You do not have permission to update Windows 2000 (or Windows XP)

[Robert Bateman]

You do not have permission to update Windows 2000 (or Windows XP)

I receive this error message whenever I try to install these updates:
KB839643, KB839645, KB840315, KB841872, KB841873 & KB842526 on computers in
my domain. I have tried installing them as the domain administrator and
also as a user with administrative priveleges. The result is the same
whether I download the updates from Windows Update or our SUS server. All
other updates have installed without any problem. I know from this
newsgroup that this problem is affecting others as well, but nobody seems to
have any answers, yet.

Robert

[Robert Bateman]

I'm posting this again, because my original post seems to have disappeared
from the server and I still have haven't received any replies.

[Dave Clark]

I am seeing this as well on 3 of those listed (plus 3
others). Very strange problem.

It seems to be occuring on 2 servers that were upgraded
from 2000 (not that has anything to do with it).

I got it to work fine on one of them. I logged in as the
local administrator (it is a member server in an AD
domain), and ran the 823353 one manually, and it worked.
I then ran windows update again and the rest of my 6
installed.

I tried this on my second server and that did not work at
all. All 6 are still failing with the permissions issue,
but I am logged in as the LOCAL administrator.

Very weird...

>.
>

[Mark Brown[MSFT]]

From: "Robert Bateman" <robert....@kothes.com.au>
Subject: You do not have permission to update Windows 2000 (or Windows XP)
Date: Wed, 4 Aug 2004 16:54:12 +1000

Robert

Hi Robert,

The updates:
KB839643 MS04-016: Vulnerability in DirectPlay could allow denial of service
KB839645 A vulnerability in Windows Shell could allow remote code execution
KB840315 Vulnerability in HTML Help could allow code execution
KB841872 A vulnerability in POSIX could allow code execution
KB841873 A vulnerability in Task Scheduler could allow code execution
KB842526 A vulnerability in Utility Manager could allow code execution

On these updates what is your method for deploying these ?
Once we establish the method then we can findout why this is happening.

Please let us know.
Thanks

~~ Mark Brown ~~
~ Performance Support Specialist,
~ Microsoft Enterprise Platforms Support
~ This posting is provided "AS IS" with no warranties, and confers no
rights.
~ Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
~ Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.

[Adeel]

i got the same error

[MowGreen [MVP]]

Adeel,

Please read this and then repost your issue :

" Getting Your Post Noticed -- and Answered "
http://www.microsoft.com/presspass/features/2001/Mar01/Mar27pmvp.asp

MowGreen [MVP]
===============
*-343-* FDNY
Never Forgotten
===============

[Jas]

I initially had the same problem and discovered it was a group policy on the
DOMAIN CONTROLLER that was the problem.

It seems Exchange Server changed permissions on the "Manage Auditing and
Security Log" policy located under Computer configuration - Windows settings
- Security settings - Local policies - User rights assignments. If you
don't have exchange on your network, you may still want to check this policy
setting

It added Exchange Enterprise Servers to the policy, but there is no
Administrator permissions set. Naturally, all the workstations on the domain
were picking up this policy and could not be overidden at the workstation.

I added "Administrators" to the permissions and forced a policy refresh on
the workstations (you will need to reboot after this).

Once i logged on to the workstation with admin rights i could complete all
my updates with no problem and it fixed a problem i was having with the
system restore not functioning due to permission errors.

I am not sure why or when the permissions were changed, but it seems to be a
common problem.