From: Bruce Parent on
wuapp properties
system, administrators(bapare47),users(bapare47):read&execute, read
trustedinstaller:full control, modify, read&execute, read, write

2010-05-06 09:54:04:640 1288 16f4 Report CWERReporter finishing event
handling. (00000000)
2010-05-07 00:03:03:500 1288 a20 AU AU setting next sqm report timeout to
2010-05-08 04:03:03
2010-05-07 00:03:03:609 1288 dbc Report CWERReporter finishing event
handling. (00000000)
2010-05-07 00:03:13:140 1288 dbc Report CWERReporter finishing event
handling. (00000000)
2010-05-07 07:31:50:531 1288 578 Report CWERReporter finishing event
handling. (00000000)
2010-05-07 07:31:59:073 1288 578 Report CWERReporter finishing event
handling. (00000000)
2010-05-07 07:35:47:800 1288 ce0 AU Triggering AU detection through
DetectNow API
2010-05-07 07:35:47:800 1288 ce0 AU Triggering Online detection (interactive)
2010-05-07 07:35:47:800 1288 a20 AU #############
2010-05-07 07:35:47:800 1288 a20 AU ## START ## AU: Search for updates
2010-05-07 07:35:47:800 1288 a20 AU #########
2010-05-07 07:35:47:847 1288 a20 AU <<## SUBMITTED ## AU: Search for updates
[CallId = {2ACBD6FB-F069-4774-B5E5-B6C1E25A5C79}]
2010-05-07 07:35:47:847 1288 578 Agent *************
2010-05-07 07:35:47:847 1288 578 Agent ** START ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2010-05-07 07:35:47:847 1288 578 Agent *********
2010-05-07 07:35:47:847 1288 578 Agent * Online = Yes; Ignore download
priority = No
2010-05-07 07:35:47:847 1288 578 Agent * Criteria = "IsInstalled=0 and
DeploymentAction='Installation' or IsPresent=1 and
DeploymentAction='Uninstallation' or IsInstalled=1 and
DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and
DeploymentAction='Uninstallation' and RebootRequired=1"
2010-05-07 07:35:47:847 1288 578 Agent * ServiceID =
{7971F918-A847-4430-9279-4A52D1EFE18D} Third party service
2010-05-07 07:35:47:847 1288 578 Agent * Search Scope = {Machine}
2010-05-07 07:35:47:878 1288 578 Misc Validating signature for
C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2010-05-07 07:35:47:925 1288 578 Misc Microsoft signed: Yes
2010-05-07 07:35:48:097 1288 578 Misc Validating signature for
C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2010-05-07 07:35:48:097 1288 578 Misc Microsoft signed: Yes
2010-05-07 07:35:48:253 1288 578 Agent Checking for updated auth cab for
service 7971f918-a847-4430-9279-4a52d1efe18d at
http://download.windowsupdate.com/v9/microsoftupdate/redir/muauth.cab
2010-05-07 07:35:48:253 1288 578 Misc Validating signature for
C:\Windows\SoftwareDistribution\AuthCabs\authcab.cab:
2010-05-07 07:35:48:253 1288 578 Misc Microsoft signed: Yes
2010-05-07 07:35:48:315 1288 578 Misc Validating signature for
C:\Windows\SoftwareDistribution\AuthCabs\authcab.cab:
2010-05-07 07:35:48:331 1288 578 Misc Microsoft signed: Yes
2010-05-07 07:35:48:331 1288 578 Setup Checking for agent SelfUpdate
2010-05-07 07:35:48:331 1288 578 Setup Client version: Core: 7.4.7600.226
Aux: 7.4.7600.226
2010-05-07 07:35:48:331 1288 578 Misc Validating signature for
C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2010-05-07 07:35:48:346 1288 578 Misc Microsoft signed: Yes
2010-05-07 07:35:48:409 1288 578 Misc Validating signature for
C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2010-05-07 07:35:48:409 1288 578 Misc Microsoft signed: Yes
2010-05-07 07:35:48:424 1288 578 Misc Validating signature for
