G
Guest
I have many PC's running Win XP that connect to a AD domain with W2K3
servers. Most run the Microsoft updates just fine, but one PC was telling me
that I didn't have permission to install updates. This occured under either
local or domain admin accounts. I looked in "local security settings" and
determined that the only permissions to "manage auditing and security log"
were for a group called "domain\Exchange Enterprise Servers." I was not
allowed to add or change this setting. I worked around the problem by adding
the domain admins to the "exchange enterprise servers" group in my domain.
Now I can run the updates just fine on this PC. However, I'd really like to
get the administrators group to have "manage auditing and security log"
permissions. I'm worried that if I ever remove this computer from the
domain, no one will be able to install updates.
Any suggestions?
servers. Most run the Microsoft updates just fine, but one PC was telling me
that I didn't have permission to install updates. This occured under either
local or domain admin accounts. I looked in "local security settings" and
determined that the only permissions to "manage auditing and security log"
were for a group called "domain\Exchange Enterprise Servers." I was not
allowed to add or change this setting. I worked around the problem by adding
the domain admins to the "exchange enterprise servers" group in my domain.
Now I can run the updates just fine on this PC. However, I'd really like to
get the administrators group to have "manage auditing and security log"
permissions. I'm worried that if I ever remove this computer from the
domain, no one will be able to install updates.
Any suggestions?