MS Update - Admin Only

[ClareOldie]

Whenever I try to do an update the MS page tells me I must be an
administrator.
I am - no one else uses this computer.
What setting might I have missed that would cause this response?
Thanks.
Seán

 

[Steven Umbach]

Double check that you are indeed an administrator. You can run " net user
username" at the command prompt where you substitute your logon name for
username and see if you are in the local administrators group. --- Steve

 

[ClareOldie]

Double check that you are indeed an administrator. You can run " net
user username" at the command prompt where you substitute your logon
name for username and see if you are in the local administrators
group. --- Steve

I have checked the users profiles in control panel and I am a member of the
administrators group. I also am the "administrator" for log on. The strange
thing is your suggestion gives me nothing for this account.
Any idea why?
To go back to the original problem I tried doing the updates from the
administrators account as well as using run-as from this account and
another. Nothing doing from any of these.
BUT when I activated the auto update feature it downloaded and installed
some ten updates without a problem.
Any further suggestions?
Regards,
Seán

 

[Steven L Umbach]

What do you mean it gave you nothing?? Can you do other administrative
duties like change your tcp/ip settings?? Auto update can download and
install updates without admin credentials if you do it by schedule. Below is
what I get when I do net use administrator on my computer to show what you
should be seeing [while logged on as an administrator]. --- Steve

C:\Documents and Settings\Administrator>net user administrator
User name Administrator
Full Name
Comment Built-in account for administering the
computer/dom
ain
User's comment
Country code 000 (System Default)
Account active Yes
Account expires Never

Password last set 2/1/2004 3:23 PM
Password expires Never
Password changeable 2/1/2004 3:23 PM
Password required Yes
User may change password Yes

Workstations allowed All
Logon script
User profile
Home directory
Last logon 2/9/2004 11:16 AM

Logon hours allowed All

Local Group Memberships *Administrators
Global Group memberships *Group Policy Creator *Domain Users
*Schema Admins *Domain Admins
*Enterprise Admins
The command completed successfully.

 

[ClareOldie]

Sorry Steven I was a bit frustrated when I posted last!

I got details for all accounts except one which gave the message
"More help is available by typing NET HELPMSG 2221"

This tells me it is an unknown username. I can log on with this so some part
of Windows knows the name!
This happens on one account only - which has admin privelages.
The only difference with this one is that the loggon name is two words with
a space between. Maybe this is the problem?
I get similar results to yours for the other accounts.

Regardless of which account I use - administrator or one within the
administrator group - none will allow autoupdate. I get the same
"Administrators Only" message.

Yes I have, as far as I can tell, full admin rights in these accounts -
changing passwords and other admin settings etc.

Thanks again for your help

Seán
***************************************

What do you mean it gave you nothing?? Can you do other administrative
duties like change your tcp/ip settings?? Auto update can download and
install updates without admin credentials if you do it by schedule.
Below is what I get when I do net use administrator on my computer to
show what you should be seeing [while logged on as an administrator].
--- Steve

C:\Documents and Settings\Administrator>net user administrator
User name Administrator
Full Name
Comment Built-in account for administering the
computer/dom
ain
User's comment
Country code 000 (System Default)
Account active Yes
Account expires Never

Password last set 2/1/2004 3:23 PM
Password expires Never
Password changeable 2/1/2004 3:23 PM
Password required Yes
User may change password Yes

Workstations allowed All
Logon script
User profile
Home directory
Last logon 2/9/2004 11:16 AM

Logon hours allowed All

Local Group Memberships *Administrators
Global Group memberships *Group Policy Creator *Domain Users
*Schema Admins *Domain Admins
*Enterprise Admins
The command completed successfully.

I have checked the users profiles in control panel and I am a member
of the administrators group. I also am the "administrator" for log
on. The strange thing is your suggestion gives me nothing for this
account.
Any idea why?
To go back to the original problem I tried doing the updates from the
administrators account as well as using run-as from this account and
another. Nothing doing from any of these.
BUT when I activated the auto update feature it downloaded and
installed some ten updates without a problem.
Any further suggestions?
Regards,
Seán

 

[Steven L Umbach]

I have never used an account with a space in the logon name - try an
underscore_ between the two words or quotes around it next time. Well you
seem to indicate that your administrator accounts work fine except for
Update. I really don't know the reason for that and it may be Internet
Explorer related. Try at least clearing your temporary internet files and I
would try adding Microsoft.com to your trusted web content zone and setting
the security to medium to see what happens and running SpyBot Search and
Destroy on your computer to check for parasites. There is a newsgroup
dedicated to Windows Update where you may also want to post. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;174360
http://mvps.org/winhelp2002/unwanted.htm# --- SpyBot available in this link
and other good info.

Sorry Steven I was a bit frustrated when I posted last!

I got details for all accounts except one which gave the message
"More help is available by typing NET HELPMSG 2221"

This tells me it is an unknown username. I can log on with this so some part
of Windows knows the name!
This happens on one account only - which has admin privelages.
The only difference with this one is that the loggon name is two words with
a space between. Maybe this is the problem?
I get similar results to yours for the other accounts.

