Re: any help installing KB840374 yet?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Andrew (someone_at_somewhere.com)
Date: 06/07/04


Date: Mon, 7 Jun 2004 12:34:16 -0500

anyone know if microsoft will fix this?? It seems crazy to give local admins
rights that will override domain admins.

MS what gives???

"Andrew" <someone@somewhere.com> wrote in message
news:%23iHW8LMREHA.620@TK2MSFTNGP10.phx.gbl...
> A domain admin was able to install this patch where a local admin can't.
>
> Any update on when MS will be recutting this patch?
>
> "Lucy [MSFT]" <a-leby@online.microsoft.com> wrote in message
> news:e33%23scnQEHA.3452@TK2MSFTNGP10.phx.gbl...
> > Hi Andrew,
> >
> > Thanks for posting. I'm currently investigating this issue with the
> > update.
> >
> >
> > --
> > Thanks,
> > Lucy [MSFT]
> >
> > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> >
> >
> > "Andrew" <someone@somewhere.com> wrote in message
> > news:%23lW9N1lQEHA.1348@TK2MSFTNGP12.phx.gbl...
> > > OK, I just checked the setting for "Manage auditing and security log"
> and
> > > only the domain admins have this right (similar to adding workstations
> to
> > a
> > > domain). This seems to be the default config for a domain policy.
> > >
> > > So, as all other updates install without needing this explicit user
> right,
> > > is MS going to fix what appears to be a bug in theis patch?
> > >
> > > Otherwise, the Domain admin has to install this patch for all users OR
a
> > new
> > > Domain Security policy needs to be pushed out. But they shouldn't have
> > this
> > > right on a domain.
> > >
> > > I am astounded this made it through QA.
> > >
> > > "Lucy [MSFT]" <a-leby@online.microsoft.com> wrote in message
> > > news:u5cu%23ncPEHA.680@TK2MSFTNGP11.phx.gbl...
> > > > I really recommend contacting your System Administrator. A couple
> > > > suggestions:
> > > >
> > > >
> > > >
> > > > 1) Check that rights for the "Manage auditing and security log"
policy
> > > > verify the "Administrators" built in local group is listed.
> > > >
> > > > 2) Ensure that only the local Administrators group has the Take
> > ownership
> > > of
> > > > files or other objects user right.
> > > >
> > > >
> > > >
> > > > If error persists you can:
> > > >
> > > >
> > > >
> > > > 1) Consult with your System Administrator
> > > >
> > > > 2) Post on operating system related newsgroups
> > > >
> > > > Here's the link to all newsgroups:
> > > >
> > > > http://communities.microsoft.com/newsgroups/default.asp?icp=mscom
> > > >
> > > > 3) Contact support to review the Domain Policies
> > > >
> > > >
> > > >
> > > >
> > > > Thanks,
> > > > Lucy [MSFT]
> > > >
> > > > This posting is provided "AS IS" with no warranties, and confers no
> > > rights.
> > > >
> > > >
> > > > "Andrew" <someone@somewhere.com> wrote in message
> > > > news:ewM1%23vaPEHA.2452@TK2MSFTNGP11.phx.gbl...
> > > > > I am part of a domain, but I have no problems with any other
> updates.
> > I
> > > > have
> > > > > local admin rights on the machine.
> > > > >
> > > > > What specific domain policy would cause this patch to fail?
> > > > >
> > > > > "Lucy [MSFT]" <a-leby@online.microsoft.com> wrote in message
> > > > > news:%23dqZO9OPEHA.680@TK2MSFTNGP11.phx.gbl...
> > > > > > Are you part of a Domain? Is this the only machine having
> problems
> > > > > > installing the update? This error is typically caused due to
> > > > insufficient
> > > > > > permissions due to a domain policy.
> > > > > >
> > > > > >
> > > > > > --
> > > > > > Thanks,
> > > > > > Lucy [MSFT]
> > > > > >
> > > > > > This posting is provided "AS IS" with no warranties, and confers
> no
> > > > > rights.
> > > > > >
> > > > > >
> > > > > > "Andrew" <someone@somewhere.com> wrote in message
> > > > > > news:%23M2qrlOPEHA.2976@TK2MSFTNGP10.phx.gbl...
> > > > > > > I am having the same problem with this hot fix, it downloads
but
> > > won't
> > > > > > > install via automatic updates or going through windows
updates.
> > > > > > >
> > > > > > > Same error:
> > > > > > >
> > > > > > > 2004/05/17 07:18:30.786 (local)
> > > > > > > 0.130: d:\e23585cf739aebe26e5804\sp2\update\update.exe
(version
> > > > > 5.4.15.0)
> > > > > > > 0.130: Failed To Enable SE_SECURITY_PRIVILEGE
> > > > > > > 0.130: Setup encountered an error: You do not have
permission
> to
> > > > > update
> > > > > > > Windows XP.
> > > > > > > Please contact your system administrator.
> > > > > > > 0.130: You do not have permission to update Windows XP.
> > > > > > > Please contact your system administrator.
> > > > > > > 0.130: Update.exe extended error code = 0xf004
> > > > > > >
> > > > > > > I am administrator of my machine, but not domain admin.
Doesn't
> MS
> > > > have
> > > > > a
> > > > > > > way to manually set whatever security privilege is needed?
> > > > > > >
> > > > > > > Andrew
> > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>



Relevant Pages

  • RE: Domain admin?
    ... This is defined by granting access to the server. ... Remove domain admins ... from the local admins if they are part of that group. ... This posting is provided AS IS with no warranties, and confers no rights. ...
    (microsoft.public.sqlserver.security)
  • Re: Ensuring Domain Admins is always in the Local Admins group
    ... confers no rights. ... >> is always in the Local Admins group of every computer ... >> I am looking for a way to have the domain admins added ...
    (microsoft.public.win2000.security)
  • Re: GPO to add users as local admins
    ... USMT has to be run with an administrative account, ... This posting is provided "AS IS" with no warranties, and confers no rights. ... local admins. ... "Meinolf Weber" wrote: ...
    (microsoft.public.windows.server.active_directory)
  • Re: ASP.NET - Windows Authentication Problem
    ... Can you provide the <authorization> ... Then it won't let anyone in, including the domain admins or ... > local admins. ... I do not have much knowledge of groups and rights, ...
    (microsoft.public.dotnet.security)
  • Re: RDP access on DC & Exchange
    ... That's a problem since the server is also a domain controller....I mean ... local admins.. ... > In that case you need to give him more rights on the server. ... > assigned the rights to install programs and perform a restart which a user ...
    (microsoft.public.exchange2000.protocols)