[SOLVED] [Win7SP1 x64] "Failure configuring Windows 7 updates" every time I try to update

Re: [Win7SP1 x64] "Failure configuring Windows 7 updates" every time I try to update

Is this a legally licensed copy of Windows 7? If so, is it currently activated? Is it a Retail version of Windows 7 or an OEM (came with the computer and installed by manufacturer) install? Lastly is this Home, Ultimate, Professional, etc?

Thanks.
 
Re: [Win7SP1 x64] "Failure configuring Windows 7 updates" every time I try to update

Legally licensed and activated, yes. OEM and Windows 7 Home Basic.
 
Re: [Win7SP1 x64] "Failure configuring Windows 7 updates" every time I try to update

Thanks. What was the KB number that you attempted to install?
 
Re: [Win7SP1 x64] "Failure configuring Windows 7 updates" every time I try to update

KB3172605, as you advised.
 
Re: [Win7SP1 x64] "Failure configuring Windows 7 updates" every time I try to update

Received "Update for Windows (KB3020369) is already installed on this computer".
 
Re: [Win7SP1 x64] "Failure configuring Windows 7 updates" every time I try to update

Please do the following:

Step#1 - Examine Permissions

  • Click Start -> Inside the search field search for Powershell.exe
  • Right-Click on Powershell in the search results and select Run as administrator.
  • Inside the PowerShell windows copy the following commands (one by one) and press enter after each line.
    get-acl "C:\Windows\System32\spp\tokens" | format-list >2
    notepad 2
  • You should now have a notepad file with all the security permissions for this folder. Please post the contents back into this thread.
 
Re: [Win7SP1 x64] "Failure configuring Windows 7 updates" every time I try to update

Alright, here it is.

Path : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\spp\tokens
Owner : BUILTIN\Administrators
Group : BUILTIN\Administrators
Access : BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\SYSTEM Allow FullControl
NT SERVICE\TrustedInstaller Allow FullControl
User-PC\User Allow FullControl
Audit :
Sddl : O:BAG:BAD:AI(A;ID;FA;;;BA)(A;OICIIOID;FA;;;CO)(A;OICIID;FA;;;SY)(A;CIID;FA;;;S-1-5-80-956008885-3418522649-183
1038044-1853292631-2271478464)(A;OICIID;FA;;;S-1-5-21-2596661791-130994421-2798774779-1000)
Click to expand...
 
Re: [Win7SP1 x64] "Failure configuring Windows 7 updates" every time I try to update

Repeat but for a different folder shown below.

Step#1 - Examine Permissions

  • Click Start -> Inside the search field search for Powershell.exe
  • Right-Click on Powershell in the search results and select Run as administrator.
  • Inside the PowerShell windows copy the following commands (one by one) and press enter after each line.
    get-acl "C:\Windows\System32" | format-list >2
    notepad 2
  • You should now have a notepad file with all the security permissions for this folder. Please post the contents back into this thread.
 
Re: [Win7SP1 x64] "Failure configuring Windows 7 updates" every time I try to update

Here it is.

Path : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
Owner : BUILTIN\Administrators
Group : NT SERVICE\TrustedInstaller
Access : CREATOR OWNER Allow FullControl
NT AUTHORITY\SYSTEM Allow Modify, Synchronize
NT AUTHORITY\SYSTEM Allow FullControl
User-PC\User Allow FullControl
NT SERVICE\TrustedInstaller Allow FullControl
Audit :
Sddl : O:BAG:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:PAI(A;OICIIO;FA;;;CO)(A;;0x1301bf;;;SY)(
A;OICIIO;FA;;;SY)(A;OICI;FA;;;S-1-5-21-2596661791-130994421-2798774779-1000)(A;CI;FA;;;S-1-5-80-956008885-3418
522649-1831038044-1853292631-2271478464)
Click to expand...
 
Re: [Win7SP1 x64] "Failure configuring Windows 7 updates" every time I try to update

I see a permission that appears to be missing.
Code: 
BUILTIN\Users Allow  ReadAndExecute, Synchronize

Not sure if it's because you have Windows 7 Basic though. If you know how you may want to try giving Everyone full control to c:\windows\system32 (and all subfolders) and then trying the update again to see if it works. This is not a security best practice but more of a troublehshooting technique. If you don't know how to do this just let me know and I'll provide instructions for you tomorrow.
 
