Re: The following updates were not installed


"db" <db@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:7E3F762B-8B53-4F8F-AEA4-13C72378A1EF@xxxxxxxxxxxxxxxx
>
>
> "Patti MacLeod" wrote:
>
> > Hi db,
> >
> > See if the information in this MSKB article helps you to resolve the
> > problem:
> >
> > The user rights that are required by Update.exe
> > http://support.microsoft.com/?kbid=888791
> >
> >
> >
> > Regards,
> >
> > --
> > Patti MacLeod
> > Microsoft MVP - Windows Shell/User
> >
> > "db" <db@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> > news:D3E27A34-A84A-4FDF-8DFB-90D4D929450B@xxxxxxxxxxxxxxxx
> > > I am trying to update a Windows 2000 Server and receive the following
> > message:
> > >
> > > The following updates were not installed:
> > >
> > > -- Update for Background INtelligent Transfer Service (BITS) 2.0 and
> > WinHTTP
> > > 5.1 (K842773)
> > >
> > > --- Microsoft Windows INstaller 3.1
> > >
> > > This server is currently at SP 4 and I have not udated it since May
2004.
> > I
> > > tried to install the updates manually after downloading them put then
I
> > get
> > > the message:
> > >
> > > "You do not have permission to update Windows 2000" ---- I am logged
in as
> > > Administrator of this local machine.
> > >
> > > Please help.
> >
> >
> > Patti -
>
> I found the update packages do use Update.exe and after reviewing the user
> rights required by Update.exe on the stand alone server (as discussed in
the
> KB article) I found one in which the local administrator did not have
> 'Effective Rights' ---- that the Domain-level policy setting overrided
local
> policy settings.
>
> The specific User Right is: Manage Auditing and Security Log
>
> When I add the (local) Administrator to this User Right it still does not
> change the Effective Rights'
>
> The only thing I can figure is when this standalone server was logged onto
> the domain it picked up this setting. But since it is now only logged on
> locally, how do I change this effective right setting so that the (local)
> Administrator has this 'Effective Right'. Currently I have a group called
> Domain Admins that is a member of the Administrators group on the local
> server.
>
> How can I make the (local) Adminstrator have all 'Effective Rights'
required
> and not the 'domain-level settings'?
>
> Thank you for any help you can provide.
>
>

I'm afraid that I won't be able to provide much help for that, as I'm not
really well-versed in Domain settings. I do know, as you probably do, that
Domain policy settings override Local policy settings, and that's why it's
defaulting to the "Effective Rights". I think that you can change that
computer's membership from Domain back to Workgroup, but I would think that
you would have to log on as a Domain Admin in order to do that (again, I
could be wrong, and perhaps you can do this from the Local Admin account).
Although I would think that the Local Admin account that you set up would
still work to log onto the computer after having changed from Domain to
Workgroup (also thinking that any Domain Admin accounts and password
information would be "erased") you might want to read up on changing from
Domain to Workgroup before performing that action. Of course, if you're
planning on rejoining the computer to the Domain, I wouldn't change the
membership to Workgroup and risk losing the Domain Admin info., you may have
to look into logging in as Domain Admin and giving the Local Admin the
needed rights via the Domain's version of the Group Policy Editor (if there
is such a thing.........I know, I'm really showing my ignorance here <g>).

If you successfully change from Domain to Workgroup, then I believe that you
should be able to give the Local Administrator rights to Manage Auditing and
Security Log.


Regards,

--
Patti MacLeod
Microsoft MVP - Windows Shell/User


.

Relevant Pages

  • Re: Windows Task Scheduler looses account credentials data
    ... I double-checked the settings you pointed and found my user is a domain ... administrator and has all these rights to logon. ... User Rights Assignments ... Confirm that the administrator is not a part of the rights: "Deny logon ...
    (microsoft.public.windowsxp.general)
  • Re: HELP!
    ... > because you do not have the rights to view this area. ... > contact the site administrator. ... > to get to the Users and Site Groups settings but all the other settings ...
    (microsoft.public.sharepoint.portalserver)
  • Re: Adding Local Administrators Using Group Policy
    ... Howdy AndyG! ... I created the administrator group in 'Restricted Groups' under Computer Configuration>Security Settings. ... Although it worked and pushed the Domain Admin group as an local administrator, it also removed any IDs that were present. ...
    (microsoft.public.windows.group_policy)
  • Re: Read-Only Domain Admin
    ... but once an administrator they have Full Rights over any objects ... MVP - Directory Services ... This posting is provided "AS IS" with no warranties, and confers no rights. ... I'm looking to create a read-only Domain Admin account. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Quickbooks
    ... Quickbooks requires Local Administrator Rights (not Domain Admin Rights)... ...
    (microsoft.public.windows.server.sbs)