Security Update for Windows XP (KB873333) - Failed Install

I've tried installing this patch via WU and it fails. I tried downloading it
from MS.COM and installing it manually and it fails.

I get the error message "Access Denied" and then a dialog box "Setup Error".

I tried running as a user with admin privileges and as Administrator and get
the same result. I've tried doing a System Restore until before it was
released (~2/11/05) and run WU and all updates since install except this one.

What else can I try?
Thanks.

"stl2sea",

The answer depends on many points:
1. Is this computer part of a domain, and as such, perhaps has a group
policy denying end users access to installing Windows Update?
2. If not, please try, for test purposes only:
a. Create a new account and join it to the localgroup administrators.
b. Log off as yourself and log back on as the new user/administrator.
c. Try the installation this way.
3. If that does not work, verify your disk system is NTFS, and then try to
elevate some privileges where they should be.
a. Click Start
b. Click Run
c. Type: diskmgmt.msc <Enter>
d. When the Disk Administrator window opens, verify that the drive that
has the windows directory is NTFS and *not* FAT32. If the disk system *is*
FAT32, then reply back and let us know you could not triage further. Close
the Disk Administrator window.
e. If NTFS, then close the Disk Administrator window.
f. Click Start
g. Click Run
h. Type: cmd <Enter>
i. In the Command Prompt, type: notepad wuev.cmd <Enter> Confirm that
you wish to create this file.
j. Copy and paste the following 7 commands into the notepad:
ECHO y| CACLS.EXE "%WINDIR%\SoftwareDistribution\WuRedir" /E /T /G
Administrator:F
ECHO y| CACLS.EXE "%WINDIR%\SoftwareDistribution\WuRedir" /E /T /G SYSTEM:F
net stop wuauserv
net stop bits
net start bits
net start wuauserv
net localgroup administrators /add %username%
k. Save this file by pressing <Ctrl>+<S>
l. Close this file
m. In the Command Prompt again, please type: wuev.cmd <Enter> Please
reply back with any errors.

Try the update again at Windows Update.

Sincerely,

Pat Walters [MSFT]


"stl2sea" <> wrote in message
news:AAEEE3C4-08CB-463E-B1A9-...
> I've tried installing this patch via WU and it fails. I tried downloading
it
> from MS.COM and installing it manually and it fails.
>
> I get the error message "Access Denied" and then a dialog box "Setup Error
".
>
> I tried running as a user with admin privileges and as Administrator and
get
> the same result. I've tried doing a System Restore until before it was
> released (~2/11/05) and run WU and all updates since install except this
one.
>
> What else can I try?
> Thanks.

I tried creating an new login and running installation and got the same
error. I have confirmed I have NTFS on the drive with Windows installed (as
well as the external USB drive connected.) I ran the precedure below and it
still will not install. The results from running the process below are as
follows:

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Patrick Kennedy>notepad wuev.cmd

C:\Documents and Settings\Patrick Kennedy>wuev.cmd

C:\Documents and Settings\Patrick Kennedy>ECHO y | CACLS.EXE
"C:\WINDOWS\Softwa
reDistribution\WuRedir" /E /T /G
Displays or modifies access control lists (ACLs) of files

CACLS filename [/T] [/E] [/C] [/G usererm] [/R user [...]]
[/P usererm [...]] [/D user [...]]
filename Displays ACLs.
/T Changes ACLs of specified files in
the current directory and all subdirectories.
/E Edit ACL instead of replacing it.
/C Continue on access denied errors.
/G usererm Grant specified user access rights.
Perm can be: R Read
W Write
C Change (write)
F Full control
/R user Revoke specified user's access rights (only valid with /E).
/P usererm Replace specified user's access rights.
Perm can be: N None
R Read
W Write
C Change (write)
F Full control
/D user Deny specified user access.
Wildcards can be used to specify more that one file in a command.
You can specify more than one user in a command.

Abbreviations:
CI - Container Inherit.
The ACE will be inherited by directories.
OI - Object Inherit.
The ACE will be inherited by files.
IO - Inherit Only.
The ACE does not apply to the current file/directory.

