Windows Update Fails, related to BITS Failure

Windows Update site is failing with:
[Error number: 0x800A0046]

Because (I believe) of this service failure logged in System Event log:
The Background Intelligent Transfer Service service terminated with
service-specific error 2147500053 (0x80004015).


....some help please?

When searching for available updates on the Windows Update site, you receive the
0x800A0046 error.
This error can occur if the user logon account is part of the Guests account or a
limited-user account, if the security descriptor does not allow have the
Authenticated Users to run Windows Update, or if the Impersonate a client after
authentication policy is missing Service and Administrators from the Users and Groups
list.
http://v5.windowsupdate.microsoft.co...cleid=20&ln=en

http://support.microsoft.com/?kbid=883821
You may receive an error message when you search for available updates on the Windows
Update Web site

or

http://www.updatexp.com/0x800a0046.html
What causes Error 0x800a0046


0x80004015 - CO_E_WRONG_SERVER_IDENTITY
The security descriptor on the BITS service was changed by a security template such
that NetworkService account doesn't have READ access to BITS service.


Mike wrote:
> Windows Update site is failing with:
> [Error number: 0x800A0046]
>
> Because (I believe) of this service failure logged in System Event
> log: The Background Intelligent Transfer Service service terminated
> with service-specific error 2147500053 (0x80004015).
>
>
> ...some help please?

Hi Taurarian,

> 0x80004015 - CO_E_WRONG_SERVER_IDENTITY
> The security descriptor on the BITS service was changed by a security
> template such that NetworkService account doesn't have READ access to BITS
> service.

What does that mean? (and how do I fix it?)

Kind regards
Mike



"Taurarian" <> wrote in message
news:...
> When searching for available updates on the Windows Update site, you
> receive the 0x800A0046 error.
> This error can occur if the user logon account is part of the Guests
> account or a limited-user account, if the security descriptor does not
> allow have the Authenticated Users to run Windows Update, or if the
> Impersonate a client after authentication policy is missing Service and
> Administrators from the Users and Groups list.
> http://v5.windowsupdate.microsoft.co...cleid=20&ln=en
>
> http://support.microsoft.com/?kbid=883821
> You may receive an error message when you search for available updates on
> the Windows Update Web site
>
> or
>
> http://www.updatexp.com/0x800a0046.html
> What causes Error 0x800a0046
>
>
> 0x80004015 - CO_E_WRONG_SERVER_IDENTITY
> The security descriptor on the BITS service was changed by a security
> template such that NetworkService account doesn't have READ access to BITS
> service.
>
>
> Mike wrote:
>> Windows Update site is failing with:
>> [Error number: 0x800A0046]
>>
>> Because (I believe) of this service failure logged in System Event
>> log: The Background Intelligent Transfer Service service terminated
>> with service-specific error 2147500053 (0x80004015).
>>
>>
>> ...some help please?
>

Hi Mike, check the links I provided for some suggestions on possible fixes.
Kaylene

"Mike" wrote:

>
> Hi Taurarian,
>
> > 0x80004015 - CO_E_WRONG_SERVER_IDENTITY
> > The security descriptor on the BITS service was changed by a security
> > template such that NetworkService account doesn't have READ access to BITS
> > service.
>
> What does that mean? (and how do I fix it?)
>
> Kind regards
> Mike
>
>
>
> "Taurarian" <> wrote in message
> news:...
> > When searching for available updates on the Windows Update site, you
> > receive the 0x800A0046 error.
> > This error can occur if the user logon account is part of the Guests
> > account or a limited-user account, if the security descriptor does not
> > allow have the Authenticated Users to run Windows Update, or if the
> > Impersonate a client after authentication policy is missing Service and
> > Administrators from the Users and Groups list.
> > http://v5.windowsupdate.microsoft.co...cleid=20&ln=en
> >
> > http://support.microsoft.com/?kbid=883821
> > You may receive an error message when you search for available updates on
> > the Windows Update Web site
> >
> > or
> >
> > http://www.updatexp.com/0x800a0046.html
> > What causes Error 0x800a0046
> >
> >
> > 0x80004015 - CO_E_WRONG_SERVER_IDENTITY
> > The security descriptor on the BITS service was changed by a security
> > template such that NetworkService account doesn't have READ access to BITS
> > service.
> >
> >
> > Mike wrote:
> >> Windows Update site is failing with:
> >> [Error number: 0x800A0046]
> >>
> >> Because (I believe) of this service failure logged in System Event
> >> log: The Background Intelligent Transfer Service service terminated
> >> with service-specific error 2147500053 (0x80004015).
> >>
> >>
> >> ...some help please?
> >
>
>
>

Hi Kaylene,

Thank you I think I found the information I was after below. And It works..
Bits is working.. So is Windows Update.

