Corrupted Windows Update Service Security Registry Key

Question

I have a corrupted security key in the registry (Windows XP) for the windows update service. I noticed that I can copy a security key from another service and move and replace it with the corrupted key. We have many machines that have this issue. Can we script this with a security key we know will work or can one machine not have the same security key as another?

score 0 · Accepted Answer · answered Apr 19 '13 at 02:13

It sounds like you are referring to the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\wuauserv\Security\Security value, is that correct? If so, to script it you can:

Run the following command on a "working" machine: sc sdshow wuauserv
Note the output of that command, which will be similar to D:(A;;CCLCSWRPLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)
On the "broken" machines, run the following command, replacing <SDDL> with the value from step two: sc sdset wuauserv <SDDL>

I would upvote but I am not allowed – user168403 Apr 20 '13 at 00:54 — user168403, Apr 20 '13 at 00:54

Corrupted Windows Update Service Security Registry Key

1 Answers1