WSUS Client Diagnostic tool

Discussion in 'Windows Update' started by mcsepit, Jul 23, 2009.

  1. mcsepit

    mcsepit Guest

    Running WSUS 3 sp1 on Windows 2003

    Client is checking in with WSUS - no yellow shield in system tray. I set the
    gpo to allow non-admin.

    Ran tool on client Diagnostic tool on workstation with following results:
    CheckUserLevel() failed with hr=0x80070005
    Access is denied.

    I have also reset bits and wuauserv permissions.

    Has anyone seen this error?
    mcsepit, Jul 23, 2009
    1. Advertisements

  2. PA Bear [MS MVP], Jul 23, 2009
    1. Advertisements

  3. mcsepit

    mcsepit Guest

    Will do!


    mcsepit, Jul 23, 2009
  4. NB: You don't need to repost in WSUS newsgroup!
    PA Bear [MS MVP], Jul 23, 2009
  5. Looks to me like the logged on account that you ran the CDT in, does not
    have local Admin permissions.

    However, that's an assumption based only on the error code. If I could see
    the error code IN CONTEXT, I might get an entirely different impression of
    where the fault occurred.

    What were they? What did you "reset" them to? Why did you reset them?

    Also, of curiosity -- what was your original motivation for running the
    Client Diagnostic Tool on this machine?

    Lawrence Garvin, M.S., MCITP:EA, MCDBA
    Principal/CTO, Onsite Technology Solutions, Houston, Texas
    Microsoft MVP - Software Distribution (2005-2009)

    MS WSUS Website:
    My MVP Profile:
    Lawrence Garvin [MVP], Jul 23, 2009
  6. mcsepit

    mcsepit Guest

    I received the following error on the client:

    Could not start the Automatic Updates service on local computer
    .. Error 0×80004015: The class is configured to run as a security ID
    different from the caller.

    Found the following:

    This can happen when your Windows XP clients download their updates from the
    WSUS server and is due to a permissions issue. The quickest and the easiest
    solution would be to reset the permissions on the Automatic Updates client
    and then try and detect the Automatic Update Server once again.
    To display the current status of the Automatic Updates status
    1. Click Start – Run and type “cmd†to launch the Command prompt
    2. From the command prompt, type
    C:\>SC sdshow wuauser
    Now, reset the permissions as follows from the command prompt
    C:\>SC sdset wuauserv

    As for the Client Diagnostic Tool (the local user did not have permissions
    to run the tool - hence the error)

    I have it all working now. Thanks for your help. Resetting the components
    did the trick.
    mcsepit, Aug 5, 2009
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.