WSUS: Automatic Update Client call recorder fails to init with Error 0x80004015
DESCRIPTION
You see error 0x80004015 in WindowsUpdate.log and Automatic Update Client fails to update using Windows Server Updates Service, Client call recorder fails to init with error 0x80004015, Failed to initialize WU client: 0x80004015.
SYMPTOMS
You see the following error in WindowsUpdate.log and Automatic Update Client fails to update using Windows Server Update Service, WSUS
2005-09-26 08:10:27 1724 ac4 Agent FATAL: Client call recorder fails to init with error 0x80004015
2005-09-26 08:10:27 1724 ac4 Agent * FATAL: Failed to initialize with error 0x80004015 from component Agent
2005-09-26 08:10:27 1724 ac4 Service FATAL: Failed to initialize WU client: 0x80004015
2005-09-26 08:10:27 1724 ac4 Service *********
2005-09-26 08:10:27 1724 ac4 Service ** END ** Service: Service exit [Exit code = 0x80004015]
CAUSE
Error 0x80004015 translates to CO_E_WRONG_SERVER_IDENTITY which means, "The class is configured to run as a security id different from the caller."
RESOLUTION
This is due to lack of permissions for Automatic Update Client - when you change the properties of the Automatic Updates service (via Group Policy - Computer Configuration, Windows Settings, Security Settings, System Services) to set it as Disabled or edited the Access Control, ACL on Automatic Update Client (WUAUSERV) service.
Since, the ACL (permissions) on the Automatic Update Service (WUAUSERV) is changed, we have to reset the security settings on the Automatic Updates Service (WUAUSERV) & BITS Service to the default settings;
To reset the ACL on the BITS & WUAUSERV services to default, run the following command (in one line) as Domain Administrator or Local System account on the machine. (Only these accounts can modify the ACL on these services on your machine)
1.
sc sdset bits
"D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)"
2.
sc sdset wuauserv
"D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)"
Note: Both the commands needs to be on one-line from a command prompt (disable word wrap). See the batch file which can automate the process.
To automatically run the commands, save the following code in the Notepad & use this simple SetServiceObjectSecurity.cmd batch file & double click to run
==========================================================
@echo off
Echo This batch file will Set Service Object Security for WUAUSERV & BITS.
REM Result will be written to %temp%\SetServiceObjectSecurity.log and then launched in Notepad.
Echo Please wait...
@echo on
sc sdset bits "D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)" >%temp%\SetServiceObjectSecurity.log
sc sdset wuauserv "D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)" >>%temp%\SetServiceObjectSecurity.log
@echo off
notepad %temp%\SetServiceObjectSecurity.log
Echo Open %temp%\SetServiceObjectSecurity.log for SUCCESS entry.
Echo Open the Services applet from control panel to see if the services are started.
Echo For any errors; report on http://groups.msn.com/NTarabia
@echo off
Pause
==========================================================
MORE INFORMATION
The Automatic Updates Service starts and then stops automatically
http://support.microsoft.com/kb/555336