INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Member Login

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips now!

Talk With Other Members
Be Notified Of Responses
To Your Posts
Keyword Search
One-Click Access To Your
Favorite Forums
Automated Signatures
On Your Posts
Best Of All, It's Free!

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

LINK TO THIS FORUM!

Tek-Tips LinkedIn^® Group

Join our
LinkedIn^® Group!

Hook up with past and present colleagues and classmates quickly.

Partner With Us!

"Best Of Breed" Forums Add Stickiness To Your Site

(Download This Button Today!)

Feedback

"...Just to let you know...what a great site you have. I posted a pretty generic question yesterday and have had 8 responses already, anyway thanks again and keep up the good work..."

More...

Geography

Where in the world do Tek-Tips members come from?

Click Here To Find Out!

Tek-Tips Shirts!

Get your
Tek-Tips Forums
SWAG here!

Home > Forums > Application Management > Application Management > Enterprise Level Server Management Forum

Wierd policy/security issue

Read More Threads Like This One

dynasis (MIS)

20 Apr 06 11:17

I have a client situation where no one seems to be able to install windows updates on their PC's that are joined to the domain. They can download them just fine but they fail during install. The only way to install them is to log in using the administrator account to the domain.
One user even has domain admin rights but he's still unable to install the updates. I thought it might be a policy issue and others are saying internal DNS. I have searched and searched but I'm unable to find anything to go with that will resolve this issue.
At first I thought it might have been an issue with a users machine but when I tried to run system restore under his credentials (local admin, domain admin) I got a message that he didn't have the appropriate rights to perform this action. I could only run it from the administrators (domain) account.

Maybe a policy has been applied? If so I can't find it.

The PDC is a 2000 server..

Thank you in advance for any help.

Jeremy Johnston

porkchopexpress (IS/IT--Management)

21 Apr 06 15:40

Is it possible that someone has applied the restricted groups policy and this might of removed all local admins?

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

Do you get any errors in the event log when the updates fail to install.

dynasis (MIS)

23 Apr 06 21:31

Thanks, I'll check that link out this week and no I do not get any errors. I do get an error when I click on the security log though and states I don't have permission to view it.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members!

Back To Forum

Back To Enterprise Level Server Management