Internet Connected but InternetOpenUrl() failed. 0x80072efd : unknown error

[MaxLinSG]

I used Intune with WAU MSI packaged into .intunewin and deploy to computers. Default installation. all is good. Computers are user accounts without admin rights. I am behind firewall and proxy. However i have firewall opened below domains.

*.amd.com *.azure.com *.azure.net *.azureedge.net *.cloud.microsoft *.intel.com *.live.com *.microsoft.com *.microsoftonline.com *.msocdn.com *.mx.microsoft *.office.com *.office365.com *.outlook.com *.passport.net *.s-microsoft.com *.static.microsoft *.usercontent.microsoft *.windows.com *.windows.net *.windowsphone.com *.windowsupdate.com
Winget is ok at user context (however prompt for UAC admin password, which is not ok). Which is why we want to run WAU with system context. However, i'm getting InternetOpenUrl() failed. 0x80072efd : unknown error
for some reasons. Where is it trying to connect to at this stage? if there more domain i have to open?

Thanks for the help!

`
13:46:24 - Reading WAUConfig
13:46:24 - SymLink for 'update' log file created in in C:\ProgramData\Microsoft\IntuneManagementExtension\Logs folder
13:46:24 - Rerun WAU in system context with ServiceUI
13:46:26 - Reading WAUConfig
#################################################################

11/7/2025 - CHECK FOR APP UPDATES (System context - Connected user)

#################################################################
13:46:26 - Notification Level: Full. Notification Language: English
13:46:26 - Checking internet connection...
13:46:27 - Connected !
13:46:27 - Checking prerequisites...
13:46:27 - MS Visual C++ 2015-2022 is not installed
13:46:27 - -> Downloading https://aka.ms/vs/17/release/VC_redist.x64.exe...
13:46:37 - -> MS Visual C++ 2015-2022 installation failed.
13:46:51 - WinGet installed version: 1.11.400 | WinGet available version: 1.10.340
13:46:51 - -> WinGet is up to date: v1.11.400
13:46:51 - Prerequisites checked. OK
13:46:51 - Selected winget instance: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.26.400.0_x64__8wekyb3d8bbwe\winget.exe
13:46:51 - WAU current version: 2.5.2
13:46:51 - WAU AutoUpdate is Enabled.
13:47:10 - WAU is up to date.
13:47:10 - WAU uses Black List config
13:47:10 - -> Successsfully loaded default excluded apps list.
13:47:10 - Checking application updates on Winget Repository named 'winget' ..
13:48:19 - No update found. 'Winget upgrade' output:

██████▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒ 1024 KB / 4.66 MB
████████████▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒ 2.00 MB / 4.66 MB
███████████████████▒▒▒▒▒▒▒▒▒▒▒ 3.00 MB / 4.66 MB
█████████████████████████▒▒▒▒▒ 4.00 MB / 4.66 MB
██████████████████████████████ 4.66 MB / 4.66 MB
Failed in attempting to update the source: winget
An unexpected error occurred while executing the command:
InternetOpenUrl() failed.
0x80072efd : unknown error

13:48:19 - No new update.
13:48:19 - End of process!
`

[KnifMelti]

Hi!
This is the function:

function Test-Network {

#Init
$timeout = 0

#Test connectivity during 30 min then timeout
Write-ToLog "Checking internet connection..." "Yellow"

try {
    $NlaRegKey = "HKLM:\SYSTEM\CurrentControlSet\Services\NlaSvc\Parameters\Internet"
    $ncsiHost = Get-ItemPropertyValue    -Path $NlaRegKey -Name ActiveWebProbeHost
    $ncsiPath = Get-ItemPropertyValue    -Path $NlaRegKey -Name ActiveWebProbePath
    $ncsiContent = Get-ItemPropertyValue -Path $NlaRegKey -Name ActiveWebProbeContent
}
catch {
    $ncsiHost = "www.msftconnecttest.com"
    $ncsiPath = "connecttest.txt"
    $ncsiContent = "Microsoft Connect Test"
}

