Sign in with Microsoft
Sign in or create an account.
Hello,
Select a different account.
You have multiple accounts
Choose the account you want to sign in with.

Symptoms

When you try to visit the Windows Update Web site or the Microsoft Update Web site, you may receive an error message that is similar to the following:

Error number: 0x8DDD0002

To install items from Windows Update, you must be logged on as an administrator or a member of the Administrators group. If your computer is connected to a network, network policy settings may also prevent you from completing this procedure.

You receive this message even though you are already logged on as an administrator or a member of the Administrators group.

Note For more information about the Windows Update site and the Microsoft Update site, see the "More Information" section.

Cause

This behavior may occur for any one of the following reasons:

  1. You are not logged on as a user who belongs to the local Administrators group.

  2. You do not have permission to specific registry keys or folders.

  3. The operating system cannot read the data in the %Systemroot%\System32\Catroot2 folder.

Resolution

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:

322756 How to back up and restore the registry in Windows

To resolve this issue, use one of the following methods. If Method 1 does not resolve the problem, use Method 2.

  • Method 1Verify that you are logged on as a user who belongs to the local Administrators group. To do this, click Start, click Run, type
    nusrmgr.cpl, and then click OK to open the User accounts window.

    If you are part of a network domain, follow these steps:

    1. In the User Accounts window, click to select your account from the list, and then click Properties.

    2. On the Group Membership tab, verify that you are in the Administrators group.


    If you are not part of a network domain, in the User Accounts window, click your account, and then verify that Computer Administrator appears under your account name.

    After you logged on as an administrator, try to visit the Windows Update Web site or the Microsoft Update Web site again. If the problem is resolved, do not continue troubleshooting.

  • Method 2 Delete temporary Internet files. To do this, follow these steps:

    1. Open the Internet Explorer window, click Tools, and then click Internet Options.

    2. In the Internet Options window, click the General tab, under Temporary Internet files, click Delete Files, and then click
      OK.

    Try to visit the Windows Update Web site or the Microsoft Update Web site again. If the problem is resolved, do not continue troubleshooting.

  • Method 3Verify the permissions on the registry keys that are used by the Windows Update client and the Microsoft Update client.

    1. Click Start, click
      Run, type regedit, and then click
      OK.

    2. Locate and select the following registry key:

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate

    3. On the Edit menu, click
      Permissions, click Add, and then type
      everyone in the dialog box that appears.

    4. Click Check Names, and then click
      OK.

    5. Select Everyone in the Group or user names list.

    6. Under Permissions for Everyone, click to select the Full Control check box in the
      Allow column.

      Note that the Read check box in the Allow column is now also selected.

    7. Select each user, in turn, in the Group or user names list, and then verify that no check boxes are selected in the
      Deny column. Click to clear any check boxes that are selected in the Deny column.

    8. Click Advanced, click to select the
      Replace permission entries on all child objects check box, and then click OK.

    9. Click YES if you are prompted for confirmation, and then click OK to close the dialog box.

    Try to visit the Windows Update Web site or the Microsoft Update Web site again. If the problem is resolved, do not continue troubleshooting.

  • Method 4 Verify the permissions for you on the folder structure used by the Windows Update client or by the Microsoft Update client.

    1. Click Start, click
      Run, type explorer, and then click
      OK.

    2. Expand My computer, expand
      System Drive, and then expand
      WINDOWS.

    3. Right-click SoftwareDistribution, and then click Properties.

    4. In the SoftwareDistribution Properties window, click the Security tab, and then verify that whether you are in the Group or user names list.

    5. In the Group or user names list, select Everyone. Under Permissions for Everyone, click to select the Full Control check box in the Allow column.

      Note that the
      Read check box in the Allow column is now also selected.

    Try to visit the Windows Update Web site or the Microsoft Update Web site again. If the problem is resolved, do not continue troubleshooting.

  • Method 5 Rename the Catroot2 folder. To do this, type the following commands at a command prompt, pressing ENTER after each line:

    net stop cryptsvc
    ren %systemroot%\system32\catroot2 oldcatroot2
    net start cryptsvcThen, try to visit the Windows Update Web site or the Microsoft Update Web site again. If the problem is resolved, do not continue troubleshooting.

  • Method 6Rename the SoftwareDistribution folder. To do this, follow these steps.

    1. Restart the computer in Safe mode.

    2. Locate and then rename the
      Drive:\Windows\SoftwareDistribution folder to
      SoftwareDistribution.old.

      Note Drive is a placeholder for the system drive.

    3. Restart the computer in Normal mode.

More Information

You must be a local administrator to visit the Windows Update Web site or the Microsoft Update Web site. When you log on as a non-administrator, you cannot visit the Web site even if you use Run as to start Internet Explorer under an administrator account. This issue occurs because other system services are involved in the process. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

326686 You receive one or more error messages when the system administrator disables Windows Update or Microsoft Update

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.

Was this information helpful?

What affected your experience?
By pressing submit, your feedback will be used to improve Microsoft products and services. Your IT admin will be able to collect this data. Privacy Statement.

Thank you for your feedback!

×