Regardless of which account I use - administrator or one within the
administrator group - none will allow autoupdate. I get the same
"Administrators Only" message.

Yes I have, as far as I can tell, full admin rights in these accounts -
changing passwords and other admin settings etc.

Thanks again for your help

Seán
***************************************

What do you mean it gave you nothing?? Can you do other administrative
duties like change your tcp/ip settings?? Auto update can download and
install updates without admin credentials if you do it by schedule.
Below is what I get when I do net use administrator on my computer to
show what you should be seeing [while logged on as an administrator].
--- Steve

C:\Documents and Settings\Administrator>net user administrator
User name Administrator
Full Name
Comment Built-in account for administering the
computer/dom
ain
User's comment
Country code 000 (System Default)
Account active Yes
Account expires Never

Password last set 2/1/2004 3:23 PM
Password expires Never
Password changeable 2/1/2004 3:23 PM
Password required Yes
User may change password Yes

Workstations allowed All
Logon script
User profile
Home directory
Last logon 2/9/2004 11:16 AM

Logon hours allowed All

Local Group Memberships *Administrators
Global Group memberships *Group Policy Creator *Domain Users
*Schema Admins *Domain Admins
*Enterprise Admins
The command completed successfully.

Steven Umbach wrote:
Double check that you are indeed an administrator. You can run " net
user username" at the command prompt where you substitute your logon
name for username and see if you are in the local administrators
group. --- Steve

I have checked the users profiles in control panel and I am a member
of the administrators group. I also am the "administrator" for log
on. The strange thing is your suggestion gives me nothing for this
account.
Any idea why?
To go back to the original problem I tried doing the updates from the
administrators account as well as using run-as from this account and
another. Nothing doing from any of these.
BUT when I activated the auto update feature it downloaded and
installed some ten updates without a problem.
Any further suggestions?
Regards,
Seán






Whenever I try to do an update the MS page tells me I must be an
administrator.
I am - no one else uses this computer.
What setting might I have missed that would cause this response?
Thanks.
Seán

 

[ClareOldie]

Steven,
thanks for the suggestions for the computer, all of which are
in situ and have been for some time, plus Adaware.
One last question before I leave this:
What is the best method of changing the logon name while ensuring that all
of the settings for that account remain untouched. It's just I have never
done this so I would like to make sure I don't mess things up.
Seán
**********************************

I have never used an account with a space in the logon name - try an
underscore_ between the two words or quotes around it next time. Well
you seem to indicate that your administrator accounts work fine
except for Update. I really don't know the reason for that and it may
be Internet Explorer related. Try at least clearing your temporary
internet files and I would try adding Microsoft.com to your trusted
web content zone and setting the security to medium to see what
happens and running SpyBot Search and Destroy on your computer to
check for parasites. There is a newsgroup dedicated to Windows Update
where you may also want to post. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;174360
http://mvps.org/winhelp2002/unwanted.htm# --- SpyBot available in
this link and other good info.

Sorry Steven I was a bit frustrated when I posted last!

I got details for all accounts except one which gave the message
"More help is available by typing NET HELPMSG 2221"

This tells me it is an unknown username. I can log on with this so
some part of Windows knows the name!
This happens on one account only - which has admin privelages.
The only difference with this one is that the loggon name is two
words with a space between. Maybe this is the problem?
I get similar results to yours for the other accounts.

Regardless of which account I use - administrator or one within the
administrator group - none will allow autoupdate. I get the same
"Administrators Only" message.

Yes I have, as far as I can tell, full admin rights in these
accounts - changing passwords and other admin settings etc.

Thanks again for your help

Seán
***************************************

What do you mean it gave you nothing?? Can you do other
administrative duties like change your tcp/ip settings?? Auto
update can download and install updates without admin credentials
if you do it by schedule. Below is what I get when I do net use
administrator on my computer to show what you should be seeing
[while logged on as an administrator]. --- Steve

C:\Documents and Settings\Administrator>net user administrator
User name Administrator
Full Name
Comment Built-in account for administering the
computer/dom
ain
User's comment
Country code 000 (System Default)
Account active Yes
Account expires Never

Password last set 2/1/2004 3:23 PM
Password expires Never
Password changeable 2/1/2004 3:23 PM
Password required Yes
User may change password Yes

Workstations allowed All
Logon script
User profile
Home directory
Last logon 2/9/2004 11:16 AM

Logon hours allowed All

Local Group Memberships *Administrators
Global Group memberships *Group Policy Creator *Domain Users
*Schema Admins *Domain Admins
*Enterprise Admins
The command completed successfully.



