Re: Updates

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: William Gonzales (willgonz_at_gmail.com)
Date: 07/09/04 

Date: 9 Jul 2004 09:14:52 -0700

I made some major discoverys. First I found out that, if the local
policy "Take Ownership of files or other objects" is set to something
like "\Domain Admins" or "George the tech guy" and it isn't
administrators then the following Patches Fail:
Failed Update for Windows Media Player 9 Series (KB837272) Web site
Failed Security Update for Windows XP (KB840374) Web site
Failed Security Update for DirectX 9.0 (KB839643) Web site

If I change the policy to allow "Take Ownership of files or other
objects" for administrators everything works fine. Next test is to
modify "Manage auditing and security log". To see if updates will
fail. You can test this on a machine that is not on a domain by
modifing the local policy in Administrative Tools.
Also if the setting "Take Ownership of files or other objects" is set
to a group or username you are not logged into then you won't be able
to install XP SP2 RC1. Most domain admins disable "Take Ownership of
files or other objects" for users other then domain admins. So for
these updates to work Microsoft must do something to fix this.

Relevant Pages

  • Re: Hey MS what about issues with KB840374?
    ... If I change the policy to allow "Take Ownership of files or other ... these updates to work Microsoft must do something to fix this. ... > machine with administrator rights, who cares if they screw up their ...
    (microsoft.public.windowsupdate)
  • Re: Group Policy to secure DFS Share
    ... I have tested and there is NO policy at all that can restrict an individual ... with administrative rights on a computer from taking ownership; ... policy refresh, the file settings are changed back, but the file changes ... I agree that they should be trusted or not be administrators, ...
    (microsoft.public.win2000.group_policy)
  • RE: Unable to install XP SP2 as administrator
    ... Thanks you Diana very much. ... I've now discovered I can not edit the policy ... "Take ownership of files or other objects", there is a SID numeric value ...
    (microsoft.public.windowsxp.security_admin)