Some of my WSUS clients were not getting updates from the server, I noticed that on these clients the automatic update service was not starting, and on trying to manually start the service it gave the following error “The Automatic Updates service terminated with the following error: The class is configured to run as a security id different from the caller”  This Kb provides the answer along with the batch file.

 A quick removal of all echo on commands, and a net start “Automatic Updates” to the batch file deployed via SMS got all my clients back in!