WSUS Client Diagnostic tool

Running WSUS 3 sp1 on Windows 2003

Client is checking in with WSUS - no yellow shield in system tray. I set the
gpo to allow non-admin.

Ran tool on client Diagnostic tool on workstation with following results:
CheckUserLevel() failed with hr=0x80070005
Access is denied.

I have also reset bits and wuauserv permissions.

Has anyone seen this error?

--
Thanks
mcsepit

[[ Right pew, wrong church. Forwarded to WSUS newsgroup
(microsoft.public.windows.server.update_services) via crosspost as a
convenience to OP.

On the web:
http://www.microsoft.com/communities...pdate_services

In your newsreader:
news://msnews.microsoft.com/microsof...pdate_services
]]


mcsepit wrote:
> Running WSUS 3 sp1 on Windows 2003
>
> Client is checking in with WSUS - no yellow shield in system tray. I set
> the
> gpo to allow non-admin.
>
> Ran tool on client Diagnostic tool on workstation with following results:
> CheckUserLevel() failed with hr=0x80070005
> Access is denied.
>
> I have also reset bits and wuauserv permissions.
>
> Has anyone seen this error?

Will do!

-
Thanks
Barb


"PA Bear [MS MVP]" wrote:

> [[ Right pew, wrong church. Forwarded to WSUS newsgroup
> (microsoft.public.windows.server.update_services) via crosspost as a
> convenience to OP.
>
> On the web:
> http://www.microsoft.com/communities...pdate_services
>
> In your newsreader:
> news://msnews.microsoft.com/microsof...pdate_services
> ]]
>
>
> mcsepit wrote:
> > Running WSUS 3 sp1 on Windows 2003
> >
> > Client is checking in with WSUS - no yellow shield in system tray. I set
> > the
> > gpo to allow non-admin.
> >
> > Ran tool on client Diagnostic tool on workstation with following results:
> > CheckUserLevel() failed with hr=0x80070005
> > Access is denied.
> >
> > I have also reset bits and wuauserv permissions.
> >
> > Has anyone seen this error?
>
>

NB: You don't need to repost in WSUS newsgroup!

mcsepit wrote:
> Will do!
>
> "PA Bear [MS MVP]" wrote:
>> [[ Right pew, wrong church. Forwarded to WSUS newsgroup
>> (microsoft.public.windows.server.update_services) via crosspost as a
>> convenience to OP.
>>
>> On the web:
>> http://www.microsoft.com/communities...pdate_services
>>
>> In your newsreader:
>> news://msnews.microsoft.com/microsof...pdate_services
>> ]]
>>
>>
>> mcsepit wrote:
>>> Running WSUS 3 sp1 on Windows 2003
>>>
>>> Client is checking in with WSUS - no yellow shield in system tray. I set
>>> the
>>> gpo to allow non-admin.
>>>
>>> Ran tool on client Diagnostic tool on workstation with following
>>> results:
>>> CheckUserLevel() failed with hr=0x80070005
>>> Access is denied.
>>>
>>> I have also reset bits and wuauserv permissions.
>>>
>>> Has anyone seen this error?

> mcsepit wrote:
>> Ran tool on client Diagnostic tool on workstation with following results:
>> CheckUserLevel() failed with hr=0x80070005
>> Access is denied.

Looks to me like the logged on account that you ran the CDT in, does not
have local Admin permissions.

However, that's an assumption based only on the error code. If I could see
the error code IN CONTEXT, I might get an entirely different impression of
where the fault occurred.

>> I have also reset bits and wuauserv permissions.

What were they? What did you "reset" them to? Why did you reset them?

Also, of curiosity -- what was your original motivation for running the
Client Diagnostic Tool on this machine?


--
Lawrence Garvin, M.S., MCITP:EA, MCDBA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)

MS WSUS Website: http://www.microsoft.com/wsus
My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin

I received the following error on the client:

Could not start the Automatic Updates service on local computer
.. Error 0×80004015: The class is configured to run as a security ID
different from the caller.

Found the following:

This can happen when your Windows XP clients download their updates from the
WSUS server and is due to a permissions issue. The quickest and the easiest
solution would be to reset the permissions on the Automatic Updates client
and then try and detect the Automatic Update Server once again.
To display the current status of the Automatic Updates status
1. Click Start – Run and type “cmd� to launch the Command prompt
2. From the command prompt, type
C:\>SC sdshow wuauser
DA;;CCLCSWRPLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRC WDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)
Now, reset the permissions as follows from the command prompt
C:\>SC sdset wuauserv
DA;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLO CRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRP WPDTLOCRRC;;;PU)

As for the Client Diagnostic Tool (the local user did not have permissions
to run the tool - hence the error)

I have it all working now. Thanks for your help. Resetting the components
did the trick.


--
Thanks
Barb


"Lawrence Garvin [MVP]" wrote:

> > mcsepit wrote:
> >> Ran tool on client Diagnostic tool on workstation with following results:
> >> CheckUserLevel() failed with hr=0x80070005
> >> Access is denied.
>
> Looks to me like the logged on account that you ran the CDT in, does not
> have local Admin permissions.
>
> However, that's an assumption based only on the error code. If I could see
> the error code IN CONTEXT, I might get an entirely different impression of
> where the fault occurred.
>
> >> I have also reset bits and wuauserv permissions.
>
> What were they? What did you "reset" them to? Why did you reset them?
>
> Also, of curiosity -- what was your original motivation for running the
> Client Diagnostic Tool on this machine?
>
>
> --
> Lawrence Garvin, M.S., MCITP:EA, MCDBA
> Principal/CTO, Onsite Technology Solutions, Houston, Texas
> Microsoft MVP - Software Distribution (2005-2009)
>
> MS WSUS Website: http://www.microsoft.com/wsus
> My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin
>
>