I setup a new Hyper-V Server 2008 R2 (secondary VM) DC and ran windows updates, receive error 80070005. I also have this same error is now happening on our primary domain controller (Not a VM) yet all of our other servers are updating fine? 1. I tried the "solution" here to no avail; http://social.technet.microsoft.com/Forums/en-US/windowsserver2008r2management/thread/6c221460-430d-4211-8d54-3bc427be26b1. ------------------------------------ 2. I have also read this post… a little apprehensive about trying a few of the suggestions but did try this one to no avail; reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /f wmic /namespace:\\root\ccm\SoftwareUpdates\Wuahandler path CCM_UpdateSource delete---failed wmic /namespace:\\root\ccm\ScanAgent path CCM_ScanToolHistory delete--failed net stop wuauserv net start wuauserv ------------------------------------------------- 3. I have also tried this; 1. Click on 'Start', choose 'Run', type in CMD and click on 'OK'. 2. Type NET STOP WUAUSERV and press 'Enter'. 3. Find the folder c:\Windows\SoftwareDistribution. 5. Rename folder SoftwareDistribution to some other name such as SD_old. 6. Return to the CMD prompt command line window that opened in step 1 and then type NET START WUAUSERV and click 'Enter'. 7. Please access the Windows Update site and see, if the issue is resolved. --------------------- 4. I have also tried this; http://social.technet.microsoft.com/Forums/en-US/w7itprogeneral/thread/4222edeb-7068-4913-9de9-286cfc906dc4 ------------------- · Running WSUS but have omitted all of the servers, I update them manually. · Logged in under the domain admin account · I can install other programs no problem. · No AV installed · I am part of a domain but all other servers have no issue with updates, all in the same OU policy · I have looked at the even viewer… there are no errors of any kind. When I choose ‘check for updates’ this error 80070005 comes up far too fast, like it doesn’t try just throws up the error? Thanks

Hi, Can you post the log from %systemdrive%\Windows\windowsupdate.log? -- Mike Burr

I cleared the log and ran the windows update again... very large log file; ---------------------------------------------------------------------- 2010-07-07 15:36:35:888 880 8e8 AU WARNING: GetUpdateMetadata2 failed, error = 0x80070005 2010-07-07 15:36:35:888 1960 ba8 Misc =========== Logging initialized (build: 7.4.7600.226, tz: -0700) =========== 2010-07-07 15:36:35:888 1960 ba8 Misc = Process: C:\Windows\Explorer.EXE 2010-07-07 15:36:35:888 1960 ba8 Misc = Module: C:\Windows\system32\wucltux.dll 2010-07-07 15:36:35:888 1960 ba8 WUApp FATAL: Failed to call GetUpdateData for updates, hr=80070005, lcid=00000409 2010-07-07 15:36:35:888 1960 ba8 WUApp WARNING: Failed to load the update list, error 80070005 2010-07-07 15:36:35:888 1960 ba8 WUApp WARNING: Failed to populate update list with error 80070005 2010-07-07 15:36:35:904 880 8e8 Agent WARNING: WU client fails CClientCallRecorder::EnumerateService with error 0x80070005 2010-07-07 15:36:35:904 1960 ba8 WUApp WARNING: Error displaying Opted In Service summary: 80070005 2010-07-07 15:36:37:513 880 8e8 AU Triggering AU detection through DetectNow API 2010-07-07 15:36:37:513 880 8e8 AU Triggering Online detection (interactive) 2010-07-07 15:36:37:529 880 4dc AU ############# 2010-07-07 15:36:37:529 880 4dc AU ## START ## AU: Search for updates 2010-07-07 15:36:37:529 880 4dc AU ######### 2010-07-07 15:36:37:529 880 4dc Agent WARNING: WU client fails CClientCallRecorder::BeginFindUpdatesEx from AutomaticUpdates with error 0x80070005 2010-07-07 15:36:37:529 880 4dc AU # WARNING: Failed to find updates with error code 80070005 2010-07-07 15:36:37:529 880 4dc AU ######### 2010-07-07 15:36:37:529 880 4dc AU ## END ## AU: Search for updates [CallId = {00000000-0000-0000-0000-000000000000}] 2010-07-07 15:36:37:529 880 4dc AU ############# 2010-07-07 15:36:37:529 880 4dc AU Successfully wrote event for AU health state:0 2010-07-07 15:36:37:529 880 4dc AU AU setting next detection timeout to 2010-07-08 03:36:37 2010-07-07 15:36:37:529 880 4dc AU Successfully wrote event for AU health state:0 2010-07-07 15:36:37:529 880 4dc AU Successfully wrote event for AU health state:0 2010-07-07 15:36:37:529 880 8e8 AU WARNING: GetUpdateMetadata2 failed, error = 0x80070005 2010-07-07 15:36:37:529 1960 ba8 WUApp FATAL: Failed to call GetUpdateData for updates, hr=80070005, lcid=00000409 2010-07-07 15:36:37:529 1960 ba8 WUApp WARNING: Failed to load the update list, error 80070005 2010-07-07 15:36:37:529 1960 ba8 WUApp WARNING: Failed to populate update list with error 80070005 2010-07-07 15:36:37:529 880 8e8 AU WARNING: GetUpdateMetadata2 failed, error = 0x80070005 2010-07-07 15:36:37:529 1960 ba8 WUApp FATAL: Failed to call GetUpdateData for updates, hr=80070005, lcid=00000409 2010-07-07 15:36:37:529 1960 ba8 WUApp WARNING: Failed to load the update list, error 80070005 2010-07-07 15:36:37:529 1960 ba8 WUApp WARNING: Failed to populate update list with error 80070005 2010-07-07 15:36:37:529 880 8e8 Agent WARNING: WU client fails CClientCallRecorder::EnumerateService with error 0x80070005 2010-07-07 15:36:37:529 1960 ba8 WUApp WARNING: Error displaying Opted In Service summary: 80070005 2010-07-07 15:36:42:527 880 3b8 Report CWERReporter finishing event handling. (00000000) Thanks for your help

