Re: access to "manage auditing and security log"
From: MowGreen [MVP] (mowgreen_at_nowandzen.com)
Date: 08/28/05
- Next message: sweetjam: "computer is locked"
- Previous message: Sam Kline: "Re: global hkey_current_user"
- In reply to: Dave Cattapan: "access to "manage auditing and security log""
- Next in thread: Dave Cattapan: "Re: access to "manage auditing and security log""
- Reply: Dave Cattapan: "Re: access to "manage auditing and security log""
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sun, 28 Aug 2005 13:11:32 -0700
> I have many PC's running Win XP that connect to a AD domain with W2K3
> servers.
To facilitate updating Workstations :
Windows Server Update Services Product Overview
http://www.microsoft.com/windowsserversystem/updateservices/evaluation/overview.mspx
> but one PC was telling me that I didn't have permission to install updates.
Did the PC in question successfully update in the past ? If so, have you
scanned for malware ? Some malware variants will reset permissions or
damage system files resulting in a failure to install updates/patches.
Start, Run, type
regsvr32 initpki.dll
Enter
If that doesn't resolve the issue, check the WindowsUpdate.log for an
error code associated with the failed update installation. Then go to
the Windows Update (v6) Troubleshooter for a suggested resolution for
that specific error.
MowGreen [MVP 2003-2005]
===============
*-343-* FDNY
Never Forgotten
===============
Dave Cattapan wrote:
> I have many PC's running Win XP that connect to a AD domain with W2K3
> servers. Most run the Microsoft updates just fine, but one PC was telling me
> that I didn't have permission to install updates. This occured under either
> local or domain admin accounts. I looked in "local security settings" and
> determined that the only permissions to "manage auditing and security log"
> were for a group called "domain\Exchange Enterprise Servers." I was not
> allowed to add or change this setting. I worked around the problem by adding
> the domain admins to the "exchange enterprise servers" group in my domain.
> Now I can run the updates just fine on this PC. However, I'd really like to
> get the administrators group to have "manage auditing and security log"
> permissions. I'm worried that if I ever remove this computer from the
> domain, no one will be able to install updates.
>
> Any suggestions?
- Next message: sweetjam: "computer is locked"
- Previous message: Sam Kline: "Re: global hkey_current_user"
- In reply to: Dave Cattapan: "access to "manage auditing and security log""
- Next in thread: Dave Cattapan: "Re: access to "manage auditing and security log""
- Reply: Dave Cattapan: "Re: access to "manage auditing and security log""
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|