Issues with Update Installation on Clients

Applies To: Windows Server 2003 with SP2, Windows Server Update Services

If WSUS clients are not installing updates, there may be issues with DCOM configuration. You will see event ID 10311 or 10312 in the application log if this is the case.

Troubleshooting update installation issues

Checking DCOM configuration

The process of checking DCOM configuration is slightly different on different operating systems.

To check DCOM configuration on Windows 2000

  1. Open a command window.

  2. Type the following command: dcomcnfg
    (The Distributed COM Configuration Properties window will appear.)

  3. Select the Default Properties tab.

  4. Make sure that Enable Distributed COM on this computer is selected.

  5. Make sure that Default Impersonation Level is set to Identify.

  6. Click OK, and then close the DCOM window.

To check DCOM configuration on Windows Vista and Windows XP

  1. Open a command window.

  2. Type the following command: dcomcnfg
    (The Component Services window will appear.)

  3. Right-click My Computer, click Properties.

  4. Click the Default Properties tab.

  5. Make sure that EnableDistributed COM on this computer is selected.

  6. Make sure that Default Impersonation Level is set to Identify.

  7. Click OK, and then close the Component Services window.

Checking the default DCOM permissions

Default DCOM permissions can also be a source of problems.

To remove default DCOM permissions

  1. Open the Registry Editor.

  2. Navigate to HKLM/SOFTWARE/Microsoft/Ole.

  3. If there is a DefaultAccessPermission key, delete it.