Hi, Have you tried the steps here, http://social.technet.microsoft.com/Forums/en/winserversecurity/thread/d0a0dbae-e3fd-4723-81b0-277924f2c5d3 -- Mike Burr

Hi Mike Ya, I have tried that... Thanks

Hi, The 0x80070005 error indicates a permission issue. Please check if the DOMAIN ADMINISTRATOR account is a member of the DOMAIN GUESTS group. If so, remove it from the DOMAIN GUESTS group. If the issue persists, I suggest trying the following methods to troubleshoot this issue: Method 1 Verify the permissions that are set for Windows Update in the registry ================================================= Verify that the correct permissions are set on the following registry subkey, and then connect to the Windows Update Web site to install the updates that you want: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate To verify the permissions that are set for Windows Update in the registry, follow these steps: 1. Click Start , and then click Run . 2. In the Open box, type regedit , and then click OK . 3. Locate, and then click the following registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate 4. On the Edit menu, click Permissions . 5. Verify that the Administrators group and the System account are assigned the Full Control permission and the Read permission. If the Allow check box next to Full Control or Read for the Administrators group or for the System account is not selected, assign the Full Control permission and the Read permission to the accounts. To assign the Full Control permission and the Read permission, follow these steps: a. In the Group or user names list, click the name of the group or of the user account. b. In the Permissions for GroupName list, select the Allow check boxes next to Full Control and Read , and then click OK . Note: The Allow check boxes next to Full Control and Read may be unavailable (or appear dimmed). 6. Quit Registry Editor. Method 4: Verify the permissions that are set for Classes Root in the registry Verify that the correct permissions are set on the registry key HKEY_CLASSES_ROOT , and then connect to the Windows Update Web site to install the updates that you want. To verify the permissions that are set for Windows Update in the registry, follow these steps: 1. Click Start , click Run , in the Open box, type regedit and then click OK . 2. Right-click HKEY_CLASSES_ROOT , and then click Permissions . 3. Write down the permissions that are listed under the Group or user name that you were using when you encountered the error that is described in the "Symptoms" section. 4. Under Group or user names , click the Administrators group. 5. Make sure that the Full Control check box under Allow is selected. 6. If the only group listed is Everyone , make sure Full Control under Allow is selected. 7. Click to clear any check boxes that are currently selected in the Deny column. 8. Click OK . 9. Close Registry Editor. 10. Register the following DLLs: • Wuapi.dll • Wuaueng1.dll • Wuaueng.dll • Wucltui.dll To do this, follow these steps: a. Click Start , click Run , type cmd in the Open box, and then click OK . b. Type the following command at the command prompt, and then press ENTER: regsvr32 wuapi.dll c. Repeat the regsvr32 command in the step b for each of the remaining .dll files that are listed in this step. 11. Restart the Automatic Updates service by typing the following commands at the command prompt, and then press ENTER: • net stop wuauserv • net start wuauserv 12. Restart the BITS service by typing the following commands at the command prompt, and then press ENTER: • net stop bits • net start bits Hope it helps. Tim Quan TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi Tim Thanks for this but unfortunately it hasn’t resolved the issue. I went through this whole list… what didn’t happen was while trying to register the DLL files, two of them didn’t exist? Wuaueng1.dll and Wucltui.dll, both failed to load, not found? Don’t know if this is the issue but…? Thaks again

