Hi,


A friend has an account (member of group Administrators) but cannot install
Windows updates or programs.
They abort with message "errors occured, will be terminated, logbook entry
will be created" (no error codes),
but logbook has no such entries ? #$^&*

The Administrator itself can install updates and programs flawlessly.

Any clues how to fix?

TIA,
John7


System: AMD Athlon XP 2400+ 1GB, 120GB, Win2K + SP4 + all updates

More than likely the administrator account has a user right or permission
that the administrators group does not which somebody or something may have
modified at one time. You can use Local Security Policy to see the user
rights assignments. Also his user account could also be a member of a group
that has deny permissions/user right. So check the membership of his user
account to see if it is a member of groups other than users/administrators.
It may also help to enable auditing of user privilge for failure in Local
Security Policy and then look in the securty log via Event Viewer to ses if
there are any failues after he tries and fails with his user account.
SysInternals makes a couple of free tools called filemon and regmon that
also should help as they will record when access has been denied to a
registry key or a folder/file when they are being run when this happens. A
more drastic resort would be to use the secedit command to restore security
settings bacl to defualt defined levels as shown in the KB article
below. --- Steve

http://support.microsoft.com/default...b;EN-US;313222
http://www.sysinternals.com/ --- link to SysInternals

"John7" <(E-Mail Removed)> wrote in message
news:dbirkd$eom$(E-Mail Removed)...
> Hi,
>
>
> A friend has an account (member of group Administrators) but cannot
> install
> Windows updates or programs.
> They abort with message "errors occured, will be terminated, logbook entry
> will be created" (no error codes),
> but logbook has no such entries ? #$^&*
>
> The Administrator itself can install updates and programs flawlessly.
>
> Any clues how to fix?
>
> TIA,
> John7
>
>
> System: AMD Athlon XP 2400+ 1GB, 120GB, Win2K + SP4 + all updates
>
>

Steven, thx for responding.

Solved a bad block in his paging file but this did not solve the issue
(could be the source tho).

Checked & OK: his account is member of Administrators (alsway been,
nevertheless verified).
Not yet checked: his account is also member of groups with Deny settings.

Good suggestion. how do I turn on Auditing ?
I think I need to start from there while keeping your other suggestions in
mind.


John7



"Steven L Umbach" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> More than likely the administrator account has a user right or permission
> that the administrators group does not which somebody or something may
have
> modified at one time. You can use Local Security Policy to see the user
> rights assignments. Also his user account could also be a member of a
group
> that has deny permissions/user right. So check the membership of his user
> account to see if it is a member of groups other than
users/administrators.
> It may also help to enable auditing of user privilge for failure in Local
> Security Policy and then look in the securty log via Event Viewer to ses
if
> there are any failues after he tries and fails with his user account.
> SysInternals makes a couple of free tools called filemon and regmon that
> also should help as they will record when access has been denied to a
> registry key or a folder/file when they are being run when this happens. A
> more drastic resort would be to use the secedit command to restore
security
> settings bacl to defualt defined levels as shown in the KB article
> below. --- Steve
>
> http://support.microsoft.com/default...b;EN-US;313222
> http://www.sysinternals.com/ --- link to SysInternals
>
> "John7" <(E-Mail Removed)> wrote in message
> news:dbirkd$eom$(E-Mail Removed)...
> > Hi,
> >
> >
> > A friend has an account (member of group Administrators) but cannot
> > install
> > Windows updates or programs.
> > They abort with message "errors occured, will be terminated, logbook
entry
> > will be created" (no error codes),
> > but logbook has no such entries ? #$^&*
> >
> > The Administrator itself can install updates and programs flawlessly.
> >
> > Any clues how to fix?
> >
> > TIA,
> > John7
> >
> >
> > System: AMD Athlon XP 2400+ 1GB, 120GB, Win2K + SP4 + all updates
> >
> >
>
>