Steven Umbach wrote:
Double check that you are indeed an administrator. You can run "
net user username" at the command prompt where you substitute
your logon name for username and see if you are in the local
administrators group. --- Steve

I have checked the users profiles in control panel and I am a
member of the administrators group. I also am the "administrator"
for log
on. The strange thing is your suggestion gives me nothing for this
account.
Any idea why?
To go back to the original problem I tried doing the updates from
the administrators account as well as using run-as from this
account and another. Nothing doing from any of these.
BUT when I activated the auto update feature it downloaded and
installed some ten updates without a problem.
Any further suggestions?
Regards,
Seán






Whenever I try to do an update the MS page tells me I must be an
administrator.
I am - no one else uses this computer.
What setting might I have missed that would cause this response?
Thanks.
Seán

 

[Steven Umbach]

Hi Sean.

Right click My Computer and select manage which will bring up Computer
Management where you will go to local users and groups. Find the account, open
it and change the name. That's all there is to it and it will still have same
access, group membership. --- Steve

Steven,
thanks for the suggestions for the computer, all of which are
in situ and have been for some time, plus Adaware.
One last question before I leave this:
What is the best method of changing the logon name while ensuring that all
of the settings for that account remain untouched. It's just I have never
done this so I would like to make sure I don't mess things up.
Seán
**********************************

I have never used an account with a space in the logon name - try an
underscore_ between the two words or quotes around it next time. Well
you seem to indicate that your administrator accounts work fine
except for Update. I really don't know the reason for that and it may
be Internet Explorer related. Try at least clearing your temporary
internet files and I would try adding Microsoft.com to your trusted
web content zone and setting the security to medium to see what
happens and running SpyBot Search and Destroy on your computer to
check for parasites. There is a newsgroup dedicated to Windows Update
where you may also want to post. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;174360
http://mvps.org/winhelp2002/unwanted.htm# --- SpyBot available in
this link and other good info.

Sorry Steven I was a bit frustrated when I posted last!

I got details for all accounts except one which gave the message
"More help is available by typing NET HELPMSG 2221"

This tells me it is an unknown username. I can log on with this so
some part of Windows knows the name!
This happens on one account only - which has admin privelages.
The only difference with this one is that the loggon name is two
words with a space between. Maybe this is the problem?
I get similar results to yours for the other accounts.

Regardless of which account I use - administrator or one within the
administrator group - none will allow autoupdate. I get the same
"Administrators Only" message.

Yes I have, as far as I can tell, full admin rights in these
accounts - changing passwords and other admin settings etc.

Thanks again for your help

Seán
***************************************
Steven L Umbach wrote:
What do you mean it gave you nothing?? Can you do other
administrative duties like change your tcp/ip settings?? Auto
update can download and install updates without admin credentials
if you do it by schedule. Below is what I get when I do net use
administrator on my computer to show what you should be seeing
[while logged on as an administrator]. --- Steve

C:\Documents and Settings\Administrator>net user administrator
User name Administrator
Full Name
Comment Built-in account for administering the
computer/dom
ain
User's comment
Country code 000 (System Default)
Account active Yes
Account expires Never

Password last set 2/1/2004 3:23 PM
Password expires Never
Password changeable 2/1/2004 3:23 PM
Password required Yes
User may change password Yes

Workstations allowed All
Logon script
User profile
Home directory
Last logon 2/9/2004 11:16 AM

Logon hours allowed All

Local Group Memberships *Administrators
Global Group memberships *Group Policy Creator *Domain Users
*Schema Admins *Domain Admins
*Enterprise Admins
The command completed successfully.



Steven Umbach wrote:
Double check that you are indeed an administrator. You can run "
net user username" at the command prompt where you substitute
your logon name for username and see if you are in the local
administrators group. --- Steve

I have checked the users profiles in control panel and I am a
member of the administrators group. I also am the "administrator"
for log
on. The strange thing is your suggestion gives me nothing for this
account.
Any idea why?
To go back to the original problem I tried doing the updates from
the administrators account as well as using run-as from this
account and another. Nothing doing from any of these.
BUT when I activated the auto update feature it downloaded and
installed some ten updates without a problem.
Any further suggestions?
Regards,
Seán






Whenever I try to do an update the MS page tells me I must be an
administrator.
I am - no one else uses this computer.
What setting might I have missed that would cause this response?
Thanks.
Seán

 

[ClareOldie]

Hi There Steve,
thanks for that. Change done. I tried at first to
do it from admin account but it wouldn't let me but it took from the account
itself.
Strange thing is the folder in Docs & Settings did not change its name. I
appear to be using the folder with the old name. I wonder if this will cause
some problems in the future.
I finally found the culprit that was blocking my updates - SurfinGuard
Pro. This is such a great programme that I had forgotten it. It has saved me
on many occasion but this time it interfered.
Thanks again for the help.
Seán

Hi Sean.

