Re: Workaround for 0x8007045A (!)

From: Tony Vaughan (TonyVaughan_at_discussions.microsoft.com)
Date: 09/20/04 

Date: Mon, 20 Sep 2004 11:45:01 -0700

Hi Torgeir

We know that WU runs Ok on the administrator/local account of a SBS 2003
client machine but does not run on a domain user account of the same machine.

You say that you think none of this is relevant to the WU error at hand. Why
is that?

Do you know some thing we don't?

Surely the workaround suggests that there is something about a domain user
that prevents WU5 from operating correctly. This seems to me to mean that SBS
2003 must be part of the problem. The only way I can explain that would be in
the way that SBS 2003 implements Group Policy. Do you agree that this is part
of the problem and, if not, what do you think this suggests?

Tony

"Torgeir Bakken (MVP)" wrote:

> Tony Vaughan wrote:
>
> > Bye the way, I couldn't find a group user with
> > NT AUTHORITY\Interactive.
>
> In the "Select Users, Computers, or Groups" (when selecting what to add
> to the Administrators group), you need to select the local computer in
> "From this location" (and be sure that "Built-in security principals"
> are selected under object types to select from).
>
> > Shouldn't NT AUTHORITY\Authenticated Users have
> > been enough?
>
> That would give the same effect (for the admin part) as
> NT AUTHORITY\Interactive, but if you put that in the Administrators
> group on all computers you open up for cross network admin rights
> (remote access) that you avoid if using NT AUTHORITY\Interactive.
>
>
> But I would thing none of this is relevant for the WU error at hand.
>
>
> --
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/scriptcenter/default.mspx
>

Relevant Pages

  • Re: browse the network via VPN?
    ... Les Connor [SBS Community Member - SBS MVP] ... >>What do you mean by a "full domain logon?" ... > client corresponding to a valid domain user. ... > client machine does not match that user. ...
    (microsoft.public.windows.server.sbs)
  • Re: User type
    ... This does help Mike - thanks ... > If the computer is member of domain then you should use domain user ... > After you have this account and group created you can write a short script ... > administrator and make your users local administrators. ...
    (microsoft.public.windows.server.setup)
  • Re: desktop level support
    ... You can delegate any domain user the right to add workstations to the ... the Organizational Unit [NOT domain or you will add to administrators group ... Assuming your computers are SP4 you can user ...
    (microsoft.public.win2000.security)
  • Re: User rights
    ... This issue is with SBS automatically pulling the local user account into ... Will it still migrate that user up to SBS? ... are automatically Sharepoint Administrators. ... > to remove the Power Users group from the Sharepoint Administrators group. ...
    (microsoft.public.windows.server.sbs)
  • Re: Remove domain user from local administrators group
    ... Remove domain user from local administrators group ... I would think that a login script containing the net localgroup directive ...
    (Focus-Microsoft)