Re: Server 2003 updates fail

From: Tina (Tina_at_discussions.microsoft.com)
Date: 07/23/04


Date: Fri, 23 Jul 2004 11:59:01 -0700

Thank you!
Some how the administrators was removed from Manage auditing and security log in the local security setting.
Tina

"Lucy [MSFT]" wrote:

> HI Tina,
>
> Please verify permissions on the following rights include the built-in
> "Administrators" group and Windows Update again.
>
> Manage auditing and security log
> Backup Files and Directories
> Take ownership of files or other objects
>
> Let us know the results.
>
> --
> Thanks,
> Lucy [MSFT]
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
> "Tina" <Tina@discussions.microsoft.com> wrote in message
> news:9208B81C-5ED3-457D-AAB1-687B69A3D5FB@microsoft.com...
> > I'm getting the same errors in my window updates.log file. I tried
> downloading from the update from
> http://www.microsoft.com/technet/security/current.aspx and recieved:
> > You do not have permissions to update Windows Server 2003. Please contact
> your system administrator. I was log on as the administrator when getting
> this message. I have been able to download and apply in past w/ the same
> admin account and have had no problems. I have 2 other Server2003 machines
> that are giving the same error while the remaining 10 2003 Servers have no
> problem with the download.
> > Thanks,
> > Tina
> >
> > "Lucy [MSFT]" wrote:
> >
> > > Hello,
> > >
> > > Could you please attempt to install one or two of the updates from the
> > > Security bulletin site:
> > > http://www.microsoft.com/technet/security/current.aspx
> > >
> > > What error message do you get?
> > >
> > >
> > > Thanks,
> > > Lucy [MSFT]
> > >
> > > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> > >
> > >
> > > "Steve" <Steve@discussions.microsoft.com> wrote in message
> > > news:8E735786-C68F-4E21-97CB-180189F701D3@microsoft.com...
> > > > I'm having the exact same problem. I know there is a security setting
> > > somewhere that needs to be changed.
> > > >
> > > > "Matt" wrote:
> > > >
> > > > > i have a fresh install of Server2003 on three different machines.
> Not
> > > one of them is able to install updates using Windows Update. I found the
> > > issue about the time setting on a newsgroup. tried that. no luck. The
> last
> > > 20 lines of the windows update log file is as follows:
> > > > >
> > > > > 2004-07-06 09:18:17 13:18:17 Success IUENGINE Determining
> > > machine configuration
> > > > > 2004-07-06 09:18:17 13:18:17 Success IUENGINE Querying
> > > software update catalog from
> > > https://v4.windowsupdate.microsoft.com/consumerdrivers/getmanifest.asp
> > > > > 2004-07-06 09:18:47 13:18:47 Success IUENGINE Querying
> > > software update catalog from
> > > https://v4.windowsupdate.microsoft.com/getmanifest.asp
> > > > > 2004-07-06 09:18:48 13:18:48 Success IUENGINE
> Asynchronous
> > > Download started
> > > > > 2004-07-06 09:18:48 13:18:48 Success IUENGINE Download
> > > destination root folder is: C:\WUTemp
> > > > > 2004-07-06 09:18:48 13:18:48 Success IUENGINE Downloaded
> file
> > >
> http://download.windowsupdate.com/msdownload/update/v3-19990518/cabpool/WindowsServer2003-KB839643-x86-enu-express_85dfc1458a5ed1d08732e5e889334ce.exe
> > > > > 2004-07-06 09:18:48 13:18:48 Success IUENGINE Local path
> > >
> C:\WUTemp\com_microsoft.DirectX_839643_WS03_x86_IB_Express\WindowsServer2003
> > > -KB839643-x86-enu-express.exe
> > > > > 2004-07-06 09:18:48 13:18:48 Success IUENGINE Downloaded
> file
> > >
> http://download.windowsupdate.com/msdownload/update/v3-19990518/cabpool/WindowsServer2003-KB840374-x86-ENU_eeafbc20c2402b1c951d155d3d2cb9c.EXE
> > > > > 2004-07-06 09:18:48 13:18:48 Success IUENGINE Local path
> > >
> C:\WUTemp\com_microsoft.840374_WS03_SP1_WinSE_92384\WindowsServer2003-KB8403
> > > 74-x86-ENU.EXE
> > > > > 2004-07-06 09:18:49 13:18:49 Success IUENGINE See
> iuhist.xml
> > > for details: Download finished
> > > > > 2004-07-06 09:18:49 13:18:49 Success IUENGINE
> Asynchronous
> > > Install started
> > > > > 2004-07-06 09:18:49 13:18:49 Success IUENGINE
> Asynchronous
> > > Install completed startup
> > > > > 2004-07-06 09:18:49 13:18:49 Error IUENGINE Install Set
> > > Restore Point (Error 0x00000078: This function is not supported on this
> > > system.)
> > > > > 2004-07-06 09:18:49 13:18:49 Success IUENGINE Installing
> > > SOFTWARE item from publisher com_microsoft
> > > > > 2004-07-06 09:18:49 13:18:49 Success IUENGINE Installer
> > > Command Type: EXE
> > > > > 2004-07-06 09:18:51 13:18:51 Success IUENGINE Installing
> > > SOFTWARE item from publisher com_microsoft
> > > > > 2004-07-06 09:18:51 13:18:51 Success IUENGINE Installer
> > > Command Type: EXE
> > > > > 2004-07-06 09:18:55 13:18:55 Error IUENGINE See
> iuhist.xml
> > > for details: Install finished (Error 0x8007F002)
> > > > > 2004-07-06 09:18:58 13:18:58 Success IUENGINE Shutting
> down
> > > > > 2004-07-06 09:18:59 13:18:59 Success IUCTL Shutting
> down
> > > > >
> > > > > any ideas?
> > > > >
> > >
> > >
> > >
>
>
>



Relevant Pages

  • Re: Monitor User Remotely.
    ... activity, auditing of process tracking on ... remotely via administrator share, and folder files have creation timestamps ... he can clear the security log. ... > Is there any way we can remotely monitor him, ...
    (microsoft.public.win2000.security)
  • Re: Class on Rights and Auditing
    ... This information is provided "AS-IS" with no warranty, and confers no rights. ... There is not> much to auditing folders and files other that enabling auditing of object> access and then configure the permissions to audit on the folder/file> properties. ... Then you have to parse> the security log for the object access events that relate to the> information you need and that is a bit challenging until you try it for a> while experimenting on a computer. ...
    (microsoft.public.security)
  • Re: Unable to access Security Event Log Windows 2003 Stand alone
    ... The error that get loged is Windows error code: ... > administrator has the Manage auditing and security log right. ...
    (microsoft.public.security)
  • Re: Auditing user OU Changes
    ... Forgive me I did not mean user in the sense of a standard user. ... administrator. ... tracked with auditing, which it seems at this point they can't ... Normal users are ot able to do this except you grant them rights to work ...
    (microsoft.public.windows.server.security)
  • Re: Monitor the Adminstrator
    ... You can't realistically restrict an administrator. ... and a malicious administrator could modify the security log. ... See the link below on auditing. ... For starts it is a good idea to at least audit ...
    (microsoft.public.win2000.security)