C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2010-05-07 07:35:48:440 1288 578 Misc Microsoft signed: Yes
2010-05-07 07:35:48:627 1288 578 Misc Validating signature for
C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2010-05-07 07:35:48:643 1288 578 Misc Microsoft signed: Yes
2010-05-07 07:35:48:658 1288 578 Misc Validating signature for
C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
2010-05-07 07:35:48:658 1288 578 Misc Microsoft signed: Yes
2010-05-07 07:35:48:736 1288 578 Misc Validating signature for
C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
2010-05-07 07:35:48:736 1288 578 Misc Microsoft signed: Yes
2010-05-07 07:35:48:814 1288 578 Setup Determining whether a new setup
handler needs to be downloaded
2010-05-07 07:35:48:814 1288 578 Misc Validating signature for
C:\Windows\SoftwareDistribution\SelfUpdate\Handler\WuSetupV.exe:
2010-05-07 07:35:48:830 1288 578 Misc Microsoft signed: Yes
2010-05-07 07:35:48:830 1288 578 Setup SelfUpdate handler update NOT
required: Current version: 7.4.7600.226, required version: 7.4.7600.226
2010-05-07 07:35:48:830 1288 578 Setup Evaluating applicability of setup
package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.4.7600.226"
2010-05-07 07:35:49:345 1288 578 Handler FATAL: UH: 0x80070005:
EvaluateApplicability failed in CCbs::EvaluateApplicability
2010-05-07 07:35:49:345 1288 578 Setup WARNING: CBS EvaluateApplicability
returned error, error = 0x80070005
2010-05-07 07:35:49:345 1288 578 Setup FATAL: Applicability evaluation for
setup package
"WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.4.7600.226" failed,
error = 0x80070005
2010-05-07 07:35:49:345 1288 578 Setup FATAL: SelfUpdate check failed, err =
0x80070005
2010-05-07 07:35:49:345 1288 578 Agent * WARNING: Skipping scan,
self-update check returned 0x80070005
2010-05-07 07:35:50:125 1288 578 Agent * WARNING: Exit code = 0x80070005
2010-05-07 07:35:50:125 1288 578 Agent *********
2010-05-07 07:35:50:125 1288 578 Agent ** END ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2010-05-07 07:35:50:125 1288 578 Agent *************
2010-05-07 07:35:50:125 1288 578 Agent WARNING: WU client failed Searching
for update with error 0x80070005
2010-05-07 07:35:50:125 1288 150c AU >>## RESUMED ## AU: Search for
updates [CallId = {2ACBD6FB-F069-4774-B5E5-B6C1E25A5C79}]
2010-05-07 07:35:50:125 1288 150c AU # WARNING: Search callback failed,
result = 0x80070005
2010-05-07 07:35:50:125 1288 150c AU # WARNING: Failed to find updates
with error code 80070005
2010-05-07 07:35:50:125 1288 150c AU #########
2010-05-07 07:35:50:125 1288 150c AU ## END ## AU: Search for updates
[CallId = {2ACBD6FB-F069-4774-B5E5-B6C1E25A5C79}]
2010-05-07 07:35:50:125 1288 150c AU #############
2010-05-07 07:35:54:352 1288 578 Report REPORT EVENT:
{BDB8FAFE-91EF-4381-B1A6-59BB4B231600} 2010-05-07
07:35:49:345-0400 1 148 101 {61CA813A-7585-442E-A66B-B0D15CE6BDC0} 1 80070005 SelfUpdate Failure Software
Synchronization Windows Update Client failed to detect with error 0x80070005.
2010-05-07 07:35:54:368 1288 578 Report CWERReporter::HandleEvents - WER
report upload completed with status 0x8
2010-05-07 07:35:54:368 1288 578 Report WER Report sent: 7.4.7600.226
0x80070005 61CA813A-7585-442E-A66B-B0D15CE6BDC0 Scan 101 Unmanaged
2010-05-07 07:35:54:368 1288 578 Report CWERReporter finishing event
handling. (00000000)

