Running Admin but still unable to get auto update to turn on

[herbc]

Hi folks, i have been unable to get Windows to auto update even when i am running admin , i have downloaded the SURT tool but am getting the following first screenshot.

The screenshot below is the message i get when trying to get the SURT tool to run .

The screenshot below the first is the screen i get when running admin and trying to turn on auto update.

Thanks for any help.

 

[UsernameIssues]

.
Your first screenshot shows that you are attempting to open a file with an extension of crdownload

That file extension is usually associated with Google's Chrome browser. It is a temporary file extension given to a file during the download. Once the download completes, there are a few more things that might occur before the original file extension is assigned to the file.

One of those things is:
Security related Chrome extensions (apps) might need to complete their checking of the file.

Another thing is:
Antivirus apps (in this case, Kaspersky) might might need to scan the file.


I downloaded Kaspersky 14.0.0.4651 from here:
Download Kaspersky Anti-Virus 14.0.0.4651 - FileHippo.com
(234MB)
During install, it downloaded another 168MB of stuff.
After the install, it downloaded lots more files. Wow!

I downloaded Chrome 31.0.1650.63 from here:
Download Google Chrome 31.0.1650.63 - FileHippo.com

After restarting the Virtual Machine that I'm playing in, I used Chrome to download the System Update Readiness Tool (SURT) from here: Download System Update Readiness Tool for Windows 7 for x64-based Systems (KB947821) [November 2013] from Official Microsoft Download Center

Using Process Monitor, I did not see Kaspersky do anything with the file during or after the download. Perhaps I just missed Kaspersky's actions.

My temp file correctly renamed from
Windows6.1-KB947821-v31-x64.crdownload to
Windows6.1-KB947821-v31-x64.msu after the download completed.

I used the default settings for Kaspersky - maybe your settings/results are different.

I would suggest that you try downloading the SURT using another browser. The final download size looks correct in your first screenshot, but I would not attempt to manually rename the file.



In your second screenshot, I noticed that...
"Some settings are managed by your system administrator".
That is typically something that you might see if the computer is a member of a domain. You system specs say that your computer is running OS win 7 64 Home edition - which (as far as I know) cannot join a domain. Are the screenshots in your post from your W7 Home system? Or are we talking about a work computer?

I've seen antivirus products (security suites) also take over Windows update settings, but they usually replace "your system administrator" with the software product name.

If this is your work computer, forum members should not help you get around your system admin's setup.

 

[Slartybart]

UsernameIssues gave some great information, I have one or two things to add, then I'll sit out and watch.

I agree about .crdownload - it's probably just a partial download that didn't get to completion (rename to .msu)
-> there is no application associted with a file type .crdownload - I'm not sure that it would do any good if there were (assuming that it is a partial download)

You could try another browser as suggested, or simply try the download again - wait until the download finishes and the file is Windows6.1-KB947821-v31-x64.msu in the save location you specified.

If you use IE, you can also Run, instead of save SURT.

Surt has cabinet files so it is a big download.
Just a note about SURT - it actually runs when installed.
It looks like it's only installing, but it also runs in that step.

When the install is done, SURT has executed and created the log file in \Windows\Logs\CBS\Checksur.log
- you don't have to find it and run it

SURT can take a while depending on what it finds - give the download (Run or Save) and the install time to run.

UsernameIssues also mentions the 2nd screenshot.
Were you logged in as a standard user or adminstrator user when you posted that screenshot?
From your 1st post: "even when i am running admin" - could mean a different login or "Run as"

That's all I can add, good luck
-

 

[UsernameIssues]

~~~
SURT can take a while depending on what it finds - give the download (Run or Save) and the install time to run.
~~~

Excellent addition, I should have mentioned that the SURT can take several hours to complete, It can even appear to hang around the 3/4 point - just set the computer not to sleep and leave it running overnight (if needed).

~~~
UsernameIssues also mentions the 2nd screenshot.
Were you logged in as a standard user or administrator user when you posted that screenshot?
From your 1st post: "even when i am running admin" - could mean a different login or "Run as"
~~~

The window shown in the second screenshot is presented by explorer.exe. Explorer should start at the medium integrity level and the widow shown in the second screenshot should show the same info no matter if the user is the Guest account, a user:standard account, a user:admin account or if explorer was started via Run as administrator.

Starting with W7, explorer starts in a way that resists attempt to launch it "as admin" (high integrity level). W7 really wants to keep explorer running at the medium integrity level (for security reasons).

