Installation error, do not have rights to install update

Am trying to install the latest round of patches. There is only one listed,
the backround intelligent transfer service. The update constantly fails with
error 8007f004. I used the windows update trouble shooter but there is no
data on this error there. I downloaded the patch from the KB article and
tried to install that way and got an error that stated I do not have the
rights to install this update. I'm a domain admin, and I also tried to
install as the local admin with the same results. The only thing different
about this machine is that I have a GP that renames all local admin accounts.
that is the account I was using. Anyone have any ideas or should I just pick
up the phone now and call microsoft.

Thanks,
Nate Weldon

Hi,
Following privileges are needed for installing BITS package and other
security updates released in July 2004. Please check if your account has
needed
privileges?

WinNT/2K privilege value
"SecPol.msc > Local Policies > User Rights Assignment" display name
Description

SeBackupPrivilege
Back up files and directories
Required to perform backup operations

SeDebugPrivilege
Debug programs
Required to debug a process

SeRestorePrivilege
Restore files and directories
Required to perform restore operations. This privilege enables you to
set any valid user or group security identifier (SID) as the owner of an
object.

SeSecurityPrivilege
Manage auditing and security log
Required to perform a number of security-related functions, such as
controlling and viewing audit messages. This privilege identifies its holder
as a security operator.

SeTakeOwnershipPrivilege
Take ownership of files or other objects
Required to take ownership of an object without being granted
discretionary access. This privilege allows the owner value to be set only
to those values that the holder may legitimately assign as the owner of an
object.


--
Sudheer GN
Microsoft, BITS

This posting is provided "As Is" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"Nate Weldon" <> wrote in message
news:B19DD647-2035-417A-BB1F-...
> Am trying to install the latest round of patches. There is only one
> listed,
> the backround intelligent transfer service. The update constantly fails
> with
> error 8007f004. I used the windows update trouble shooter but there is no
> data on this error there. I downloaded the patch from the KB article and
> tried to install that way and got an error that stated I do not have the
> rights to install this update. I'm a domain admin, and I also tried to
> install as the local admin with the same results. The only thing different
> about this machine is that I have a GP that renames all local admin
> accounts.
> that is the account I was using. Anyone have any ideas or should I just
> pick
> up the phone now and call microsoft.
>
> Thanks,
> Nate Weldon

The manage auditing and security log rights have Exchange Enterprise servers
as the only entry, and I am unable to change them. How can that be, I have
exch admin tools intstalled on this machine but that is it. Also, how can I
change that.

"Sudheer GN [MSFT]" wrote:

> Hi,
> Following privileges are needed for installing BITS package and other
> security updates released in July 2004. Please check if your account has
> needed
> privileges?
>
> WinNT/2K privilege value
> "SecPol.msc > Local Policies > User Rights Assignment" display name
> Description
>
> SeBackupPrivilege
> Back up files and directories
> Required to perform backup operations
>
> SeDebugPrivilege
> Debug programs
> Required to debug a process
>
> SeRestorePrivilege
> Restore files and directories
> Required to perform restore operations. This privilege enables you to
> set any valid user or group security identifier (SID) as the owner of an
> object.
>
> SeSecurityPrivilege
> Manage auditing and security log
> Required to perform a number of security-related functions, such as
> controlling and viewing audit messages. This privilege identifies its holder
> as a security operator.
>
> SeTakeOwnershipPrivilege
> Take ownership of files or other objects
> Required to take ownership of an object without being granted
> discretionary access. This privilege allows the owner value to be set only
> to those values that the holder may legitimately assign as the owner of an
> object.
>
>
> --
> Sudheer GN
> Microsoft, BITS
>
> This posting is provided "As Is" with no warranties, and confers no rights.
> Use of included script samples are subject to the terms specified at
> http://www.microsoft.com/info/cpyright.htm
> "Nate Weldon" <> wrote in message
> news:B19DD647-2035-417A-BB1F-...
> > Am trying to install the latest round of patches. There is only one
> > listed,
> > the backround intelligent transfer service. The update constantly fails
> > with
> > error 8007f004. I used the windows update trouble shooter but there is no
> > data on this error there. I downloaded the patch from the KB article and
> > tried to install that way and got an error that stated I do not have the
> > rights to install this update. I'm a domain admin, and I also tried to
> > install as the local admin with the same results. The only thing different
> > about this machine is that I have a GP that renames all local admin
> > accounts.
> > that is the account I was using. Anyone have any ideas or should I just
> > pick
> > up the phone now and call microsoft.
> >
> > Thanks,
> > Nate Weldon
>
>
>

Hi,
Do you mean that privilege is only available to Exchange Enterprise Admins?
Are you logged on as Exchange enterprise admin?
Try changing the settings as the user who has that privilege.

