Archived from groups: microsoft.public.win2000.general,microsoft.public.win2000.registry,microsoft.public.win2000.security (
More info?)
Steven, thx for responding.
Solved a bad block in his paging file but this did not solve the issue
(could be the source tho).
Checked & OK: his account is member of Administrators (alsway been,
nevertheless verified).
Not yet checked: his account is also member of groups with Deny settings.
Good suggestion. how do I turn on Auditing ?
I think I need to start from there while keeping your other suggestions in
mind.
John7
"Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
news:uO5EfPKjFHA.3348@tk2msftngp13.phx.gbl...
> More than likely the administrator account has a user right or permission
> that the administrators group does not which somebody or something may
have
> modified at one time. You can use Local Security Policy to see the user
> rights assignments. Also his user account could also be a member of a
group
> that has deny permissions/user right. So check the membership of his user
> account to see if it is a member of groups other than
users/administrators.
> It may also help to enable auditing of user privilge for failure in Local
> Security Policy and then look in the securty log via Event Viewer to ses
if
> there are any failues after he tries and fails with his user account.
> SysInternals makes a couple of free tools called filemon and regmon that
> also should help as they will record when access has been denied to a
> registry key or a folder/file when they are being run when this happens. A
> more drastic resort would be to use the secedit command to restore
security
> settings bacl to defualt defined levels as shown in the KB article
> below. --- Steve
>
>
http://support.microsoft.com/default.aspx?scid=kb;EN-US;313222
> http://www.sysinternals.com/ --- link to SysInternals
>
> "John7" <NoSp@mm.com> wrote in message
> news:dbirkd$eom$1@news6.zwoll1.ov.home.nl...
> > Hi,
> >
> >
> > A friend has an account (member of group Administrators) but cannot
> > install
> > Windows updates or programs.
> > They abort with message "errors occured, will be terminated, logbook
entry
> > will be created" (no error codes),
> > but logbook has no such entries ? #$^&*
> >
> > The Administrator itself can install updates and programs flawlessly.
> >
> > Any clues how to fix?
> >
> > TIA,
> > John7
> >
> >
> > System: AMD Athlon XP 2400+ 1GB, 120GB, Win2K + SP4 + all updates
> >
> >
>
>
Facebook
Twitter
Instagram