Right click My Computer and select manage which will bring up Computer
Management where you will go to local users and groups. Find the
account, open it and change the name. That's all there is to it and
it will still have same access, group membership. --- Steve

Steven,
thanks for the suggestions for the computer, all of
which are in situ and have been for some time, plus Adaware.
One last question before I leave this:
What is the best method of changing the logon name while ensuring
that all of the settings for that account remain untouched. It's
just I have never done this so I would like to make sure I don't
mess things up.
Seán
**********************************

I have never used an account with a space in the logon name - try an
underscore_ between the two words or quotes around it next time.
Well
you seem to indicate that your administrator accounts work fine
except for Update. I really don't know the reason for that and it
may
be Internet Explorer related. Try at least clearing your temporary
internet files and I would try adding Microsoft.com to your trusted
web content zone and setting the security to medium to see what
happens and running SpyBot Search and Destroy on your computer to
check for parasites. There is a newsgroup dedicated to Windows
Update where you may also want to post. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;174360
http://mvps.org/winhelp2002/unwanted.htm# --- SpyBot available in
this link and other good info.


Sorry Steven I was a bit frustrated when I posted last!

I got details for all accounts except one which gave the message
"More help is available by typing NET HELPMSG 2221"

This tells me it is an unknown username. I can log on with this so
some part of Windows knows the name!
This happens on one account only - which has admin privelages.
The only difference with this one is that the loggon name is two
words with a space between. Maybe this is the problem?
I get similar results to yours for the other accounts.

Regardless of which account I use - administrator or one within the
administrator group - none will allow autoupdate. I get the same
"Administrators Only" message.

Yes I have, as far as I can tell, full admin rights in these
accounts - changing passwords and other admin settings etc.

Thanks again for your help

Seán
***************************************
Steven L Umbach wrote:
What do you mean it gave you nothing?? Can you do other
administrative duties like change your tcp/ip settings?? Auto
update can download and install updates without admin credentials
if you do it by schedule. Below is what I get when I do net use
administrator on my computer to show what you should be seeing
[while logged on as an administrator]. --- Steve

C:\Documents and Settings\Administrator>net user administrator
User name Administrator
Full Name
Comment Built-in account for administering
the computer/dom
ain
User's comment
Country code 000 (System Default)
Account active Yes
Account expires Never

Password last set 2/1/2004 3:23 PM
Password expires Never
Password changeable 2/1/2004 3:23 PM
Password required Yes
User may change password Yes

Workstations allowed All
Logon script
User profile
Home directory
Last logon 2/9/2004 11:16 AM

Logon hours allowed All

Local Group Memberships *Administrators
Global Group memberships *Group Policy Creator *Domain Users
*Schema Admins *Domain Admins
*Enterprise Admins
The command completed successfully.



Steven Umbach wrote:
Double check that you are indeed an administrator. You can run "
net user username" at the command prompt where you substitute
your logon name for username and see if you are in the local
administrators group. --- Steve

I have checked the users profiles in control panel and I am a
member of the administrators group. I also am the "administrator"
for log
on. The strange thing is your suggestion gives me nothing for
this account.
Any idea why?
To go back to the original problem I tried doing the updates from
the administrators account as well as using run-as from this
account and another. Nothing doing from any of these.
BUT when I activated the auto update feature it downloaded and
installed some ten updates without a problem.
Any further suggestions?
Regards,
Seán






Whenever I try to do an update the MS page tells me I must be
an administrator.
I am - no one else uses this computer.
What setting might I have missed that would cause this
response? Thanks.
Seán

 

[Steven Umbach]

Glad you figured it out. That is strange that the admin account would not let
you do the account name change - it should, I would double check the group
membership of that account. I don't think that the documents and settings folder
will be a problem, the computer tracks all users and groups by a unique sid
number. As far a SurfinGuard I should have suggested that you try booting into
safemode with networking while you had the problem. The reason is that most
applications and services are not started in safe mode and you could
troubleshoot from there. However never do that if you rely on a software
firewall only to protect your computer because it will be disabled also in safe
mode with networking. --- Steve

Hi There Steve,
thanks for that. Change done. I tried at first to
do it from admin account but it wouldn't let me but it took from the account
itself.
Strange thing is the folder in Docs & Settings did not change its name. I
appear to be using the folder with the old name. I wonder if this will cause
some problems in the future.
I finally found the culprit that was blocking my updates - SurfinGuard
Pro. This is such a great programme that I had forgotten it. It has saved me
on many occasion but this time it interfered.
Thanks again for the help.
Seán

Hi Sean.

Right click My Computer and select manage which will bring up Computer
Management where you will go to local users and groups. Find the
account, open it and change the name. That's all there is to it and
it will still have same access, group membership. --- Steve

Steven,
thanks for the suggestions for the computer, all of
which are in situ and have been for some time, plus Adaware.
One last question before I leave this:
What is the best method of changing the logon name while ensuring
that all of the settings for that account remain untouched. It's
just I have never done this so I would like to make sure I don't
mess things up.
Seán
**********************************

Steven L Umbach wrote:
I have never used an account with a space in the logon name - try an
underscore_ between the two words or quotes around it next time.
Well
you seem to indicate that your administrator accounts work fine
except for Update. I really don't know the reason for that and it
may
be Internet Explorer related. Try at least clearing your temporary
internet files and I would try adding Microsoft.com to your trusted
web content zone and setting the security to medium to see what
happens and running SpyBot Search and Destroy on your computer to
check for parasites. There is a newsgroup dedicated to Windows
Update where you may also want to post. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;174360
http://mvps.org/winhelp2002/unwanted.htm# --- SpyBot available in
this link and other good info.


