Microsoft KB Archive/922351

= Error message when you run the Inventory Tool for Microsoft Updates on a Systems Management Server 2003 client computer: &quot;AddScanPackageService failed.&quot; =

Article ID: 922351

Article Last Modified on 2/8/2007

-

APPLIES TO


 * Microsoft Systems Management Server 2003

-





SYMPTOMS
When you try to run the Inventory Tool for Microsoft Updates (ITMU) on a Microsoft Systems Management Server 2003 (SMS) client computer, the Inventory Tool for Microsoft Updates may be unsuccessful. When this problem occurs, the SMSWusHandler.log file contains the following error message:

AddScanPackageService failed. ERROR: Search failed with hRes=0x80070005 0x80070005 is the hresult value for the operation.

Returning 5 as the exit code.

Additionally, the WindowsUpdate.log file on the SMS client computer may contain the following error message:

error 0x800A0046



CAUSE
This problem may occur when the security descriptor for the Automatic Updates service does not contain an entry for the Authenticated Users group. Or this problem may occur when the location of the security descriptor has changed.



RESOLUTION
To resolve this problem, use one of the following methods.

Method 1: Remove the user account that is experiencing the problem from the Guests account group or the limited account group

 * 1) Click Start, click Run, type control admintools, and then click OK.
 * 2) Click Computer Management.
 * 3) Expand Local Users and Groups.
 * 4) Select Users.
 * 5) Open the account that is used to access Windows Update or Microsoft Update.
 * 6) Click the Member Of tab.
 * 7) Select the user account that you want to remove, and then click Remove.

Method 2: Set the security descriptor
 Click Start, click Run, type cmd, and then click OK. Type the following command, and then press ENTER:

sc sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)

Notes  After you press ENTER, you receive a success message. The Sc.exe tool is included with Microsoft Windows Server 2003 and with Microsoft Windows XP. The Sc.exe tool is also available in the Microsoft Windows 2000 Server resource kit.  To close the command prompt, type Exit .</li></ol>

Method 3: Add the &quot;Administrator and Service&quot; account to the &quot;Impersonate a client after authentication&quot; policy

 * 1) Click Start, click Run, type secpol.msc, and then press ENTER.
 * 2) Expand Local Policies.
 * 3) Click User Rights Assignment.
 * 4) Double-click the Impersonate a client after authentication policy.
 * 5) On the Local Security Settings tab, click Add User or Group, and then add the Administrator and Service account to the list of Users and Groups.
 * 6) Click OK, and then restart the computer.

Method 4: Configure the remote procedure call (RPC) service to log on as a local system account

 * 1) Click Start, click Run, type services.msc, and then click OK.
 * 2) Locate and right-click the Remote Procedure Call (RPC) service, and then click Properties.
 * 3) On the Log On tab, click the Local System account, click Apply, and then click OK.

<div class="references_section">