{"id":10160,"date":"2019-07-04T05:42:02","date_gmt":"2019-07-04T05:42:02","guid":{"rendered":"http:\/\/198.58.113.91\/blog\/?p=10160"},"modified":"2024-03-30T08:21:24","modified_gmt":"2024-03-30T02:51:24","slug":"windows-update-service-properties-are-grayed-out-in-services-mmc","status":"publish","type":"post","link":"https:\/\/www.winhelponline.com\/blog\/windows-update-service-properties-are-grayed-out-in-services-mmc\/","title":{"rendered":"Windows Update Service Properties Grayed Out in Services MMC"},"content":{"rendered":"

When you open the Services MMC (services.msc<\/code>) and double-click Windows Update service properties, the Start and Stop buttons are grayed out. Also, you may be unable to change the service Startup type.<\/p>\n

\"windows<\/p>\n

As a workaround, you can change the service startup and other settings using the registry<\/a> or run the SC.exe<\/code> command-line tool under the SYSTEM account<\/a> and modify the service settings.<\/em><\/p>\n

RELATED:<\/strong> Task Scheduler Service Grayed Out in Services MMC<\/a><\/div>\n

This article tells you how to make the Windows Update service configurable (by administrators) using the Services MMC.<\/p>\n

Resolution<\/h2>\n

Option 1: Fix the service permissions<\/h3>\n

The Windows Update service properties may be grayed out due to corrupt service security descriptors or tightened permissions. To reset the Windows Update service security configuration, follow these steps:<\/p>\n

Open an admin Command Prompt<\/a> window and run the following command:<\/p>\n

sc.exe sdset wuauserv D:(A;;CCLCSWRPLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)<\/pre>\n
\"windows<\/p>\n
The above command-line fixes the permissions for the Windows Update (wuauserv<\/code>) service.<\/em><\/p>\n
Restart Windows for the change to take effect.<\/p>\n
RELATED:<\/strong> How to View and Modify Service Permissions in Windows<\/a><\/div>\n
\n
Additional Information<\/h4>\n
The security descriptor (SDDL) D:(A;;CCLCSWRPLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)<\/code> is the default security descriptor for Windows Update service in Windows 10 and Windows 11.<\/p>\n
The above SDDL translates to the following permissions (Discretionary Access Control List — DACL):<\/p>\n
[0] ACCESS_ALLOWED_ACE_TYPE: NT AUTHORITY\\Authenticated Users<\/strong><\/p>\n