Sorry Steven I was a bit frustrated when I posted last!

I got details for all accounts except one which gave the message
"More help is available by typing NET HELPMSG 2221"

This tells me it is an unknown username. I can log on with this so
some part of Windows knows the name!
This happens on one account only - which has admin privelages.
The only difference with this one is that the loggon name is two
words with a space between. Maybe this is the problem?
I get similar results to yours for the other accounts.

Regardless of which account I use - administrator or one within the
administrator group - none will allow autoupdate. I get the same
"Administrators Only" message.

Yes I have, as far as I can tell, full admin rights in these
accounts - changing passwords and other admin settings etc.

Thanks again for your help

Seán
***************************************
Steven L Umbach wrote:
What do you mean it gave you nothing?? Can you do other
administrative duties like change your tcp/ip settings?? Auto
update can download and install updates without admin credentials
if you do it by schedule. Below is what I get when I do net use
administrator on my computer to show what you should be seeing
[while logged on as an administrator]. --- Steve

C:\Documents and Settings\Administrator>net user administrator
User name Administrator
Full Name
Comment Built-in account for administering
the computer/dom
ain
User's comment
Country code 000 (System Default)
Account active Yes
Account expires Never

Password last set 2/1/2004 3:23 PM
Password expires Never
Password changeable 2/1/2004 3:23 PM
Password required Yes
User may change password Yes

Workstations allowed All
Logon script
User profile
Home directory
Last logon 2/9/2004 11:16 AM

Logon hours allowed All

Local Group Memberships *Administrators
Global Group memberships *Group Policy Creator *Domain Users
*Schema Admins *Domain Admins
*Enterprise Admins
The command completed successfully.



Steven Umbach wrote:
Double check that you are indeed an administrator. You can run "
net user username" at the command prompt where you substitute
your logon name for username and see if you are in the local
administrators group. --- Steve

I have checked the users profiles in control panel and I am a
member of the administrators group. I also am the "administrator"
for log
on. The strange thing is your suggestion gives me nothing for
this account.
Any idea why?
To go back to the original problem I tried doing the updates from
the administrators account as well as using run-as from this
account and another. Nothing doing from any of these.
BUT when I activated the auto update feature it downloaded and
installed some ten updates without a problem.
Any further suggestions?
Regards,
Seán






Whenever I try to do an update the MS page tells me I must be
an administrator.
I am - no one else uses this computer.
What setting might I have missed that would cause this
response? Thanks.
Seán

 

[ClareOldie]

The group membership is the administrators group - that is what you meant?

Thats good news on the Docs&Settings - unique id.

I should have remembered what SurinGuard does - duh

I use Outpost as software firewall but have (I hope) the machine's listening
processes blocked with an IPSec policy ( except Kerberos? ). I seem to
remember some time ago checking on the GRC site without the firwall running
and coming up clean.But with all the patches since I guess there could be
something 'open' again. I have a router ordered, NAT & SPI, so soon I will
have another layer in place.
The difficulty with all these 'layers of security' is that when something
like this update thing happens its hard to tell whats stopping it <g>
Thanks

Seán
******************************************

Glad you figured it out. That is strange that the admin account would
not let you do the account name change - it should, I would double
check the group membership of that account. I don't think that the
documents and settings folder will be a problem, the computer tracks
all users and groups by a unique sid number. As far a SurfinGuard I
should have suggested that you try booting into safemode with
networking while you had the problem. The reason is that most
applications and services are not started in safe mode and you could
troubleshoot from there. However never do that if you rely on a
software firewall only to protect your computer because it will be
disabled also in safe mode with networking. --- Steve

Hi There Steve,
thanks for that. Change done. I tried at
first to do it from admin account but it wouldn't let me but it took
from the account itself.
Strange thing is the folder in Docs & Settings did not change its
name. I appear to be using the folder with the old name. I wonder if
this will cause some problems in the future.
I finally found the culprit that was blocking my updates -
SurfinGuard Pro. This is such a great programme that I had forgotten
it. It has saved me on many occasion but this time it interfered.
Thanks again for the help.
Seán

Hi Sean.

Right click My Computer and select manage which will bring up
Computer Management where you will go to local users and groups.
Find the
account, open it and change the name. That's all there is to it and
it will still have same access, group membership. --- Steve


Steven,
thanks for the suggestions for the computer, all of
which are in situ and have been for some time, plus Adaware.
One last question before I leave this:
What is the best method of changing the logon name while ensuring
that all of the settings for that account remain untouched. It's
just I have never done this so I would like to make sure I don't
mess things up.
Seán
**********************************

Steven L Umbach wrote:
I have never used an account with a space in the logon name - try
an underscore_ between the two words or quotes around it next
time.
Well
you seem to indicate that your administrator accounts work fine
except for Update. I really don't know the reason for that and it
may
be Internet Explorer related. Try at least clearing your temporary
internet files and I would try adding Microsoft.com to your
trusted
web content zone and setting the security to medium to see what
happens and running SpyBot Search and Destroy on your computer to
check for parasites. There is a newsgroup dedicated to Windows
Update where you may also want to post. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;174360
http://mvps.org/winhelp2002/unwanted.htm# --- SpyBot available in
this link and other good info.