Hi, Have you checked whether the DOMAIN ADMINISTRATOR account is a member of the DOMAIN GUESTS group? I suggest trying below: 1. Click the Start Button in the Start Search bar, type: "services.msc" (without quotes) and press Enter. If you are prompted for an administrator password or confirmation, type the password or provide confirmation. 2. Double click the service "Windows Update". 3. Click on the "General" tab; make sure the "Startup Type" is "Automatic" or "Manual". Then please click the "Start" button under "Service Status" to start the service. 4. Please repeat the above steps with the Background Intelligent Transfer Service (BITS). You can also temporarily stop these services, restart the computer, and then start these services again. If the issue persists, please try below: 1. Click the Start Button type "msconfig" (without quotation marks) in the Start Search box, and then press Enter. Note: If prompted, please click Continue on the User Account Control (UAC) window. 2. Click the "Services" tab, check the "Hide All Microsoft Services" box and click "Disable All" (if it is not gray). 3. Click the "Startup" tab, click "Disable All" and click "OK". Then, restart the computer. When the "System Configuration Utility" window appears, please check the "Don't show this message or launch the System Configuration Utility when Windows starts" box and click OK. You can also refer to the following article for more information: http://support.microsoft.com/?id=885409 Tim Quan TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi 1. The DOMAIN ADMINISTRATOR account is not member of the DOMAIN GUESTS group 2. Windows Update and BITS were both set to “Delayed start”. Setting to Automatic and rebooting seemed to make no difference. 3. In msconfig, after choosing “hide all Microsoft services” there was nothing to disable. Same with the startup… nothing to disable. Thanks for your help...

I setup a new Hyper-V Server 2008 R2 (secondary VM) DC and ran windows updates, receive error 80070005. I also have this same error is now happening on our primary domain controller (Not a VM) yet all of our other servers are updating fine? 1. I tried the "solution" here to no avail; http://social.technet.microsoft.com/Forums/en-US/windowsserver2008r2management/thread/6c221460-430d-4211-8d54-3bc427be26b1. ------------------------------------ 2. I have also read this post… a little apprehensive about trying a few of the suggestions but did try this one to no avail; reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /f wmic /namespace:\\root\ccm\SoftwareUpdates\Wuahandler path CCM_UpdateSource delete---failed wmic /namespace:\\root\ccm\ScanAgent path CCM_ScanToolHistory delete--failed net stop wuauserv net start wuauserv ------------------------------------------------- 3. I have also tried this; 1. Click on 'Start', choose 'Run', type in CMD and click on 'OK'. 2. Type NET STOP WUAUSERV and press 'Enter'. 3. Find the folder c:\Windows\SoftwareDistribution. 5. Rename folder SoftwareDistribution to some other name such as SD_old. 6. Return to the CMD prompt command line window that opened in step 1 and then type NET START WUAUSERV and click 'Enter'. 7. Please access the Windows Update site and see, if the issue is resolved. --------------------- 4. I have also tried this; http://social.technet.microsoft.com/Forums/en-US/w7itprogeneral/thread/4222edeb-7068-4913-9de9-286cfc906dc4 ------------------- 5. And this; http://social.technet.microsoft.com/Forums/en/winserversecurity/thread/d0a0dbae-e3fd-4723-81b0-277924f2c5d3 6. 1. Click the Start Button in the Start Search bar, type: "services.msc" (without quotes) and press Enter. If you are prompted for an administrator password or confirmation, type the password or provide confirmation. 2. Double click the service "Windows Update". 3. Click on the "General" tab; make sure the "Startup Type" is "Automatic" or "Manual". Then please click the "Start" button under "Service Status" to start the service. 4. Please repeat the above steps with the Background Intelligent Transfer Service (BITS). You can also temporarily stop these services, restart the computer, and then start these services again. If the issue persists, please try below: 1. Click the Start Button type "msconfig" (without quotation marks) in the Start Search box, and then press Enter. Note: If prompted, please click Continue on the User Account Control (UAC) window. 2. Click the "Services" tab, check the "Hide All Microsoft Services" box and click "Disable All" (if it is not gray). 3. Click the "Startup" tab, click "Disable All" and click "OK". Then, restart the computer. When the "System Configuration Utility" window appears, please check the "Don't show this message or launch the System Configuration Utility when Windows starts" box and click OK. 7. http://social.technet.microsoft.com/Forums/en-CA/winservergen/thread/56c6f56a-8b77-46be-90ca-59bc9f7f1720 --------------------------------------------------------------------- · Running WSUS but have omitted all of the servers, I update them manually. · Logged in under the domain admin account · I can install other programs no problem. · No AV installed · I am part of a domain but all other servers have no issue with updates, all in the same OU policy · I have looked at the even viewer… there are no errors of any kind. When I choose ‘check for updates’ this error 80070005 comes up far too fast, like it doesn’t try just throws up the error? Thanks