--
Bruce Parent


"MowGreen" wrote:

> What are the Permissions for the below Users ?
>
> Users (bapare47-Laptop\Users)
> TrustedInstaller
>
> Please try another search for updates, Bruce. When/if the Access Denied
> error (80070005) appears, close Windows Update and click the Start orb.
> In the Start Search field type in windowsupdate.log
> Under Programs, click on windowsupdate.log
>
> After it opens scroll all the way to the bottom for the most recent entries.
> Please copy and paste at least the *last* 50 or so lines of the log into
> your reply.
>
> As to the Windows Mail issue, I have no experience using it. If you need
> assistance preserving the files suggest you post here, Bruce:
>
> Networking, Email, and Getting Online
> http://social.answers.microsoft.com/Forums/en/vistanetworking/threads
>
>
> MowGreen
> ================
> *-343-* FDNY
> Never Forgotten
> ================
>
> banthecheck.com
> "Security updates should *never* have *non-security content* prechecked
>
>
>
> Bruce Parent wrote:
> > wuapp group or user names
> > system
> > administrators(bapare47-laptop\administrators)
> > users(bapare47-laptop\users)
> > trustedinstaller
> > permissions for system
> > read& execute
> > read
> > advanced settings under peermissions
> > effective permissions tab
> > all item boxes medium gray
> >
> > i can get win 7 home premium or win 7 ultimate (not win 7 pro) upgrade
> > launch from vista
> > ask for clean install and get full install preserving drives other than c:
> > all 3party apps need to be reinstalled
> > I can search for earlier system restore points
> > maybe taken automatically during updates
> >
> > other 5/4 entry:
> > exported ms mail files to local D: drive folder export2.
> > tried to copy folder to remote drive F: failed sort of would not copy file
> > properties.
> > tried to export ms mail files to remote F: drive folder export.
> > failed. could not copy. F: 127 Gigabytes free D: 156 Gigabyes free
> > export2 folder 43 Megabytes used.
> > Next ??? wish to save mail
> > backup and restore utility for export2 folder ? I have not used this tool ?
> > backup to CD? backup to remote drive (hard drive F: usb connect)?
> > Next ???
> >
> > -- Bruce Parent
> .
>
From: MowGreen on
Bruce Parent wrote:
> 2010-05-07 07:35:48:830 1288 578 Setup Evaluating applicability of setup
> package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.4.7600.226"
> 2010-05-07 07:35:49:345 1288 578 Handler FATAL: UH: 0x80070005:
> EvaluateApplicability failed in CCbs::EvaluateApplicability
> 2010-05-07 07:35:49:345 1288 578 Setup WARNING: CBS EvaluateApplicability
> returned error, error = 0x80070005
> 2010-05-07 07:35:49:345 1288 578 Setup FATAL: Applicability evaluation for
> setup package
> "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.4.7600.226" failed,
> error = 0x80070005


The failure to evaluate the applicability of the setup package is where
the Fatal Access Denied error is stemming from, not the *search* for
updates, Bruce.

WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.4.7600.226 is a
registry entry which *inherits it's Permissions* from
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component
Based Servicing

Locate Component Based Servicing at the above location in the registry.
( Click the Start orb > in the Start Search field type in regedit >
under Programs, *right* click regedit.exe and choose 'Run as
administrator'; agree to the UAC prompts to allow it to run Elevated )

*Right* click on Component Based Servicing and choose Permissions.

The ' Group or user names: ' list should be showing the below names with
these Perms:

System - Read
Administrators (bapare47-PC\Administrators) - Read
Users (bapare47-PC\Users) - Read
TrustedInstaller - Full Control; Read

Navigate to
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component
Based Servicing\ApplicabilityEvaluationCache

Locate WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.4.7600.226 in
the ApplicabilityEvaluationCache subfolder.

