Hi,

the Error 0x8024500c often occurs at Windows 10 in managed environments, which means the Windows Updates are delivered by WSUS or SCCM and no internet connection is available or it is not allowed to connect directly to Microsofts Windows Update.

In this case usually the policies (no internet connect and DualScan disabled)


Computer Configuration\Administrative Templates\Windows Components\Windows Update
Do not connect to any Windows Update Internet location = 1

Computer Configuration\Administrative Templates\Windows Components\Windows Update
Remove access to use all Windows = 1

Computer Configuration\Administrative Templates\Windows Components\Windows Update
Do not allow update deferral policies to cause scans against Windows Update = 1

are set because all updates should be taken from the WSUS/SCCM Server and not from the internet.

If this error occurs and you set
Do not connect to any Windows Update Internet location = 0 or to unconfigured the Windows Search takes a long time and in WindowsUpdate.log has some entries like this are logged:
SLS *FAILED* [80248007] Method failed [SlsDatastoreLookup:797]
SLS Retrieving SLS response from server...
SLS Making request with URL HTTPS://sls.update.microsoft.com/SLS/{9482F4B4-E343-43B6-B170-9A65BC822C77}...
SLS *FAILED* [80072EE2] Send request
SLS *FAILED* [80072EE2] WinHttp: SendRequestToServerForFileInformation (retrying with default proxy)
Misc *FAILED* [80072EE2] Library download error. Will retry. Retry Counter:0


To generate the WindowsUpdate.log file use the powershell cmdlet Get-WindowsUpdateLog

PS D:\> Get-WindowsUpdateLog
PS D:\> & notepad C:\Users\$ENV:Username\Desktop\WindowsUpdate.log

I’ve done a lot of research against the 0x8024500c error:

Ensure that no Windows Update Settings for Business are set, the decision which Updates are send to the client should only be done at the Update Management framework (WSUS, SCCM)

Check if the regarding policies are set to none configured

Unfortunately it is not sufficient to disable the policies. There also some registry keys to delete (if set):

D:\> reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v DeferFeatureUpdates /f
D:\> reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v DeferQualityUpdates /f
D:\> reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v BranchReadinessLevel /f
D:\> reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v DeferFeatureUpdatesPeriodInDays /f
D:\> reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v PauseFeatureUpdatesStartTime /f
D:\> reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v DeferQualityUpdatesPeriodInDays /f
D:\> reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v PauseQualityUpdatesStartTime /f
D:\> reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v PauseDeferrals /f
D:\> reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v ManagePreviewBuilds /f
D:\> reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\UpdatePolicy\PolicyState /f
D:\> reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings /f
D:\> reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\UX /v IsConvergedUpdateStackEnabled /f

Then refresh the policy

D:\> gpupdate /force
D:\> net stop wuauserv
D:\> net start wuauserv

and trigger Windows Update scan

D:\> UsoClient.exe startscan

And updates should appear

Michael