Error message when you run the Inventory Tool for Microsoft Updates on a Systems Management Server 2003 client computer: "AddScanPackageService() failed." (922351)


The information in this article applies to:

  • Microsoft Systems Management Server 2003

SYMPTOMS

When you try to run the Inventory Tool for Microsoft Updates (ITMU) on a Microsoft Systems Management Server 2003 (SMS) client computer, the Inventory Tool for Microsoft Updates may be unsuccessful. When this problem occurs, the SMSWusHandler.log file contains the following error message:
AddScanPackageService() failed. ERROR: Search() failed with hRes=0x80070005 0x80070005 is the hresult value for the operation.
Returning 5 as the exit code.
Additionally, the WindowsUpdate.log file on the SMS client computer may contain the following error message:
error 0x800A0046

CAUSE

This problem may occur when the security descriptor for the Automatic Updates service does not contain an entry for the Authenticated Users group. Or this problem may occur when the location of the security descriptor has changed.

RESOLUTION

To resolve this problem, use one of the following methods.

Method 1: Remove the user account that is experiencing the problem from the Guests account group or the limited account group

  1. Click Start, click Run, type control admintools, and then click OK.
  2. Click Computer Management.
  3. Expand Local Users and Groups.
  4. Select Users.
  5. Open the account that is used to access Windows Update or Microsoft Update.
  6. Click the Member Of tab.
  7. Select the user account that you want to remove, and then click Remove.

Method 2: Set the security descriptor

  1. Click Start, click Run, type cmd, and then click OK.
  2. Type the following command, and then press ENTER:

    sc sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)

    Notes
    • After you press ENTER, you receive a success message.
    • The Sc.exe tool is included with Microsoft Windows Server 2003 and with Microsoft Windows XP. The Sc.exe tool is also available in the Microsoft Windows 2000 Server resource kit.
  3. To close the command prompt, type Exit.

Method 3: Add the "Administrator and Service" account to the "Impersonate a client after authentication" policy

  1. Click Start, click Run, type secpol.msc, and then press ENTER.
  2. Expand Local Policies.
  3. Click User Rights Assignment.
  4. Double-click the Impersonate a client after authentication policy.
  5. On the Local Security Settings tab, click Add User or Group, and then add the Administrator and Service account to the list of Users and Groups.
  6. Click OK, and then restart the computer.

Method 4: Configure the remote procedure call (RPC) service to log on as a local system account

  1. Click Start, click Run, type services.msc, and then click OK.
  2. Locate and right-click the Remote Procedure Call (RPC) service, and then click Properties.
  3. On the Log On tab, click the Local System account, click Apply, and then click OK.

REFERENCES

For more information, click the following article number to view the article in the Microsoft Knowledge Base:

883821 You may receive an error message when you search for available updates on the Windows Update Web site or on the Microsoft Update Web site

Modification Type:MajorLast Reviewed:8/10/2006
Keywords:kbprb KB922351 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.