May 122008
 


Automatic Updates service on Windows XP may be stopped with the following error

Could not start the Automatic Updates service on local computer. Error 0×80004015: The class is configured to run as a security ID different from the caller.

This can happen when your Windows XP clients download their updates from the WSUS server and is due to a permissions issue. The quickest and the easiest solution would be to reset the permissions on the Automatic Updates client and then try and detect the Automatic Update Server once again.

To display the current status of the Automatic Updates status

1. Click Start – Run and type “cmd” to launch the Command prompt

2. From the command prompt, type

C:\>SC sdshow wuauserv

D:(A;;CCLCSWRPLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)

Now, reset the permissions as follows from the command prompt

C:\>SC sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)

That would reset the permissions on the Automatic Update Service. We can now try and detect the Automatic Updates Server from the command prompt to fix the problem

C:\>wuauclt.exe /detectnow

This should fix the problem

Incoming search terms:

  10 Responses to “Error 0×80004015 when Automatic updates fail with WSUS Server”

  1. That works temporarily. When you reboot it goes back to the previous values

  2. This fix works, please try this and it will solve your problem.

  3. hi if this is temporary, please tell me permanent solution…

    my e mail id is ravikiran.desai@gmail.com

  4. The reason it is temporary is most likely due to Group Policy being used to configure auto updates to use a local WSUS server.

    The (incorrect) permissions used in the GP to set the service to “autostart” are over-writing the changed permissions each time you reboot.

    Try reviewing the permission in the GP, and adding the permissions used in the command which fixes it temporarily.

    You’ll need to decode this:

    SC sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)

    to determine what permissions are actually being set.

  5. I had the issue above and resolved it by adjusting the group policy object.
    Under Computer config > Windows Settings > Security Settings > System Services

    Set Background Intelligent Transfer Service (Startup Mode: Manual)
    Permissions should be:
    BUILTIN\Administrators – Full Control
    NT AUTHORITY\Authenticated Users – Read as well as Start, Stop, Pause and continue
    NT AUTHORITY\INTERACTIVE – Read
    NT AUTHORITY\SYSTEM Full – Control

    Set Automatic Updates (Startup Mode: Automatic)
    Permissions
    BUILTIN\Administrators – Full Control
    NT AUTHORITY\Authenticated Users – Read as well as Start, Stop, Pause and continue
    NT AUTHORITY\INTERACTIVE – Read
    NT AUTHORITY\SYSTEM Full – Control

    Then reboot or use ‘gpupdate /force’ once replication has updated the machine’s logon server/DC.

  6. Thanks Sendarius, this solved the issue preventing our Windows XP clients from downloading updates from WSUS 3 SP2. We were getting Event ID 7023 in the event log with error description: The Automatic Updates service terminated with the following error:
    The class is configured to run as a security id different from the caller

  7. Thank you Sendarius! I had the BITS service in GPO set to automatic. Once changed to manual I can start Automatic Updates service without getting the “The class is configured to run as a security id different from the caller” error. Gentleman and a Scholar.. Thank you!

  8. It is true. We are using local WSUS server to deploy updates to clients.

    After executing this Security Permissions reset, now i am able to start the service name: Automatic Updates in XP system.

    Thank You very Much..!!!

  9. Tks, this tutorial work fine in my corporate network.

  10. Thanks you , Agent Myth

    My Issue resolved by your response

 Leave a Reply

(required)

(required)

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>