Issues with Update Installation on Client Computers

Updated: July 19, 2011

Applies To: Windows Server 2003 with SP2, Windows Server 2008 R2, Windows Server 2008 R2 with SP1, Windows Server Update Services, Windows Small Business Server 2011 Standard

If WSUS client computers are not installing updates, there may be issues with the DCOM configuration. You will see event ID 10311 or 10312 in the application log if this is the case.

  1. Open a Command Prompt window.

  2. Type the following command: dcomcnfg.
    The Component Services window will appear.

  3. In the left pane under Console Root, expand Component Services, expand Compoters, right-click My Computer, and then click Properties.

  4. Click the Default Properties tab.

  5. Make sure that EnableDistributed COM on this computer is selected.

  6. Make sure that Default Impersonation Level is set to Identify.

  7. Click OK, and then close the Component Services window.

Default DCOM permissions can also be a source of problems.

  1. Open the Registry Editor.

  2. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole.

  3. If there is a DefaultAccessPermission key, delete it.

Community Additions