Re: Administrators Account cannot install updates and programs (Administrator can)

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 07/19/05 

Date: Tue, 19 Jul 2005 15:53:24 -0500

More than likely the administrator account has a user right or permission
that the administrators group does not which somebody or something may have
modified at one time. You can use Local Security Policy to see the user
rights assignments. Also his user account could also be a member of a group
that has deny permissions/user right. So check the membership of his user
account to see if it is a member of groups other than users/administrators.
It may also help to enable auditing of user privilge for failure in Local
Security Policy and then look in the securty log via Event Viewer to ses if
there are any failues after he tries and fails with his user account.
SysInternals makes a couple of free tools called filemon and regmon that
also should help as they will record when access has been denied to a
registry key or a folder/file when they are being run when this happens. A
more drastic resort would be to use the secedit command to restore security
settings bacl to defualt defined levels as shown in the KB article
below. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;EN-US;313222
http://www.sysinternals.com/ --- link to SysInternals

"John7" <NoSp@mm.com> wrote in message
news:dbirkd$eom$1@news6.zwoll1.ov.home.nl...
> Hi,
>
>
> A friend has an account (member of group Administrators) but cannot
> install
> Windows updates or programs.
> They abort with message "errors occured, will be terminated, logbook entry
> will be created" (no error codes),
> but logbook has no such entries ? #$^&*
>
> The Administrator itself can install updates and programs flawlessly.
>
> Any clues how to fix?
>
> TIA,
> John7
>
>
> System: AMD Athlon XP 2400+ 1GB, 120GB, Win2K + SP4 + all updates
>
>

Relevant Pages

  • Re: Login as local admin
    ... So if i basically ensure that my domain administrator account is a member of ... the schema admins, and enterprise admins, and login using these credentials, ... The article does not reference "local" administrator (as far as I ... If you choose to use an account other than the built-in administrator ...
    (microsoft.public.windows.server.sbs)
  • RE: OWA Exchange 2007 - Client Access
    ... Add User A account to the list. ... Highlight User A account and assign the Send As and Receive As permission ... If a user account is a member of one of these administrative groups because ... 2.Please capture the screenshot of OWA logon when the user keeps getting ...
    (microsoft.public.exchange.connectivity)
  • Re: Windows Service - Event Log
    ... I didn't say the Administrator account. ... Administrators group on the local machine." ... I didn't advocate using a member of the Administrator's group; ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Setting a password on an AD account...
    ... I assume it's running in a restricted account right? ... You don't use SSL to bind, and as this runs from a server which is not a domain member (a ... this one fails when the current user is not an administrator on the DC. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Event 1202 Warnings after Renaming Administrator Acct on SBS2003
    ... policy to rename the account although it is not really necessary or useful. ... Did I check Group Policies for references to the Administrator ... Failed to perform redirection of folder Desktop. ...
    (microsoft.public.windows.server.general)