Office 365 Pro Plus Fails to Update, or Fails with Error Code: 30088-27

[Update: this article was updated on 15 April 2014. As information about the second scenario has changed from an Office build issue, to a Office Deployment Tool issue]

There are several reasons why your Office 365 Pro Plus might fail with the error, error code: 30088-27. However, in this article I point out one scenario which I believe could be common, and a second scenario, which is specific to early builds of the Office Deployment Tool.

First Common Scenario

This occurs when Office 365 Pro Plus is attempting to fetch updates. The process which fetches the updates, doesn’t run as the user who is logged into the PC, it runs as “Local System”. If “Local System” cannot connect to the internet, you will receive this error. “Local System” might not be able to connect to the internet for a variety of reasons, but the most common appears to be when your company is using manual proxy settings in the web browser. When you configure manual proxy settings for your users, it doesn’t effect the “Local System” account, rather Local System is always set to “Automatically detect settings”. Therefore if it cannot identify the proxy through “Automatically detect settings”, the update will fail as the updater process cannot connect to the internet. Interestingly, on earlier builds of Office 365 Pro Plus, you don’t get an error, you just don’t see Office ever update itself (even after turning update off, and back on again, as described here).

To prove if you are a victim of this issue, you can force Local System (and all winhttp applications) to use a proxy, by running the Netsh command. I don’t believe the Netsh command is a long term solution, but rather helps you troubleshoot the issue. A long term solution is recommended later in this article.

Open the command prompt (run as administrator), and use the following command to import the manual proxy settings from IE:

netsh winhttp import proxy source=ie

Now rerun the update, and it should start work…well, it will work if you are a victim of the issue described above. To reset winhttp back, run the following command:

netsh winhttp reset proxy

2 other reasons why you might receive the same error code. 1 – It could be the Local System cannot authenticate to your web proxy. 2 – You might be updating from a local file share, and local system doesn’t have rights to the local file.

Troubleshooting techniques that allowed us to find the route cause, that you might be interested in:

1. Use network monitor on the PC in question, and see what is happening under the hood. You should see Office reach out to a URL which looks something like this one; The cab file contains the latest Office 365 Pro Plus version number, and the “Local System” account must be able to fetch this cab file. Using network monitor, you should be able to see if this is happening, if the request is hitting your proxy server, or trying to go via a direct route.

2. Enable version logging. This works for both installation and updates. These 2 articles are good references for verbose logging:


Longer term solution:

The better long term solution for this, in my opinion, is that you rather want to use “automatically detect settings”, this is for both local system account, and also for users. This can be implemented with “not much effort”, by using WPAD with any existing web proxy solution. I am not an expert on WPAD, but here is a quick 101 on how it works.

Use a PAC / DAT file to hold the proxy configuration for the network. This is a text file, placed on a web server on your network, which holds configuration as to which proxy server(s) to use, for which end points. This allows you to specify which IPs / Host Names are internal, and gives greater flexibility than the manual settings you probably have today anyway. This file should be placed on a highly available web server, perhaps on your proxy server(s) is a good place.

Next, in your local DNS (or hosts file for testing), you register the name WPAD to point to the server(s) where the text file is located. That’s it. Now, any web browser which is configured to use “automaticly detect settings”, will fetch the proxy text file (http://wpad/wpad.dat) from the web server and work accordingly. This means, without changing any user’s PC settings, Office 365 Pro Plus will start working because local system account is set to automatic detect settings by default. You can then over time, change user’s manual settings to auto detect.

Second Scenario, specific to early build of the Office Deployment Tool

We (project team) found a specific issue, when you have deployed Office 365 Pro Plus, using an earlier build of the Office Deployment Tool. We found that specifically, build 15.0.4535.1503 of the Office Deployment Tool causes this issue. In this case, we found that a missing registry key was causing an issue that prevents Office 365 Pro Plus updating, and we would get the same error i.e. error code: 30088-27. The registry key in question, tells Office 365 Pro Plus where to go, to fetch updates. By manually adding the key, updating started to work (as long as you are not a victim of the “Local System” issue too).

What key?

You should have 1 of the following keys (just having one of them works, you don’t need both).

  • HKLM\Software\Microsoft\Office\15.0\ClickToRun\Configuration\CDNBaseUrl
  • HKLM\Software\Microsoft\Office\15.0\ClickToRun\Configuration\updateurl

The value should be set to the path where updates are retrieved from. We copied ours from a value in the propertybag key. It will look something like this Disclaimer: we haven’t checked all deployments of Office Deployment Tool, so I am not sure if this value is the same for all users, countries, and versions of Office 365 Pro Plus, hence the suggestion to copy it from an existing key in your registry.

