RE: You do not have permission to update Windows 2000 (or Windows XP)

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Jas (Jas_at_discussions.microsoft.com)
Date: 11/04/04 

Date: Thu, 4 Nov 2004 09:12:02 -0800

I initially had the same problem and discovered it was a group policy on the
DOMAIN CONTROLLER that was the problem.

It seems Exchange Server changed permissions on the "Manage Auditing and
Security Log" policy located under Computer configuration - Windows settings
- Security settings - Local policies - User rights assignments. If you
don't have exchange on your network, you may still want to check this policy
setting

It added Exchange Enterprise Servers to the policy, but there is no
Administrator permissions set. Naturally, all the workstations on the domain
were picking up this policy and could not be overidden at the workstation.

I added "Administrators" to the permissions and forced a policy refresh on
the workstations (you will need to reboot after this).

Once i logged on to the workstation with admin rights i could complete all
my updates with no problem and it fixed a problem i was having with the
system restore not functioning due to permission errors.

I am not sure why or when the permissions were changed, but it seems to be a
common problem.

"Robert Bateman" wrote:

> I'm posting this again, because my original post seems to have disappeared
> from the server and I still have haven't received any replies.
>
> "You do not have permission to update Windows 2000 (or Windows XP)"
>
> I receive this error message whenever I try to install these updates:
> KB839643, KB839645, KB840315, KB841872, KB841873 & KB842526 on computers in
> my domain. I have tried installing them as the domain administrator and
> also as a user with administrative priveleges. The result is the same
> whether I download the updates from Windows Update or our SUS server. All
> other updates have installed without any problem. I know from this
> newsgroup that this problem is affecting others as well, but nobody seems to
> have any answers, yet.
>
> Robert
>
>
>

Relevant Pages

  • Re: Trouble with Win2003 Folder Redirection Policy
    ... giving NTFS permissions to that group. ... From what information you've given me the policy is correct as long as ... The user's home folder in the profile section of the AD has been ... updated to the new server as well. ...
    (microsoft.public.windows.server.general)
  • Re: Programmatically Altered IIS Security?
    ... I now have the web server running with ... accidentally turned off the automatic updates. ... > inclined to suspect directory/file level permissions problems. ... > had been assigned read only permission to the wwwroot file system. ...
    (microsoft.public.inetserver.iis.security)
  • Re: SUS not updating on clients and servers
    ... be sure the SUS policy scope is directed towards the ... >>computers for your Automatic Updates settings. ... >>server by fully qualified domain name. ...
    (microsoft.public.windows.group_policy)
  • Re: Give yourself SQL Administrator rights
    ... Even if you change the default settings to allow updates to ... permissions to this user on sysxlogins. ... Only members of the server roles sysadmin and serveradmin ... SQL Server DBAs may wish to disable 'allow ...
    (microsoft.public.sqlserver.security)
  • Re: C#.NET app to run on Win 2003 from another Win2003 on the local net?
    ... Here is the exception dump: ... Policy Exception: Required permissions cannot be acquired. ... Win2003 (file server) doesn't even have the framework installed at all. ...
    (microsoft.public.dotnet.security)