While ($timeout -lt 1800) {
    try {
        $ncsiResponse = Invoke-WebRequest -Uri "http://$($ncsiHost)/$($ncsiPath)" -UseBasicParsing -UserAgent ([Microsoft.PowerShell.Commands.PSUserAgent]::Chrome); # DevSkim: ignore DS137138 Insecure URL
    }
    catch {
        $ncsiResponse = $false
    }

    if (($ncsiResponse) -and ($ncsiResponse.StatusCode -eq 200) -and ($ncsiResponse.content -eq $ncsiContent)) {
        Write-ToLog "Connected !" "Green"

        #Check for metered connection
        [void][Windows.Networking.Connectivity.NetworkInformation, Windows, ContentType = WindowsRuntime]
        $cost = [Windows.Networking.Connectivity.NetworkInformation]::GetInternetConnectionProfile().GetConnectionCost()

        if ($cost.ApproachingDataLimit -or $cost.OverDataLimit -or $cost.Roaming -or $cost.BackgroundDataUsageRestricted -or ($cost.NetworkCostType -ne "Unrestricted")) {

            Write-ToLog "Metered connection detected." "Yellow"

            if ($WAUConfig.WAU_DoNotRunOnMetered -eq 1) {

                Write-ToLog "WAU is configured to bypass update checking on metered connection"
                return $false

            }
            else {

                Write-ToLog "WAU is configured to force update checking on metered connection"
                return $true

            }

        }
        else {

            return $true

        }

    }
    else {

        Start-Sleep 10
        $timeout += 10

        #Send Warning Notif if no connection for 5 min
        if ($timeout -eq 300) {
            #Log
            Write-ToLog "Notify 'No connection' sent." "Yellow"

            #Notif
            $Title = $NotifLocale.local.outputs.output[0].title
            $Message = $NotifLocale.local.outputs.output[0].message
            $MessageType = "warning"
            $Balise = "Connection"
            Start-NotifTask -Title $Title -Message $Message -MessageType $MessageType -Balise $Balise
        }

    }

}

#Send Timeout Notif if no connection for 30 min
Write-ToLog "Timeout. No internet connection !" "Red"

#Notif
$Title = $NotifLocale.local.outputs.output[1].title
$Message = $NotifLocale.local.outputs.output[1].message
$MessageType = "error"
$Balise = "Connection"
Start-NotifTask -Title $Title -Message $Message -MessageType $MessageType -Balise $Balise

return $false

}

[MaxLinSG]

Thank you for that.. Do you know which winget repo it was going to? (or how can I check it?) so I can request for a firewall whitelisting.. Thanks Knif!

[KnifMelti]

The used source is winget:

[MaxLinSG]

Hmm. Already whitelisted *.microsoft.com..
Is there a way I can add proxy into the WAU? if yes how? (I have read up, but not much instructions).

I do WAU default black list (update all, no custom black list).

I'm really stuck in this. Thank you in advance for your time......

[MaxLinSG]

microsoft/winget-cli#190

If this is the winget proxy, how can add this proxy to all the winget WAU used? Any possibility? Thanks!

[KnifMelti]

Sorry for the delay, it took a moment to find in this repo...
...in #961 @kjbears added their owv proxy in the Test-Network function (but your network check works):

IFirst of all, for some unknown reason, whenever winget-upgrade.ps1 is ran in the SYSTEM context (Winget-AutoUpdate scheduled task) it just keeps on failing... One of the issues happened because a proxy parameter was missing in the Test-Network.ps1 file under the functions folder. So I've added it at the correct place:

I

IThe SYSTEM context doesn't have access to the Proxy settings configured for the user in the Windows settings (Winkey --> proxy) and this is why it would fail and show an error like "No internet Connection". All traffic to the internet goes through the proxy in our organization so no wonder it failed. Can WAU be made to work reliably in SYSTEM context in proxy environments? Do I need to create a PS script to add the proxy configuration? However even after fixing this issue, it would still fail but for a different reason. It seems like the SYSTEM context doesn't have access to winget.exe... Ideally, I would like for Winget-AutoUpdate to work in SYSTEM context and run for all users even if they don't have admin privileges. I'll show you a snippet from the logs:

I answered at the end about proxy: #961 (comment)

And no. There isn't a place in the settings to add your own proxy for the winget parts.. ..sorry again!

[KnifMelti]

But WinGet respects the Windows system proxy by default...

[KnifMelti]

You can set a proxy in windows via GPO, Environment or PowerShell