Updater rights and permissions unexpectedly granted to svchost.exe

Technical Articles ID: KB91569
Last Modified: 2024-01-23 13:23:09 Etc/GMT

Environment

Application and Change Control (ACC) 8.x, 7.x

Microsoft Windows 10
Microsoft Windows Server 2016

Problem

Updater rights and permissions are unexpectedly granted to svchost.exe.

Cause

The following updater rules were added to ACC to help with Windows Update issues, and grant updater rights and permissions to svchost.exe:

sadmin updaters add -t WinUp_Start15 -l system32\wups.dll svchost.exe
sadmin updaters add -t WinUp_Start16 -l system32\wups2.dll svchost.exe

ACC uses the thread as updater feature with Windows 10 and Windows Server 2016 systems. This feature grants Windows Update svchost.exe threads updater rights and permissions based off a list of known Window Update dlls. When the svchost.exe loads the Windows Update dlls, the thread is made an updater, which eliminates the need for the previously mentioned updater rules.

Workaround

Remove the following rules:

sadmin updaters remove -l system32\wups.dll svchost.exe
sadmin updaters remove -l system32\wups2.dll svchost.exe

Push the rules change to the system.
Restart the system for the changes to take effect.

NOTE:

For ePO-managed systems, the rules previously mentioned require removal from the "Windows Update" rules that are enforced on Windows 10 and Windows Server 2016 systems.
The thread as updater feature isn't present on systems that run a legacy operating system such as Windows 7 and 8. You don't need to remove these rules from the rules being enforced.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Updater rights and permissions unexpectedly granted to svchost.exe

Environment

Problem

Cause

Workaround

Affected Products

Languages:

Title

Title

Knowledge Center

Updater rights and permissions unexpectedly granted to svchost.exe

Environment

Problem

Cause

Workaround

Affected Products

Languages:

Choose your region

Title

Title