Windows Auto update problem Error 8007000D
- I've been having problems running windows update, either Automagically or manually I get an error code 8007000D. I'm suspect that vista is deciding since I have a wSUS server in the environment that it should be using that for updates. my machine and user accounts are in OUs that have no gp and no policy inheritance, any thoughts on how to make it work??
Answers
Have you configured your WSUS server to get Vista updates from the Microsoft Update Beta site?
If not just copy the following line in to a command prompt and run it.
cscript.exe "%programfiles%\update services\tools\ToggleMUUrl.vbs" beta
Note that your WSUS server must be using WSUS SP1 for this script to work.
After some investigation, I discovered that recreating the computer account inside my specifically inheritance blocked OUs stopped the problem for me. I can happily update using windows update now :)
Thanks for the replies.
- Do not perform the script to update WSUS in your production WSUS. It will point WSUS to the Beta update location and basically remove your production environment. Microsoft recommends running the script on a test server specifically for updating beta software. You cannot perform production WSUS and beta WSUS on the same server. At least this is my understanding of the document listed with WSUS SP1 web site. To return the WSUS back to the normal production update location, you have to remove and reinstall WSUS. Not good.
The best option is to:
1. Create an OU in Active Directory that is outside the scope of the WSUS Group Policy Object.
2. Move the computer with Vista into this OU.
3. At the computer, run GPUPDATE.
4. This will remove the WSUS from this computer.
5. Vista will now look automatically to the Microsoft Beta update site and download updates.
All Replies
Have you configured your WSUS server to get Vista updates from the Microsoft Update Beta site?
If not just copy the following line in to a command prompt and run it.
cscript.exe "%programfiles%\update services\tools\ToggleMUUrl.vbs" beta
Note that your WSUS server must be using WSUS SP1 for this script to work.
- I have the same issue but cannot tweak our WSUS. Is there any way to bypass it?
Hi Guys,
I spent some time researching the problem today
in order to understand the solution here is alittle explenation about the problem:
Windows Update doesnt work on VISTA Beta 2 machiens after joining to a domin.
the thing is that if you have WUS or SUS in your environment the group policy by the domain send the stations the WUS or SUS server for updates and fixes it, thats why when I pulled it out from the domain it worked fine
so the thing is that you need to make a REG key that look like this : (past this to notepad and save it as .reg)
Windows Registry Editor Version 5.00
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\LocalUser\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate\DisableWindowsUpdateAccess]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoWindowsUpdate"=dword:00000000[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoWindowsUpdate"=dword:00000000[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000000[-HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate][-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoDevMgrUpdate"=dword:00000000[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"NoUpdateCheck"=dword:00000000[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate]
"DisableWindowsUpdateAccess"=dword:00000000[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoWindowsUpdate"=dword:00000000after saving it , double-click should active it , Restart to Windows Update Service and its done
now this key will get back your Vista station to work with local policy, witch connect to the internet for updates.
no messing around with Organizational WUS or SUS ..
Have a Good Week,
Ido Goldberg
Senior Windows System Administator,
Symantec Corp.
After some investigation, I discovered that recreating the computer account inside my specifically inheritance blocked OUs stopped the problem for me. I can happily update using windows update now :)
Thanks for the replies.
- I tried what you offered but still get error 800700D and can't install the update.
- Yes I tried this too but am unable to do updates still.
Check this link guys:
Cheers,
csülök
- The registry fixes worked for me, thank you.
- Do not perform the script to update WSUS in your production WSUS. It will point WSUS to the Beta update location and basically remove your production environment. Microsoft recommends running the script on a test server specifically for updating beta software. You cannot perform production WSUS and beta WSUS on the same server. At least this is my understanding of the document listed with WSUS SP1 web site. To return the WSUS back to the normal production update location, you have to remove and reinstall WSUS. Not good.
The best option is to:
1. Create an OU in Active Directory that is outside the scope of the WSUS Group Policy Object.
2. Move the computer with Vista into this OU.
3. At the computer, run GPUPDATE.
4. This will remove the WSUS from this computer.
5. Vista will now look automatically to the Microsoft Beta update site and download updates. Hello!
Your solution worked for me

I just runned the .reg on my vista computer and restarted it. After that it was able to go to the WindowsUpdate site without the error appearing again.
Thanks!
glad to be at serive
have a marry christmass and a happy new year .
Worked like a charm, created new OU for vista machines.
Isn't there a beta 3 for WSUS?
Need to check that out. Great thread on this problem.
Erik
Will the registry settings suggested by Ido work on the production version of Vista? I've noticed some registry changes between beta and live on Vista, so I don't want to run this unless I'm sure.
Thanks
It's so frustrating when you just don't have time to mess with something like this and even the built in Microsoft help
doesn't pinpoint the source of the error.
This worked like a charm and saved me a lot of digging, Thank you!
Hi Lectrik,
I'm Glad I could help
Some questions needs to be addressed,
A different OU and other game playing with AD location of the VISTA machines
Will work for you all, but it depends on how you configured the WSUS GPO.
I came across some people that it wont work for them because they applied the GPO on the SITE level and then and OU solution wont work unless it been told to block GPO’s.
Another issue is that MS Vista is now OUT ! and there is an update to WSUS making him recognize Vista machines therefore no need to go “out” to the internet in order to get the right updates.
Best regards
Ido Goldberg
- worked for me...Thanks!
worked for me...Thanks!
