Solved

Computers in domain environment not updating

Posted on 2010-11-17
11
336 Views
Last Modified: 2012-08-13
We use an appliance to push WIndows updates to workstations in our Windows Server 2003 environment.  I began noticing when looking in add\remove programs that new updates were not appearing.  After much investigation, the only way that I can get the workstations to update is by running the following from command prompt.

sc sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)

Does anyone know what would could cause this and is there a setting in Group Policy that I can check.  It only seems to be happening to computers in a particular OU.  Any help would be much appreciated.
0
Comment
Question by:heatherm6
  • 4
  • 2
  • 2
  • +3
11 Comments
 
LVL 13

Expert Comment

by:markusdamenous
ID: 34154504
What is the appliance that you are using to push Windows Updates?
0
 

Author Comment

by:heatherm6
ID: 34154531
KBOX - made by Kace, but now owned by Dell.  Updates will not even work on the workstations if run manually without running the above command.
0
 
LVL 15

Expert Comment

by:JBond2010
ID: 34154566
Check the Group Policy on the one of the PC that is not updating, or go to the command prompt and type gpresult /v and press enter.

You will be able to check all the GPOs.
0
 

Expert Comment

by:dtechfish
ID: 34154586
Is the KBOX using an account that has local admin rights?
0
 

Author Comment

by:heatherm6
ID: 34154608
It is using a domain admin account.  It worked just fine until recently.  Kbox is not reporting any errors.
0
Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

 
LVL 1

Expert Comment

by:james-barr
ID: 34154625
What technology (you mentioned an appliance) are you using for your patch management?
0
 
LVL 1

Expert Comment

by:james-barr
ID: 34154638
Apologies...  Should make a point of refreshing when I return to my PC.
0
 
LVL 66

Accepted Solution

by:
johnb6767 earned 500 total points
ID: 34154695
Have you set any security on this service in GPO?

Also, assuming you have seen this, does any of it apply in the Causes?

You may receive an error message when you search for available updates on the Windows Update Web site or on the Microsoft Update Web site

http://support.microsoft.com/kb/883821
0
 

Author Comment

by:heatherm6
ID: 34158096
I have confirmed that it is happening in one OU (the one that contains most of the computers).  I have tried everything mentioned in the microsoft article.  the only thing that works is running the command I mentioned, but when I reboot, it happens again as long as it is in the problematic OU.
0
 

Author Comment

by:heatherm6
ID: 34159464
It appears to be that the automatic updates service will not run in that particular OU.  If I try to start it manually, the following error occurs - "Could not start Automatic Updates service on Local Computer.  Error 0x80004015:  The class is configured to run as a security id different from the caller.  Any ideas?
0
 
LVL 66

Expert Comment

by:johnb6767
ID: 34161824
What account is it set to start under, Local System?
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
If your system is showing symptoms of browser hijacks or 'google search redirects' check out my other article (http://rdsrc.us/u3GP7A) first and run the tool TDSSKiller (http://rdsrc.us/GDBBs4) to get rid of the infection. Once done, and if the …
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now