Windows Error 0x80072EFE: The Connection With the Server Was Terminated Abnormally

Illustration of a broken network cable between a laptop and a cloud server

Error 0x80072EFE means the connection to the update or Store server started and then dropped before the data finished arriving. The usual suspects are a proxy or security product interfering with the traffic, a wrong system clock, bad DNS or a damaged network stack. Work from the cheapest test, the clock and a different network, toward the winhttp and winsock resets.

Key takeaways

  • The code is a network symptom (the connection was cut mid-transfer), not a sign that Windows files are broken.
  • Try another network, such as a phone hotspot, early: it tells you whether the PC or the connection is at fault.
  • Stale proxy settings and third-party firewalls or VPNs are the most common local causes.
  • Correct date, time and time zone matter because encrypted connections fail on a wrong clock.
  • Resetting winhttp and winsock is quick, but it removes custom network settings and can disconnect VPN or security-suite network filters, so note them first.

What the message is telling you

The text "The connection with the server was terminated abnormally" belongs to the Windows internet client layer, WinINet and WinHTTP. Windows Update, the Microsoft Store and some installers use these to talk to Microsoft. Error 0x80072EFE is raised when the server connection was opened and then closed in a way the client did not expect. In plain terms, something between your PC and the server interrupted the conversation.

That something might be on the PC: a security product inspecting encrypted traffic, a proxy that no longer exists, a corrupted network stack. It might also be outside: a router with a flaky firmware, an ISP that resets long connections, a school or office filter blocking certain hosts. The aim is to work out which side.

Where it shows up

Likely causes and where to start

CauseClueGo to
Wrong date, time or time zoneClock is off by hours or days, often after a dead CMOS batteryClock check
Stale proxy configurationProxy turned on in Settings, or left by old softwareProxy reset
Security software scanning HTTPSWorks with the antivirus pausedSecurity software test
VPN or filter on the networkWorks from another network onlyNetwork isolation test
DNS troubleSome sites load, Microsoft hosts do not, or loading is slowDNS steps
Damaged Winsock catalogOther apps show network errors toonetsh resets
Update service components out of stepNetwork is fine, only Windows Update failsUpdate component reset

Fast tests that save time

First, find out whether the internet is truly fine. Open a browser and load a few different sites, including one that uses https. If nothing loads, fix the connection first and ignore the Windows error for now.

Second, move the PC to another network. A phone hotspot is ideal. If the update or Store works there, your PC is fine and the problem sits in the router, the ISP path, a firewall appliance or a filter on the usual network. If it still fails on the hotspot, the cause is on the PC.

Third, restart the router and the PC. It sounds basic, but half-open connections and stuck DNS caches are cleared by it more often than people expect.

Check the clock and the time zone

Encrypted connections depend on certificates that are valid for a date range. If your clock is wrong, Microsoft servers can look expired or not yet valid, and the connection is dropped. Go to Settings, Time and language, Date and time. Turn on Set time automatically and Set time zone automatically, and press Sync now. If the time keeps resetting after each power-off, the small motherboard battery is probably dead, and replacing it prevents repeated failures.

Reset the proxy that Windows services use

Windows services do not always follow the same proxy settings as your browser. WinHTTP has its own, and it can retain an address from software you removed long ago. Look first at Settings, Network and internet, Proxy, and turn off Use a proxy server unless your workplace requires it. Then view and clear the WinHTTP setting from an elevated Command Prompt:

netsh winhttp show proxy
netsh winhttp reset proxy

If the first command lists a server that you do not recognise, resetting is exactly what you want. If you are on a company network that uses a proxy on purpose, ask your administrator before changing it, because the reset would remove the required entry.

Take security software out of the picture

Many antivirus and internet security suites inspect HTTPS traffic through a local filter. A bug or an outdated component in that filter can cut the connection mid-transfer, which is a precise match for this error. Pause the web protection or the firewall of the third-party product for ten minutes and try Windows Update or the Store again. If it now works, update the security product, or look in its settings for an option such as scanning encrypted connections and turn that off. Do not leave the PC unprotected: turn the protection back on afterwards. Windows Security stays active on its own when you pause a separate product, so it is safe to test.