Ido Goldberg wrote: Hi Guys,
I spent some time researching the problem today
in order to understand the solution here is alittle explenation about the problem:
Windows Update doesnt work on VISTA Beta 2 machiens after joining to a domin.
the thing is that if you have WUS or SUS in your environment the group policy by the domain send the stations the WUS or SUS server for updates and fixes it, thats why when I pulled it out from the domain it worked fine
so the thing is that you need to make a REG key that look like this : (past this to notepad and save it as .reg)
Windows Registry Editor Version 5.00
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\LocalUser\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate\DisableWindowsUpdateAccess]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoWindowsUpdate"=dword:00000000[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoWindowsUpdate"=dword:00000000[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000000[-HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate][-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoDevMgrUpdate"=dword:00000000[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"NoUpdateCheck"=dword:00000000[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate]
"DisableWindowsUpdateAccess"=dword:00000000[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoWindowsUpdate"=dword:00000000after saving it , double-click should active it , Restart to Windows Update Service and its done
now this key will get back your Vista station to work with local policy, witch connect to the internet for updates.
no messing around with Organizational WUS or SUS ..
Have a Good Week,
Ido Goldberg
Senior Windows System Administator,
Symantec Corp.
worked for me...Thanks!
Ido Goldberg wrote: Hi Guys,
I spent some time researching the problem today
in order to understand the solution here is alittle explenation about the problem:
Windows Update doesnt work on VISTA Beta 2 machiens after joining to a domin.
the thing is that if you have WUS or SUS in your environment the group policy by the domain send the stations the WUS or SUS server for updates and fixes it, thats why when I pulled it out from the domain it worked fine
so the thing is that you need to make a REG key that look like this : (past this to notepad and save it as .reg)
Windows Registry Editor Version 5.00
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\LocalUser\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate\DisableWindowsUpdateAccess]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoWindowsUpdate"=dword:00000000[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoWindowsUpdate"=dword:00000000[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000000[-HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate][-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoDevMgrUpdate"=dword:00000000[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"NoUpdateCheck"=dword:00000000[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate]
"DisableWindowsUpdateAccess"=dword:00000000[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoWindowsUpdate"=dword:00000000after saving it , double-click should active it , Restart to Windows Update Service and its done
now this key will get back your Vista station to work with local policy, witch connect to the internet for updates.
no messing around with Organizational WUS or SUS ..
Have a Good Week,
Ido Goldberg
Senior Windows System Administator,
Symantec Corp.
- worked also for me...Thanks!
Thanks Ido, that solved my problem on the Vista Ultimate machine I was dealing with.
Ideally, I'd like to figure out why my SUS installation stopped servicing the Vista client -- the XP Clients continued to work fine. I saw an earlier post in this thread, but didn't want to try it since it was quite old and Vista is no longer in Beta. If anyone out there knows what to do with SUS to get it to service Vista clients correctly, that info would be appreciated.
"[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\LocalUser\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate\DisableWindowsUpdateAccess] "
This key does not exist in my Vista Ultimate Registry (using regedt32) therefore the reg file will not import .....
It works for me. Thanks a lot Ido Goldberg.
Giriraj
Chennai
Hi
I Found another way.
In your WSUSAdmin console under computers, remove the selected computer, do not make it unassigned.
Restart your Vista pc.
After login, run the update client manualy.
In the WSUSAdmin console under computers, check for unassigned computers and add the computer account back to the
computer group it was assigned.
From Vista, run the update client again and install the updates.
This works in a domain envirument.
Hi,
I saw this old post-hope you can still help.
I am running Vista business (non beta) and get the error code 80007000D when trying to get updates. My environment is a corporate one with a Windows update server. I tried your reg update, but when I tried to update from the Windows update site, I now get asked to run the update as an administrator. I am a domain administrator already. What do I do now? Can you help. Thank you.
- Worked great for me thanks for your efforts!!!
I am still running WSUS 2.0. I had flagged Vista updates to be included and downloaded by WSUS but my Vista Business machine was getting this 8007000D error.
I found that the problem was that I had not installed WSUS 2.0 Service Pack 1. As soon as the update was applied on my WSUS server, the error disappeared on my client machine and updates were able to be installed.
Jon
Ok I found that the reg edit does work while several say it doesn't maybe this might help them, to stop the windows update service go to control panel, Administrative Tools, double click on services, scroll down to windows update, stop the service, enter the reg edit, and then restart the service. I also tried stopping the service, I went to windows software distribution, data deleted everything in the folder, went back to the software distribution folder and deleted the temporary downloads (you find them under downloads) delete everything in the folder restart the service.
- This link is no good. Doesn't work. Still stuck with that stupid error 8007000D
Hi Mate
I have tried your registry fix but I still cant seem to be able to install updates.
From my update history it looks like I have been able to get some windows defender updates but nothing else.
Do you have any further ideas on what my machine may be up to?
Many Thanks
Tony
i've tried doing this but im still getting the same error.<code 8007000d> for update <kb955020>
any other ideas on what i could do.
- ... errr, is there a way of doing this without being a computer geek, something along the lines of "click this link" or type this into the "run" option? Thanks
- i have the same problem the auto or manual update is not working which i dont know really why ?!! i hope i can find a solution within this forum support place thanks
- I am using W XP SP3 with the same problem.
What should I do?
Desperated, have not been able to updates since oct, 2008.
Please help.
Thanks a lot.
Cquevedo@bellsouth.net - I am having the same problem but I have NO idea what any of you are talking about in your responses. Please explain in non cyberese. Thank you.
- This worked perfect! Thanks!
David