You can right click on the explorer exe or shortcut and select Run as administrator. This will make W7 go thru the motions of presenting the consent dialog box, but the end result is still explorer running at the medium integrity level. By default*, you won't even get a new instance of explorer after all of that effort. The explorer window that opens is probably the same instance that is showing the user's desktop.

*using the /N switch to create a new instance still runs that new instance at the medium integrity level.

You can shift-right-click on the explorer exe or shortcut and select Run as different user. After entering the credentials of another user, this should get you a new explorer instance that is indeed running as the other user (but it is still running at the medium integrity level). This new instance should present an error and then exit.



If the built in administrator account is enabled and any other user (Guest, user:standard or user:admin) attempts to use Run as different user to start explorer using the built in administrator's credentials, no new/elevated instance of explorer should be started. An explorer window should open, but it should be using the same medium integrity level explorer instance that is showing the user's desktop. Like I mentioned, W7 really wants to keep explorer running at the medium integrity level (for security reasons).

If the user account control (UAC) is turned off, then explorer can run at the dangerous high integrity level. But the window shown in the second screenshot will not look the same. The admin (consent) icon will not be on the OK button. Most users have no idea what all they are turning off when they turn off UAC.

 

[herbc]

Thanks a lot guys, i am out of work and only have a home computer so none of that work stuff is applicable. I will follow your above info and let you know how it works out.

Thanks again

 

[Layback Bear]

Basic rule; Microsoft likes Microsoft.

Use I.E. to download anything from Microsoft.

It's easy to set up.
No matter which browser you use most of the time keep Windows I.E. as default browser. You can still use any other browser when you want to.

 

[herbc]

OK, i finally got around to it and successfully downloaded it, i then ran it and i got a screen saying do you want to download the Windows hot fix which i did .

I don't know where to go from here though, i can't find any logs of it and what it's status is.

Oh, and regarding if i was logged on as Admin when i got the second screen pic the answer is yes.

Thanks guys, i am currently still seeing that screen as well.

 

[UsernameIssues]

The SURT should not change (fix?) the info about "settings by admin" in your second screenshot.

Do you have any software installed that watches to see if your programs are out of date? Filehippo has such a tool as does a few other companies. I wonder if a program like that could have changed your Windows Update settings.

Anyway, manually create a system restore point.
(in case something goes wrong while you are editing the registry)
http://www.sevenforums.com/tutorials/697-system-restore-point-create.html

Open regedit.
(Start > regedit)
Navigate to this key:

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU

View attachment 302717

Right-click on that key and rename it AUtemp.

Restart the computer and check to see if you can now change the Windows Update settings.

If you still cannot change the settings, open regedit and see if some app put that key back.

 

[herbc]

Holy cow, you fixed my problem, thank you so much , that is fantastic. I changed it to temp and bingo, it works.

Truly appreciate your help

 

[herbc]

Think I spoke too soon, seem to have lost it. The following screenshot might reveal why. Down on the left hand side (can't be seen ) it says AU
then AU temp underneath it , I know I screwed up somewhere.

 

[herbc]

Now I'm more confused , I just did a system health check and I saw this (screenshot) is this from the alteration in the registry and should I worry about it .

Thanks

 

[UsernameIssues]

Think I spoke too soon, seem to have lost it. The following screenshot might reveal why. Down on the left hand side (can't be seen ) it says AU
then AU temp underneath it , I know I screwed up somewhere.

I don't think that you screwed up. I think that whatever software put the restriction in place is still running on your computer. It might help us to know all of the stuff that you have installed on the computer. I seem to recall that CCleaner can make a list like that as a text file... but I cannot check right now.

Now I'm more confused , I just did a system health check and I saw this (screenshot) is this from the alteration in the registry and should I worry about it .

Thanks

I do not think that the info shown in that screenshot is the result of renaming the AU key and I'm not in a spot where I can look into that for you. Maybe other forum members can chime in.

 

[herbc]

Thanks for the info, should I run a program like DDS or OTL or some other that someone can look at and see if something's not right .

Thanks

 

[UsernameIssues]

Thanks for the info, should I run a program like DDS or OTL or some other that someone can look at and see if something's not right .

Thanks

You can run those tools if you wish, but I'm not the person to guide you in their usage or results. Do you have CCleaner installed? If not, do you want to install it? It make create a simple list of most of the things that are installed - then you can post that list:

View attachment 303042

If you don't want to post such a list... then try the clean boot method http://www.sevenforums.com/tutorial...ation-conflicts-performing-clean-startup.html to try and find the app that is putting the key back.