 2
https://msfn.org/board/topic/178377-on-decommissioning-of-update-servers-for-2000-xp-and-vista-as-of-july-2019/page/43/#comment-1211254 Other method 3

Downloads

https://www.youtube.com/watch?v=fv5LDGMZRpM Unofficial SP4
https://drive.google.com/file/d/0BwJH2CazcjsINFZFc1pVdk9mNHM/view?resourcekey=0-LD-TdjUx1rNekTXsKfDCPw and https://drive.google.com/file/d/1t1APf_WMum9LTfYVU850-3druKqUeghv/view sketchier WUMT downloads.
https://github.com/stdin82/htfx Old Root Certificate Update.

Credits

Dummy WSUS
That link is broken as the whatever127 has passed away. It seems a few forks were made before the repo was deleted though. Fork 1. Fork 2.
IMI Kurwica WSUS Proxy mod
@mspaintmsi
Project Scripts: abbodi1406 and polarbub
Readme: polarbub

Источник

Windows 7 / Getting Started

Windows Update can use an HTTP proxy server. However, configuring Windows Internet
Explorer is not sufficient to configure Windows Update because Windows Update uses
Windows HTTP Services (WinHTTP) to scan for updates and BITS to download updates.

You can configure Windows Update to use a proxy server in two ways:

Web Proxy Auto Detect (WPAD) settings are configured. The WPAD feature lets services
locate an available proxy server by querying a Dynamic Host Configuration Protocol
(DHCP) option or by locating a particular Domain Name System (DNS) record.
Use the Netsh command-line tool, which replaces the Proxycfg.exe tool.

To use the Netsh command-line tool, first switch to the Netsh Winhttp context. Then, use
the show proxy command to view settings or the set proxy command to define your proxy
server configuration settings. For example, you can run the following command to view
current proxy server settings.

Netsh winhttp show proxy

The following commands demonstrate how to configure proxy server settings.

Netsh winhttp set proxy myproxy
Netsh winhttp set proxy myproxy:80 "<local>;bar"
Netsh winhttp set proxy proxy-server="http=myproxy;https=sproxy:88" bypass-list="*.
contoso.com"

Alternatively, if you have configured Internet Explorer proxy server settings correctly, you
can import settings from Internet Explorer into WinHTTP by using the following command.

Netsh winhttp import proxy source=ie

To reset your proxy server settings, run the following command.

Netsh winhttp reset proxy

Источник