--
Sudheer GN
Microsoft, BITS

This posting is provided "As Is" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm



"Nate Weldon" <> wrote in message
news:7D482D2B-431F-4C81-A866-...
> The manage auditing and security log rights have Exchange Enterprise
> servers
> as the only entry, and I am unable to change them. How can that be, I have
> exch admin tools intstalled on this machine but that is it. Also, how can
> I
> change that.
>
> "Sudheer GN [MSFT]" wrote:
>
>> Hi,
>> Following privileges are needed for installing BITS package and other
>> security updates released in July 2004. Please check if your account has
>> needed
>> privileges?
>>
>> WinNT/2K privilege value
>> "SecPol.msc > Local Policies > User Rights Assignment" display name
>> Description
>>
>> SeBackupPrivilege
>> Back up files and directories
>> Required to perform backup operations
>>
>> SeDebugPrivilege
>> Debug programs
>> Required to debug a process
>>
>> SeRestorePrivilege
>> Restore files and directories
>> Required to perform restore operations. This privilege enables you
>> to
>> set any valid user or group security identifier (SID) as the owner of an
>> object.
>>
>> SeSecurityPrivilege
>> Manage auditing and security log
>> Required to perform a number of security-related functions, such as
>> controlling and viewing audit messages. This privilege identifies its
>> holder
>> as a security operator.
>>
>> SeTakeOwnershipPrivilege
>> Take ownership of files or other objects
>> Required to take ownership of an object without being granted
>> discretionary access. This privilege allows the owner value to be set
>> only
>> to those values that the holder may legitimately assign as the owner of
>> an
>> object.
>>
>>
>> --
>> Sudheer GN
>> Microsoft, BITS
>>
>> This posting is provided "As Is" with no warranties, and confers no
>> rights.
>> Use of included script samples are subject to the terms specified at
>> http://www.microsoft.com/info/cpyright.htm
>> "Nate Weldon" <> wrote in message
>> news:B19DD647-2035-417A-BB1F-...
>> > Am trying to install the latest round of patches. There is only one
>> > listed,
>> > the backround intelligent transfer service. The update constantly fails
>> > with
>> > error 8007f004. I used the windows update trouble shooter but there is
>> > no
>> > data on this error there. I downloaded the patch from the KB article
>> > and
>> > tried to install that way and got an error that stated I do not have
>> > the
>> > rights to install this update. I'm a domain admin, and I also tried to
>> > install as the local admin with the same results. The only thing
>> > different
>> > about this machine is that I have a GP that renames all local admin
>> > accounts.
>> > that is the account I was using. Anyone have any ideas or should I just
>> > pick
>> > up the phone now and call microsoft.
>> >
>> > Thanks,
>> > Nate Weldon
>>
>>
>>

What happened was when I installed My exchange server the default domain
group policy was changed to that right on all computers was set to Exchange
Enterprise Servers, I'm assuming it happened during forest or domain prep for
exchange. I removed the portion of policy and all is well.

"Sudheer GN [MSFT]" wrote:

> Hi,
> Do you mean that privilege is only available to Exchange Enterprise Admins?
> Are you logged on as Exchange enterprise admin?
> Try changing the settings as the user who has that privilege.
>
> --
> Sudheer GN
> Microsoft, BITS
>
> This posting is provided "As Is" with no warranties, and confers no rights.
> Use of included script samples are subject to the terms specified at
> http://www.microsoft.com/info/cpyright.htm
>
>
>
> "Nate Weldon" <> wrote in message
> news:7D482D2B-431F-4C81-A866-...
> > The manage auditing and security log rights have Exchange Enterprise
> > servers
> > as the only entry, and I am unable to change them. How can that be, I have
> > exch admin tools intstalled on this machine but that is it. Also, how can
> > I
> > change that.
> >
> > "Sudheer GN [MSFT]" wrote:
> >
> >> Hi,
> >> Following privileges are needed for installing BITS package and other
> >> security updates released in July 2004. Please check if your account has
> >> needed
> >> privileges?
> >>
> >> WinNT/2K privilege value
> >> "SecPol.msc > Local Policies > User Rights Assignment" display name
> >> Description
> >>
> >> SeBackupPrivilege
> >> Back up files and directories
> >> Required to perform backup operations
> >>
> >> SeDebugPrivilege
> >> Debug programs
> >> Required to debug a process
> >>
> >> SeRestorePrivilege
> >> Restore files and directories
> >> Required to perform restore operations. This privilege enables you
> >> to
> >> set any valid user or group security identifier (SID) as the owner of an
> >> object.
> >>
> >> SeSecurityPrivilege
> >> Manage auditing and security log
> >> Required to perform a number of security-related functions, such as
> >> controlling and viewing audit messages. This privilege identifies its
> >> holder
> >> as a security operator.
> >>
> >> SeTakeOwnershipPrivilege
> >> Take ownership of files or other objects
> >> Required to take ownership of an object without being granted
> >> discretionary access. This privilege allows the owner value to be set
> >> only
> >> to those values that the holder may legitimately assign as the owner of
> >> an
> >> object.
> >>
> >>
> >> --
> >> Sudheer GN
> >> Microsoft, BITS
> >>
> >> This posting is provided "As Is" with no warranties, and confers no
> >> rights.
> >> Use of included script samples are subject to the terms specified at
> >> http://www.microsoft.com/info/cpyright.htm
> >> "Nate Weldon" <> wrote in message
> >> news:B19DD647-2035-417A-BB1F-...
> >> > Am trying to install the latest round of patches. There is only one
> >> > listed,
> >> > the backround intelligent transfer service. The update constantly fails
> >> > with
> >> > error 8007f004. I used the windows update trouble shooter but there is
> >> > no
> >> > data on this error there. I downloaded the patch from the KB article
> >> > and
> >> > tried to install that way and got an error that stated I do not have
> >> > the
> >> > rights to install this update. I'm a domain admin, and I also tried to
> >> > install as the local admin with the same results. The only thing
> >> > different
> >> > about this machine is that I have a GP that renames all local admin
> >> > accounts.
> >> > that is the account I was using. Anyone have any ideas or should I just
> >> > pick
> >> > up the phone now and call microsoft.
> >> >
> >> > Thanks,
> >> > Nate Weldon
> >>
> >>
> >>
>
>
>