Re: Windows 2003 Server, access denied to install security patches

Hi,
I have followed the technet articale -
http://support.microsoft.com/default.aspx?scid=kb;en-us;316524
>
So far this hasnt resolve the issue, I ran the GPOtool in command line using
the command - gpotool /checkacl

,this displayed an error result between domain controllers. The error
message was:

Version Mismatch on server1 DS=270628, sysvol1= 270625
Version Mismatch on server2 DS=270628, sysvol1= 270625

This is an error on the Domain Controller policy, we Have 3 DC 's - 2
onsite, 1 off-site.

To fix this problem, how do I find out "what the actual" problem is, eg: an
incorrect gp applied or has the gp been corrupted?.

Any help on where to go from here to correct this, would be most helpfull,

thanks Clint
=====================================================
"Judith Herman (MSFT)" wrote:

> Check out the below article. This sounds like what you might be getting.
> http://support.microsoft.com/default.aspx?scid=kb;en-us;316524
>
> --
> Judith Herman
> Microsoft Corporation
> Server User Assistance - Group Policy
> ======================
> This posting is provided "AS IS" with no warranties, and confers no rights.
> ======================
> "Clint" <Clint@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:C8D50966-F23A-42F9-A1E8-9DEF5D71A388@xxxxxxxxxxxxxxxx
> > Hi,
> >
> > I have run the Rsop (in GUI mode) to confirm if I have any restrictions,
> > nothing has revealed any install restrictions.
> >
> > The Rsop has been run on both the domain controller and administrator
> > group
> > policies, both show a negative.
> >
> > Is it possiable that when this server was built from start, whilst in
> > "workgroup", restrictions were applied, then, when server was place on
> > domain, would this have an effect??
> >
> > The error message is:
> >
> > "you do no have permission to update Windows Server 2003, Please contact
> > your systesm administrator"
> >
> > All patches refer to Security patches that I have to install. All other
> > Windows 2003 and 2000 servers have no issues whith these installs.
> >
> > Thanking you in advance
> >
> > Clint
> >
> >
> >
> > "Judith Herman (MSFT)" wrote:
> >
> >> Have you logged onto the domain controller and run rsop.msc from the
> >> command
> >> line just to verify that there really no software restriction policies
> >> applying to you? Also, what errors are you seeing when you attempt to
> >> install a patch?
> >>
> >> --
> >> Judith Herman
> >> Microsoft Corporation
> >> Server User Assistance - Group Policy
> >> ======================
> >> This posting is provided "AS IS" with no warranties, and confers no
> >> rights.
> >> ======================
> >> "Clint" <Clint@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> >> news:3A4A999C-8181-449A-9410-DC8A61B2A2BA@xxxxxxxxxxxxxxxx
> >> > As the Systems Administrator I have full rights to install windows
> >> > update
> >> > security patches to a Domain Controller with Windows Server 2003.
> >> >
> >> > Have checked group policyes for the Domain, including all listed.
> >> > Confirmed
> >> > that under the Admin templates for Windows components> windows
> >> > installer,
> >> > has not been configured to prevent any install of patches. This is not
> >> > activate on any GP in the Domain.
> >> >
> >> > I have also created an "Enforcment Rule" under Software restrictions ,
> >> > apply
> >> > to all users except Local Administrators. , this would allow an
> >> > adminstrator
> >> > to install software etc.
> >> >
> >> > All changes have been applied using the GPudate /force command, and
> >> > confirmed by event viewer.
> >> >
> >> > I still canot install any patches on this Domain Controller??, can
> >> > anyone
> >> > offer any sujestions or help.
> >> >
> >> > thanks
> >>
> >>
> >>
>
>
>
.

Relevant Pages

  • Re: Setup 2003 x64
    ... Don't Do IT Evers - Like Domain Controller ... if someone has an unattended install script I would really ... got around it by running the following setup from the command line. ...
    (microsoft.public.exchange.admin)
  • Re: dcdiag - advertising errors on newley promoted domain controller
    ... The existing domain controller in the same site had a journal wrap ... Alias and glue records for forest GUIDs from server: ... From a command prompt try and see if you get any additional ...
    (microsoft.public.windows.server.active_directory)
  • RE: fedora-list Digest, Vol 12, Issue 203
    ... >the Install programs app to get all the Development stuff at once. ... >Yes, I have tried running it from the command line, it just died with no ... >which defaulted to LVM use on a single drive. ... > O splendente, che vieni dalle sorgenti del Nilo, ...
    (Fedora)
  • New Debian31r1 Install - help me optimize - TNT2 - sudo - KDE - Xwindows
    ... of futzin with a new debian ... install, which was needed after a munged KNOPPIX install (I know, I ... the command 'dpkg-reconfigure xserver-xfree86' (which allowed me to ... trying to get the SOUND working yet..there's what seems to be a PCI ...
    (comp.os.linux.misc)
  • Re: Installing Net Framework Service Pack 1
    ... You *do* have a valid install of 1.1, ... We had already established that I had changed the ASP.NET tab to ... That's not a registry command. ... Here I try to enter the directory where the Net Framework 1.1 ...
    (microsoft.public.dotnet.framework.aspnet)
Loading