The image below shows this value:


Second Disclaimer: This has yet to be officially published as a bug by Microsoft, but is rather something that I found on a recent engagement with a customer. I accept no responsibility for your actions when editing the registry. Use this information to help identify the issue, and contact Microsoft support for guidance on how best to resolve it.

Comments (15)

  1. David Okerson says:

    Thank you very much for making the effort to publish these directions.  My problem was failure to either "update" or "repair" Office 2013 Professional Plus.  The problem had persisted despite uninstalling and reinstalling Office *twice*, the second time using Microsoft's "fix" for complete uninstallation.  I had not been able to find any useful help from any Microsoft source, despite a fairly intense search. Adding the second registry key (updateurl" fixed the problem immediately.  Based on the other requests for help which I saw during my search, I suspect the fault you have identified is quite widely distributed.

  2. Janne Korhonen says:

    Yes, Auto update works again, after i add that CDNBaseUrl…… Windows 8.1 64bit // Microsoft Office pro plus 2013 64bit.

  3. R. De Sutter says:

    Thank you for the second solution! Now it works.

    Is it correct to assume the issue is fixed in version 15.0.4619.1000 of the office deployment tool?

  4. Deezy says:

    Thanks for a straight-forward fix that works!

    It's utterly ridiculous that I have to be poking around and creating registry keys after a clean install of Office 2013 Home and Business with retail key on a fresh format and install of legit Windows 7 also with retail key, but whatever, at least it works again.

  5. I can confirm that the latest versions of the Office Deployment Tool don't have this issue. Also, there has been a change in that the install process now runs as the interactive user, instead of Local System. Check out this and more updates here:…/the-garage-series-for-office-365-updates-to-office-365-proplus-for-admins-and-first-look-at-upcoming-shared-computer-support

  6. Dave S. says:

    I was running into the 30088-27 error code after installing Office Professional Plus 2013 on a Dell Inspiron 17 5000 Series laptop running Windows 8.1 Update 64-bit. I made the manual change to the registry that you suggested, and now everything works as it should. Thanks a bunch!

  7. rony009 says:

    Hey I had the same issue with my computer. I wasted my time on it for

    many days but finally I got a solution from this link

  8. Ivan says:

    Thx! The second scenario solve our case!

  9. Sandor says:

    Seems scenario 2 works for me too … 🙂 )  Thanks a lot for getting me to this point!

    Remark:I had to add both keys to get downloads starting.

  10. ClarkJohan says:

    Ometimes Office 365 will give some vague directions often confused a lot. While updating it may give some error codes, a normal user can't manage. But somehow I could manage with office live support site, they have clearly given all step by step procedure even chat support too. For your assistance,here it is

  11. learning daily says:

    Just wanted to say thanks for the write-up.  This resolved issues I was having on some of my Windows 8 client machines.

  12. Ken Lai says:

    We encountered this issue recently while trying to debug some issues with Active X and Excel 2013.  

    The base and update URL Regkeys were present and set correctly. Quick and online repair of office did not fix the issue.

    The problem was resolved by uninstalling office 2013, rebooting the PC and reinstalling a fresh copy.  (We used the same installation source on our local server)

    The PC previously had office 2007 and was upgraded to Office 2013 (365).  I suspect that by not cleaning uninstalling previous versions of office, there are some residual files, reg keys etc, that is contributing to this and other issues.

  13. thedeepestend says:

    In my environment it was error 30174-4 during Click to Run installation and inability to update o365 when installed from offline source. I knew it was proxy case but was misleaded by initial connection that went to the proxy configured for user (in my case squid 3.3). I thought it was related to my squid configuration. Apparently it wasn't. What I saw in logs was something like this pair:


    TIME 196 IPADDRESS TCP_MISS_ABORTED/200 52246 GET…/ – HIER_DIRECT/ application/octet-stream

    TIME 3122 IPADDRESS TCP_MISS/206 3903618 GET…/ – HIER_DIRECT/ application/octet-stream


    As you can tell looking at the address: it is the same URL as in the CDNBaseUrl mentioned in the article. Office365ProPlus here, Polish version.

    Resolution from first scenario solved the problem. Thank you.

  14. john mathew says:

    Causes for the Office install error code 30088-27

    1. Your security software or your firewall might be blocking the Office installation.

    2. Proxy settings are enabled on your computer.

    3. Pre-existing version of an Office Suite.

    4. Incompletepartialfailed repairinstallationchangeremoval of the Office Suite.…/error-30088-27

  15. gfsgjialijd says:

    I recommend you to visit this site: <a href="…/a&gt;, It great work and their customer service is good and their products are the absolute best, strongly recommend.