Sign in with
Sign up | Sign in
Your question

Administrators Account cannot install updates and programs..

Last response: in Windows 2000/NT
Share
Anonymous
July 19, 2005 6:27:43 PM

Archived from groups: microsoft.public.win2000.general,microsoft.public.win2000.registry,microsoft.public.win2000.security (More info?)

Hi,


A friend has an account (member of group Administrators) but cannot install
Windows updates or programs.
They abort with message "errors occured, will be terminated, logbook entry
will be created" (no error codes),
but logbook has no such entries ? #$^&*

The Administrator itself can install updates and programs flawlessly.

Any clues how to fix?

TIA,
John7


System: AMD Athlon XP 2400+ 1GB, 120GB, Win2K + SP4 + all updates
Anonymous
July 19, 2005 7:53:24 PM

Archived from groups: microsoft.public.win2000.general,microsoft.public.win2000.registry,microsoft.public.win2000.security (More info?)

More than likely the administrator account has a user right or permission
that the administrators group does not which somebody or something may have
modified at one time. You can use Local Security Policy to see the user
rights assignments. Also his user account could also be a member of a group
that has deny permissions/user right. So check the membership of his user
account to see if it is a member of groups other than users/administrators.
It may also help to enable auditing of user privilge for failure in Local
Security Policy and then look in the securty log via Event Viewer to ses if
there are any failues after he tries and fails with his user account.
SysInternals makes a couple of free tools called filemon and regmon that
also should help as they will record when access has been denied to a
registry key or a folder/file when they are being run when this happens. A
more drastic resort would be to use the secedit command to restore security
settings bacl to defualt defined levels as shown in the KB article
below. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;EN-US;313222
http://www.sysinternals.com/ --- link to SysInternals

"John7" <NoSp@mm.com> wrote in message
news:D birkd$eom$1@news6.zwoll1.ov.home.nl...
> Hi,
>
>
> A friend has an account (member of group Administrators) but cannot
> install
> Windows updates or programs.
> They abort with message "errors occured, will be terminated, logbook entry
> will be created" (no error codes),
> but logbook has no such entries ? #$^&*
>
> The Administrator itself can install updates and programs flawlessly.
>
> Any clues how to fix?
>
> TIA,
> John7
>
>
> System: AMD Athlon XP 2400+ 1GB, 120GB, Win2K + SP4 + all updates
>
>
Anonymous
July 20, 2005 3:18:54 AM

Archived from groups: microsoft.public.win2000.general,microsoft.public.win2000.registry,microsoft.public.win2000.security (More info?)

Steven, thx for responding.

Solved a bad block in his paging file but this did not solve the issue
(could be the source tho).

Checked & OK: his account is member of Administrators (alsway been,
nevertheless verified).
Not yet checked: his account is also member of groups with Deny settings.

Good suggestion. how do I turn on Auditing ?
I think I need to start from there while keeping your other suggestions in
mind.


John7



"Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
news:uO5EfPKjFHA.3348@tk2msftngp13.phx.gbl...
> More than likely the administrator account has a user right or permission
> that the administrators group does not which somebody or something may
have
> modified at one time. You can use Local Security Policy to see the user
> rights assignments. Also his user account could also be a member of a
group
> that has deny permissions/user right. So check the membership of his user
> account to see if it is a member of groups other than
users/administrators.
> It may also help to enable auditing of user privilge for failure in Local
> Security Policy and then look in the securty log via Event Viewer to ses
if
> there are any failues after he tries and fails with his user account.
> SysInternals makes a couple of free tools called filemon and regmon that
> also should help as they will record when access has been denied to a
> registry key or a folder/file when they are being run when this happens. A
> more drastic resort would be to use the secedit command to restore
security
> settings bacl to defualt defined levels as shown in the KB article
> below. --- Steve
>
> http://support.microsoft.com/default.aspx?scid=kb;EN-US;313222
> http://www.sysinternals.com/ --- link to SysInternals
>
> "John7" <NoSp@mm.com> wrote in message
> news:D birkd$eom$1@news6.zwoll1.ov.home.nl...
> > Hi,
> >
> >
> > A friend has an account (member of group Administrators) but cannot
> > install
> > Windows updates or programs.
> > They abort with message "errors occured, will be terminated, logbook
entry
> > will be created" (no error codes),
> > but logbook has no such entries ? #$^&*
> >
> > The Administrator itself can install updates and programs flawlessly.
> >
> > Any clues how to fix?
> >
> > TIA,
> > John7
> >
> >
> > System: AMD Athlon XP 2400+ 1GB, 120GB, Win2K + SP4 + all updates
> >
> >
>
>
!