The security update that is documented in Microsoft Security Bulletin MS04-015 does not install correctly if the Help and Support service is disabled

The security update that is documented in Microsoft Security Bulletin MS04-015 appears to install correctly. However, the Connection.htm file that is contained in the Hsc.system.errors.connection.htm.cab file in the security update package is not installed to the %systemroot%\PCHealth\HelpCtr\System\errors folder.

Additionally, you may notice errors that are similar to the following in the system event log:

Date: date
Time: time
Type: Error
User: domain_name\user_name
Computer: computer_name
Source: DCOM
Category: None
Event ID: 10005
Description: DCOM got error "The service cannot be started, either because it is disabled or because it has no enabled devices associated with it." attempting to start the service helpsvc with arguments "" in order to run the server: {833E4012-AFF7-4AC3-AAC2-9F24C1457BCE}

For more information, see Help and Support Center at http://support.microsoft.com.

Note When this problem occurs, Windows Update and the Microsoft Baseline Security Analyzer (MBSA) report that the security update that is documented in Microsoft Security Bulletin MS04-015 is installed correctly.

This problem occurs if the Help and Support service is disabled. If the Help and Support Center is unnecessary in an environment, an administrator may disable the Help and Support service as a security best practice.

Note If the Help and Support service is not running, no vulnerability exists. However, if the Help and Support service is started, a security threat may exist because the updated Connection.htm file is not installed. An administrator could inadvertently start the Help and Support service even if its startup behavior is set to "Disabled." Therefore, we recommend that administrators use the procedure that is described in the "Resolution" section to help protect against this issue.

To resolve this problem, set the Help and Support service to Automatic, and then reinstall the security update that is documented in Microsoft Security Bulletin MS04-015. To set the Help and Support service to Automatic on your local computer, follow these steps:

1. Click Start, and then click Run.
2. In the Open box, type services.msc /s, and then click OK.
3. Double-click Help and Support.
4. For Startup type, click Automatic, and then click OK.

Important If a domain administrator has disabled the Help and Support service on your computer by using domain Group Policy settings, you cannot configure the service by using the local Group Policy Object Editor. The domain administrator must use the appropriate domain Group Policy Object Editor to configure the Help and Support service in the following location:

To reinstall the security update that is documented in Microsoft Security Bulletin MS04-015, download and then run the appropriate package from the following Microsoft Web site:

Note Windows Update will not offer to reinstall this security update because it is already registered as installed.

The Help and Support service permits the Help and Support Center application to run on your computer. The service supports the Help and Support Center application and enables communication between the client application and the Help data.