Re: Hey MS what about issues with KB840374?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Lucy [MSFT] (a-leby_at_online.microsoft.com)
Date: 06/09/04 

Date: Wed, 9 Jun 2004 08:19:12 -0700

Hi Andrew,

I don't have an update at this time. I will post info when available.

Thank you,
Lucy [MSFT]

This posting is provided "AS IS" with no warranties, and confers no rights.

"Andrew" <someone@somewhere.com> wrote in message
news:%23qBcfWiTEHA.3140@tk2msftngp13.phx.gbl...
> The previous thread died without an answer from MS. This patch fails if
the
> user is not a domain admin. "Lucy" from MS said to check to see if the
local
> admins had the right "Manage auditing and security log"which only domain
> admins have by default. I am not giving my users or local admins this
right.
>
> Will this patch be recut to fix this!? Or do you suggest domain admins log
> onto every workstation to install it?
>
> anyone know if microsoft will fix this?? It seems crazy to give local
admins
> rights that will override domain admins.
>
> MS what gives???
>
>
> Re: any help installing KB840374 yet?
>
> "Andrew" <someone@somewhere.com> wrote in message
> news:%23iHW8LMREHA.620@TK2MSFTNGP10.phx.gbl...
> > A domain admin was able to install this patch where a local admin can't.
> >
> > Any update on when MS will be recutting this patch?
> >
> > "Lucy [MSFT]" <a-leby@online.microsoft.com> wrote in message
> > news:e33%23scnQEHA.3452@TK2MSFTNGP10.phx.gbl...
> > > Hi Andrew,
> > >
> > > Thanks for posting. I'm currently investigating this issue with the
> > > update.
> > >
> > >
> > > --
> > > Thanks,
> > > Lucy [MSFT]
> > >
> > > This posting is provided "AS IS" with no warranties, and confers no
> > rights.
> > >
> > >
> > > "Andrew" <someone@somewhere.com> wrote in message
> > > news:%23lW9N1lQEHA.1348@TK2MSFTNGP12.phx.gbl...
> > > > OK, I just checked the setting for "Manage auditing and security
log"
> > and
> > > > only the domain admins have this right (similar to adding
workstations
> > to
> > > a
> > > > domain). This seems to be the default config for a domain policy.
> > > >
> > > > So, as all other updates install without needing this explicit user
> > right,
> > > > is MS going to fix what appears to be a bug in theis patch?
> > > >
> > > > Otherwise, the Domain admin has to install this patch for all users
OR
> a
> > > new
> > > > Domain Security policy needs to be pushed out. But they shouldn't
have
> > > this
> > > > right on a domain.
> > > >
> > > > I am astounded this made it through QA.
> > > >
> > > > "Lucy [MSFT]" <a-leby@online.microsoft.com> wrote in message
> > > > news:u5cu%23ncPEHA.680@TK2MSFTNGP11.phx.gbl...
> > > > > I really recommend contacting your System Administrator. A couple
> > > > > suggestions:
> > > > >
> > > > >
> > > > >
> > > > > 1) Check that rights for the "Manage auditing and security log"
> policy
> > > > > verify the "Administrators" built in local group is listed.
> > > > >
> > > > > 2) Ensure that only the local Administrators group has the Take
> > > ownership
> > > > of
> > > > > files or other objects user right.
> > > > >
> > > > >
> > > > >
> > > > > If error persists you can:
> > > > >
> > > > >
> > > > >
> > > > > 1) Consult with your System Administrator
> > > > >
> > > > > 2) Post on operating system related newsgroups
> > > > >
> > > > > Here's the link to all newsgroups:
> > > > >
> > > > > http://communities.microsoft.com/newsgroups/default.asp?icp=mscom
> > > > >
> > > > > 3) Contact support to review the Domain Policies
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > Thanks,
> > > > > Lucy [MSFT]
> > > > >
> > > > > This posting is provided "AS IS" with no warranties, and confers
no
> > > > rights.
> > > > >
> > > > >
> > > > > "Andrew" <someone@somewhere.com> wrote in message
> > > > > news:ewM1%23vaPEHA.2452@TK2MSFTNGP11.phx.gbl...
> > > > > > I am part of a domain, but I have no problems with any other
> > updates.
> > > I
> > > > > have
> > > > > > local admin rights on the machine.
> > > > > >
> > > > > > What specific domain policy would cause this patch to fail?
> > > > > >
> > > > > > "Lucy [MSFT]" <a-leby@online.microsoft.com> wrote in message
> > > > > > news:%23dqZO9OPEHA.680@TK2MSFTNGP11.phx.gbl...
> > > > > > > Are you part of a Domain? Is this the only machine having
> > problems
> > > > > > > installing the update? This error is typically caused due to
> > > > > insufficient
> > > > > > > permissions due to a domain policy.
> > > > > > >
> > > > > > >
> > > > > > > --
> > > > > > > Thanks,
> > > > > > > Lucy [MSFT]
> > > > > > >
> > > > > > > This posting is provided "AS IS" with no warranties, and
confers
> > no
> > > > > > rights.
> > > > > > >
> > > > > > >
> > > > > > > "Andrew" <someone@somewhere.com> wrote in message
> > > > > > > news:%23M2qrlOPEHA.2976@TK2MSFTNGP10.phx.gbl...
> > > > > > > > I am having the same problem with this hot fix, it downloads
> but
> > > > won't
> > > > > > > > install via automatic updates or going through windows
> updates.
> > > > > > > >
> > > > > > > > Same error:
> > > > > > > >
> > > > > > > > 2004/05/17 07:18:30.786 (local)
> > > > > > > > 0.130: d:\e23585cf739aebe26e5804\sp2\update\update.exe
> (version
> > > > > > 5.4.15.0)
> > > > > > > > 0.130: Failed To Enable SE_SECURITY_PRIVILEGE
> > > > > > > > 0.130: Setup encountered an error: You do not have
> permission
> > to
> > > > > > update
> > > > > > > > Windows XP.
> > > > > > > > Please contact your system administrator.
> > > > > > > > 0.130: You do not have permission to update Windows XP.
> > > > > > > > Please contact your system administrator.
> > > > > > > > 0.130: Update.exe extended error code = 0xf004
> > > > > > > >
> > > > > > > > I am administrator of my machine, but not domain admin.
> Doesn't
> > MS
> > > > > have
> > > > > > a
> > > > > > > > way to manually set whatever security privilege is needed?
> > > > > > > >
> > > > > > > > Andrew
> > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>
>

