You may be unable to log on a terminal server that has the DisableWindowsUpdateAccess user policy set

You have a terminal server that is based on one of the following operating systems:

• Windows Server 2003
• Windows Server 2008
• Windows Server 2008 R2

Additionally, you set the DisableWindowsUpdateAccess user policy on the terminal server. When you try to log on the terminal server, you may encounter the follow problems:

• You receive various error messages. For example, you receive one of the following error messages:
  • Cannot check server license
  • Cannot load user profile
• The terminal server stops responding.
• You use the pool tagging feature to investigate a possible memory leak. The pool tagging output shows that the Toke pool tag is using too much paged pool memory.

Note: IT administrators frequently use the DisableWindowsUpdateAccess user policy in terminal server environments and in regular corporate managed scenarios. �IT administrators use the DisableWindowsUpdateAccess user policy to disable access to Windows Update or use a management solution to control system patching.

This problem occurs when a paged pool memory leak occurs in the Toke pool tag on the terminal server that has the DisableWindowsUpdateAccess user policy set. The paged pool memory leak is caused by a token handle leak in the Wuauserv.dll file. Eventually, this issue can exhaust the paged pool memory by using Token object Toke allocations. When the paged pool memory is exhausted, the terminal server stops responding and become inaccessible. Users can no longer log on the terminal server.

The following file is available for download from the Microsoft Download Center:
Download the update package now.


For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base: Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

This update applies to the following systems types:

• x86-based systems
• x64-based systems
• Itanium-based systems

How to install this update

• Double-click the WindowsUpdateAgent30.exe file, and then click Run.
• In the Windows Update Agent dialog box, specify a folder to the extract the files, and then click OK.
• After the files are extracted, open the folder.
  In the folder, you will find the following files:
  • WindowsUpdateAgent30-ia64.exe
  • WindowsUpdateAgent30-x86.exe
  • WindowsUpdateAgent30-x64.exe
• Double-click the file for the type of the operating system to install the update.