Troubleshooting Guidance for Windows Update -2

TROUBLESHOOTING Guidance for Windows Update BASED ON A GIVEN ERROR MESSAGE

This post is in continuation with the first post Troubleshooting Guidance for Windows Update -1 .

0x 800b0100  Description: TRUST_E_NOSIGNATURE

Cause: Normally this error is presented when some system files are corrupted.
Step 1 – Download and runt the System Update Readiness Tool (KB947821) 

Step 2 – In this case one helpful documentation is the KB 956702

Step 3 – Try to install the given update in safe mode.

Step 4 – Try to perform the manual steps described in the session “Basic WU troubleshooting steps ” in this document;

0x 80070490  Description : E_PROP_ID_UNSUPPORTED

Cause : Normally this error is presented when some system files are corrupted.

Step 1 – Download and run the System Update Readiness Tool (KB947821) 

Step 2 – In this case one helpful documentation is the KB 958044.

Step 3 – Try to install the given update in safe mode.

Step 4 – Uninstall any security software such as Antivirus or Firewall installed.

0x80240016  Description: SUS_E_INSTALL_NOT_ALLOWED

Cause: This error occurs if a system restart process is pending due other updates installation or if some windows files are not registered correctly.

Step 1 – Ask the customer to restart the computer and try again;

Step 2 – For Windows 7 or Vista only: Click Start menu, All Programs, Accessories, right click over Command Prompt and select Run as Administrator. Type the following command and press Enter:

fsutil resource setautoreset true C:\ 

Step 3 – Click Start menu, All Programs, Accessories, right click over Command Prompt and select Run as Administrator, type the following command (press Enter after type each command):

net stop bits 

net stop wuauserv 

net stop cryptsvc 

net stop trustedinstaller 

Ren %systemroot%\SoftwareDistribution SD.OLD 

Ren %systemroot%\system32\catroot2 CTR2.OLD 

net start bits 

net start wuauserv 

net start cryptsvc 

net start trustedinstaller 

cd /d %windir%\system32  regsvr32.exe wuapi.dll 

regsvr32.exe wuaueng.dll 

regsvr32.exe wups.dll 

regsvr32.exe qmgrprxy.dll

0x80072EE2  Description: ERROR_INTERNET_TIMEOUT

Cause: This error can occurs due internet connection issues or being interrupted for some reason.

IMPORTANT : Additionally check if the customer is running Windows 7 or Vista and if there is any Nvidia/Nforce driver installed in the computer. If yes follow the steps below:  Click Start menu, All Programs, Accessories, right click over Command Prompt and select Run as Administrator. Type the following command and press Enter:

netsh interface ipv4 show interfaces

Check the name of the current/local connection in use and the following command where <connection_name> is the name that you found the in previous step:

netsh interface ipv4 set subinterface <connection_name> mtu=1300 store=persistent

Restart the computer and check again. If the problem persist go to the next steps below.

Step 1 – Verify if the computer is part of a network (work place, domain) and if yes try using a different connection or connection directly to the internet without pass thru any proxy, firewall or other network filters. If this is a single computer connected directly to the internet try a clean boot to remove any other software interference.  Uninstall any security software such as Antivirus or Firewall installed.

Step 2 – Check the alternative DNS:  Click start, type Network and select the option Network and Sharing Center . In the top left corner select Change adapter settings;  Right click at Local Area Connection (or in the current connection in use) and select Properties;  Select (make sure to don’t uncheck!) Internet Protocol Version 4 (TCP/IPv4) and click Properties button;  Select the option Use the following DNS Server address and type the following address:
Preferred: 4.2.2.1  Alternate: 4.2.2.2 

Click Ok to close this window and Ok again;  Restart the computer and try to update again.

Step 3 – Try to install the given update in safe mode.

0x 80070424  Description: ERROR_SERVICE_DOES_NOT_EXIST

Cause: This error is mainly caused by missing Windows Modules Installer (or Trusted Installer) or missing Windows Update services.

Try creating Windows Module Installer service.

0x80070005  Description: ERROR_ACCESS_DENIED

Cause: This error can occurs if some system folder, file or registry keys doesn’t have the appropriated permissions such as “change permission”.

Step 1 – Click Start menu, All Programs, Accessories, right click over Command Prompt and select Run as Administrator. Type the following command and press Enter:

fsutil resource setautoreset true C:\ 

Restart the computer and try to update again.

Step 2 – Run SUBNACL tool to grant permissions:  Go to http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b&displaylang=en#AffinityDownloads  Download and install the SUBINACL tool.  After install SUBINACL go to ” C:\Program files\Windows Resourse Kits\Tools ” folder;  Copy the text below and past in a note pad according to the Windows language :

For Windows in Portuguese Brazil or Spanish: 

@echo off

subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=administradores=f

subinacl /subkeyreg HKEY_CURRENT_USER /grant=administradores=f

subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=administradores=f

subinacl /subdirectories %SystemDrive% /grant=administradores=f

subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=system=f

subinacl /subkeyreg HKEY_CURRENT_USER /grant=system=f

subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=system=f

subinacl /subdirectories %SystemDrive% /grant=system=f

subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=%username%=f

subinacl /subkeyreg HKEY_CURRENT_USER /grant=%username%=f

subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=%username%=f

subinacl /subdirectories %SystemDrive% /grant=%username%=f

@Echo =========================  @Echo Finished.

@Echo =========================  @pause

For Windows in English: 

@echo off

subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=administrator=f

subinacl /subkeyreg HKEY_CURRENT_USER /grant=administrator=f

subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=administrator=f

subinacl /subdirectories %SystemDrive% /grant=administrator=f

subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=system=f

subinacl /subkeyreg HKEY_CURRENT_USER /grant=system=f

subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=system=f

subinacl /subdirectories %SystemDrive% /grant=system=f

subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=%username%=f

subinacl /subkeyreg HKEY_CURRENT_USER /grant=%username%=f

subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=%username%=f

subinacl /subdirectories %SystemDrive% /grant=%username%=f

@Echo =========================  @Echo Finished.

