Solved

XPSP3 - Automatic Updates service permissions say DENY - how can I get back to allow?

Posted on 2013-10-29
8
351 Views
Last Modified: 2013-11-06
Earlier today, I set the permissions for the Automatic Updates service (wuauserv) to DENY. I've tried:

regsvc32.dll command lines in safe mode
Multiple user accounts

Any ideas?

Thanks
automatic-update.JPG
0
Comment
Question by:triphen
  • 5
  • 2
8 Comments
 

Author Comment

by:triphen
ID: 39610204
Thinking about using SubInACL to grant full permissions to admin.
0
 
LVL 43

Expert Comment

by:Davis McCarn
ID: 39611348
How did you set the permissions to deny, exactly?
0
 
LVL 24

Assisted Solution

by:lionelmm
lionelmm earned 500 total points
ID: 39611380
try this--I use it from time to time when windows updates fail--copy to a batch file and run

@echo off
Net Send * You are about to permissions
pause

secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb /verbose

secedit.exe /analyze /db C:\WINDOWS\sectest.db /cfg C:\WINDOWS\inf\defltwk.inf /log C:\WINDOWS\security\logs\secanalyze.log

secedit.exe /configure /db C:\WINDOWS\sectest.db /cfg C:\WINDOWS\inf\defltwk.inf /log C:\WINDOWS\security\logs\secrepair.log

cipher /A /D c:\windows\system32\catroot\*.*

cipher /A /D C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\*.*

Subinacl /service wuauserv /sddl=D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)

Sc sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)

subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=administrators=f

subinacl /subkeyreg HKEY_CURRENT_USER /grant=administrators=f

subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=administrators=f

subinacl /subdirectories %SystemDrive% /grant=administrators=f

 subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=system=f

subinacl /subkeyreg HKEY_CURRENT_USER /grant=system=f

subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=system=f

subinacl /subdirectories %SystemDrive% /grant=system=f

@Echo =========================
@Echo Finished.
@Echo =========================
@pause
0
 

Author Comment

by:triphen
ID: 39612441
To Davis: Process explorer>svchost process properties>services>permissions>deny
0
U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

 

Author Comment

by:triphen
ID: 39612444
Lionel: your script ran and now I am waiting for Microsoft Update to check for updates.
0
 

Author Comment

by:triphen
ID: 39614618
Unfortunately, MS Update hung at Checking for Updates... overnight. Tried to restart it this morning, got the same error.
0
 
LVL 24

Accepted Solution

by:
lionelmm earned 500 total points
ID: 39616389
Try this--I have had some success but not always
http://support.microsoft.com/mats/windows_update/
0
 

Author Comment

by:triphen
ID: 39628529
Ended up unregistering the windows update .dll.
0

Featured Post

Want to promote your upcoming event?

Are you going to an event? Are you going to be exhibiting at a tradeshow? Talking at a conference? Using a promotional banner in your email signature ensures that your organization’s most important contacts stay in the know and can potentially spread the word about the event.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A Bare Metal Image backup allows for the restore of an entire system to a similar or dissimilar hardware. They are highly useful for migrations and disaster recovery. Bare Metal Image backups support Full and Incremental backups. Differential backup…
When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup" or a blinking cursor with black screen. A loop for Auto repair will start but fix nothing.  You will be panic as there are no back…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…

929 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now