Windows Update + Active Directory/Group Policy == Pain



Ahoy (sorry for cross-posting to this usenet group too, but I'm rather 
desparate for a responce)

BTW, I'm not using WSUS/MOM/SUS/Whatever.

This is just a vanilla Windows 2003 Domain with 3 member computers, 1 DC,
and 1 member server. (the member server is actually a WS2003 installation
running under VirtualPC on one of the member computers)

On all the computers except the domain controller Windows Update/Microsoft
Update both fail with the error code "0x8007F004". The error-message "You do
not have sufficient permission to update Windows XP" is also displayed
whenever I try to run patch programs manually.

This happens regardless of if I'm using the computer as the domain
administrator, as a member of the administrators group, or as a local
administrator.

I traced the problem back to my Active Directory installation, since this
only affects domain computers.

I've made a thread about this on a forum where there's some more additional
information and some screenshots:
http://channel9.msdn.com/ShowPost.aspx?PostID=159840

Any ideas? 


.



Relevant Pages

  • Re: OU Administrator setup/Admin Shares
    ... My mistake on the Windows 2000 PC, it was not a member of my test OU. ... The $ shares are shared out to local administrators ... Create the gpo in the ou where the Computers reside, ...
    (microsoft.public.windows.server.active_directory)
  • Windows Update + Active Directory/Group Policy == Pain
    ... This is just a vanilla Windows 2003 Domain with 3 member computers, 1 DC, ... (the member server is actually a WS2003 installation ... On all the computers except the domain controller Windows Update/Microsoft ...
    (microsoft.public.windows.server.active_directory)
  • Workgroup not Accessible
    ... I am having issues with a couple windows 2000 computers ... I just want them to be a member of the workgroup. ...
    (microsoft.public.win2000.networking)
  • Login problems
    ... Currently I'm working for a ministry in which computers ... are donated to the teen department. ... I have a Windows XP ... Professional that was a member of a domain. ...
    (microsoft.public.windowsxp.security_admin)
  • Help with 070-217
    ... The network contains 25,000 computers. ... single Windows 2000 domain named research.contoso.com. ... Server computers that are configured as domain controllers. ...
    (microsoft.public.cert.exam.mcse)