@Echo =========================  @pauses

Save this file as “SUCINACL.CMD” (with cotes) in the folder “C:\Program files\Windows Resourse Kits\Tools”, close the notepad and run the SUBINACL.CMD file.  Restart the computer and try to update again.

Step 3 – Click start, type dcomcnfg and select the item that will be displayed;

Expand Component Services > Computers. Right click at My Computer and select Properties;

Select the Com Security tab. Under Launch and Activation Permissions click Edit Default button;

In the Launch and Activation Permission window, check if the following users are displayed and if they have Allow permission granted for each System permissions. If they are not displayed or doesn’t have the right permissions set you’ll need to add and grant the permissions manually.

SYSTEM  Administrators  INTERACTIVE

After this close the Launch and Activation Permission window.  Select the Default Properties tab;

Make sure that the following options are set:

Mark the option Enable Distributed COM on this computer 

Clear the option Enable Com Internet Services on this computer 

Select the options bellow:

For Default Authentication Level :

Connect  For Default Impersonation Level :

Identify  Clear the option Provide Additional security for reference tracking 

Click Apply, OK. Close the other windows, restart the computer and try to update again.

0x8000FFFF  Description: E_UNEXPECTED

Cause: This error is mainly caused due PENDING.XML file that refers to a previous update installation and pending changes and may prevent you to install other updates.  Step 1 – Restart the computer and try again;

Step 2 – Follow the instructions provided in the following article http://support.microsoft.com/kb/946414 

Step 3 – Run the FixIt tool and make sure to select the Aggressive Mode option: http://support.microsoft.com/kb/971058 

Step 4 – Download and Install the latest Windows Update Agent. For more information, click the following article number to view the article in the Microsoft Knowledge Base KB949104 “How to obtain the latest version of the WindowsUpdate Agent to help manage updates on a computer”. Download the latest version, copy to C:\ and rename the file to WUA.exe after this open the command prompt as Administrator and run the following command:

WUA /force

Restart the computer and try to update again.

0x80073712 

Cause: This error can be caused due PENDING.XML file that refers to a previous update installation and pending changes and may prevent you to install other updates or due some corrupted Windows Update file.

Step 1 – Ask the customer to restart the computer and try again;

Step 2 – Take ownership and rename the PENDING.XML file. To do this, click Start menu, All Programs, Accessories, right click over Command Prompt and select Run as Administrator. Type the following commands and press Enter following commands (press Enter after type each command):

takeown /f C:\Windows\winsxs\pending.xml 

Ren c:\windows\winsxs\pending.xml pending.old

Restart the computer and try to update again.

Step 3 – Download and install the update http://support.microsoft.com/kb/947821; 

Step 4 – Try to run the FixIt http://support.microsoft.com/kb/971058 ; 

0x80240020 

Cause: This problem can occurs if the Windows Update service was not able to verify the current logged user credentials to complete the download and install the updates.

Step 1 – Follow the steps provided at http://support.microsoft.com/kb/910341  (You may need to use the English article version to get details regarding Windows Vista solution);

Step 2 – Perform a clean boot in order to avoid interference from other software’s and try to update again;

Step 3 – Try to run the FixIt http://support.microsoft.com/kb/971058 ;

0x 8007007E  Description: ERROR_MOD_NOT_FOUND

Cause: This error can occurs if some system files are not correct registered or some security software’s blocking Windows Update steps.

Step 1 – Click Start menu, All Programs, Accessories, right click over Command Prompt and select Run as Administrator, type the following command (press Enter after type each command):

net stop bits 

net stop wuauserv 

net stop cryptsvc 

cd /d %windir%\system32 

regsvr32 licdll.dll 

regsvr32 Inseng.dll 

regsvr32 Oleaut32.dll 

regsvr32 Ole32.dll 

regsvr32 Urlmon.dll 

regsvr32 Mssip32.dll 

regsvr32 wuapi.dll 

regsvr32 wups.dll 

regsvr32 wuaueng.dll 

regsvr32 wucltui.dll 

regsvr32 wuweb.dll 

regsvr32 msxml.dll 

regsvr32 msxml2.dll 

regsvr32 msxml3.dll 

regsvr32 softpub.dll 

regsvr32 initpki.dll 

regsvr32 wintrust.dll 

regsvr32 dssenh.dll 

regsvr32 rsaenh.dll 

regsvr32 gpkcsp.dll 

regsvr32 sccbase.dll 

regsvr32 slbcsp.dll 

regsvr32 cryptdlg.dll 

regsvr32 jscript.dll 

Ren %systemroot%\SoftwareDistribution SD.OLD 

Ren %systemroot%\system32\catroot2 CTR2.OLD 

net start bits 

net start wuauserv 

net start cryptsvc

Step 2 – Verify if the computer is part of a network (work place, domain) and if yes try using a different connection or connection directly to the internet without pass thru any proxy, firewall or other network filters;  if this is a single computer connected directly to the internet try a clean boot to remove any other software interference.  Uninstall any security software such as Antivirus or Firewall installed. Also try to use the security software removal tool. You can find some of these tools in the following article on Microsoft Community-

http://answers.microsoft.com/pt-br/protect/forum/protect_start/como-remover-completamente-os-vestigios-de/9f9bf450-c612-45a9-a9 ;  Step 3 – Perform a clean boot in order to avoid interference from other software’s and try to update again;

Step 4 – Try to run the FixIt http://support.microsoft.com/kb/971058 ;

To any other error messages…  KEEP ON SEARCHING……