cancel
Showing results for 
would you rather see results for 
Did you mean: 
Need help?

Windows Update Not Working (DNS Issue)

Reply
5 REPLIES 5
orange-555
Chatterbox
Since 2019-01-29, when trying to update Windows 10 (17763.292, 1809), the Settings app displays an error message saying that it failed.  It appears to be a DNS issue because if the DNS server is changed to another non-TalkTalk DNS server, it works OK.
 
I'm not sure whether this is the cause of the issue, however I noticed that when using PowerShell to query different DNS servers for the Windows Update host names, the TalkTalk DNS servers don't reply with an 'A' record for ctldl.windowsupdate.com.  It responds with only a 'SOA' record, with a time-to-live (TTL) of 0.
 
Note:
79.79.79.77 = TalkTalk DNS Server
8.8.8.8 = Google DNS Server
9.9.9.9 = Quad9 DNS Server
1.1.1.1 = Cloudflare DNS Server
 
Resolve-DnsName -Name ctldl.windowsupdate.com -Server 79.79.79.77
Name                   : nsatc.net
QueryType              : SOA
TTL                    : 0
Section                : Authority
NameAdministrator      : dns.level3.net
SerialNumber           : 1548797655
TimeToZoneRefresh      : 10800
TimeToZoneFailureRetry : 2700
TimeToExpiration       : 3600000
DefaultTTL             : 900


Resolve-DnsName -Name ctldl.windowsupdate.com -Server 8.8.8.8
Name       : cs11.wpc.v0cdn.net
QueryType  : AAAA
TTL        : 3370
Section    : Answer
IP6Address : 2606:2800:133:672:1e5f:2264:1854:1189

Name       : cs11.wpc.v0cdn.net
QueryType  : A
TTL        : 3467
Section    : Answer
IP4Address : 93.184.221.240


Resolve-DnsName -Name ctldl.windowsupdate.com -Server 9.9.9.9
Name       : cs11.wpc.v0cdn.net
QueryType  : AAAA
TTL        : 800
Section    : Answer
IP6Address : 2606:2800:133:672:1e5f:2264:1854:1189

Name       : c-0001.c-msedge.net
QueryType  : A
TTL        : 18
Section    : Answer
IP4Address : 13.107.4.50


Resolve-DnsName -Name ctldl.windowsupdate.com -Server 1.1.1.1
Name       : a767.dscg3.akamai.net
QueryType  : AAAA
TTL        : 19
Section    : Answer
IP6Address : 2a02:26f0:2d::216:3031

Name       : a767.dscg3.akamai.net
QueryType  : A
TTL        : 13
Section    : Answer
IP4Address : 2.22.48.33
Resolve-DnsName -Name sls.update.microsoft.com -Server 79.79.79.77
Name       : sls.update.microsoft.com.nsatc.net
QueryType  : AAAA
TTL        : 138
Section    : Answer
IP6Address : 2a01:111:f307:1790::f001:7a5

Name       : sls.update.microsoft.com.nsatc.net
QueryType  : A
TTL        : 103
Section    : Answer
IP4Address : 13.74.179.117


Resolve-DnsName -Name sls.update.microsoft.com -Server 8.8.8.8
Name       : sls.update.microsoft.com.nsatc.net
QueryType  : AAAA
TTL        : 299
Section    : Answer
IP6Address : 2a01:111:f307:1790::f001:7a5

Name       : sls.update.microsoft.com.nsatc.net
QueryType  : A
TTL        : 299
Section    : Answer
IP4Address : 13.74.179.117


Resolve-DnsName -Name sls.update.microsoft.com -Server 9.9.9.9
Name       : sls.update.microsoft.com.nsatc.net
QueryType  : AAAA
TTL        : 161
Section    : Answer
IP6Address : 2a01:111:f335:1792::f001:7a5

Name       : sls.update.microsoft.com.nsatc.net
QueryType  : A
TTL        : 114
Section    : Answer
IP4Address : 13.68.93.109


Resolve-DnsName -Name sls.update.microsoft.com -Server 1.1.1.1
Name       : sls.update.microsoft.com.nsatc.net
QueryType  : AAAA
TTL        : 233
Section    : Answer
IP6Address : 2a01:111:f307:1790::f001:7a5

Name       : sls.update.microsoft.com.nsatc.net
QueryType  : A
TTL        : 270
Section    : Answer
IP4Address : 13.68.93.109
Resolve-DnsName -Name v10.events.data.microsoft.com -Server 79.79.79.77
Name       : onecollector.cloudapp.aria.akadns.net
QueryType  : A
TTL        : 10
Section    : Answer
IP4Address : 52.114.76.37

Name                   : akadns.net
QueryType              : SOA
TTL                    : 48
Section                : Authority
NameAdministrator      : hostmaster.akamai.com
SerialNumber           : 1549213562
TimeToZoneRefresh      : 90000
TimeToZoneFailureRetry : 90000
TimeToExpiration       : 90000
DefaultTTL             : 180

