LiveUpdate: "The class is configured to run as a security id different from the caller."

Products

• Endpoint Protection

Issue/Introduction

When attempting to start the LiveUpdate service, Windows displays the message "The class is configured to run as a security id different from the caller."

Symptoms
The LiveUpdate service will not start properly and product updates and definitions will not download.

Cause

This error can be caused by group policy settings or other factors that cause the security descriptor for the LiveUpdate service to become invalid.

Resolution

1. Check your group policies and make sure there are no restrictions being placed on the LiveUpdate service.

2. As a workaround, you can try deleting the security descriptor for the LiveUpdate service from the registry. This process requires a reboot.

To accomplish this, delete the following registry value.

HKLM\System\CurrentControlSet\Services\LiveUpdate\Security\Security