*Right* click on it and choose Permissions. The Perm settings should be
greyed out and be showing the same Perms as Component Based Servicing
as the Perms are inherited from Component Based Servicing.

The Names, Type, and Data for
WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.4.7600.226 showing
in the right frame are:

Default REG_SZ (value not set)
ApplicabilityState REG_DWORD 0x00000007(7)
CurrentState REG_DWORD 0x00000007(7)

*IF* you had to edit the Permissions for Component Based Servicing to
match what I posted for CBS, then restart the system *before* checking
the Perms for the ApplicabilityEvaluationCache subfolder and the Data of
WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.4.7600.226 .


MowGreen
================
*-343-* FDNY
Never Forgotten
================

banthecheck.com
"Security updates should *never* have *non-security content* prechecked
From: Bruce Parent on
I located component based servicing ... permissions
creator owner had special permissions
administrators and system had full and read, I changed them to read
users had read, there was no entry for trustedinstaller
I restarted and got back into regedit
I located applicabilityevaluationcache - it only had a default member
reg sz (value not set)
should wuclient be added? does ~ mean ~ or does it represent skipped values?
case sensitive? (yes assumed)

--
Bruce Parent


"MowGreen" wrote:

> Bruce Parent wrote:
> > 2010-05-07 07:35:48:830 1288 578 Setup Evaluating applicability of setup
> > package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.4.7600.226"
> > 2010-05-07 07:35:49:345 1288 578 Handler FATAL: UH: 0x80070005:
> > EvaluateApplicability failed in CCbs::EvaluateApplicability
> > 2010-05-07 07:35:49:345 1288 578 Setup WARNING: CBS EvaluateApplicability
> > returned error, error = 0x80070005
> > 2010-05-07 07:35:49:345 1288 578 Setup FATAL: Applicability evaluation for
> > setup package
> > "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.4.7600.226" failed,
> > error = 0x80070005
>
>
> The failure to evaluate the applicability of the setup package is where
> the Fatal Access Denied error is stemming from, not the *search* for
> updates, Bruce.
>
> WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.4.7600.226 is a
> registry entry which *inherits it's Permissions* from
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component
> Based Servicing
>
> Locate Component Based Servicing at the above location in the registry.
> ( Click the Start orb > in the Start Search field type in regedit >
> under Programs, *right* click regedit.exe and choose 'Run as
> administrator'; agree to the UAC prompts to allow it to run Elevated )
>
> *Right* click on Component Based Servicing and choose Permissions.
>
> The ' Group or user names: ' list should be showing the below names with
> these Perms:
>
> System - Read
> Administrators (bapare47-PC\Administrators) - Read
> Users (bapare47-PC\Users) - Read
> TrustedInstaller - Full Control; Read
>
> Navigate to
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component
> Based Servicing\ApplicabilityEvaluationCache
>
> Locate WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.4.7600.226 in
> the ApplicabilityEvaluationCache subfolder.
>
> *Right* click on it and choose Permissions. The Perm settings should be
> greyed out and be showing the same Perms as Component Based Servicing
> as the Perms are inherited from Component Based Servicing.
>
> The Names, Type, and Data for
> WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.4.7600.226 showing
> in the right frame are:
>
> Default REG_SZ (value not set)
> ApplicabilityState REG_DWORD 0x00000007(7)
> CurrentState REG_DWORD 0x00000007(7)
>
> *IF* you had to edit the Permissions for Component Based Servicing to
> match what I posted for CBS, then restart the system *before* checking
> the Perms for the ApplicabilityEvaluationCache subfolder and the Data of
> WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.4.7600.226 .
>
>
> MowGreen
> ================
> *-343-* FDNY
> Never Forgotten
> ================
>
> banthecheck.com
> "Security updates should *never* have *non-security content* prechecked
> .
>
From: MowGreen on
Bruce Parent wrote:
> I located component based servicing ... permissions
> creator owner had special permissions
> administrators and system had full and read, I changed them to read
> users had read, there was no entry for trustedinstaller
> I restarted and got back into regedit
> I located applicabilityevaluationcache - it only had a default member
> reg sz (value not set)
> should wuclient be added? does ~ mean ~ or does it represent skipped values?
> case sensitive? (yes assumed)
>
> -- Bruce Parent


