0x80240438
Windows Update cannot reach the update service
What it means
The update client asked the configured server for updates and got no usable answer, which usually means a blocked endpoint or a wrong WSUS setting.
Common causes
- A proxy, VPN or firewall blocking the Windows Update endpoints
- A WSUS or Intune policy pointing at an unreachable server
- A metered connection that Windows refuses to download over
How to fix it
- Run the Windows Update troubleshooter: Settings > System > Troubleshoot > Other troubleshooters > Windows Update.
- Disconnect the VPN and set the network as unmetered: Settings > Network & internet > Wi-Fi > your network, turn off metered.
- If the PC is managed, ask IT whether the update server address is still correct.