Solved

XPSP3 - Automatic Updates service permissions say DENY - how can I get back to allow?

Posted on 2013-10-29
8
336 Views
Last Modified: 2013-11-06
Earlier today, I set the permissions for the Automatic Updates service (wuauserv) to DENY. I've tried:

regsvc32.dll command lines in safe mode
Multiple user accounts

Any ideas?

Thanks
automatic-update.JPG
0
Comment
Question by:triphen
  • 5
  • 2
8 Comments
 

Author Comment

by:triphen
Comment Utility
Thinking about using SubInACL to grant full permissions to admin.
0
 
LVL 42

Expert Comment

by:Davis McCarn
Comment Utility
How did you set the permissions to deny, exactly?
0
 
LVL 24

Assisted Solution

by:lionelmm
lionelmm earned 500 total points
Comment Utility
try this--I use it from time to time when windows updates fail--copy to a batch file and run

@echo off
Net Send * You are about to permissions
pause

secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb /verbose

secedit.exe /analyze /db C:\WINDOWS\sectest.db /cfg C:\WINDOWS\inf\defltwk.inf /log C:\WINDOWS\security\logs\secanalyze.log

secedit.exe /configure /db C:\WINDOWS\sectest.db /cfg C:\WINDOWS\inf\defltwk.inf /log C:\WINDOWS\security\logs\secrepair.log

cipher /A /D c:\windows\system32\catroot\*.*

cipher /A /D C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\*.*

Subinacl /service wuauserv /sddl=D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)

Sc sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)

subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=administrators=f

subinacl /subkeyreg HKEY_CURRENT_USER /grant=administrators=f

subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=administrators=f

subinacl /subdirectories %SystemDrive% /grant=administrators=f

 subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=system=f

subinacl /subkeyreg HKEY_CURRENT_USER /grant=system=f

subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=system=f

subinacl /subdirectories %SystemDrive% /grant=system=f

@Echo =========================
@Echo Finished.
@Echo =========================
@pause
0
 

Author Comment

by:triphen
Comment Utility
To Davis: Process explorer>svchost process properties>services>permissions>deny
0
What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

 

Author Comment

by:triphen
Comment Utility
Lionel: your script ran and now I am waiting for Microsoft Update to check for updates.
0
 

Author Comment

by:triphen
Comment Utility
Unfortunately, MS Update hung at Checking for Updates... overnight. Tried to restart it this morning, got the same error.
0
 
LVL 24

Accepted Solution

by:
lionelmm earned 500 total points
Comment Utility
Try this--I have had some success but not always
http://support.microsoft.com/mats/windows_update/
0
 

Author Comment

by:triphen
Comment Utility
Ended up unregistering the windows update .dll.
0

Featured Post

Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

Join & Write a Comment

A Bare Metal Image backup allows for the restore of an entire system to a similar or dissimilar hardware. They are highly useful for migrations and disaster recovery. Bare Metal Image backups support Full and Incremental backups. Differential backup…
If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now