The same logic applies to a VPN. Disconnect it, test again, and if the error is gone, switch the VPN protocol or server, or allow Windows Update through its split tunnelling settings.

Not sure what is wrong? Get a diagnosis first.

Our certified tech can connect remotely, check your software, drivers and backups, and tell you honestly whether the problem needs a hands-on repair.

DNS and the network stack

Clear the resolver cache, release the address, and renew it:

ipconfig /flushdns
ipconfig /release
ipconfig /renew

If the connection looks slow or only certain hosts fail, try a different DNS provider in the adapter settings. In Settings, Network and internet, choose your connection, edit the DNS server assignment, and enter a public resolver that you trust. Test after the change. If everything works with it, your router or ISP DNS was the weak link.

Next, reset the Winsock catalog and the TCP/IP stack. These commands rebuild the layers that applications use to open connections:

netsh winsock reset
netsh int ip reset

Restart the PC after running them. They remove manually set static IPs and some custom adapter settings, so write those down first if you use any. Windows 11 also has Settings, Network and internet, Advanced network settings, Network reset, which does a wider job and reinstalls adapters. Use it last, because it removes saved VPN profiles and similar entries.

If only Windows Update fails

When the browser works on the same network, the proxy and DNS are clean, and the Store is fine, the update client itself may be out of step. Run the built-in troubleshooter from Settings, System, Troubleshoot, Other troubleshooters, Windows Update (if your build still lists it). If that does not help, stop the update services, clear the download cache, and start them again:

net stop wuauserv
net stop bits
ren C:\Windows\SoftwareDistribution SoftwareDistribution.old
net start bits
net start wuauserv

Windows rebuilds the folder automatically. The update history list in Settings may appear empty afterwards; that is normal. If a .old folder already exists from a previous attempt, delete or rename it first. Run a check for updates again. Then, if component damage is suspected, DISM and sfc come next:

DISM /Online /Cleanup-Image /RestoreHealth
sfc /scannow

Our broader guide to stuck or failing Windows Update covers more of this ground, and the page for error 0x80070005 explains the permission-type failures that sometimes appear in the same history list.

Router and network equipment

If the hotspot test showed the PC working elsewhere, give the home or office network some attention. Restart the router, update its firmware, and check whether a parental control, content filter or DNS filtering feature is turned on. Some mesh systems also drop long encrypted sessions. In an office, ask the person who manages the firewall whether Microsoft update and Store hosts are filtered or inspected. A rule that terminates large downloads produces exactly this symptom.

Store-specific steps

For the Store, run wsreset from the Start menu search or the Run box. A blank window opens, closes after a bit, and the Store restarts with a clean cache. Signing out of the Store and back in is another quick test. Make sure that the Microsoft Store Install Service is running in services.msc, and set to Manual or Automatic.

What to avoid

When to bring in a technician

This is a good case for a remote session: a technician can look at the proxy, the security product settings, the services and the update logs together, which takes far less time than trial and error. See how it works on our remote repair page and Windows support. If the update problem comes with a different code, try the guide for 0x800f081f.

Keeping update connections reliable

FAQ

What does 0x80072EFE mean in simple terms?

The connection to the update or Store server was cut off while data was moving. It points to a network or interception problem, not to a faulty Windows file.

Can antivirus cause 0x80072EFE?

Yes. Products that scan encrypted traffic can interrupt the connection. Pausing web protection briefly shows if that is the cause.

Why does Windows Update work on my phone hotspot but not at home?

Then the PC is fine. The router, the ISP path, DNS or a filter on your home network is dropping the connection.

Will netsh winsock reset delete my files?

No. It rebuilds network settings. You may lose custom static IP or adapter configuration, so note those first.

Does the date and time really matter?

Yes. Secure connections rely on certificate dates, and a clock that is far off makes servers look invalid, so the connection is dropped.

Is the Store error the same as the Update error?

The code is the same family of network failure and the early checks are the same. The last steps differ: wsreset for the Store, cache and service steps for Windows Update.

Should I use a different DNS server?

It is worth a test. If the error disappears with another resolver, your router or ISP DNS was the cause.

Can this be fixed remotely?

In most cases, yes, provided the PC has some working internet access for the session. A technician can inspect proxy, services and security settings together.