RE: 0x8007f004

>From the local machine type the following command to launch this editor:
secpol.msc
Go to "SecPol.msc > Local Policies > User Rights Assignment"
Make sure the account used for updating have the privileges stated.
The following permissions are required:
1. Back up files and directories
2. Debug programs
3. Restore files and directories
4. Manage auditing and security log
5. Take ownership of files or other objects
Note that other than local security policy, the setting can also be affected
by domain policy.
The problem could be with the Group Policy at the domain level.
On the DC, if "Manage auditing and security log" has permissions for Domain
Administrator only, remove it.


"Drew" wrote:

> I have a hand full of computers ranging from Win2k sp4 to Windows XP SP1 that
> will not install any updates from WSUS. It seems to me that its like the user
> isnt being treated as a Administrator when i have enabled that feature via
> GP. Is there a minimum requirement for that to work that i might not be aware
> of? I am receiving the following. If anyone can assist i would greatly
> appreciate it. Attached is a sample of the Windowsupdate.txt
>
> AU ## START ## AU: Install updates
> AU #########
> AU # Initiating manual install
> AU # Approved updates = 2
> AU <<## SUBMITTED ## AU: Install updates / installing updates [CallId =
> {5465FC6C-892B-4503-B230-645012BAFF6F}]
> Agent *************
> Agent ** START ** Agent: Installing updates [CallerId = AutomaticUpdates]
> Agent *********
> Agent * Updates to install = 2
> Agent * Title = <NULL>
> Agent * UpdateId = {D3AC165E-D7C4-4BDF-83F0-E249ECBE873B}.101
> Agent * Bundles 1 updates:
> Agent * {AE59C5D5-42CA-4290-8FD1-D2DF55AB1FCD}.101
> Agent * Title = <NULL>
> Agent * UpdateId = {B166A6A9-398B-4C81-B8DB-2043CF0672A1}.103
> Agent * Bundles 1 updates:
> Agent * {F2FCA9BF-05AD-460A-977C-355CE5734118}.102
> Handler Attempting to create remote handler process as CHELSEA\sdworkin in
> session 0
> DnldMgr Preparing update for install, updateId =
> {AE59C5D5-42CA-4290-8FD1-D2DF55AB1FCD}.101.
> Misc =========== Logging initialized (build: 5.8.0.2469, tz: -0400)
> ===========
> Misc = Process: C:\WINDOWS\System32\wuauclt.exe
> Misc = Module: C:\WINDOWS\System32\wuaueng.dll
> Handler :::::::::::::
> Handler :: START :: Handler: Windows Patch Install
> Handler :::::::::
> Handler : Updates to install = 1
> Handler : Installing update {AE59C5D5-42CA-4290-8FD1-D2DF55AB1FCD}.101
> Handler Installing with parameters=-q -z -er,
> sandbox=C:\WINDOWS\SoftwareDistribution\Download\126638ad80a740243aeee66683d803a7.
> Handler Install completed with 0x8007f004.
> Handler FATAL: UH: 0x8007f004: InstallOrUninstallThread failed
> Handler : WARNING: Install completed: result type = 0x0, installer error =
> True, error = 0x8007f004, disabled until reboot = No, reboot required = No
> Handler FATAL: UH: 0x8024200b: HandleSingleUpdate failed
> Handler :::::::::
> Handler :: END :: Handler: Windows Patch Install
> Handler :::::::::::::
> AU >>## RESUMED ## AU: Installing update [UpdateId =
> {D3AC165E-D7C4-4BDF-83F0-E249ECBE873B}]
> AU # WARNING: Install failed, error = 0x8007F004
> DnldMgr WARNING: Preparing update for install, updateId =
> {F2FCA9BF-05AD-460A-977C-355CE5734118}.102 (using payload from revision 100).
> Handler :::::::::::::
> Handler :: START :: Handler: Windows Patch Install
> Handler :::::::::
> Handler : Updates to install = 1
> Handler : Installing update {F2FCA9BF-05AD-460A-977C-355CE5734118}.102
> Handler Installing with parameters=/norestart /quiet -er,
> sandbox=C:\WINDOWS\SoftwareDistribution\Download\85edc023096735764b42f7ffe25be521.
> Handler Install completed with 0x8007f004.
> Handler FATAL: UH: 0x8007f004: InstallOrUninstallThread failed
> Handler : WARNING: Install completed: result type = 0x0, installer error =
> True, error = 0x8007f004, disabled until reboot = No, reboot required = No
> Handler FATAL: UH: 0x8024200b: HandleSingleUpdate failed
> Handler :::::::::
> Handler :: END :: Handler: Windows Patch Install
> Handler :::::::::::::
> AU >>## RESUMED ## AU: Installing update [UpdateId =
> {B166A6A9-398B-4C81-B8DB-2043CF0672A1}]
> AU # WARNING: Install failed, error = 0x8007F004
> Agent *********
> Agent ** END ** Agent: Installing updates [CallerId = AutomaticUpdates]
> Agent *************
> AU # Install call complete for all calls, reboot required = No
> AU #########
> AU ## END ## AU: Installing updates [CallId =
> {5465FC6C-892B-4503-B230-645012BAFF6F}]
>
>
>
>
.

Relevant Pages

  • Re: Access to Network and Dial-Up Connections blocked
    ... John John wrote: ... if a NoPropertiesMyComputer policy exists: ... I re-enabled Remove Network Connection from ... If this is a permissions issue check and make sure that you have ...
    (microsoft.public.win2000.general)
  • Re: Automated logoff using Winexit.scr
    ... New OU - New Policy ... Settings: Configure this key then Propogate inheritable permissions to ... Permissions granted: Authenticated Users: Read/Special ... test GPO linked to it trying to accomplish that and move a couple computers ...
    (microsoft.public.windows.group_policy)
  • Re: Disappearing .doc files
    ... should appear in security log of machine sharing out the storage. ... unauthorized attempts to change file permissions. ... However when those permissions are reinstated the files disappear. ...
    (microsoft.public.windows.server.security)
  • Re: Trouble with Win2003 Folder Redirection Policy
    ... giving NTFS permissions to that group. ... From what information you've given me the policy is correct as long as ... The user's home folder in the profile section of the AD has been ... updated to the new server as well. ...
    (microsoft.public.windows.server.general)
  • Re: USERENV error - Group Policy
    ... However, as per instructions, I've set these permissions correctly. ... policy object in AD. ... folder and GPO, returning the security to normal settings, did another GP ... -Domain controllers have the read and apply rights to the Domain Controllers ...
    (microsoft.public.windows.server.active_directory)