Broken BITS service security descriptor Fixlet

Usage and Config
1

(imported topic written by brolly3391)

During some troubleshooting our SMS infrastructure we discovered an issue with the security descriptor on the BITS service on some workstations.

The symptom is that the BITS service will not start and it gives an error code of 2147500053 when you attempt to start the service. With BITS broken or turned off, SMS 2003 does not function correctly.

RELEVANCE:

service specific exit code of service “bits” = 2147500053 AND state of service “BITS” = “Stopped”

ACTION:

DOS sc.exe config bits start= auto

DOS sc.exe sdset bits D:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)

DOS sc.exe start bits

We do not use Windows Update service but it also suffers from this same issue as shows on the web page below:

http://support.microsoft.com/kb/555336/en-us

(edited to fix auto-smily messing with my code…)

2

(imported comment written by brolly3391)

I found a new error code that takes the same fix and cleaned up the relevance a bit.

RELEVANCE

exists service specific exit code whose (it as integer = 2147500053 or it as integer = 2147467243) of service “BITS” AND exists state of service “BITS” whose (it as string = “Stopped”) AND (name of operating system = “WinXP” or name of operating system = “Win2000”)

ACTION:

DOS sc.exe config bits start= auto

DOS sc.exe sdset bits D:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)

DOS sc.exe start bits

Cheers,

Brolly

3

(imported comment written by BenKus)

And to further enhance this Fixlet, change the action to:

waithidden cmd.exe /C sc.exe config bits start= auto waithidden cmd.exe /C sc.exe sdset bits D:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU) waithidden cmd.exe /C sc.exe start bits

By changing the “DOS” command to “waithidden cmd.exe /C”, you will remove those ugly DOS boxes.

NOTE: “waithidden” only works in BES Clients version 6.0+.