XPSP3 - Automatic Updates service permissions say DENY - how can I get back to allow?

Earlier today, I set the permissions for the Automatic Updates service (wuauserv) to DENY. I've tried:

regsvc32.dll command lines in safe mode
Multiple user accounts

Any ideas?

Thanks
automatic-update.JPG
triphenAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
Lionel MMConnect With a Mentor Small Business IT ConsultantCommented:
Try this--I have had some success but not always
http://support.microsoft.com/mats/windows_update/
0
 
triphenAuthor Commented:
Thinking about using SubInACL to grant full permissions to admin.
0
 
Davis McCarnOwnerCommented:
How did you set the permissions to deny, exactly?
0
Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

 
Lionel MMConnect With a Mentor Small Business IT ConsultantCommented:
try this--I use it from time to time when windows updates fail--copy to a batch file and run

@echo off
Net Send * You are about to permissions
pause

secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb /verbose

secedit.exe /analyze /db C:\WINDOWS\sectest.db /cfg C:\WINDOWS\inf\defltwk.inf /log C:\WINDOWS\security\logs\secanalyze.log

secedit.exe /configure /db C:\WINDOWS\sectest.db /cfg C:\WINDOWS\inf\defltwk.inf /log C:\WINDOWS\security\logs\secrepair.log

cipher /A /D c:\windows\system32\catroot\*.*

cipher /A /D C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\*.*

Subinacl /service wuauserv /sddl=D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)

Sc sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)

subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=administrators=f

subinacl /subkeyreg HKEY_CURRENT_USER /grant=administrators=f

subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=administrators=f

subinacl /subdirectories %SystemDrive% /grant=administrators=f

 subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=system=f

subinacl /subkeyreg HKEY_CURRENT_USER /grant=system=f

subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=system=f

subinacl /subdirectories %SystemDrive% /grant=system=f

@Echo =========================
@Echo Finished.
@Echo =========================
@pause
0
 
triphenAuthor Commented:
To Davis: Process explorer>svchost process properties>services>permissions>deny
0
 
triphenAuthor Commented:
Lionel: your script ran and now I am waiting for Microsoft Update to check for updates.
0
 
triphenAuthor Commented:
Unfortunately, MS Update hung at Checking for Updates... overnight. Tried to restart it this morning, got the same error.
0
 
triphenAuthor Commented:
Ended up unregistering the windows update .dll.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.