Cannot run updates/hot fixes

[Gavin]

We are having a problem updating our Windows 2000/XP workstations, whenever
we try to run the update we get an access denied error. The only way the
updates will run is if we use a domain admins account to run the update. Has
anyone seen this before or does anyone have any ideas on where to start
looking for what might be causing this problem. At this point in time any
new patch that MS releases cannot be updated on any workstation in the
domain.

Thanks
Gavin...

 

[Steven L Umbach]

The user trying to install the update needs to be a member of the local
administrators group of which the domain admins group is which is probably why it
works for that account. An alternative is to install the updates by schedule which
does not require local administrator intervention. You can also use the free Software
Update Services on a W2K/2003 Server on the network running IIS and use Group Policy
to configure the domain clients for Windows Updates. SUS allows you to download and
approve updates to your local SUS server and then have clients use it to get their
updates and service packs. See the links below for more details.--- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;328010
http://www.bris.ac.uk/is/services/computers/operatingsystems/sus/configuring.html
http://www.microsoft.com/windowsserversystem/sus/default.mspx