[gomo]

Hi Guys,
When I try to update windows manually, I get the message: 'Error 80070005, windows could not search for new updates'. I have it set for automatic updates but the last time it updated was last November. I am running Vista 64 bit for my sins. At the moment I am still using the default firewall from Microsoft and Free AVG. I have tried the Microsoft site for help but it is too techy for me, so, If anyone can help please use language that an old Englishman can understand.

Many thanks

gomo

[Blackmirror]

Hello
Are you logged on as administrator??

[gomo]

Yes, I am.
gomo

[Blackmirror]

The IP address for the Windows Update service can change each time you check for updates, but some add-on programs for Windows add static address entries to the Hosts file. A static IP address for Windows Update will prevent your computer from getting updates.

To remove static IP addresses for the Windows Update website
1. Open Computer by clicking the Start button , and then clicking Computer.

2. Double-click the local hard disk where Windows is installed, typically drive C.

3. Double-click the Windows folder, and then double-click the System32 folder.

4. Double-click the drivers folder, and then double-click the etc folder.

5. In the etc folder, right-click hosts, click Open, and then, when you are prompted to choose a program to open the file, click Notepad.

6. In the hosts file, check if the # sign appears next to each Windows Update IP address and host name entry. If not, add the # sign or delete the entire entry.

7. Click the File menu, click Save, and then try to check for updates again.

[gomo]

Hello Blackmirror.
I tried what you said, there were just 2 lines that did not have the # symbol, so I inserted the # in front of each line followed by a single space, it will not let me save it though. A box opens stating: 'Cannot create the C:\Windows\system32\drivers\etc\host file'. Make sure the path and file name are correct.
The 2 lines that did not have the # infront of them were:
127.0.0.1 Localhost
: : 1 Localhost
The only way that it will close is if I press 'Don't save'

Many thank for you advice and would be very grateful if you can think of anything else.
gomo

[Jack Hackett]

Possible solution, found on forums.microsoft.com


CAUSE
This issue occurs if one or more of the following conditions are true:
• The DCOM configuration is incorrect.
• Your user account is a member of the Guests group.
• The security descriptor in the Automatic Updates service is incorrect.
• The local security policy is incorrect.


RESOLUTION
To resolve this issue, follow these steps on client computers.
Step 1: Verify DCOM security
1. Click Start, click Run, type Dcomcnfg, and then click OK.
2. Expand Component Services, and then expand Computers.
3. Right-click My Computer, and then click Properties.
4. Click the COM Security tab.
5. Under Access Permissions, click Edit Default.
6. Verify that the following accounts are listed:
7. If any one of these accounts is missing in the Access Permission box, follow these steps:
a. Click Add, click Advanced, and then click Locations.
b. In the Locations box, click the Local_Computer_Name, and then click OK.
c. Click Find Now.
d. Press CTRL, click the required account names, and then click OK two times.
e. In the Group or User names box, click an account that you added, click Local Access in the Permissions for Account_Name box, and then click to select the check box in the Allow column.
f. Repeat step 7e for all the accounts that you just added, and then click OK.



Step 2: Verify DCOM default properties
1. Click the Default Properties tab.
2. Verify that the following configuration:
• The Enable Distributed COM on this computer check box is selected.
• In the Default Authentication level box, Connect is selected.
• In the Default Impersonation level box, Identify is selected.

3. Make any required changes, and then click OK.
4. Restart the computer.



Step 4: Verify the security descriptor in the Automatic Updates service

1. Download the Subinacl utility. To do this, visit the following Microsoft Web site:
http://www.microsoft.com/downloads/d...DisplayLang=en

2. Double-click the downloaded file, and then follow instructions in the Windows Resource Kit Tools Setup Wizard. By default, the Subinacl utility is installed in the following directory:
C:\Program Files\Windows Resource Kits\Tools
3. Click Start, click Run, type cmd, and then click OK.
4. At the command prompt, type cd C:\Program Files\Windows Resource Kits\Tools to move to the directory where the Subinacl utility was installed.
5. Type the following command, and then press ENTER:
Subinacl /service wuauserv /sddl=DSadA;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A; ;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)
Note In a domain environment, this security setting may be configured by a Group Policy object. If the issue is only temporarily resolved after you type this command, a Group Policy object is probably configured. The domain administrator must modify Group Policy to include the correct security settings.
Step 5: Verify the local security policy

7. Restart the computer.


Step 6: Enable user data persistence in Microsoft Internet Explorer
1. Open Internet Explorer.
2. On the Tools menu, click Internet Options.
3. Click the Security tab, and then click Internet.
4. Click Custom Level.
5. In the Settings dialog box, scroll to the Miscellaneous section.
6. Under Userdata persistence, click Enable.
7. Click OK two times.

[gomo]

Hi Jack.
I am afraid that would scare the pants off me. it's too techy for me, but thanks for the sentiment.
many thanks
gomo