Windows XP - updates fail with 8007F004

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Tim Trentham (ttrentham_at_hand.com)
Date: 12/06/04 

Date: Mon, 6 Dec 2004 12:05:01 -0600

I work in a company running a domain controller. All of the users access
their machines with their domain accounts. Most of the users workstations
are running Windows XP, some SP1 and some SP2. We push windows updates out
to our users with SUS. They all get the updates fine, but after then install
an update, they get a notification later for the same update again. Closer
examination of the windows update log and iuhist.xml shows that they're
getting an error during the update install, 8007F004, which, if I'm not
mistaken, translates to Insufficient Privilege. Sure enough, if we login to
that user's machine as a domain administrator and apply the patch, we don't
get the error. As far as I understand, these users should have local machine
administrator rights and should be able to apply the updates themselves.

What would cause an insufficent privilege error with Windows Update and a
domain user account? Is there are particular group policy or something that
needs to be set?

Thanks,

T.