Re: Possible security issue??

Does it work when the built in local administrator account is used which is
NOT a domain account? Are there and errors/warnings in the logs that you can
view via Event Viewer that may indicate a problem with the domain such as
userenv errors? Does running the support tool netdiag on the domain
controller and client computer pass with flying colors showing no major
errors or warnings? Did you verify that the client computer is using ONLY
domain controllers as their preferred/alternate DNS servers in tcp/ip
properties as shown by ipconfig /all and that the domain controller can be
pinged by name and IP address from the client computer? What error messages
do the users get if any? -- Steve


"Jeremy" <Jeremy@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:4E7DF6E5-9645-4724-BB63-E71100BAB79D@xxxxxxxxxxxxxxxx
No it does not. Not even if the user is a Domain Admin *shrug*

"Steven L Umbach" wrote:

Does it work when the users domain account is added to the local
administrators group? It should though I would not consider that an ideal
solution. You can configure updates to be downloaded/installed
automatically
so that the user does not need to be a local administrator. --- Steve


"Jeremy" <Jeremy@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:17CC7491-FB25-4C6C-9775-B4108825F71A@xxxxxxxxxxxxxxxx
I have a client situation where no one seems to be able to install
windows
updates on their PC's that are joined to the domain. They can download
them
just fine but they fail during install. The only way to install them is
to
log in using the administrator account to the domain.
One user even has domain admin rights but he's still unable to install
the
updates. I thought it might be a policy issue and others are saying
internal
DNS. I have searched and searched but I'm unable to find anything to go
with
that will resolve this issue.
At first I thought it might have been an issue with a users machine but
when
I tried to run system restore under his credentials (local admin,
domain
admin) I got a message that he didn't have the appropriate rights to
perform
this action. I could only run it from the administrators (domain)
account.

The PDC is a 2000 server..

Thank you in advance for any help.

Jeremy Johnston






.

Relevant Pages

  • Re: Renaming the local Administrator account on Windows XP Pro
    ... >> the local Administrator account with a randomly generated name. ... >> This will generate a random strong password for the local Administrator ... > The script below will generate a 15 characters long random user name ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Remove Administrator Account from Administrators Group
    ... renaming the administrator account is not really ... rename the local Administrator account. ... A major element of our group policy is that it ...
    (microsoft.public.windows.group_policy)
  • Re: Log on problems on Domain workstations
    ... I have tried a blank password on the administrator account both in safe ... mode and in normal mode. ... evidently they set the local administrator password to the same as the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: OS 10 Server with Windows Workstations Domain Administrator
    ... The server is also acting as a file server and there are no ... > onto the windows PC's with the domain administrator account (or any account ... Try logging in to the local Administrator account of each machine and ...
    (microsoft.public.macintosh.general)
  • Logging in as Administrator automatically
    ... it still automatically logs in without ... prompting for a password to the Administrator account and ... have the administrator account disabled but am still ...
    (microsoft.public.windowsxp.security_admin)
Loading