Re: Administrators Account cannot install updates and programs (Administrator can)
From: John7 (NoSp_at_mm.com)
Date: Tue, 19 Jul 2005 23:18:54 +0200
Steven, thx for responding.
Solved a bad block in his paging file but this did not solve the issue
(could be the source tho).
Checked & OK: his account is member of Administrators (alsway been,
Not yet checked: his account is also member of groups with Deny settings.
Good suggestion. how do I turn on Auditing ?
I think I need to start from there while keeping your other suggestions in
"Steven L Umbach" <email@example.com> wrote in message
> More than likely the administrator account has a user right or permission
> that the administrators group does not which somebody or something may
> modified at one time. You can use Local Security Policy to see the user
> rights assignments. Also his user account could also be a member of a
> that has deny permissions/user right. So check the membership of his user
> account to see if it is a member of groups other than
> It may also help to enable auditing of user privilge for failure in Local
> Security Policy and then look in the securty log via Event Viewer to ses
> there are any failues after he tries and fails with his user account.
> SysInternals makes a couple of free tools called filemon and regmon that
> also should help as they will record when access has been denied to a
> registry key or a folder/file when they are being run when this happens. A
> more drastic resort would be to use the secedit command to restore
> settings bacl to defualt defined levels as shown in the KB article
> below. --- Steve
> http://www.sysinternals.com/ --- link to SysInternals
> "John7" <NoSp@mm.com> wrote in message
> > Hi,
> > A friend has an account (member of group Administrators) but cannot
> > install
> > Windows updates or programs.
> > They abort with message "errors occured, will be terminated, logbook
> > will be created" (no error codes),
> > but logbook has no such entries ? #$^&*
> > The Administrator itself can install updates and programs flawlessly.
> > Any clues how to fix?
> > TIA,
> > John7
> > System: AMD Athlon XP 2400+ 1GB, 120GB, Win2K + SP4 + all updates