Now all I need to now is where do I download the latest security templates?
/(I had previously applied "setup security.inf" that came with Windows XP
SP2)

Kind regards
Mike





Did you install any security templates SP2?

Please run the command below and post the output.

sc sdshow bits

Does it match the output below: (one line)

D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLC SWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCLCSWLOCRRC;;;IU)S: (AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)

If so you are seeing the error because the security templates incorrectly

removed the read access to the Network Service account for the BITS service.

This error has been corrected in the security templates. So to fix the

problem please download the latest security template and apply it and then

try to start the BITS service as follows:

net start bits

Alternatively, you can add read permissions to the NetworkService account by

appending (A;;KRLCLO;;;NS) to the DACL as follows and then try to start the

BITS:

sc sdset bits

D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLC SWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCLCSWLOCRRC;;;IU)(A ;;KRLCLO;;;NS)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO; ;;WD)

net start bits

The first command is all on one line.

--

Narayana Mahankali

Microsoft, BITS

This posting is provided "As Is" with no warranties, and confers no rights.

Use of included script samples are subject to the terms specified at

http://www.microsoft.com/info/cpyright.htm

"Peter Smith" <> wrote in message

news:...


"Taurarian" <> wrote in message
news:299DC31C-7B6C-4898-8CB4-...
> Hi Mike, check the links I provided for some suggestions on possible
> fixes.
> Kaylene
>
> "Mike" wrote:
>
>>
>> Hi Taurarian,
>>
>> > 0x80004015 - CO_E_WRONG_SERVER_IDENTITY
>> > The security descriptor on the BITS service was changed by a security
>> > template such that NetworkService account doesn't have READ access to
>> > BITS
>> > service.
>>
>> What does that mean? (and how do I fix it?)
>>
>> Kind regards
>> Mike
>>
>>
>>
>> "Taurarian" <> wrote in message
>> news:...
>> > When searching for available updates on the Windows Update site, you
>> > receive the 0x800A0046 error.
>> > This error can occur if the user logon account is part of the Guests
>> > account or a limited-user account, if the security descriptor does not
>> > allow have the Authenticated Users to run Windows Update, or if the
>> > Impersonate a client after authentication policy is missing Service and
>> > Administrators from the Users and Groups list.
>> > http://v5.windowsupdate.microsoft.co...cleid=20&ln=en
>> >
>> > http://support.microsoft.com/?kbid=883821
>> > You may receive an error message when you search for available updates
>> > on
>> > the Windows Update Web site
>> >
>> > or
>> >
>> > http://www.updatexp.com/0x800a0046.html
>> > What causes Error 0x800a0046
>> >
>> >
>> > 0x80004015 - CO_E_WRONG_SERVER_IDENTITY
>> > The security descriptor on the BITS service was changed by a security
>> > template such that NetworkService account doesn't have READ access to
>> > BITS
>> > service.
>> >
>> >
>> > Mike wrote:
>> >> Windows Update site is failing with:
>> >> [Error number: 0x800A0046]
>> >>
>> >> Because (I believe) of this service failure logged in System Event
>> >> log: The Background Intelligent Transfer Service service terminated
>> >> with service-specific error 2147500053 (0x80004015).
>> >>
>> >>
>> >> ...some help please?
>> >
>>
>>
>>

Mike, don't worry about that file.

As long as Windows Update is working and you're getting the updates, that's the main
thing.