C:\Documents and Settings\Patrick Kennedy>Administrator:F
The filename, directory name, or volume label syntax is incorrect.

C:\Documents and Settings\Patrick Kennedy>ECHO y | CACLS.EXE
"C:\WINDOWS\Softwa
reDistribution\WuRedir" /E /T /G SYSTEM:F
processed dir: C:\WINDOWS\SoftwareDistribution\WuRedir
processed dir:
C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9
A65BC822C77
processed file:
C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-
9A65BC822C77\wuredir.cab
processed file:
C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-
9A65BC822C77\wuredir.xml

C:\Documents and Settings\Patrick Kennedy>net stop wuauserv
The Automatic Updates service is stopping.
The Automatic Updates service was stopped successfully.


C:\Documents and Settings\Patrick Kennedy>net stop bits
The Background Intelligent Transfer Service service is stopping.
The Background Intelligent Transfer Service service was stopped successfully.


C:\Documents and Settings\Patrick Kennedy>net start bits
The Background Intelligent Transfer Service service is starting.
The Background Intelligent Transfer Service service was started successfully.


C:\Documents and Settings\Patrick Kennedy>net start wuauserv
The Automatic Updates service is starting.
The Automatic Updates service was started successfully.


C:\Documents and Settings\Patrick Kennedy>net localgroup administrators /add
Pat
rick Kennedy
There is no such global user or group: Patrick.

There is no such global user or group: Kennedy.

More help is available by typing NET HELPMSG 3783.



"Pat Walters [MSFT]" wrote:

> "stl2sea",
>
> The answer depends on many points:
> 1. Is this computer part of a domain, and as such, perhaps has a group
> policy denying end users access to installing Windows Update?
> 2. If not, please try, for test purposes only:
> a. Create a new account and join it to the localgroup administrators.
> b. Log off as yourself and log back on as the new user/administrator.
> c. Try the installation this way.
> 3. If that does not work, verify your disk system is NTFS, and then try to
> elevate some privileges where they should be.
> a. Click Start
> b. Click Run
> c. Type: diskmgmt.msc <Enter>
> d. When the Disk Administrator window opens, verify that the drive that
> has the windows directory is NTFS and *not* FAT32. If the disk system *is*
> FAT32, then reply back and let us know you could not triage further. Close
> the Disk Administrator window.
> e. If NTFS, then close the Disk Administrator window.
> f. Click Start
> g. Click Run
> h. Type: cmd <Enter>
> i. In the Command Prompt, type: notepad wuev.cmd <Enter> Confirm that
> you wish to create this file.
> j. Copy and paste the following 7 commands into the notepad:
> ECHO y| CACLS.EXE "%WINDIR%\SoftwareDistribution\WuRedir" /E /T /G
> Administrator:F
> ECHO y| CACLS.EXE "%WINDIR%\SoftwareDistribution\WuRedir" /E /T /G SYSTEM:F
> net stop wuauserv
> net stop bits
> net start bits
> net start wuauserv
> net localgroup administrators /add %username%
> k. Save this file by pressing <Ctrl>+<S>
> l. Close this file
> m. In the Command Prompt again, please type: wuev.cmd <Enter> Please
> reply back with any errors.
>
> Try the update again at Windows Update.
>
> Sincerely,
>
> Pat Walters [MSFT]
>
>
> "stl2sea" <> wrote in message
> news:AAEEE3C4-08CB-463E-B1A9-...
> > I've tried installing this patch via WU and it fails. I tried downloading
> it
> > from MS.COM and installing it manually and it fails.
> >
> > I get the error message "Access Denied" and then a dialog box "Setup Error
> ".
> >
> > I tried running as a user with admin privileges and as Administrator and
> get
> > the same result. I've tried doing a System Restore until before it was
> > released (~2/11/05) and run WU and all updates since install except this
> one.
> >
> > What else can I try?
> > Thanks.
>
>
>