Issues with Update Installation on Client Computers
Applies To: Windows Server 2003 with SP2, Windows Server 2008 R2, Windows Server 2008 R2 with SP1, Windows Server Update Services, Windows Small Business Server 2011 Standard
If WSUS client computers are not installing updates, there may be issues with the DCOM configuration. You will see event ID 10311 or 10312 in the application log if this is the case.
Troubleshooting update installation issues
Check the DCOM configuration
To check the DCOM configuration
Open a Command Prompt window.
Type the following command: dcomcnfg.
The Component Services window will appear.
In the left pane under Console Root, expand Component Services, expand Compoters, right-click My Computer, and then click Properties.
Click the Default Properties tab.
Make sure that EnableDistributed COM on this computer is selected.
Make sure that Default Impersonation Level is set to Identify.
Click OK, and then close the Component Services window.
Remove default DCOM permissions
Default DCOM permissions can also be a source of problems.
To remove default DCOM permissions
Open the Registry Editor.
Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole.
If there is a DefaultAccessPermission key, delete it.