Sorry Steven I was a bit frustrated when I posted last!

I got details for all accounts except one which gave the message
"More help is available by typing NET HELPMSG 2221"

This tells me it is an unknown username. I can log on with this
so
some part of Windows knows the name!
This happens on one account only - which has admin privelages.
The only difference with this one is that the loggon name is two
words with a space between. Maybe this is the problem?
I get similar results to yours for the other accounts.

Regardless of which account I use - administrator or one within
the administrator group - none will allow autoupdate. I get the
same "Administrators Only" message.

Yes I have, as far as I can tell, full admin rights in these
accounts - changing passwords and other admin settings etc.

Thanks again for your help

Seán
***************************************
Steven L Umbach wrote:
What do you mean it gave you nothing?? Can you do other
administrative duties like change your tcp/ip settings?? Auto
update can download and install updates without admin
credentials
if you do it by schedule. Below is what I get when I do net use
administrator on my computer to show what you should be seeing
[while logged on as an administrator]. --- Steve

C:\Documents and Settings\Administrator>net user administrator
User name Administrator
Full Name
Comment Built-in account for administering
the computer/dom
ain
User's comment
Country code 000 (System Default)
Account active Yes
Account expires Never

Password last set 2/1/2004 3:23 PM
Password expires Never
Password changeable 2/1/2004 3:23 PM
Password required Yes
User may change password Yes

Workstations allowed All
Logon script
User profile
Home directory
Last logon 2/9/2004 11:16 AM

Logon hours allowed All

Local Group Memberships *Administrators
Global Group memberships *Group Policy Creator *Domain Users
*Schema Admins *Domain
Admins
*Enterprise Admins
The command completed successfully.



Steven Umbach wrote:
Double check that you are indeed an administrator. You can
run "
net user username" at the command prompt where you substitute
your logon name for username and see if you are in the local
administrators group. --- Steve

I have checked the users profiles in control panel and I am a
member of the administrators group. I also am the
"administrator"
for log
on. The strange thing is your suggestion gives me nothing for
this account.
Any idea why?
To go back to the original problem I tried doing the updates
from
the administrators account as well as using run-as from this
account and another. Nothing doing from any of these.
BUT when I activated the auto update feature it downloaded and
installed some ten updates without a problem.
Any further suggestions?
Regards,
Seán






Whenever I try to do an update the MS page tells me I must be
an administrator.
I am - no one else uses this computer.
What setting might I have missed that would cause this
response? Thanks.
Seán

 

[Steven L Umbach]

Yeah, that is what I meant that the account logon name is in the
administrators group. I usually check by using " net user username " also.
You got a lot of stuff going there with ipsec and a software firewall.
Nothing wrong with extra layers of security as long as they all work in
harmony and you remember what does what. The SPI router will be a good
investment. I like a perimiter device when using cable/dsl access. ---
Steve

The group membership is the administrators group - that is what you meant?

Thats good news on the Docs&Settings - unique id.

I should have remembered what SurinGuard does - duh

I use Outpost as software firewall but have (I hope) the machine's listening
processes blocked with an IPSec policy ( except Kerberos? ). I seem to
remember some time ago checking on the GRC site without the firwall running
and coming up clean.But with all the patches since I guess there could be
something 'open' again. I have a router ordered, NAT & SPI, so soon I will
have another layer in place.
The difficulty with all these 'layers of security' is that when something
like this update thing happens its hard to tell whats stopping it <g>
Thanks

Seán
******************************************

Glad you figured it out. That is strange that the admin account would
not let you do the account name change - it should, I would double
check the group membership of that account. I don't think that the
documents and settings folder will be a problem, the computer tracks
all users and groups by a unique sid number. As far a SurfinGuard I
should have suggested that you try booting into safemode with
networking while you had the problem. The reason is that most
applications and services are not started in safe mode and you could
troubleshoot from there. However never do that if you rely on a
software firewall only to protect your computer because it will be
disabled also in safe mode with networking. --- Steve

Hi There Steve,
thanks for that. Change done. I tried at
first to do it from admin account but it wouldn't let me but it took
from the account itself.
Strange thing is the folder in Docs & Settings did not change its
name. I appear to be using the folder with the old name. I wonder if
this will cause some problems in the future.
I finally found the culprit that was blocking my updates -
SurfinGuard Pro. This is such a great programme that I had forgotten
it. It has saved me on many occasion but this time it interfered.
Thanks again for the help.
Seán

Steven Umbach wrote:
Hi Sean.

