Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Microsoft Update providing 403 error code? SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms:

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Microsoft Update providing 403 error code?
Confirmed updating Windows update agent fixes the problem:

How to obtain the latest version of the Windows Update Agent to help manage updates on a computer

Microsoft has an article about the error indicating circumstances where the agent becomes damaged.

Error 403 "Access Denied/Forbidden"

So others feel that this is the same problem? The agent in multiple PCs around the world became damaged all at the same time?
This appears to be from someone at Microsoft posted to the microsoft.public.windowsupdate newsgroup...

Eddie Bowers [MSFT]

This was caused by a bad DNS record that prevented older clients from being able to resolve to the correct address to SelfUpdate ( Upgrade to the latest Update client. ) This has been fixed, but it will take a while to propagate to all DNS servers. The newer clients use a different url, so they are not affected. This is why updating the client manually avoids the problem. The links to the latest clients are at:

Something that worked well on my tests was to launch Windows Updates from the command line:

wuauclt.exe /resetauthorization /detectnow
Raul Siles

152 Posts

Sign Up for Free or Log In to start participating in the conversation!