Re: access to "manage auditing and security log"

From: MowGreen [MVP] (mowgreen_at_nowandzen.com)
Date: 08/28/05


Date: Sun, 28 Aug 2005 13:11:32 -0700


> I have many PC's running Win XP that connect to a AD domain with W2K3
> servers.

To facilitate updating Workstations :

Windows Server Update Services Product Overview
http://www.microsoft.com/windowsserversystem/updateservices/evaluation/overview.mspx

> but one PC was telling me that I didn't have permission to install updates.

Did the PC in question successfully update in the past ? If so, have you
scanned for malware ? Some malware variants will reset permissions or
damage system files resulting in a failure to install updates/patches.

Start, Run, type
regsvr32 initpki.dll
Enter

If that doesn't resolve the issue, check the WindowsUpdate.log for an
error code associated with the failed update installation. Then go to
the Windows Update (v6) Troubleshooter for a suggested resolution for
that specific error.

MowGreen [MVP 2003-2005]
===============
  *-343-* FDNY
Never Forgotten
===============

Dave Cattapan wrote:

> I have many PC's running Win XP that connect to a AD domain with W2K3
> servers. Most run the Microsoft updates just fine, but one PC was telling me
> that I didn't have permission to install updates. This occured under either
> local or domain admin accounts. I looked in "local security settings" and
> determined that the only permissions to "manage auditing and security log"
> were for a group called "domain\Exchange Enterprise Servers." I was not
> allowed to add or change this setting. I worked around the problem by adding
> the domain admins to the "exchange enterprise servers" group in my domain.
> Now I can run the updates just fine on this PC. However, I'd really like to
> get the administrators group to have "manage auditing and security log"
> permissions. I'm worried that if I ever remove this computer from the
> domain, no one will be able to install updates.
>
> Any suggestions?



Relevant Pages

  • Re: Error "The system cannot find the file specified" on files
    ... I will see if my customer can do this for me as I cannot easily get physical ... both of these servers are domain controllers. ... command line utilities and GUI tools, tried to set permissions. ... Security tab in Windows Explorer doesn't appear. ...
    (microsoft.public.windows.file_system)
  • Re: Cant Mount Public Store
    ... Edit to the Exchange Domain Servers group to the servers that own the public ... This sounds like a permissions problem. ...
    (microsoft.public.exchange.setup)
  • Cant Mount the Public Store
    ... Edit to the Exchange Domain Servers group to the servers that own the public ... This sounds like a permissions problem. ...
    (microsoft.public.exchange.admin)
  • Re: What built in group will allow users to restart services on a
    ... You need to either use a utility like NTrights from the reskit, ... > Is ther another place to add permissions for them. ... >> large farms of servers needing this change. ... >>> We have a help desk that from time to time needs access to restart ...
    (microsoft.public.win2000.security)
  • Re: Testing configurations
    ... Let say you are using shares. ... Read" then Any user will have read permissions while if DC2 share only has ... > Users are created on both servers. ... >> Microsoft MVP - Windows Security ...
    (microsoft.public.windows.server.networking)

Loading