Right click My Computer and select manage which will bring up
Computer Management where you will go to local users and groups.
Find the
account, open it and change the name. That's all there is to it and
it will still have same access, group membership. --- Steve


Steven,
thanks for the suggestions for the computer, all of
which are in situ and have been for some time, plus Adaware.
One last question before I leave this:
What is the best method of changing the logon name while ensuring
that all of the settings for that account remain untouched. It's
just I have never done this so I would like to make sure I don't
mess things up.
Seán
**********************************

Steven L Umbach wrote:
I have never used an account with a space in the logon name - try
an underscore_ between the two words or quotes around it next
time.
Well
you seem to indicate that your administrator accounts work fine
except for Update. I really don't know the reason for that and it
may
be Internet Explorer related. Try at least clearing your temporary
internet files and I would try adding Microsoft.com to your
trusted
web content zone and setting the security to medium to see what
happens and running SpyBot Search and Destroy on your computer to
check for parasites. There is a newsgroup dedicated to Windows
Update where you may also want to post. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;174360
http://mvps.org/winhelp2002/unwanted.htm# --- SpyBot available in
this link and other good info.


Sorry Steven I was a bit frustrated when I posted last!

I got details for all accounts except one which gave the message
"More help is available by typing NET HELPMSG 2221"

This tells me it is an unknown username. I can log on with this
so
some part of Windows knows the name!
This happens on one account only - which has admin privelages.
The only difference with this one is that the loggon name is two
words with a space between. Maybe this is the problem?
I get similar results to yours for the other accounts.

Regardless of which account I use - administrator or one within
the administrator group - none will allow autoupdate. I get the
same "Administrators Only" message.

Yes I have, as far as I can tell, full admin rights in these
accounts - changing passwords and other admin settings etc.

Thanks again for your help

Seán
***************************************
Steven L Umbach wrote:
What do you mean it gave you nothing?? Can you do other
administrative duties like change your tcp/ip settings?? Auto
update can download and install updates without admin
credentials
if you do it by schedule. Below is what I get when I do net use
administrator on my computer to show what you should be seeing
[while logged on as an administrator]. --- Steve

C:\Documents and Settings\Administrator>net user administrator
User name Administrator
Full Name
Comment Built-in account for administering
the computer/dom
ain
User's comment
Country code 000 (System Default)
Account active Yes
Account expires Never

Password last set 2/1/2004 3:23 PM
Password expires Never
Password changeable 2/1/2004 3:23 PM
Password required Yes
User may change password Yes

Workstations allowed All
Logon script
User profile
Home directory
Last logon 2/9/2004 11:16 AM

Logon hours allowed All

Local Group Memberships *Administrators
Global Group memberships *Group Policy Creator *Domain Users
*Schema Admins *Domain
Admins
*Enterprise Admins
The command completed successfully.



Steven Umbach wrote:
Double check that you are indeed an administrator. You can
run "
net user username" at the command prompt where you substitute
your logon name for username and see if you are in the local
administrators group. --- Steve

I have checked the users profiles in control panel and I am a
member of the administrators group. I also am the
"administrator"
for log
on. The strange thing is your suggestion gives me nothing for
this account.
Any idea why?
To go back to the original problem I tried doing the updates
from
the administrators account as well as using run-as from this
account and another. Nothing doing from any of these.
BUT when I activated the auto update feature it downloaded and
installed some ten updates without a problem.
Any further suggestions?
Regards,
Seán






Whenever I try to do an update the MS page tells me I must be
an administrator.
I am - no one else uses this computer.
What setting might I have missed that would cause this
response? Thanks.
Seán

 

[ClareOldie]

Just a last bit of info Steve before we finish this.
I checked the renamed account with "net user username" and it reported back
properly.
I guess 2K doesn't like a username with a space in it.
It would be interesting for someone else to set up a like account and check,
don't you think?
Good luck and thanks
Seán

Yeah, that is what I meant that the account logon name is in the
administrators group. I usually check by using " net user username "
also. You got a lot of stuff going there with ipsec and a software
firewall. Nothing wrong with extra layers of security as long as they
all work in harmony and you remember what does what. The SPI router
will be a good investment. I like a perimiter device when using
cable/dsl access. --- Steve

The group membership is the administrators group - that is what you
meant?

Thats good news on the Docs&Settings - unique id.

