Error 0×80004015 when Automatic updates fail with WSUS Server
If you're new here, you may want to subscribe to Windows Reference RSS feed Thanks for visiting!
Automatic Updates service on Windows XP may be stopped with the following error
Could not start the Automatic Updates service on local computer. Error 0×80004015: The class is configured to run as a security ID different from the caller.
This can happen when your Windows XP clients download their updates from the WSUSÂ server and is due to a permissions issue. The quickest and the easiest solution would be to reset the permissions on the Automatic Updates client and then try and detect the Automatic Update Server once again.
To display the current status of the Automatic Updates status
1. Click Start – Run and type “cmd” to launch the Command prompt
2. From the command prompt, type
C:\>SC sdshow wuauserv
D:(A;;CCLCSWRPLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)
Now, reset the permissions as follows from the command prompt
C:\>SC sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)
That would reset the permissions on the Automatic Update Service. We can now try and detect the Automatic Updates Server from the command prompt to fix the problem
C:\>wuauclt.exe /detectnow
This should fix the problem
Did you enjoy this post? Why not leave a comment below and continue the conversation, or subscribe to my feed and get articles like this delivered automatically each day to your feed reader.
Trackbacks & Pingbacks
Comments
Leave a comment
Line and paragraph breaks automatic, e-mail address never displayed, HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>
That works temporarily. When you reboot it goes back to the previous values
This fix works, please try this and it will solve your problem.
hi if this is temporary, please tell me permanent solution…
my e mail id is ravikiran.desai@gmail.com
The reason it is temporary is most likely due to Group Policy being used to configure auto updates to use a local WSUS server.
The (incorrect) permissions used in the GP to set the service to “autostart” are over-writing the changed permissions each time you reboot.
Try reviewing the permission in the GP, and adding the permissions used in the command which fixes it temporarily.
You’ll need to decode this:
SC sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)
to determine what permissions are actually being set.
I had the issue above and resolved it by adjusting the group policy object.
Under Computer config > Windows Settings > Security Settings > System Services
Set Background Intelligent Transfer Service (Startup Mode: Manual)
Permissions should be:
BUILTIN\Administrators – Full Control
NT AUTHORITY\Authenticated Users – Read as well as Start, Stop, Pause and continue
NT AUTHORITY\INTERACTIVE – Read
NT AUTHORITY\SYSTEM Full – Control
Set Automatic Updates (Startup Mode: Automatic)
Permissions
BUILTIN\Administrators – Full Control
NT AUTHORITY\Authenticated Users – Read as well as Start, Stop, Pause and continue
NT AUTHORITY\INTERACTIVE – Read
NT AUTHORITY\SYSTEM Full – Control
Then reboot or use ‘gpupdate /force’ once replication has updated the machine’s logon server/DC.