Resolve-DnsName -Name v10.events.data.microsoft.com -Server 8.8.8.8
Name       : onecollector.cloudapp.aria.akadns.net
QueryType  : A
TTL        : 29
Section    : Answer
IP4Address : 52.114.75.78

Name                   : akadns.net
QueryType              : SOA
TTL                    : 179
Section                : Authority
NameAdministrator      : hostmaster.akamai.com
SerialNumber           : 1549213711
TimeToZoneRefresh      : 90000
TimeToZoneFailureRetry : 90000
TimeToExpiration       : 90000
DefaultTTL             : 180


Resolve-DnsName -Name v10.events.data.microsoft.com -Server 9.9.9.9
Name       : onecollector.cloudapp.aria.akadns.net
QueryType  : A
TTL        : 29
Section    : Answer
IP4Address : 52.114.88.20

Name                   : akadns.net
QueryType              : SOA
TTL                    : 5
Section                : Authority
NameAdministrator      : hostmaster.akamai.com
SerialNumber           : 1549213550
TimeToZoneRefresh      : 90000
TimeToZoneFailureRetry : 90000
TimeToExpiration       : 90000
DefaultTTL             : 180

Resolve-DnsName -Name v10.events.data.microsoft.com -Server 1.1.1.1
Name       : onecollector.cloudapp.aria.akadns.net
QueryType  : A
TTL        : 22
Section    : Answer
IP4Address : 52.114.158.91

Name                   : akadns.net
QueryType              : SOA
TTL                    : 22
Section                : Authority
NameAdministrator      : hostmaster.akamai.com
SerialNumber           : 1549213587
TimeToZoneRefresh      : 90000
TimeToZoneFailureRetry : 90000
TimeToExpiration       : 90000
DefaultTTL             : 180
In addition, when testing the network connection to ctldl.windowsupdate.com with the router set to TalkTalk DNS servers, it displays the below name resolution error:
Test-NetConnection -ComputerName ctldl.windowsupdate.com -InformationLevel Detailed –TraceRoute
WARNING: Name resolution of ctldl.windowsupdate.com failed

ComputerName          : ctldl.windowsupdate.com
RemoteAddress         :
NameResolutionResults :
InterfaceAlias        :
SourceAddress         :
NetRoute (NextHop)    :
PingSucceeded         : False
When testing the network connection to ctldl.windowsupdate.com with the router set to Google DNS servers (8.8.8.8), it displays the below:
Test-NetConnection -ComputerName ctldl.windowsupdate.com -InformationLevel Detailed –TraceRoute

ComputerName           : ctldl.windowsupdate.com
RemoteAddress          : 93.184.221.240
NameResolutionResults  : 93.184.221.240
                         2606:2800:133:672:1e5f:2264:1854:1189
InterfaceAlias         : WiFi
SourceAddress          : 192.168.1.7
NetRoute (NextHop)     : 192.168.1.1
PingSucceeded          : True
PingReplyDetails (RTT) : 27 ms
TraceRoute             : 192.168.1.1
                         0.0.0.0
                         78.151.230.231
                         78.151.230.236
                         78.144.0.81
                         78.144.3.133
                         152.195.97.129
                         93.184.221.240
 
Divsec
Community Star

Aren't the end for talk talk 79.79.79.79 and .80. ? I think 79.79.79.77 might be part of your problem?

Regards Divsec, I don't work here, know little, and have too many opinions.
Community Team

Hi orange-555,

 

I've seen a similar thread this morning so I am just looking into this and will let you know as soon as I know more.

 

Thanks

 

orange-555
Chatterbox

The issue is still present when using TalkTalk DNS servers, however Microsoft have now officially acknowledged the issue at the below link:

 

https://support.microsoft.com/en-gb/help/4464619/windows-10-update-history

 

February 4, 2019 9:45 PM PST
“The Windows Update service was impacted by a data corruption issue in an external DNS service provider global outage on January 29, 2019. The issue was resolved on the same day and Windows Update is now operating normally, but a few customers have continued to report issues connecting to the Windows Update service. We expect these issues will go away as downstream DNS servers are updated with the corrected Windows Update DNS entries.”

 

orange-555
Chatterbox

Update:  The TalkTalk DNS servers have now started working correctly again:

Resolve-DnsName -Name ctldl.windowsupdate.com -Server 79.79.79.77

Name       : cs11.wpc.v0cdn.net
QueryType  : AAAA
TTL        : 300
Section    : Answer
IP6Address : 2606:2800:133:672:1e5f:2264:1854:1189

Name       : cs11.wpc.v0cdn.net
QueryType  : A
TTL        : 300
Section    : Answer
IP4Address : 93.184.221.240
Community Team

Hi orange-555,

 

Thanks for the update. Is everything still ok?

 

Thanks