11133 » After installing SP2 for Windows XP, or SP1 for Windows Server 2003, some services do NOT start? (28-Dec-06)

After upgrading to Windows XP SP2 (Service Pack 2), or Windows Server 2003 SP1 (Service Pack 1), the following services do NOT start:

Alerter 
Application Layer Gateway Service 
Automatic Updates 
Background Intelligent Transfer Service (BITS) 
DNS Client 
Distributed Transaction Coordinator 
Remote procedure call (RPC) 
Remote procedure call (RPC) Locator 
Remote Registry 
SSDP Discovery Service 
TCP/IP NetBIOS Helper 
Uninterruptible Power Supply 
UPnP Device Host 
Virtual Server (only if Microsoft Virtual Server is installed.)
WebClient

Additionally, if you run Bitsadmin.exe, you receive an error like:

Unable to connect to BITS - 0x80070005
Access is denied.

The System event log records:

Event Type: Error
Event Source: Service Control Manager
Event ID: 7024
Date: MM/DD/YYYY
Time: HH:MM:SS
Computer: <ComputerName>
Description: The Background Intelligent Transfer Service service terminated with service-specific error 2147500053 (0x80004015).

When you attempt to visit the Windows Update v5 Web site, you receive:

Windows Update has encountered an error and cannot display the requested page.

and [Error number: 0x8007041D] is displayed in the upper-right hand corner of the Web page.

This behavior occurs if you configured the Automatic Updates service by using Group Policy, which caused security settings to be applied to the Automatic Updates service, or if you used a security template before the service pack was installed, or if you changed the RPC service to run in the System account context, instead of the Network Service account context.

To workaround this behavior in your domain:

1. Open a CMD.EXE window.

2. Type the following command and press Enter:

copy "%SystemRoot%\Security\Templates\Setup Security.inf" "%SystemRoot%\Security\Templates\Setup Security_COPY.inf"

3. Type dsa.msc and press Enter.

4. In the left hand pane of Active Directory Users and Computers, right-click the OU (Organizational Unit) that you want, or the domain, and press Properties.

5. Select the Group Policy tab.

6. Select the GPO that you want and press Edit.

7. Expand Computer Configuration / Windows Settings.

8. Right-click Security Settings and press Import Policy.

9. Select the Setup Security.inf file and press Open.

If the Automatic Updates service was configured by using Group Policy:

01. Open a CMD.EXE window.

02. Type dsa.msc and press Enter.

03. In the left hand pane of Active Directory Users and Computers, right-click the OU (Organizational Unit) that you want, or the domain, and press Properties.

04. Select the Group Policy tab.

05. Select the GPO that you want and press Edit.

06. Expand Computer Configuration / Windows Settings / Security Settings / System Services.

07. Double-click Automatic Updates and press the Edit Security button.

08. Press the Add button.

09. Select Authenticated Users and press Add and OK.

10. Check the Allow box for Read permission.

11. Press Apply and OK.

12. Press OK and OK.