Install applications and updates fail with error 0x80070005, ConfigMgr 2012

After seeing this error code in my smsts.log during the step “Install Software Updates” during OSD for no apparent reason, I searched the web for a solution with almost no result.
All I could find were suggestions to reinstall the WSUS and/or the SUP and other thredes that didn’t really match my error to 100%.

This error occurs only on clients in untrusted domains, a workgroups are essentialy untrusted domains, thus making my build and capture TS fail.

Then what is the solution to the problem? Well, it’s as easy as adding a Hotfix to your Task sequence before applications or updates are installed.
The hotfix is described in ┬áKB2522623, found here, and is called “InitializeSecurityContext function might not fall back to NTLM authentication in Windows 7 or in Windows Server 2008 R2 when Kerberos fails and has the STATUS_NO_LOGON_SERVERS status”

Create an ordinary package containg the msu file and install it before applications or software updates are to be installed. (Example from my Build and Capture TS)


This won’t solve all issues regarding deployment of applications and software updates in Configuration Manager 2012, but it will solve the “access denied” error when deploying to Windows 7 clients in untrusted domains.


This entry was posted in SCCM and tagged , , , , , , , . Bookmark the permalink.

3 Responses to Install applications and updates fail with error 0x80070005, ConfigMgr 2012

  1. G Pen says:

    Pretty! This was a really wonderful article.
    Many thanks for providing this information.

    My weblog G Pen

  2. Richard Van Schaijik says:

    This helped me A LOT, was struggling with this error for 2 days until I found your post. Thanks!

Leave a Reply

Your email address will not be published. Required fields are marked *