I should have remembered what SurinGuard does - duh

I use Outpost as software firewall but have (I hope) the machine's
listening processes blocked with an IPSec policy ( except Kerberos?
). I seem to remember some time ago checking on the GRC site without
the firwall running and coming up clean.But with all the patches
since I guess there could be something 'open' again. I have a router
ordered, NAT & SPI, so soon I will have another layer in place.
The difficulty with all these 'layers of security' is that when
something like this update thing happens its hard to tell whats
stopping it <g> Thanks

Seán
******************************************

Glad you figured it out. That is strange that the admin account
would not let you do the account name change - it should, I would
double check the group membership of that account. I don't think
that the documents and settings folder will be a problem, the
computer tracks all users and groups by a unique sid number. As far
a SurfinGuard I should have suggested that you try booting into
safemode with networking while you had the problem. The reason is
that most applications and services are not started in safe mode
and you could troubleshoot from there. However never do that if you
rely on a software firewall only to protect your computer because
it will be disabled also in safe mode with networking. --- Steve

Hi There Steve,
thanks for that. Change done. I tried at
first to do it from admin account but it wouldn't let me but it
took from the account itself.
Strange thing is the folder in Docs & Settings did not change its
name. I appear to be using the folder with the old name. I wonder
if this will cause some problems in the future.
I finally found the culprit that was blocking my updates -
SurfinGuard Pro. This is such a great programme that I had
forgotten it. It has saved me on many occasion but this time it
interfered. Thanks again for the help.
Seán

Steven Umbach wrote:
Hi Sean.

Right click My Computer and select manage which will bring up
Computer Management where you will go to local users and groups.
Find the
account, open it and change the name. That's all there is to it
and it will still have same access, group membership. --- Steve


Steven,
thanks for the suggestions for the computer, all of
which are in situ and have been for some time, plus Adaware.
One last question before I leave this:
What is the best method of changing the logon name while ensuring
that all of the settings for that account remain untouched. It's
just I have never done this so I would like to make sure I don't
mess things up.
Seán
**********************************

Steven L Umbach wrote:
I have never used an account with a space in the logon name -
try an underscore_ between the two words or quotes around it
next
time.
Well
you seem to indicate that your administrator accounts work fine
except for Update. I really don't know the reason for that and
it may
be Internet Explorer related. Try at least clearing your
temporary internet files and I would try adding Microsoft.com
to your
trusted
web content zone and setting the security to medium to see what
happens and running SpyBot Search and Destroy on your computer
to check for parasites. There is a newsgroup dedicated to
Windows Update where you may also want to post. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;174360
http://mvps.org/winhelp2002/unwanted.htm# --- SpyBot available
in this link and other good info.


Sorry Steven I was a bit frustrated when I posted last!

I got details for all accounts except one which gave the
message "More help is available by typing NET HELPMSG 2221"

This tells me it is an unknown username. I can log on with this
so
some part of Windows knows the name!
This happens on one account only - which has admin privelages.
The only difference with this one is that the loggon name is
two words with a space between. Maybe this is the problem?
I get similar results to yours for the other accounts.

Regardless of which account I use - administrator or one within
the administrator group - none will allow autoupdate. I get the
same "Administrators Only" message.

Yes I have, as far as I can tell, full admin rights in these
accounts - changing passwords and other admin settings etc.

Thanks again for your help

Seán
***************************************
Steven L Umbach wrote:
What do you mean it gave you nothing?? Can you do other
administrative duties like change your tcp/ip settings?? Auto
update can download and install updates without admin
credentials
if you do it by schedule. Below is what I get when I do net
use administrator on my computer to show what you should be
seeing [while logged on as an administrator]. --- Steve

C:\Documents and Settings\Administrator>net user administrator
User name Administrator
Full Name
Comment Built-in account for
administering the computer/dom
ain
User's comment
Country code 000 (System Default)
Account active Yes
Account expires Never

Password last set 2/1/2004 3:23 PM
Password expires Never
Password changeable 2/1/2004 3:23 PM
Password required Yes
User may change password Yes

Workstations allowed All
Logon script
User profile
Home directory
Last logon 2/9/2004 11:16 AM

Logon hours allowed All

Local Group Memberships *Administrators
Global Group memberships *Group Policy Creator *Domain
Users *Schema Admins
*Domain
Admins
*Enterprise Admins
The command completed successfully.



Steven Umbach wrote:
Double check that you are indeed an administrator. You can
run "
net user username" at the command prompt where you
substitute your logon name for username and see if you are
in the local administrators group. --- Steve

I have checked the users profiles in control panel and I am a
member of the administrators group. I also am the
"administrator"
for log
on. The strange thing is your suggestion gives me nothing for
this account.
Any idea why?
To go back to the original problem I tried doing the updates
from
the administrators account as well as using run-as from this
account and another. Nothing doing from any of these.
BUT when I activated the auto update feature it downloaded
and installed some ten updates without a problem.
Any further suggestions?
Regards,
Seán






Whenever I try to do an update the MS page tells me I must
be an administrator.
I am - no one else uses this computer.
What setting might I have missed that would cause this
response? Thanks.
Seán

 

[Guest]

Is this happening on a server
and if it is nevegate to ad remove programs, windows components and remove extra security for IE
update you box and re-add that option again if you wish, or you can leave the extra security off since you will not be browsing from the server.

----- ClareOldie wrote: ----

Whenever I try to do an update the MS page tells me I must be a
administrator
I am - no one else uses this computer
What setting might I have missed that would cause this response
Thanks
Seá

 

[Guest]

help with the password i'm the only one who uses this computer. my boss gave it to me from work. he's out of the country for awhile please tell me how to acquire a new password or let me know what his was Thanks