Re: [Win7SP1 x64] "Failure configuring Windows 7 updates" every time I try to update

I'm not exactly sure. What I know is by going to the system32 folder and right click > properties > security > edit permissions/advanced. Is that perhaps what you are referring to?
 
Re: [Win7SP1 x64] "Failure configuring Windows 7 updates" every time I try to update

Let's take a different approach. Can you completely uninstall Avast from your machine?
 
Re: [Win7SP1 x64] "Failure configuring Windows 7 updates" every time I try to update

I've completely uninstalled Avast - through Programs and Features, and Avast's own uninstaller as they advised. Tried manually installing KB3172605, failed again. Here's the Bootlog and CBS.
 
Re: [Win7SP1 x64] "Failure configuring Windows 7 updates" every time I try to update

OK, based on the updated logs I still think the issue is with permissions to the following folder C:\Windows\System32\spp\tokens or the files folders within.

Code: 
2017-05-27 06:31:16, Info                  CSI    00000001@2017/5/26:23:31:16.883 [68]"SPP Installer: [COLOR=#FF0000]SLpUpdateComponentTokens completed with hr=0x80070005[/COLOR]"
2017-05-27 06:31:16, Info                  CSI    00000002@2017/5/26:23:31:16.883 [150]"SPP Installer: ProcessInstallOrUninstall (amd64_Microsoft-Windows-AppID_31bf3856ad364e35_6.1.7601.23455_neutral_d234efc6) completed with hr=0x80070005"
2017-05-27 06:31:16, Error                 CSI    00000003@2017/5/26:23:31:16.883 (F) CMIADAPTER: Inner Error Message from AI HRESULT = HRESULT_FROM_WIN32([COLOR=#FF0000]ERROR_ACCESS_DENIED[/COLOR])
 [
[19]"Access is denied.

So let's start with the following.

Step#1 - Run Windows Repairs
Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.
1. Download Windows Repair (All-in-One) Portable to your desktop.
2. Once the file is downloaded, right-click on the file on your desktop and choose Extract All...
Extract.JPG

3. Keep the defaults and click the Extract button.
4. A folder named tweaking.com_windows_repair_aio will be extracted to the desktop. Once the extraction is complete the folder will open.
5. Inside this folder, there is a folder named Tweaking.com - Windows Repair. Open this folder as well.
Capture.JPG



6. Double-click on Repair_Windows.exe to open. Note: Please make sure all of your programs are closed and anything you were working on is saved as we will be rebooting.
7. When the program opens, click the Reboot to Safe Mode button at the bottom of the screen. Answer Yes to allow.
8. Once rebooted into Safe Mode, open the program again. When the program opens, click the Repairs tab and click the Open Repairs button.
9. A backup of your registry will be made. After a few moments you will have many options from which you can choose.
10. Please click the Unselect All button and then click to enable only the following ones:

01 - Reset Registry Permissions
02 - Reset File Permissions
03 - Reset Service Permissions
04 - Register System Files
14 - Remove Temp Files
17 - Repair Windows Updates
21 - Repair MSI (Windows Installer)


11. Ensure the Restart check box is selected and click the Start Repairs button in the lower right of the screen. This may take some time to run so be patient.
StartRepairsWithReboot.JPG

12. Once the fixes are complete you will be prompted to restart your machine. Answer Yes.
 
  • Thanks
Reactions: Nat
Re: [Win7SP1 x64] "Failure configuring Windows 7 updates" every time I try to update

Thank you so much! The approach worked perfectly! It's strange how something like this could happen all of a sudden though... I don't remember installing anything suspicious the day it wouldn't install properly, nor did I find anything malicious. Ran SFCFix just to see if there were any changes but SURT corruption count still at 50. I assume that's fine if the WU is now installing normally and managed to install all of the updates? In any case, many thanks again for your time and help!
 
Re: [Win7SP1 x64] "Failure configuring Windows 7 updates" every time I try to update

No problem and take care. Yes, if Windows Updates is working properly you really don't need to worry about the SURT count.
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top