Re: Windows Update Fails, related to BITS Failure

Kinda sorta true. However if it is our Group Policy template that is
causing the problem it's going to keep happening every time it's applied.

Thanks for your help Kaylene.

"Taurarian" <taurarianREMOVECAPS@xxxxxxxxxxx> wrote in message
news:%23gs3UcBQFHA.2580@xxxxxxxxxxxxxxxxxxxxxxx
> Mike, don't worry about that file.
>
> As long as Windows Update is working and you're getting the updates,
> that's the main thing.
>
> Kaylene
>
>
>
> "Mike" <reply@xxxxxxxxxxx> wrote in message
> news:eCIVvi$PFHA.3704@xxxxxxxxxxxxxxxxxxxxxxx
>> Hi Kaylene,
>>
>> Thank you I think I found the information I was after below. And It
>> works.. Bits is working.. So is Windows Update.
>>
>> Now all I need to now is where do I download the latest security
>> templates? /(I had previously applied "setup security.inf" that came with
>> Windows XP SP2)
>>
>> Kind regards
>> Mike
>>
>>
>>
>>
>>
>> Did you install any security templates SP2?
>>
>> Please run the command below and post the output.
>>
>> sc sdshow bits
>>
>> Does it match the output below: (one line)
>>
>> D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCLCSWLOCRRC;;;IU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
>>
>> If so you are seeing the error because the security templates incorrectly
>>
>> removed the read access to the Network Service account for the BITS
>> service.
>>
>> This error has been corrected in the security templates. So to fix the
>>
>> problem please download the latest security template and apply it and
>> then
>>
>> try to start the BITS service as follows:
>>
>> net start bits
>>
>> Alternatively, you can add read permissions to the NetworkService account
>> by
>>
>> appending (A;;KRLCLO;;;NS) to the DACL as follows and then try to start
>> the
>>
>> BITS:
>>
>> sc sdset bits
>>
>> D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCLCSWLOCRRC;;;IU)(A;;KRLCLO;;;NS)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
>>
>> net start bits
>>
>> The first command is all on one line.
>>
>> --
>>
>> Narayana Mahankali
>>
>> Microsoft, BITS
>>
>> This posting is provided "As Is" with no warranties, and confers no
>> rights.
>>
>> Use of included script samples are subject to the terms specified at
>>
>> http://www.microsoft.com/info/cpyright.htm
>>
>> "Peter Smith" <psmith@xxxxxxxxxxxxxxxxxxx> wrote in message
>>
>> news:ONf8WkSsEHA.636@xxxxxxxxxxxxxxxxxxxxxxx
>>
>>
>> "Taurarian" <Taurarian@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:299DC31C-7B6C-4898-8CB4-BED84A7C3829@xxxxxxxxxxxxxxxx
>>> Hi Mike, check the links I provided for some suggestions on possible
>>> fixes.
>>> Kaylene
>>>
>>> "Mike" wrote:
>>>
>>>>
>>>> Hi Taurarian,
>>>>
>>>> > 0x80004015 - CO_E_WRONG_SERVER_IDENTITY
>>>> > The security descriptor on the BITS service was changed by a security
>>>> > template such that NetworkService account doesn't have READ access to
>>>> > BITS
>>>> > service.
>>>>
>>>> What does that mean? (and how do I fix it?)
>>>>
>>>> Kind regards
>>>> Mike
>>>>
>>>>
>>>>
>>>> "Taurarian" <taurarianREMOVECAPS@xxxxxxxxxxx> wrote in message
>>>> news:u5Sk8UoPFHA.508@xxxxxxxxxxxxxxxxxxxxxxx
>>>> > When searching for available updates on the Windows Update site, you
>>>> > receive the 0x800A0046 error.
>>>> > This error can occur if the user logon account is part of the Guests
>>>> > account or a limited-user account, if the security descriptor does
>>>> > not
>>>> > allow have the Authenticated Users to run Windows Update, or if the
>>>> > Impersonate a client after authentication policy is missing Service
>>>> > and
>>>> > Administrators from the Users and Groups list.
>>>> > http://v5.windowsupdate.microsoft.com/v5consumer/showarticle.aspx?articleid=20&ln=en
>>>> >
>>>> > http://support.microsoft.com/?kbid=883821
>>>> > You may receive an error message when you search for available
>>>> > updates on
>>>> > the Windows Update Web site
>>>> >
>>>> > or
>>>> >
>>>> > http://www.updatexp.com/0x800a0046.html
>>>> > What causes Error 0x800a0046
>>>> >
>>>> >
>>>> > 0x80004015 - CO_E_WRONG_SERVER_IDENTITY
>>>> > The security descriptor on the BITS service was changed by a security
>>>> > template such that NetworkService account doesn't have READ access to
>>>> > BITS
>>>> > service.
>>>> >
>>>> >
>>>> > Mike wrote:
>>>> >> Windows Update site is failing with:
>>>> >> [Error number: 0x800A0046]
>>>> >>
>>>> >> Because (I believe) of this service failure logged in System Event
>>>> >> log: The Background Intelligent Transfer Service service terminated
>>>> >> with service-specific error 2147500053 (0x80004015).
>>>> >>
>>>> >>
>>>> >> ...some help please?
>>>> >
>>>>
>>>>
>>>>
>>
>>
>


.

Relevant Pages

  • Re: Blessed Windows Security Templates
    ... > running SAP on. ... > Subject: Blessed Windows Security Templates ... > Wgate servers in the DMZ Agate servers as well. ...
    (Focus-Microsoft)
  • RE: Blessed Windows Security Templates
    ... (That seems to be one of the more popular platforms for SAP ... Subject: Blessed Windows Security Templates ... I am suggesting they use one of the Center for Internet Security Templates ... Wgate servers in the DMZ Agate servers as well. ...
    (Focus-Microsoft)
  • Re: Understanding security template INF structures
    ... templates and GPO, instead of having to go from machine to machine... ... good memories of roller skating on Ring My Bell... ... Manually editing security templates is unsupported, ...
    (microsoft.public.win2000.security)
  • Undocumented Settings in Win2k Security Templates
    ... Undocumented Settings in Win2k Security Templates ... > The first entry is "RequireLogonToChangePassword". ...
    (Focus-Microsoft)
  • Re: Outlook Express Templates
    ... Your problem is caused by a Windows Update. ... Patch KB918766: ... To complete the fix for .eml templates, a registry change is needed. ...
    (microsoft.public.windowsxp.general)
Quantcast