Hi, Are you running Windows Update with a domain admin or enterprise admin account? Also, is there anything informative in %systemdrive%\Windows\WindowsUpdate.log? -- Mike Burr

Hi Mike Logged on as Domain Admin… here is the WindowsUpdate log. 2010-07-15 09:44:32:455 884 9d0 AU Triggering AU detection through DetectNow API 2010-07-15 09:44:32:455 884 9d0 AU Triggering Online detection (interactive) 2010-07-15 09:44:32:471 884 464 AU ############# 2010-07-15 09:44:32:471 884 464 AU ## START ## AU: Search for updates 2010-07-15 09:44:32:471 884 464 AU ######### 2010-07-15 09:44:32:471 884 464 Agent WARNING: WU client fails CClientCallRecorder::BeginFindUpdatesEx from AutomaticUpdates with error 0x80070005 2010-07-15 09:44:32:471 884 464 AU # WARNING: Failed to find updates with error code 80070005 2010-07-15 09:44:32:471 884 464 AU ######### 2010-07-15 09:44:32:471 884 464 AU ## END ## AU: Search for updates [CallId = {00000000-0000-0000-0000-000000000000}] 2010-07-15 09:44:32:471 884 464 AU ############# 2010-07-15 09:44:32:471 884 464 AU Successfully wrote event for AU health state:0 2010-07-15 09:44:32:471 884 464 AU AU setting next detection timeout to 2010-07-15 21:44:32 2010-07-15 09:44:32:471 884 464 AU Successfully wrote event for AU health state:0 2010-07-15 09:44:32:486 884 464 AU Successfully wrote event for AU health state:0 2010-07-15 09:44:32:486 884 9d0 AU WARNING: GetUpdateMetadata2 failed, error = 0x80070005 2010-07-15 09:44:32:486 3060 ab8 WUApp FATAL: Failed to call GetUpdateData for updates, hr=80070005, lcid=00000409 2010-07-15 09:44:32:486 3060 ab8 WUApp WARNING: Failed to load the update list, error 80070005 2010-07-15 09:44:32:486 3060 ab8 WUApp WARNING: Failed to populate update list with error 80070005 2010-07-15 09:44:32:486 884 9d0 AU WARNING: GetUpdateMetadata2 failed, error = 0x80070005 2010-07-15 09:44:32:486 3060 ab8 WUApp FATAL: Failed to call GetUpdateData for updates, hr=80070005, lcid=00000409 2010-07-15 09:44:32:486 3060 ab8 WUApp WARNING: Failed to load the update list, error 80070005 2010-07-15 09:44:32:486 3060 ab8 WUApp WARNING: Failed to populate update list with error 80070005 2010-07-15 09:44:32:486 884 9d0 Agent WARNING: WU client fails CClientCallRecorder::EnumerateService with error 0x80070005 2010-07-15 09:44:32:486 3060 ab8 WUApp WARNING: Error displaying Opted In Service summary: 80070005 2010-07-15 09:44:37:471 884 658 Report CWERReporter finishing event handling. (00000000) Thanks

Hi, Can we run a Process Monitor trace when you click on 'Check for Updates'? You can download Procmon here. When running the ProcMon and checking for updates - watch for any ACCESS DENIED in the log. This may help us isolate what account may need access to the file system or registry. Due to the complexity of your issue this falls into the paid support category which requires a more in-depth level of support. Please visit the below link to see the various paid support options that are available to better meet your needs. http://support.microsoft.com/default.aspx?id=fh;en-us;offerprophone Hope this helps, Brian Zoucha - MSFT

Hi After almost three weeks on the phone with Microsoft support we figured out that our ‘Domain Users’ account became a member of the built in ‘Guests’ group somehow… removed the domain users account and everything works fine now. Still not sure why this affected updating while logged in as Domain Admin but it works. Hope this helps someone.