Re: BITS 2.0 Install Fails - Permission problem

From: Jeff Roberts [MSFT] (jroberts_at_online.microsoft.com)
Date: 10/29/04


Date: Fri, 29 Oct 2004 16:11:51 -0700

According to KnowledgeBase article Q283252, the following user rights are
required for System Restore to work.

      . Manage auditing and security log
      . Take ownership of files or other objects
      . Shut down the system
      . Back up files and directories
      . Restore files and directories

I would recommend that you double-check your domain policy to be sure that
the proper users have these rights as well as the ones that Narayana listed.

Jeff

-- 
This posting is provided "AS IS" with no warranties, and confers no rights.
"Technocrat" <Technocrat@discussions.microsoft.com> wrote in message 
news:10D0EF96-CC4B-4A09-A85C-5EDB1187AEBE@microsoft.com...
>I have not made any changes to any domain policies prior to this problem
> occuring.
> This seems to be a fairly common problem now.  Has MS been able to 
> recreate
> it and develop the exact changes that need to be made to allow the 
> automatic
> updates to run?
>
> Also on a related note, we found that the our XP machines can no longer
> perform system restore citing insufficient security privleges.
>
> Thanx.
>
>
> "Jeff Roberts [MSFT]" wrote:
>
>> It sounds as though a domain policy is set that trumps your local policy. 
>> I
>> don't think that even a domain admin can override it by editing the local
>> user-rights policy...it would need to be done in the domain policy.
>>
>> -- 
>> This posting is provided "AS IS" with no warranties, and confers no 
>> rights.
>>
>> "Amit" <Amit@discussions.microsoft.com> wrote in message
>> news:703167D0-EDE0-4F30-A3B1-2CF73F5D142E@microsoft.com...
>> > My problem is also the same.
>> > I just opened up a brand new Dell computer out of the box.  Joined it 
>> > to
>> > the
>> > domain and then logged in as local admin and tried to do the
>> > windowsupdate.
>> > And I get the same problem: Error Code: 8007F004  when installing the 
>> > BITS
>> > 2.0 and HTTP5.1
>> >
>> > I have checked the local policy as you suggested and here is what I 
>> > found:
>> > On # 5. Take ownership of files or other objects, local admin is not in
>> > there.  Instead I have domain\domain admins and the box is greyed out.
>> > Can't
>> > do anything.  I logged in as domain admin thinking that I can add local
>> > admin
>> > group.  But still no dice.
>> >
>> > Seems, many folks have this issue.  I will end up re-doing the OS, even
>> > though this is a brand new PC out of the box.
>> >
>> > Thanx
>> >
>> > A
>> >
>> >
>> > "Narayana Mahankali [MSFT]" wrote:
>> >
>> >> Please verify that your account has the following required 
>> >> permissions.
>> >> This
>> >> can be verified by launching the "Local Security Settings" policy 
>> >> editor.
>> >> Type the following command to launch this editor:
>> >>
>> >>     secpol.msc
>> >>
>> >> Go to "SecPol.msc > Local Policies > User Rights Assignment"
>> >>
>> >> The following permissions are required:
>> >> 1. Back up files and directories
>> >> 2. Debug programs
>> >> 3. Restore files and directories
>> >> 4. Manage auditing and security log
>> >> 5. Take ownership of files or other objects
>> >>
>> >> If after enabling these permissions you still cannot install the 
>> >> update
>> >> then
>> >> post the contents of the file %windir%\KB842773.log.
>> >>
>> >> -- 
>> >> Narayana Mahankali
>> >> Microsoft, BITS
>> >>
>> >> This posting is provided "As Is" with no warranties, and confers no
>> >> rights.
>> >> Use of included script samples are subject to the terms specified at
>> >> http://www.microsoft.com/info/cpyright.htm
>> >>
>> >>
>> >> "Bits Friend" <bits_friend@hotmail.com> wrote in message
>> >> news:9b36214e.0409261556.5c1201a8@posting.google.com...
>> >> > Forwarding to the BITS newsgroup
>> >> > microsoft.public.windows.backgroundtransfer
>> >> >
>> >> > "Dave" <Dave@discussions.microsoft.com> wrote in message
>> >> > news:<957A95C1-3AA2-403B-B2A7-32F0EB458710@microsoft.com>...
>> >> >> Hi,
>> >> >>
>> >> >> Everytime I attempt to install KB842773 (BITS 2.0) update, I get 
>> >> >> the
>> >> >> error
>> >> >> that it fails and the error code 0x8007F004.
>> >> >>
>> >> >> SP2 also fails with a similar code (F004) and states that I don't 
>> >> >> have
>> >> >> permission to update the computer.
>> >> >>
>> >> >> I've used Windows update sucessfully in the past and my domain 
>> >> >> account
>> >> >> is
>> >> >> in
>> >> >> the local administrators group.  Even the local administrator 
>> >> >> account
>> >> >> logged
>> >> >> on locally fails.
>> >> >>
>> >> >> Is my domain admin responsible, he claims he's not?  Is is some 
>> >> >> sort
>> >> >> of
>> >> >> policy issue?  I can't find any reference to the 8007F004 error.
>> >> >>
>> >> >> Thanks
>> >>
>> >>
>> >>
>>
>>
>> 


Relevant Pages