Re: Updates

From: Michael Waltrip (anonymous_at_discussions.microsoft.com)
Date: 07/10/04 

Date: Fri, 9 Jul 2004 21:43:50 -0700

Microsoft must do something to fix...?

What Planet are you from?

No, I'm not the Michael Waltrip who drives fast and turns
left a lot (but I do drive fast most of the time).

KB870669 article describes a very manual (registry edit)
way for "us" to install, or rather "fix" the problem
ourselves.

I am still looking for what happens once you have a "key"
for ADODB.Stream... (and what won't work).

>-----Original Message-----
>I made some major discoverys. First I found out that, if
the local
>policy "Take Ownership of files or other objects" is set
to something
>like "\Domain Admins" or "George the tech guy" and it
isn't
>administrators then the following Patches Fail:
>Failed Update for Windows Media Player 9 Series
(KB837272) Web site
>Failed Security Update for Windows XP (KB840374) Web
site
>Failed Security Update for DirectX 9.0 (KB839643) Web
site
>
>If I change the policy to allow "Take Ownership of files
or other
>objects" for administrators everything works fine. Next
test is to
>modify "Manage auditing and security log". To see if
updates will
>fail. You can test this on a machine that is not on a
domain by
>modifing the local policy in Administrative Tools.
>Also if the setting "Take Ownership of files or other
objects" is set
>to a group or username you are not logged into then you
won't be able
>to install XP SP2 RC1. Most domain admins disable "Take
Ownership of
>files or other objects" for users other then domain
admins. So for
>these updates to work Microsoft must do something to fix
this.
>.
>

Relevant Pages

  • Re: [Full-disclosure] Steve Gibson smokes crack?
    ... about the bug for a long time and made a concious decision not to patch it even though they knew it could lead to a system compromise. ... People commented on how Microsoft put out a patch quicker than they ... This is their history going back to before they purchased IE, and something that became really evident when they first began rebuilding Mosaic. ... When NT came out and Microsoft moved from producing OS' that were not network ready out of the box and toy-like GUI infrastructures, the impacts of that strategy were transposed onto administrators and users alike. ...
    (Full-Disclosure)
  • Re: [Full-disclosure] Steve Gibson smokes crack?
    ... I wasn't agreeing its a conspiracy I was just saying they knew about ... but its hard to when we find out Microsoft knew ... > their history going back to before they purchased IE, ... > strategy were transposed onto administrators and users (now more ...
    (Full-Disclosure)
  • Re: Two DB Owners
    ... impede Microsoft Windows NT system administrators from having system ... I'd like to remove all permissions from the admins ... When I remove the login it doesn't ...
    (microsoft.public.sqlserver.security)
  • Re: desk top restirction
    ... Take a look at the free Shared Computer Toolkit from Microsoft. ... SP2 but is good at creating restricted users while not interfering with ... local Group Policy you also can try giving administrators deny permissions ... you can populate their user profile folders for desktop and start menu to ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Contacting Microsoft
    ... If it is retail Windows XP, Microsoft is not concerned about PC ... PC ownership is not relevant. ...
    (microsoft.public.windowsxp.security_admin)