Access denied on Open commands

Question

On trying to input command as recommended in error handling Windows Update-Error 80246005 to enable writing in folder Catroot2, I get the message " Access Denied to c:\windows\system32\catroot2", even thougn I am the Administrator.

This folder is Write - protected and I am not able to change this attribute.

So how do I input the command or get access privilege?

Thanks,

Ricky

Moderator moved Thread to the Windows Update Forum for more focused coverage.

Answer 1

Ricky,

Thank you for posting your question.

You will need to stop the Cryptographic Service before you can delete or rename the Catroot2 folder.

I have included the full steps to enable you in resetting Windows Update.

·         General Windows Update Troubleshooting

The following outlines how to stop services pertaining to Windows Update, rename system folders, register related DLL files, and then restart the previously mentioned services. This troubleshooting generally applies to all Windows Update related issues.

Stopping services pertaining to Windows Update

1.     Click Start, click All Programs, click Accessories, right-click Command Prompt, and select Run as Administrator.

2.     If you receive a notification from User Account Control simply click Continue.

3.     At the command prompt, type the following, commands and then press ENTER after each command.

net stop wuauserv         net stop bits

net stop cryptsvc

4.     Please do not close the Command Prompt window.

---

Renaming folders pertaining to Windows Update

1.     At the command prompt, type the following commands, and then press Enter after each command:

2.     ren %systemroot%\System32\Catroot2 Catroot2.old

3.     ren %systemroot%\SoftwareDistribution SoftwareDistribution.old

4.     Please do not close the Command Prompt window.

Registering DLL’s pertaining to Windows Update

1.     Please copy and paste the following text into a new Notepad document, and save the file as WindowsUpdate.BAT

2.     If saved correctly the icon will change from a Notepad file to BAT file which has two blue cogs as its icon.

            -or-

3.     You can manually type each command at the command prompt:

regsvr32 c:\windows\system32\vbscript.dll /s

regsvr32 c:\windows\system32\mshtml.dll /s

regsvr32 c:\windows\system32\msjava.dll /s

regsvr32 c:\windows\system32\jscript.dll /s

regsvr32 c:\windows\system32\msxml.dll /s

regsvr32 c:\windows\system32\actxprxy.dll /s

regsvr32 c:\windows\system32\shdocvw.dll /s

regsvr32 wuapi.dll /s

regsvr32 wuaueng1.dll /s

regsvr32 wuaueng.dll /s

regsvr32 wucltui.dll /s

regsvr32 wups2.dll /s

regsvr32 wups.dll /s

regsvr32 wuweb.dll /s

regsvr32 Softpub.dll /s

regsvr32 Mssip32.dll /s

regsvr32 Initpki.dll /s

regsvr32 softpub.dll /s

regsvr32 wintrust.dll /s

regsvr32 initpki.dll /s

regsvr32 dssenh.dll /s

regsvr32 rsaenh.dll /s

regsvr32 gpkcsp.dll /s

regsvr32 sccbase.dll /s

regsvr32 slbcsp.dll /s

regsvr32 cryptdlg.dll /s

regsvr32 Urlmon.dll /s

regsvr32 Shdocvw.dll /s

regsvr32 Msjava.dll /s

regsvr32 Actxprxy.dll /s

regsvr32 Oleaut32.dll /s

regsvr32 Mshtml.dll /s

regsvr32 msxml.dll /s

regsvr32 msxml2.dll /s

regsvr32 msxml3.dll /s

regsvr32 Browseui.dll /s

regsvr32 shell32.dll /s

regsvr32 wuapi.dll /s

regsvr32 wuaueng.dll /s

regsvr32 wuaueng1.dll /s

regsvr32 wucltui.dll /s

regsvr32 wups.dll /s

regsvr32 wuweb.dll /s

regsvr32 jscript.dll /s

regsvr32 atl.dll /s

regsvr32 Mssip32.dll /s

 Restarting services pertaining to Windows Update

1.     Click Start, click All Programs, click Accessories, right-click Command Prompt, and select Run as Administrator.

2.     If you receive a notification from User Account Control simply click Continue.

3.     At the command prompt, type the following, commands and then press ENTER after each command.

net start wuauserv         net start bits

net start cryptsvc

exit

4.     Now please check for updates using Windows Update to see if the issue has been resolved.

Please reply to your post to let us know if you were successful in resolving your issue with Error 80246005

---

Marilyn

Microsoft Answers Support Engineer

Visit our Microsoft Answers Feedback Forum and let us know what you think.

Answer 2

You probably have some form of Malware damage relic left after you removed it. You can 'take ownership' of the catroot2 folder with the technique below. Let us know if you cannot then run the troubleshooting commands that caused your error.

To set, view, change, or remove permissions on files and folders

1. Right-click the file or folder for which you want to set permissions, click Properties, and then click the Security tab.
2. Click Edit to open the Permissions for <Object> dialog box.
3. Do one of the following:

·         To set permissions for a group or user that does not appear in the Group or user names box, click Add. Type the name of the group or user you want to set permissions for and then click OK.

·         To change or remove permissions from an existing group or user, click the name of the group or user.

1. Do one of the following:

·         To allow or deny a permission, in the Permissions for <User or Group> box, select the Allow or Deny check box.

·         To remove the group or user from the Group or user names box, click Remove.

---

Mark L. Ferguson MS-MVP

Answer 3

Ricky Sujan ,

Are you verifying that you are running CMD as Administrator? Are you able to successfully stop any of the other services mentioned in the recommended steps?

