Administrators Account cannot install updates and programs (Administrator can)

  • Thread starter Thread starter John7
  • Start date Start date
J

John7

Hi,


A friend has an account (member of group Administrators) but cannot install
Windows updates or programs.
They abort with message "errors occured, will be terminated, logbook entry
will be created" (no error codes),
but logbook has no such entries ? #$^&*

The Administrator itself can install updates and programs flawlessly.

Any clues how to fix?

TIA,
John7


System: AMD Athlon XP 2400+ 1GB, 120GB, Win2K + SP4 + all updates
 
More than likely the administrator account has a user right or permission
that the administrators group does not which somebody or something may have
modified at one time. You can use Local Security Policy to see the user
rights assignments. Also his user account could also be a member of a group
that has deny permissions/user right. So check the membership of his user
account to see if it is a member of groups other than users/administrators.
It may also help to enable auditing of user privilge for failure in Local
Security Policy and then look in the securty log via Event Viewer to ses if
there are any failues after he tries and fails with his user account.
SysInternals makes a couple of free tools called filemon and regmon that
also should help as they will record when access has been denied to a
registry key or a folder/file when they are being run when this happens. A
more drastic resort would be to use the secedit command to restore security
settings bacl to defualt defined levels as shown in the KB article
below. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;EN-US;313222
http://www.sysinternals.com/ --- link to SysInternals
 
Steven, thx for responding.

Solved a bad block in his paging file but this did not solve the issue
(could be the source tho).

Checked & OK: his account is member of Administrators (alsway been,
nevertheless verified).
Not yet checked: his account is also member of groups with Deny settings.

Good suggestion. how do I turn on Auditing ?
I think I need to start from there while keeping your other suggestions in
mind.


John7
 
Back
Top