Article ID: 926078
Article Last Modified on 5/8/2007
APPLIES TO
- Microsoft Windows Server 2003 Service Pack 1, when used with:
- Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
- Microsoft Windows Server 2003, Standard Edition (32-bit x86)
- Microsoft Windows XP Service Pack 2
- Microsoft Windows XP Service Pack 2
SYMPTOMS
When you upgrade a computer to Microsoft Windows XP Service Pack 2 (SP2) or to Microsoft Windows Server 2003 Service Pack 1 (SP1), you experience the following problems:
- The following services may not start on the computer:
- Alerter
- Application Layer Gateway Service
- Automatic Updates
- Background Intelligent Transfer Service (BITS)
- DNS Client
- Distributed Transaction Coordinator
- Remote procedure call (RPC)
- Remote procedure call (RPC) Locator
- Remote Registry
- SSDP Discovery Service
- TCP/IP NetBIOS Helper
- Uninterruptible Power Supply
- UPnP Device Host
- Virtual Server
- WebClient
- When you try to visit the Microsoft Windows Update v5 Web site, you may receive an error message that resembles the following: Additionally, "[Error number: 0x8007041D]" appears in the upper-right corner of the Web page.
When you run the Bitsadmin.exe tool, you receive an error message that resembles the following:
Additionally, the following event is logged in the Event Viewer System log:
Event Type: Error
Event Source: Service Control Manager
Event ID: 7024
Date:date
Time:time
Computer:computer_name
Description: The Background Intelligent Transfer Service service terminated with service-specific error 2147500053 (0x80004015).
CAUSE
This problem occurs if one of the following conditions is true:
- You used a security template before you upgraded the computer to Windows XP SP2 or to Windows Server 2003 SP1.
- You change the properties of the RPC service to use the Local System account instead of the Network System account.
- You configure the Automatic Updates service by using Group Policy. This causes security settings to be applied to the Automatic Updates service.
RESOLUTION
If the computer is joined to a workgroup, follow these steps:
- Click Start, click Run, type explorer, and then click OK.
- Locate and double-click the following folder:
%Windir%\Security\Templates
- Make sure that the size of the "Setup Security.inf" file is between 759 kilobytes (KB) and 760 KB.
- Click Start, click Run, type cmd, and then click OK.
- At the command prompt, type the following, and then press ENTER:
secedit /configure /cfg "%windir%\security\templates\setup security.inf" /db secrepair.sdb /log %windir%\repair\SetupSecurityRepair.log /verbose
Warning Do not run this command on a domain controller. Also, do not run this command on a server that is running Microsoft Exchange Server or Microsoft SQL Server.
- Type exit, and then press ENTER to close the Command Prompt window.
If the computer is joined to a domain, follow these steps:
- Click Start, click Run, type explorer, and then click OK.
- Locate and double-click the following folder:
%Windir%\Security\Templates
- Copy the "Setup Security.inf" file.
- Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
- In the left pane, right-click the organizational unit that you want, and then click Properties.
- Click the Group Policy tab.
- In the list of Group Policy objects, click the Group Policy object that you want, and then click Edit.
- In the left pane, expand Computer Configuration, and then expand Windows Settings.
- Right-click Security Settings, and then click Import Policy.
- Click the Setup Security.inf file, and then click Open.
If the Automatic Updates service is configured by using Group Policy, follow these steps:
- Click Start, click Run, type gpedit.msc, and then click OK.
- In the left pane, expand Computer Configuration, and then expand Windows Settings.
- Expand Security Settings, and then click System Services.
- In the right pane, double-click Automatic Updates, click Edit Security, and then click Add.
- In the list, click Authenticated Users, click Add, and then click OK.
- Click to select the Allow check box for the Read permission.
- Click Apply, and then click OK three times.
Keywords: kbexpertiseadvanced kbtshoot KB926078