<><><><><><><><><><><><> 

Verify your environment and determine whether you are logged on with an administrator account

http://support.microsoft.com/gp/admin

<><><><><><><><><><><><> 

1. Run Elevated CMD

2.       Click StartCollapse this imageExpand this image, and then type cmd in the Start Search box.

3.       Right-click cmd in the Programs list, and then click Run as administrator. Collapse this imageExpand this imageIf you are prompted for an administrator password or confirmation, type your password or click Continue

4.       At the command prompt, enter the desired command, and then press ENTER.

<><><><><><><><><><><><> 

If you have confirm that you have Administrator rights, and that you are following the Run As Administrator steps. Then we will Take Ownership of your system drive:

1.       Click Start -> Click **Computer -> Local Disk (**Default is C:)

2.       Right-click the Windows folder for which you want to set permissions, click Properties, and then click the Security tab.

3.       Click Advanced to open the Advanced Security Settings for <Object> dialog box.

4.       Click Owner tab, click Edit. If you are prompted for an administrator password or confirmation, type your password or click Continue.

5.       In the new Advanced Security Settings for <Object> box, in the Change owner to: field, select your User name, and Check the Replace owner on subcontainers and objects. Click OK, repeat for remaining boxes. (If your User name is not listed click the Other users or groups button to add your account).

6.       Retest the command you wish to run.

<><><><><><><><><><><><> 

Please report your result so that we may further assist you. Thank you for using the Microsoft Vista Support Community.

---

Rami

Microsoft Answers Support Engineer

Visit our Microsoft Answers Feedback Forum and let us know what you think.

Answer 4

  Marilyn, Wes here, having same issue, however the section below is not working??? Help?

Wes...San Diego

You will need to stop the Cryptographic Service before you can delete or rename the Catroot2 folder.

I have included the full steps to enable you in resetting Windows Update.

·         General Windows Update Troubleshooting

The following outlines how to stop services pertaining to Windows Update, rename system folders, register related DLL files, and then restart the previously mentioned services. This troubleshooting generally applies to all Windows Update related issues.

 

Stopping services pertaining to Windows Update

1.     Click Start, click All Programs, click Accessories, right-click Command Prompt, and select Run as Administrator.

2.     If you receive a notification from User Account Control simply click Continue.

3.     At the command prompt, type the following, commands and then press ENTER after each command.

net stop wuauserv         net stop bits

net stop cryptsvc

4.     Please do not close the Command Prompt window.

---

Renaming folders pertaining to Windows Update

1.     At the command prompt, type the following commands, and then press Enter after each command:

2.     ren %systemroot%\System32\Catroot2 Catroot2.old

3.     ren %systemroot%\SoftwareDistribution SoftwareDistribution.old

4.     Please do not close the Command Prompt window.

 

Registering DLL’s pertaining to Windows Update

1.     Please copy and paste the following text into a new Notepad document, and save the file as WindowsUpdate.BAT

2.     If saved correctly the icon will change from a Notepad file to BAT file which has two blue cogs as its icon.

            -or-

3.     You can manually type each command at the command prompt:

regsvr32 c:\windows\system32\vbscript.dll /s

regsvr32 c:\windows\system32\mshtml.dll /s

regsvr32 c:\windows\system32\msjava.dll /s

regsvr32 c:\windows\system32\jscript.dll /s

regsvr32 c:\windows\system32\msxml.dll /s

regsvr32 c:\windows\system32\actxprxy.dll /s

regsvr32 c:\windows\system32\shdocvw.dll /s

regsvr32 wuapi.dll /s

regsvr32 wuaueng1.dll /s

regsvr32 wuaueng.dll /s

regsvr32 wucltui.dll /s

regsvr32 wups2.dll /s

regsvr32 wups.dll /s

regsvr32 wuweb.dll /s

regsvr32 Softpub.dll /s

regsvr32 Mssip32.dll /s

regsvr32 Initpki.dll /s

regsvr32 softpub.dll /s

regsvr32 wintrust.dll /s

regsvr32 initpki.dll /s

regsvr32 dssenh.dll /s

regsvr32 rsaenh.dll /s

regsvr32 gpkcsp.dll /s

regsvr32 sccbase.dll /s

regsvr32 slbcsp.dll /s

regsvr32 cryptdlg.dll /s

regsvr32 Urlmon.dll /s

regsvr32 Shdocvw.dll /s

regsvr32 Msjava.dll /s

regsvr32 Actxprxy.dll /s

regsvr32 Oleaut32.dll /s

regsvr32 Mshtml.dll /s

regsvr32 msxml.dll /s

regsvr32 msxml2.dll /s

regsvr32 msxml3.dll /s

regsvr32 Browseui.dll /s

regsvr32 shell32.dll /s

regsvr32 wuapi.dll /s

regsvr32 wuaueng.dll /s

regsvr32 wuaueng1.dll /s

regsvr32 wucltui.dll /s

regsvr32 wups.dll /s

regsvr32 wuweb.dll /s

regsvr32 jscript.dll /s

regsvr32 atl.dll /s

regsvr32 Mssip32.dll /s

 Restarting services pertaining to Windows Update

1.     Click Start, click All Programs, click Accessories, right-click Command Prompt, and select Run as Administrator.

2.     If you receive a notification from User Account Control simply click Continue.

3.     At the command prompt, type the following, commands and then press ENTER after each command.

net start wuauserv         net start bits

net start cryptsvc

exit

4.     Now please check for updates using Windows Update to see if the issue has been resolved.

Please reply to your post to let us know if you were successful in resolving your issue with Error 80246005

---

Marilyn

Microsoft Answers Support Engineer

Visit our Microsoft Answers Feedback Forum and let us know what you think.

Answer 5

Hi Everyone,

Issue already resolved.

Thanks.

Ricky