ConfigMgr 2007: Client machines stop updating with error 0X80070005

After changing the startup type for:

• Windows update
• Automatic updates
• BITS

the machine stops updating from Windows Update or Windows Server Update Services (WSUS) with error 0X80070005 on c:\%windir%\Windowsupdate.log and on Configuration Manager 2007/SMS clients on c:\%windir%\system32\ccm\datatransferservice.log  

When the startup type for a service changes , it defaults to the following security descriptors:

• Administrators - Full Control
• System - Full Control
• Interactive -Read

But for Windows Update/Automatic Updates ( service name for XP machines)/ BITS Authenticated Users is a required group to also have permissions on the services.

1. Locate the GPO going to the affected client and type rsop.msc
2. locate the service startup policy going to Computer Configuration>Windows Settings>Security Settings> System Services > <service name>
3. Check for the policy applied and on a DC edit the policy on the same path, right click and properties > Edit security> Click in advanced>
4. On Advanced security settings click on Add> type Authenticated Users > ok
5. Add the following rights:

• Query template
• Query Status
• Enumerate dependents
• Interrogate
• User-defined control
• Read permissions

    6. After adding allow rights for authenticated users, click ok twice to save settings and wait for the policy to propagate to the machines.

 

Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use (http://go.microsoft.com/fwlink/?LinkId=151500) for other considerations.