Windows updates fail

Archived from groups: microsoft.public.win2000.security (More info?)

Hi Jim.

The link below is to a newsgroup post about a similar problem that involved the
administrators not having necessary user rights as found in the windowsupdate.log.
This could happen from a security template being applied or manually changing user
right assignments. Secedit can be used to restore default user rights for the Local
Security Policy, though domain/OU policy can override local settings. Running filemon
and regmon from SysInternals may also help in showing where access is denied if you
do it just before trying to install the update. Those utilities can generate
thousands of lines in a short time, but you want to scan for access denied errors.

http://www.webservertalk.com/message328104.html

Of course your problem could be unrelated. I suggest you also post in the
Microsoft.public.windowsupdate newsgroup that specializes in update problems. ---
Steve


"Jim" <anonymous@discussions.microsoft.com> wrote in message
news:426201c47fd9$5edd51d0$a301280a@phx.gbl...
> I have a system were the last few patches have failed.
> When run from the WU folder each patch indicates that I do
> not have the necessary permissions to perform the update.
> The logged in person is in the administrator group. This
> also happens to several other "administrators" to the
> system.
> One patch for the internet explorer did work.
> Any ideas?

Archived from groups: microsoft.public.win2000.security (More info?)

Hello,

The following four rights are required:

SeBackupPrivilege
Back up files and directories
Required to perform backup operations

SeDebugPrivilege
Debug programs
Required to debug a process

SeRestorePrivilege
Restore files and directories
Required to perform restore operations. This privilege enables you to set
any valid user or group security identifier (SID) as the owner of an object.

SeSecurityPrivilege
Manage auditing and security log
Required to perform a number of security-related functions, such as
controlling and viewing audit messages. This privilege identifies its
holder as a security operator.

SeTakeOwnershipPrivilege
Take ownership of files or other objects
Required to take ownership of an object without being granted
discretionary access. This privilege allows the owner value to be set only
to those values that the holder may legitimately assign as the owner of an
object.

Diana

This posting is provided "AS IS" with no warranties, and confers no rights.




Note: SeShutDownPrivilege should also ideally be available