Error 0×80004015 when Automatic updates fail with WSUS Server

If you're new here, you may want to subscribe to Windows Reference RSS feed Thanks for visiting!


Automatic Updates service on Windows XP may be stopped with the following error

Could not start the Automatic Updates service on local computer. Error 0×80004015: The class is configured to run as a security ID different from the caller.

This can happen when your Windows XP clients download their updates from the WSUS server and is due to a permissions issue. The quickest and the easiest solution would be to reset the permissions on the Automatic Updates client and then try and detect the Automatic Update Server once again.

To display the current status of the Automatic Updates status

1. Click Start – Run and type “cmd” to launch the Command prompt

2. From the command prompt, type

C:\>SC sdshow wuauserv

D:(A;;CCLCSWRPLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)

Now, reset the permissions as follows from the command prompt

C:\>SC sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)

That would reset the permissions on the Automatic Update Service. We can now try and detect the Automatic Updates Server from the command prompt to fix the problem

C:\>wuauclt.exe /detectnow

This should fix the problem

  • Share/Bookmark

Did you enjoy this post? Why not leave a comment below and continue the conversation, or subscribe to my feed and get articles like this delivered automatically each day to your feed reader.

Trackbacks & Pingbacks

No trackbacks/pingbacks yet.

Comments

That works temporarily. When you reboot it goes back to the previous values

This fix works, please try this and it will solve your problem.

hi if this is temporary, please tell me permanent solution…

my e mail id is ravikiran.desai@gmail.com

The reason it is temporary is most likely due to Group Policy being used to configure auto updates to use a local WSUS server.

The (incorrect) permissions used in the GP to set the service to “autostart” are over-writing the changed permissions each time you reboot.

Try reviewing the permission in the GP, and adding the permissions used in the command which fixes it temporarily.

You’ll need to decode this:

SC sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)

to determine what permissions are actually being set.

Leave a comment

Line and paragraph breaks automatic, e-mail address never displayed, HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

(required)

(required)