Relevant Pages

  • Re: MS04-015 patch
    ... as you state they are admins is something to figure. ... If you have a server with IIS, install Sus and point ... Microsoft MVP (Windows Server System: ... > install the patch for MS04-015? ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Hey MS what about issues with KB840374?
    ... In regards to KB840374 permissions issue I need to get additional info. ... I am not giving my users or local admins this ... > Will this patch be recut to fix this!? ...
    (microsoft.public.windowsupdate)
  • Re: MS04-015 patch
    ... As past patches have been successfully installed via the ... As far as whether or not testing occurs for the patch, ... installed, it doesn't try to install it again. ... >as you state they are admins is something to figure. ...
    (microsoft.public.windowsxp.security_admin)
  • Hey MS what about issues with KB840374?
    ... admins have by default. ... I am not giving my users or local admins this right. ... Will this patch be recut to fix this!? ... > A domain admin was able to install this patch where a local admin can't. ...
    (microsoft.public.windowsupdate)
  • [Full-Disclosure] When should you patch? Was: No Subject (re: openssh exploit code?)
    ... Instead of trying to brute-force Mitch into ... > the long term interests of your business is the RIGHT ... every vulnerability as a life and death issue and patch now, ... But admins don't life in that fantasy world. ...
    (Full-Disclosure)