Kaylene



"Mike" <> wrote in message
news:eCIVvi$...
> Hi Kaylene,
>
> Thank you I think I found the information I was after below. And It works.. Bits is
> working.. So is Windows Update.
>
> Now all I need to now is where do I download the latest security templates? /(I had
> previously applied "setup security.inf" that came with Windows XP SP2)
>
> Kind regards
> Mike
>
>
>
>
>
> Did you install any security templates SP2?
>
> Please run the command below and post the output.
>
> sc sdshow bits
>
> Does it match the output below: (one line)
>
> D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLC SWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCLCSWLOCRRC;;;IU)S: (AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
>
> If so you are seeing the error because the security templates incorrectly
>
> removed the read access to the Network Service account for the BITS service.
>
> This error has been corrected in the security templates. So to fix the
>
> problem please download the latest security template and apply it and then
>
> try to start the BITS service as follows:
>
> net start bits
>
> Alternatively, you can add read permissions to the NetworkService account by
>
> appending (A;;KRLCLO;;;NS) to the DACL as follows and then try to start the
>
> BITS:
>
> sc sdset bits
>
> D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLC SWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCLCSWLOCRRC;;;IU)(A ;;KRLCLO;;;NS)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO; ;;WD)
>
> net start bits
>
> The first command is all on one line.
>
> --
>
> Narayana Mahankali
>
> Microsoft, BITS
>
> This posting is provided "As Is" with no warranties, and confers no rights.
>
> Use of included script samples are subject to the terms specified at
>
> http://www.microsoft.com/info/cpyright.htm
>
> "Peter Smith" <> wrote in message
>
> news:...
>
>
> "Taurarian" <> wrote in message
> news:299DC31C-7B6C-4898-8CB4-...
>> Hi Mike, check the links I provided for some suggestions on possible fixes.
>> Kaylene
>>
>> "Mike" wrote:
>>
>>>
>>> Hi Taurarian,
>>>
>>> > 0x80004015 - CO_E_WRONG_SERVER_IDENTITY
>>> > The security descriptor on the BITS service was changed by a security
>>> > template such that NetworkService account doesn't have READ access to BITS
>>> > service.
>>>
>>> What does that mean? (and how do I fix it?)
>>>
>>> Kind regards
>>> Mike
>>>
>>>
>>>
>>> "Taurarian" <> wrote in message
>>> news:...
>>> > When searching for available updates on the Windows Update site, you
>>> > receive the 0x800A0046 error.
>>> > This error can occur if the user logon account is part of the Guests
>>> > account or a limited-user account, if the security descriptor does not
>>> > allow have the Authenticated Users to run Windows Update, or if the
>>> > Impersonate a client after authentication policy is missing Service and
>>> > Administrators from the Users and Groups list.
>>> > http://v5.windowsupdate.microsoft.co...cleid=20&ln=en
>>> >
>>> > http://support.microsoft.com/?kbid=883821
>>> > You may receive an error message when you search for available updates on
>>> > the Windows Update Web site
>>> >
>>> > or
>>> >
>>> > http://www.updatexp.com/0x800a0046.html
>>> > What causes Error 0x800a0046
>>> >
>>> >
>>> > 0x80004015 - CO_E_WRONG_SERVER_IDENTITY
>>> > The security descriptor on the BITS service was changed by a security
>>> > template such that NetworkService account doesn't have READ access to BITS
>>> > service.
>>> >
>>> >
>>> > Mike wrote:
>>> >> Windows Update site is failing with:
>>> >> [Error number: 0x800A0046]
>>> >>
>>> >> Because (I believe) of this service failure logged in System Event
>>> >> log: The Background Intelligent Transfer Service service terminated
>>> >> with service-specific error 2147500053 (0x80004015).
>>> >>
>>> >>
>>> >> ...some help please?
>>> >
>>>
>>>
>>>
>
>

Kinda sorta true. However if it is our Group Policy template that is
causing the problem it's going to keep happening every time it's applied.

Thanks for your help Kaylene.

