I have a script that installs software/updates on remote computers. It has worked well with XP and 2000, but fails with Windows 7 (and Server 2008). The error in the setup log says "Windows update could not be installed because of error 2147942405 "Access is Denied." Command line: wusa c:\temp\windows6.1-KB.... If I run the exact came command line while logged into the computer, it works fine. The script copies the update to the remote computer, and launches the update with win32_process.create. I've tried to lower the security posture on the remote computer, but that didn't help. There must be something in Windows 7 that doesn't allow such things to be remotely launched. But is there a setting you can change to allow updates to be installed remotely. Thanks all.

Any ideas at all? I really am stumped.

Try calling it from a .cmd instead. We ran into the same issue with one of our hotfixes, and couldn't get past the access denied errors when calling wusa directly within the SCCM program properties. Refering to a .cmd that called wusa instead seemed to get around the issue. My best guess is that rights weren't being properly handled when calling wusa.exe directly.

Just tried it by creating a .cmd file on the remote machine that calls WUSA, then remotely asking that .cmd file to execute WUSA. Same issue - Access is Denied. There must be a setting somewhere that allows remote modifications to the operating system. I just can't find it.

Can you please share the script to install updates to remote machines.