When I tried to install Microsoft's latest patches (MS04-029 through
MS04-038) via Windows Update the process failed. I looked in C:\WINNT\Windows
Update.log and found the relevent entry, which listed error 0x8007F004 and
referred me to "...iuhist.xml for details...". However, iuhist.xml didn't
tell me much more -- just that it had actually failed while trying to install
the cummulative ie patch from MS04-038.
So, I tried downloading the patches manually and applying them, but got the
error "You do not have permission to update Windows 2000. Please contact your
system administrator." However, I am currently logged into Windows 2000 as a
user who is in the Administrators group.
Does anybody have any idea why I would get this kind of error? or what I can
do to try and install these patches? I already tried reinstalling IESP1
(which worked fine), deleting the Windows Update/WUTemp folders and visiting
Windows Update again. Nothing seems to be helping and I am at a loss.
Paul - 13 Oct 2004 16:32 GMT
I know it should not make a difference but try logging in
as the real administrator.
>-----Original Message-----
>When I tried to install Microsoft's latest patches (MS04-029 through
[quoted text clipped - 14 lines]
>Windows Update again. Nothing seems to be helping and I am at a loss.
>.
Yan - 14 Oct 2004 01:13 GMT
Hi,
I have the same problem. I try with the real administrator but i have de
same problem.
> I know it should not make a difference but try logging in
> as the real administrator.
[quoted text clipped - 29 lines]
> am at a loss.
> >.
Cacatua - 18 Oct 2004 11:04 GMT
Go in propiety o f folder WINNT, and chek if u have in Security Layer
Administrator and Administrators with full controll (together). if u havent...
add and will function.
Cacatua
> When I tried to install Microsoft's latest patches (MS04-029 through
> MS04-038) via Windows Update the process failed. I looked in C:\WINNT\Windows
[quoted text clipped - 12 lines]
> (which worked fine), deleting the Windows Update/WUTemp folders and visiting
> Windows Update again. Nothing seems to be helping and I am at a loss.
Joe - 18 Oct 2004 20:54 GMT
The answers people are giving just sound so generic and
uneducated. I am having the exact same problem and it is
not a permissions issue. There is something going on with
Microsoft's update engine and they will probably have it
resolved within the next few days.
>-----Original Message-----
>Go in propiety o f folder WINNT, and chek if u have in Security Layer
[quoted text clipped - 4 lines]
>
>Zeveck <Zeveck@discussions.microsoft.com> wrote in message news:<17C36D6A-2AC5-4100-882D-
10E291E444A4@microsoft.com>...
>> When I tried to install Microsoft's latest patches (MS04-029 through
>> MS04-038) via Windows Update the process failed. I looked in C:\WINNT\Windows
[quoted text clipped - 13 lines]
>> Windows Update again. Nothing seems to be helping and I am at a loss.
>.
DNICE - 20 Oct 2004 21:35 GMT
this issue is related to a local/group policy
somewhere... I'm having the same issue but havent been
able to resolve.
-D
>-----Original Message-----
>The answers people are giving just sound so generic and
[quoted text clipped - 46 lines]
>>
>.
latorres@service.com.br - 21 Oct 2004 14:04 GMT
I have the same problem. I have 2 win2000 domain
controllers and one dc windows update was OK, but the
other didn't Ok ("You do not have permission to update
Windows 2000. Please contact your system administrator.").
>-----Original Message-----
>The answers people are giving just sound so generic and
[quoted text clipped - 46 lines]
>>
>.
Curious - 11 Nov 2004 15:54 GMT
Does any body have any updates in this regard? Is the fix
of the Microsoft's update engine in place yet?
Thanks!
>-----Original Message-----
>The answers people are giving just sound so generic and
[quoted text clipped - 46 lines]
>>
>.
latorres@service.com.br - 21 Oct 2004 13:51 GMT
Hi! I have the same problem. Anybody knows what can I do?
Tks.
>-----Original Message-----
>When I tried to install Microsoft's latest patches (MS04-029 through
[quoted text clipped - 14 lines]
>Windows Update again. Nothing seems to be helping and I am at a loss.
>.
latorres@service.com.br - 21 Oct 2004 13:58 GMT
But the Administrator has full controll in folder WINNT!
Keith Langmead - 22 Nov 2004 15:56 GMT
I'm getting the same problem with some of our servers. They used to work
fine until a few months ago when the problem first occurred.
I don't think it's a permissions problem, since so far I've tried installing
it as the local administrator, the domain administrator, my own domain
administrator user, and the backup user (also a domain user, and is the
username which is logged in as on the backup server, which is one of the
ones which works correctly), all to no avail. I've also tried running
NTFileMon while running the installation (running it manually after
downloading one of the patches), and it doesn't come up with any permissions
errors, so it certainly doesn't seem to be a file system permissions error.
Does anyone have any other ideas of what to try to resolve this? Someone
mentioned that this might be a bug with windows / the patches, does anyone
know if this is true or if there is a likely fix coming out any time soon?
Keith
> When I tried to install Microsoft's latest patches (MS04-029 through
> MS04-038) via Windows Update the process failed. I looked in C:\WINNT\Windows
[quoted text clipped - 12 lines]
> (which worked fine), deleting the Windows Update/WUTemp folders and visiting
> Windows Update again. Nothing seems to be helping and I am at a loss.
kingloose - 14 Jan 2005 02:38 GMT
All
this issue comes from Default Policy. If you have changed default policy
or you have implemented 2003 Controller in your 2k AD. The way to check,
navigate to local policy on affected computer user rights assignment, you
will see that you your affective policy is the default policy that comes
from DOMAIN and you are not able to modify it. (LSDO) local, site, domain,
OU....
MS Tech - 18 Apr 2005 22:26 GMT
Another frequent cause of these symptoms are the permissions on "Manage
auditing and security log" in group policy. When Windows Update runs it
adds entries into the System log (typically event 18 or 19) - if the
account under which the updates are run does not have rights in the "Manage
auditing and security log" group policy, that entry cannot be created and
the update attempt will fail.
To verify/correct this problem, please follow these easy steps.
1. Click Start->Run, type "gpedit.msc" (without quotation marks) in the
open box and click OK.
2. Navigate to the following folder by expanding the "+" beside the tree in
the left pane: Computer Configuration\Windows Settings\Security Settings\
Local Policies\User Rights Assignment
3. Highlight "User Rights Assignment" in the left pane and double click
"Manage auditing and security log" in the right pane.
4. If the administrator group is not listed there, please click "Add user
or group" and type in "administrator".
5. Click Ok and then click Apply.
6. Repeat the above steps 3-5 and add the administrator group to "Back up
Files and directories."
Please Note: You will need to update group policy on the
server/workstation in question, and that the current user will need to
logoff and back on before a new security token will be generated based upon
the new permissions.