"Taurarian" <> wrote in message
news:%...
> Mike, don't worry about that file.
>
> As long as Windows Update is working and you're getting the updates,
> that's the main thing.
>
> Kaylene
>
>
>
> "Mike" <> wrote in message
> news:eCIVvi$...
>> Hi Kaylene,
>>
>> Thank you I think I found the information I was after below. And It
>> works.. Bits is working.. So is Windows Update.
>>
>> Now all I need to now is where do I download the latest security
>> templates? /(I had previously applied "setup security.inf" that came with
>> Windows XP SP2)
>>
>> Kind regards
>> Mike
>>
>>
>>
>>
>>
>> Did you install any security templates SP2?
>>
>> Please run the command below and post the output.
>>
>> sc sdshow bits
>>
>> Does it match the output below: (one line)
>>
>> D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLC SWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCLCSWLOCRRC;;;IU)S: (AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
>>
>> If so you are seeing the error because the security templates incorrectly
>>
>> removed the read access to the Network Service account for the BITS
>> service.
>>
>> This error has been corrected in the security templates. So to fix the
>>
>> problem please download the latest security template and apply it and
>> then
>>
>> try to start the BITS service as follows:
>>
>> net start bits
>>
>> Alternatively, you can add read permissions to the NetworkService account
>> by
>>
>> appending (A;;KRLCLO;;;NS) to the DACL as follows and then try to start
>> the
>>
>> BITS:
>>
>> sc sdset bits
>>
>> D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLC SWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCLCSWLOCRRC;;;IU)(A ;;KRLCLO;;;NS)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO; ;;WD)
>>
>> net start bits
>>
>> The first command is all on one line.
>>
>> --
>>
>> Narayana Mahankali
>>
>> Microsoft, BITS
>>
>> This posting is provided "As Is" with no warranties, and confers no
>> rights.
>>
>> Use of included script samples are subject to the terms specified at
>>
>> http://www.microsoft.com/info/cpyright.htm
>>
>> "Peter Smith" <> wrote in message
>>
>> news:...
>>
>>
>> "Taurarian" <> wrote in message
>> news:299DC31C-7B6C-4898-8CB4-...
>>> Hi Mike, check the links I provided for some suggestions on possible
>>> fixes.
>>> Kaylene
>>>
>>> "Mike" wrote:
>>>
>>>>
>>>> Hi Taurarian,
>>>>
>>>> > 0x80004015 - CO_E_WRONG_SERVER_IDENTITY
>>>> > The security descriptor on the BITS service was changed by a security
>>>> > template such that NetworkService account doesn't have READ access to
>>>> > BITS
>>>> > service.
>>>>
>>>> What does that mean? (and how do I fix it?)
>>>>
>>>> Kind regards
>>>> Mike
>>>>
>>>>
>>>>
>>>> "Taurarian" <> wrote in message
>>>> news:...
>>>> > When searching for available updates on the Windows Update site, you
>>>> > receive the 0x800A0046 error.
>>>> > This error can occur if the user logon account is part of the Guests
>>>> > account or a limited-user account, if the security descriptor does
>>>> > not
>>>> > allow have the Authenticated Users to run Windows Update, or if the
>>>> > Impersonate a client after authentication policy is missing Service
>>>> > and
>>>> > Administrators from the Users and Groups list.
>>>> > http://v5.windowsupdate.microsoft.co...cleid=20&ln=en
>>>> >
>>>> > http://support.microsoft.com/?kbid=883821
>>>> > You may receive an error message when you search for available
>>>> > updates on
>>>> > the Windows Update Web site
>>>> >
>>>> > or
>>>> >
>>>> > http://www.updatexp.com/0x800a0046.html
>>>> > What causes Error 0x800a0046
>>>> >
>>>> >
>>>> > 0x80004015 - CO_E_WRONG_SERVER_IDENTITY
>>>> > The security descriptor on the BITS service was changed by a security
>>>> > template such that NetworkService account doesn't have READ access to
>>>> > BITS
>>>> > service.
>>>> >
>>>> >
>>>> > Mike wrote:
>>>> >> Windows Update site is failing with:
>>>> >> [Error number: 0x800A0046]
>>>> >>
>>>> >> Because (I believe) of this service failure logged in System Event
>>>> >> log: The Background Intelligent Transfer Service service terminated
>>>> >> with service-specific error 2147500053 (0x80004015).
>>>> >>
>>>> >>
>>>> >> ...some help please?
>>>> >
>>>>
>>>>
>>>>
>>
>>
>