Sometimes I Cannot Remove a Security Update

[Guest]

I have a set of WinXP-SP2 laptops on a self-contained network and domain (no
internet access). Recently I began installing security update #902400. In
most cases, users without admin rights could not login properly. I opted to
back out the patch. In most (90%+) instances I can successfully remove the
update. However, in a few cases I am told, "this update cannot be removed".
In all instances I am on a Windows 2000 AD, the laptops are joined to the
domain and I am logged on with DA credentials.

I have not yet tried removing the patch either as a local admin or with the
laptop dis-joined from the domain.

I have not found anything specifically dealing with this on technet yet,
though there is a lot of info to sift through.

To get around the problem I have (unbeknownst to them) added the affected
users into the local admins group so they can log in. I can't leave them like
that so hopefully someone here can point me towards a removal solution.

Thanks,

Andy.

 

[MowGreen [MVP]]

Andy,

Not sure if this is applicable to the issue, but check it out :

Systems that have changed the default Access Control List permissions on
the %windir%\registration directory may experience various problems
after you install the Microsoft Security Bulletin MS05-051 for COM+ and
MS DTC
http://support.microsoft.com/kb/909444/

If it doesn't resolve the issue suggest you contact MS Support as there
is no charge for an issue related to Windows Updates :
http://support.microsoft.com/oas/default.aspx?gprid=6527

HTH,
MowGreen [MVP 2003-2006]
===============
*-343-* FDNY
Never Forgotten
===============