When you try to download and install updates from the Microsoft Windows Update Web site, from the Microsoft Update Web site, or from a Windows Server Update Services (WSUS) server, you may receive one or both of the following error messages:

Back to the top

This problem occurs if the Automatic Updates service cannot impersonate the logged-on user to finish downloading and installing the update.

Back to the top

To resolve this problem on a computer that is running Windows 2000, follow the steps in Section A. To resolve this problem on a computer that is running Windows Server 2000 or Windows XP, follow the steps in Section B.

Back to the top

Section A: Windows 2000

Step 1: Log on and run Microsoft Internet Explorer as a user who is a member of the local Administrators group

1.	Log on as a user who is a member of the local Administrators group.
2.	Right-click the Internet Explorer icon, click Run as, and then run the program as a user who is a member of the local Administrators group.
3.	Visit the Windows Update Web site, visit the Microsoft Update Web site, or connect to a WSUS server.

Step 2: Verify that Client for Microsoft Networks is installed

1.	Click Start, click Run, type ncpa.cpl, and then click OK.
2.	Right-click the local area connection that is associated with the network adapter, and then click Properties.
3.	Verify that Client for Microsoft Networks appears in the This connection uses the following items box. Verify that the check box that appears next to Client for Microsoft Networks is selected. If Client for Microsoft Networks does not appear in the This connection uses the following items box, follow these steps: a. Click Install, click Client, and then click Add. b. Click Client for Microsoft Networks, click OK, and then click Yes.

Step 3: Verify that the Background Intelligent Transfer Service and the System Event Notification Service are started

Note The Background Intelligent Transfer Service (BITS) depends on the System Event Notification Service (SENS) in Windows 2000.

1.	Click Start, click Run, type services.msc, and then click OK.
2.	In the Name list, double-click System Event Notification.
3.	In the Startup type box, click Automatic.
4.	Click Start, wait for the service to start, and then click OK.
5.	Repeat steps 2 through 4 of this procedure for the Background Intelligent Transfer Service.

Step 4: Log on to the console session of Windows 2000 Server

Note This step applies to Windows 2000 Server only.

Note The Background Intelligent Transfer Service does not support Terminal Services sessions in Windows 2000. The Background Intelligent Transfer Service can submit the download job only by using computer credentials. If the firewall or proxy requires user-level authentication, the download job will fail.

1.	Log on locally to the computer. Do not use a Terminal Services session.
2.	Visit the Windows Update Web site, visit the Microsoft Update Web site, or connect to a WSUS server.

Step 5: Verify that the following registry entries are present

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:

1.	Click Start, click Run, type Regedit, and then click OK.
2.	Expand the following subkey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn
3.	Verify that the following registry entries are present: Name Data type Data value Asynchronous DWORD 00000001 DLLName String WlNotify.dll Impersonate DWORD 00000001 Lock String SensLockEvent Logoff String SensLogoffEvent Logon String SensLogonEvent MaxWait DWORD 00000258 Safe DWORD 00000001 Shutdown String SensShutdownEvent StartScreenSaver String SensStartScreenSaverEvent StartShell String SensStartShellEvent Startup String SensStartupEvent StopScreenSaver String SensStopScreenSaverEvent Unlock String SensUnlockEvent
4.	Make any changes or additions that are required. The following example explains how to change the value of the Shutdown registry entry: a. Right-click Shutdown, and then click Modify. b. In the Value data box, type SensShutdownEvent to overwrite the existing value, and then click OK. The following example explains how to add a new registry entry: a. In the left pane, click SensLogn. b. Click Edit, point to New, and then click the value type that you want. For our example, click DWORD Value. c. Type Impersonate, and then press ENTER. d. Right-click Impersonate, and then click Modify. e. In the Value data box, type 1, and then click OK.
5.	If you made any changes to the registry, restart the computer. Then, try again to download and install the update.

Back to the top

Section B: Windows Server 2003 and Windows XP

Step 1: Log on and run Internet Explorer as a user who is a member of the local Administrators group

1.	Log on as a user who is a member of the local Administrators group.
2.	Right-click the Internet Explorer icon, click Run as, and then run the program as a user who is a member of the local Administrators group.
3.	Visit the Windows Update Web site, visit the Microsoft Update Web site, or connect to a WSUS server.

Step 2: Verify that the following registry entries are present

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:

1.	Click Start, click Run, type Regedit, and then click OK.
2.	Expand the following registry subkey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn
3.	Verify that the following registry entries are present: Name Data type Data value Asynchronous DWORD 00000001 Disconnect String SensDisconnectEvent DLLName String WlNotify.dll Impersonate DWORD 00000001 Lock String SensLockEvent Logoff String SensLogoffEvent Logon String SensLogonEvent MaxWait DWORD 00000258 PostShell String SensPostShellEvent Reconnect String SensReconnectEvent Safe DWORD 00000001 Shutdown String SensShutdownEvent StartScreenSaver String SensStartScreenSaverEvent StartShell String SensStartShellEvent Startup String SensStartupEvent StopScreenSaver String SensStopScreenSaverEvent Unlock String SensUnlockEvent
4.	Make any changes or additions that are required. The following example explains how to change the value of the Shutdown registry entry: a. Right-click Shutdown, and then click Modify. b. In the Value data box, type SensShutdownEvent to overwrite the existing value, and then click OK. The following example explains how to add a new registry entry: a. In the left pane, click SensLogn. b. Click Edit, point to New, and then click the value type that you want. For our example, click DWORD Value. c. Type Impersonate, and then press ENTER. d. Right-click Impersonate, and then click Modify. e. In the Value data box, type 1, and then click OK.
5.	If you made any changes to the registry, restart the computer. Then, try again to download and install the update.

Note The registry subkeys and values in the table in step 3 only apply to Windows Server 2003 and Windows XP. You cannot import these registry subkeys and values from a Windows Server 2003-based or a Windows XP-based computer to a Windows 2000-based computer.

Back to the top

To work around this problem, configure Automatic Updates to download and install updates. To do this, follow these steps.

Back to the top

Windows 2000

1.	Click Start, point to Settings, and then click Control Panel.
2.	Double-click Automatic Updates.
3.	Click Automatically download the updates, and install them on the schedule that I specify.
4.	Click to select the day and time that you want to download and install updates, and then click OK.

Back to the top

Windows XP

1.	Click Start, and then click Control Panel
2.	Double-click Automatic Updates.
3.	Click Automatic (recommended).
4.	Click to select the day and time that you want to download and install updates, and then click OK.

Back to the top

Windows Server 2003

1.	Click Start, and then click Control Panel.
2.	Double-click Automatic Updates.
3.	Click to select the following check box: Keep my computer up to date. With this setting enabled, Windows Update software may be automatically updated prior to applying any other updates.
4.	Click Automatically download the updates, and install them on the schedule that I specify.
5.	Click to select the day and time that you want to download and install updates, and then click OK.

For more information about how to schedule Automatic Updates, click the following article number to view the article in the Microsoft Knowledge Base:

Back to the top

For more information, click the following article number to view the article in the Microsoft Knowledge Base:

Back to the top