First, STRONGLY suggest that you backup any registry keys that you are
going to edit, just in case you need them:
How to Backup the Registry in Windows 7, Windows Vista and Windows XP?
http://windowsxp.mvps.org/registry.htm


Is Creator Owner listed under ' Group or user names: ' Bruce ?

TrustedInstaller ***should*** be the Owner of

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component
Based Servicing

The ' Group or user names: ' list ***should be showing the below names
ONLY *** with these Permissions *unless* there are other User Accounts
on your system.
The case of the letters inside of the ( ) is the ONLY thing that may
differ on your system; in other words, laptop may be spelled Laptop:

System - Read
Administrators (bapare47-laptop\Administrators) - Read
Users (bapare47-laptop\Users) - Read
TrustedInstaller - Full Control; Read


The below is *exactly* what the Name and Data values should be showing for

WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.4.7600.226

in the ApplicabilityEvaluationCache subfolder -


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component
Based
Servicing\ApplicabilityEvaluationCache\WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.4.7600.226]
"ApplicabilityState"=dword:00000007
"CurrentState"=dword:00000007




MowGreen
================
*-343-* FDNY
Never Forgotten
================

banthecheck.com
"Security updates should *never* have *non-security content* prechecked
From: Bruce Parent on
???
wuapp properties
system, administrators, users have read&execute and read authority only
trustedinstaller has full control etc etc authority
regedit
microsoft window current version component based servicing permissions
creator owner has special permissions
system, administrators, users have read authority only (after 5/9 change)
component based servicing applicabilityevaluationcache
has only default reg_sz (value not set)

should I add wuclient ... (exactly as shown)
new key ??? under applicabilityevaluationcache ???
--
Bruce Parent


"MowGreen" wrote:

> Bruce Parent wrote:
> > I located component based servicing ... permissions
> > creator owner had special permissions
> > administrators and system had full and read, I changed them to read
> > users had read, there was no entry for trustedinstaller
> > I restarted and got back into regedit
> > I located applicabilityevaluationcache - it only had a default member
> > reg sz (value not set)
> > should wuclient be added? does ~ mean ~ or does it represent skipped values?
> > case sensitive? (yes assumed)
> >
> > -- Bruce Parent
>
>
> First, STRONGLY suggest that you backup any registry keys that you are
> going to edit, just in case you need them:
> How to Backup the Registry in Windows 7, Windows Vista and Windows XP?
> http://windowsxp.mvps.org/registry.htm
>
>
> Is Creator Owner listed under ' Group or user names: ' Bruce ?
>
> TrustedInstaller ***should*** be the Owner of
>
> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component
> Based Servicing
>
> The ' Group or user names: ' list ***should be showing the below names
> ONLY *** with these Permissions *unless* there are other User Accounts
> on your system.
> The case of the letters inside of the ( ) is the ONLY thing that may
> differ on your system; in other words, laptop may be spelled Laptop:
>
> System - Read
> Administrators (bapare47-laptop\Administrators) - Read
> Users (bapare47-laptop\Users) - Read
> TrustedInstaller - Full Control; Read
>
>
> The below is *exactly* what the Name and Data values should be showing for
>
> WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.4.7600.226
>
> in the ApplicabilityEvaluationCache subfolder -
>
>
> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component
> Based
> Servicing\ApplicabilityEvaluationCache\WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.4.7600.226]
> "ApplicabilityState"=dword:00000007
> "CurrentState"=dword:00000007
>
>
>
>
> MowGreen
> ================
> *-343-* FDNY
> Never Forgotten
> ================
>
> banthecheck.com
> "Security updates should *never* have *non-security content* prechecked
> .
>