Reset Windows Update Agent

after 10yrs of windows 7 i would've thought there would be a stand alone file to re install windows update if it continued to give errors whilst trying to install updates. this seems to be a common fault i'm reading. for us non tech guys do the patrons on this website have a solution for us non tech guys to help us get windows 7 upto date before the big switch off in jan 2020. microsoft are not helping the likes of me and my fellow strugglers as all they seem to want us to do is buy laptops or desk top pc's with windows 10.
please help if you can.

Slava Tarasov: "I think the service security descriptors in the script are no longer valid"

If this is true the script should either get updated or removed, or atleast have a BIG notice somewhere for users to see!!!!!

Hey, Manuel,
This follows on the answers at this thread:
https://answers.microsoft.com/en-us/ie/forum/ie11-iewindows_10/64-bit-internet-explorer-add-as-feature/f6783520-fda1-4a59-930a-62ccfc7c0608?tm=1564241337507
The issue is WU can't find IE11. Here's the log from the script:
https://1drv.ms/u/s!Ak71HCtdvRa9grBdlKA4irOQ_HcIiA
The question remain:
IE11, where art thou?
Thanks for reading!

Hi there,

I think the service security descriptors in the script are no longer valid, at least for W10 1803+.
Even you try to run it manually in a CMD prompt - it always gives you: The access control list (ACL) structure is invalid, please advise.

The output sc sdshow in W10 1903 is resulted in the following SDDLs:
wuauserv
D:(A;CI;CCLCSWRPLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOSDRCWDWO;;;WD)

bits
D:(A;CI;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;SAFA;WDWO;;;BA)

cryptsvc
D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CCLCSWRPWPDTLOCRRC;;;SO)(A;;CCLCSWLORC;;;AC)(A;;CCLCSWLORC;;;S-1-15-3-1024-3203351429-2120443784-2872670797-1918958302-2829055647-4275794519-765664414-2751773334)

trustedinstaller
D:(A;CI;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLOCRRC;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;SAFA;WDWO;;;BA)

What I mean are these lines below can be found in the script:
sc.exe sdset wuauserv D:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLCRSDRCWDWO;;;SO)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;WD)
	sc.exe sdset bits D:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLCRSDRCWDWO;;;SO)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;WD)
	sc.exe sdset cryptsvc D:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLCRSDRCWDWO;;;SO)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;WD)
	sc.exe sdset trustedinstaller D:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLCRSDRCWDWO;;;SO)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;WD)

in term that prevents the update from coming in

https://answers.microsoft.com/en-us/insider/forum/all/solved-18917-wont-pick-up-update-to-18922/6936018a-271e-492b-beb8-c8e7334a3d8c

You are awesome, man! :)

Thanks EQuito!

A corrupted registry.pol will prevent gpos from applying and software updates from installing via SCCM. It usually corrupts due to missing AV exclusions. I have a script that will detect if it's corrupt or not and delete it if so if you're interested in it?

Hi Russ,

Of course! this tool is built for the users. Any contribution is well received.

Thank so much!

If it's corrupted, it's always full of NULLs/whitespace.  If it's not corrupt, the byte encoded value of the first 4 lines of it will always equal a value of 8082101103. When it's corrupt, there's always a -2147467259 or 0x80004005 in wuahandler.log if using SCCM. There should be various GPO failures in the eventlogs as well when it's broke.

Function Test-IsRegistryPOLGood
    {
        [cmdletbinding()]
        Param
            (
                [Parameter(Mandatory=$false)]
                    [string[]]$PathToRegistryPOLFile = $(Join-Path $env:windir 'System32\GroupPolicy\Machine\Registry.pol')
            )
 
        if(!(Test-Path -Path $PathToRegistryPOLFile -PathType Leaf)) { return $null }
 
        [Byte[]]$FileHeader = Get-Content -Encoding Byte -Path $PathToRegistryPOLFile -TotalCount 4
 
        if(($FileHeader -join '') -eq '8082101103') { return 'Compliant' } else { return 'Not-Compliant' }
    }

Test-IsRegistryPOLGood

I'm sorry for being late.

I'll try implement this PowerShell script in my Windows Shell Script.

Thank you so much.

How i can send it to you for distribution.
you can find it here: 
https://1drv.ms/u/s!Ahekt4Y668a52ctnTz-Cq0bj47U1ug?e=zxIkgT

The only additional text is bei comment in the TOP stating the translation by me.

Hi Alexander Jacubowsky (AJEDV),

Do you agree that I created a post on TechNet and publish it on wureset.com for distribution? Obviously, the credits to your name will be kept.

Sure, that's what I expected.
Thank you.

It's done!

Skript Reset Windows Update Tool (Deutsch) - https://gallery.technet.microsoft.com/scriptcenter/Skript-Reset-Windows-db19560e

Thanks!

Is it possible to run the command line tool remotely from something like PDQ deploy without any user prompts and run the command line tool silently in the background.

Love the tool, but would be awesome if i could run the commands without any user intervention.

Thanks philly169,

It's possible with the executable version.

You can create a self-extracting file with WinRAR for run in background.

For example:

```SFX
Setup=wureset.exe /reset
TempMode
Silent=1
Overwrite=1
```

Also, you can run this tool automatically using Windows Task Scheduler or Regedit.

Download the executable version in https://wureset.com/downloads.php and see more about command line arguments in http://docs.wureset.com in the section `Getting started` > `command line`.

Is it possible to batch run this for multiple machines? 

Hi Shadowz1337,

This tool has changed a lot and the installable or portable version allows to execute commands from cmd.

You can download this in https://wureset.com/downloads.php or see more in http://docs.wureset.com in the section `Getting started` > `command line`.

Your tool is awesome and saved my installation several times!

I'm happy to read your comment. Thanks!