Re: BITS 2.0 Install Fails - Permission problem

From: Jeff Roberts [MSFT] (jroberts_at_online.microsoft.com)
Date: 10/28/04 

Date: Wed, 27 Oct 2004 18:21:19 -0700

It sounds as though a domain policy is set that trumps your local policy. I
don't think that even a domain admin can override it by editing the local
user-rights policy...it would need to be done in the domain policy. 

-- 
This posting is provided "AS IS" with no warranties, and confers no rights.
"Amit" <Amit@discussions.microsoft.com> wrote in message 
news:703167D0-EDE0-4F30-A3B1-2CF73F5D142E@microsoft.com...
> My problem is also the same.
> I just opened up a brand new Dell computer out of the box.  Joined it to 
> the
> domain and then logged in as local admin and tried to do the 
> windowsupdate.
> And I get the same problem: Error Code: 8007F004  when installing the BITS
> 2.0 and HTTP5.1
>
> I have checked the local policy as you suggested and here is what I found:
> On # 5. Take ownership of files or other objects, local admin is not in
> there.  Instead I have domain\domain admins and the box is greyed out. 
> Can't
> do anything.  I logged in as domain admin thinking that I can add local 
> admin
> group.  But still no dice.
>
> Seems, many folks have this issue.  I will end up re-doing the OS, even
> though this is a brand new PC out of the box.
>
> Thanx
>
> A
>
>
> "Narayana Mahankali [MSFT]" wrote:
>
>> Please verify that your account has the following required permissions. 
>> This
>> can be verified by launching the "Local Security Settings" policy editor.
>> Type the following command to launch this editor:
>>
>>     secpol.msc
>>
>> Go to "SecPol.msc > Local Policies > User Rights Assignment"
>>
>> The following permissions are required:
>> 1. Back up files and directories
>> 2. Debug programs
>> 3. Restore files and directories
>> 4. Manage auditing and security log
>> 5. Take ownership of files or other objects
>>
>> If after enabling these permissions you still cannot install the update 
>> then
>> post the contents of the file %windir%\KB842773.log.
>>
>> -- 
>> Narayana Mahankali
>> Microsoft, BITS
>>
>> This posting is provided "As Is" with no warranties, and confers no 
>> rights.
>> Use of included script samples are subject to the terms specified at
>> http://www.microsoft.com/info/cpyright.htm
>>
>>
>> "Bits Friend" <bits_friend@hotmail.com> wrote in message
>> news:9b36214e.0409261556.5c1201a8@posting.google.com...
>> > Forwarding to the BITS newsgroup
>> > microsoft.public.windows.backgroundtransfer
>> >
>> > "Dave" <Dave@discussions.microsoft.com> wrote in message
>> > news:<957A95C1-3AA2-403B-B2A7-32F0EB458710@microsoft.com>...
>> >> Hi,
>> >>
>> >> Everytime I attempt to install KB842773 (BITS 2.0) update, I get the
>> >> error
>> >> that it fails and the error code 0x8007F004.
>> >>
>> >> SP2 also fails with a similar code (F004) and states that I don't have
>> >> permission to update the computer.
>> >>
>> >> I've used Windows update sucessfully in the past and my domain account 
>> >> is
>> >> in
>> >> the local administrators group.  Even the local administrator account
>> >> logged
>> >> on locally fails.
>> >>
>> >> Is my domain admin responsible, he claims he's not?  Is is some sort 
>> >> of
>> >> policy issue?  I can't find any reference to the 8007F004 error.
>> >>
>> >> Thanks
>>
>>
>>

Relevant Pages

  • Re: locking down XP with NTFS permissions
    ... I tried GP but it hid it from admin also. ... >Group Policy objects are designed to do this. ... GPOs are applied ... >permissions, you might use the registry keys associated ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How to make regular user a default admin for Computers underhisOU ?
    ... I redid the OU and groups from scratch and applied the "restriced groups" policy. ... And once they create and join their computers, they can do all the admin tasks fine. ... For changing the workstation name, for example, you must have domain admin rights or the group has to get delegated the right to change a workstation name, because it is a domain member. ... login as one of them I cannot do any Admin related tasks. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Securing Enterprise Policy from local admins
    ... Admin is admin. ... but it is just the fact that a local admin on the box ... >>Enterprise Policy Administration ...
    (microsoft.public.dotnet.security)
  • Re: Server Operator Role
    ... >domain admin and then keep in mind that a domain admin ... >Joe Richards Microsoft MVP Windows Server Directory ... >> have a number of users with Domain Admin permissions. ... the group cannot run the TS Policy. ...
    (microsoft.public.win2000.active_directory)
  • Re: Stand-alone (non-networked) computer - restrict one account but not another
    ... you can edit the policy when logged in as an admin and then deny the admin read permissions on %windir%\system32\GroupPolicy. ... the local policy won't apply to them because they can't read it. ... The danger is then that the policy may apply while you're in the middle of editing and depending on the settings, the admin account may be restricted to a point where they can no longer function. ... I want to lock down the User account to disable stuff like the Control ...
    (microsoft.public.win2000.group_policy)