SINGLE SCCM UPDATE STUCK AT DOWNLOADING 0% COMPLETE

Question

I'm posting this because while there are multiple threads on the Internet about all patches on a client stuck at "downloading 0% complete", there's very little on when only one patch is stuck there network-wide. This was the "Windows Malicious
Software Removal Tool for Windows 8, 8.1 and Windows Server 2013, 2012 R2 x64 Edition - September 2014  (KB890830)". On this network it would not download on any machine. Other versions of the Sept 2014 version of 890830 did install, so it was clearly
something specific to this version of that update. After awhile, I decided to try something that worked for me: Delete the deployment that applies to the machine in question, update distribution points from the package in question, run Machine Policy on the
box in question, wait til the update clears off the Software Center screen, and then run Machine Policy and Software Updates Deployment on the Actions tab. Then the patch installed fine. Hope this helps someone else!
Ben JohnsonWY

Answer 1

I just figured this out while typing this. One of the suggested threads that appeared when I was typing lead me to the answer for my case. The IIS App Pool for DPs was using an account that did not have rights to particular folder. Some security setting
pushed by the security server changed something. I changed to App Pool to an account that had the needed rights, restarted IIS, and the downloads started working. Maybe this will fix my secondary DP problem too.
Ben JohnsonWY