Article ID: 2773898 - View products that this article applies to.
Windows Update Standalone Installer (WUSA) returns 0x5 ERROR_ACCESS_DENIED when deploying Windows Update .msu files through Windows Remote Management 2.0 and Windows Remote Shell. You may also see the following in the Application Event log:
Event ID: 3
Description: Windows update could not be installed because of error 2147942405 "Access is denied."
Installing an update using WUSA or the WUA APIs on a remote machine is not supported.
To work around this issue, use the following method:
Extract the .msu file through Windows Remote Shell with WUSA using the following command:
winrs.exe -r:<computername> wusa.exe <update> /extract:<destination>
When complete, install the .cab package with dism.exe or Package Manager. To use dism.exe, use the command below:
winrs.exe -r:<computername> dism.exe /online /add-package /PackagePath:<Path_To_Package>\KBnnnnnnn.cab
The Windows Update Standalone Installer uses the Windows Update Agent API to install update packages. Update packages have an .msu file name extension. The .msu file name extension is associated with the Windows Update Standalone Installer.
The security restrictions on remote use of the WUA APIs are documented here: http://msdn.microsoft.com/en-us/library/windows/desktop/aa387288(v=vs.85).aspx
(http://go.microsoft.com/fwlink/?LinkId=151500)for other considerations.