Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a corrupted security key in the registry (Windows XP) for the windows update service. I noticed that I can copy a security key from another service and move and replace it with the corrupted key. We have many machines that have this issue. Can we script this with a security key we know will work or can one machine not have the same security key as another?

share|improve this question
What is the registry key? – Nixphoe Apr 18 '13 at 14:45
up vote 0 down vote accepted

It sounds like you are referring to the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\wuauserv\Security\Security value, is that correct? If so, to script it you can:

  1. Run the following command on a "working" machine: sc sdshow wuauserv
  2. Note the output of that command, which will be similar to D:(A;;CCLCSWRPLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)
  3. On the "broken" machines, run the following command, replacing <SDDL> with the value from step two: sc sdset wuauserv <SDDL>
share|improve this answer
I would upvote but I am not allowed – user168403 Apr 20 '13 at 0:54

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.