Windows Update Problem
Hello There,I hope someone can help me in this problem, when i try to update any of my servers i got this error:Installation Failure: Windows failed to install the following update with error 0x8007f004: Update for Internet Explorer 8 Compatibility View List for Windows Server 2003 (KB969497).
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.Any suggestions ???
May 24th, 2009 1:53am
Hi there,
Try these three links
http://ms-os.com/showthread.php?t=48498
http://www.mcse.ms/archive292-2005-11-1782537.html
http://www.petri.co.il/forums/archive/index.php/t-4091.html
Looks like a privalige problem.
Hope this helps. Thanks and Regards,ScorprioMCTS: Windows Vista | Exchange Server 2007
MCITP: Enterprise Support Technician | Server & Enterprise Admin
Free Windows Admin Tool Kit Click here and download it now
May 24th, 2009 8:11am
Hello,
The error code 0x8007F004 occurs when there is insufficient permission.
Before moving on, I would like to check whether the computer was logged on as Administrator when installing the update. If not, I suggest restarting the computer and then installing the update with Administrator Permission.
If an Administrator account is used, the issue can be caused if that Local Administrator account does not have sufficient rights. Users installing updates require the following rights:
- Restore files and directory
- Manage auditing and security logs
- Backup files and directories
- Take ownership of files and folders.
To resolve this issue, we need to check the group policy to ensure users have the sufficient rights. To do so, please perform the steps below.
Modify the Group Policy
=================
1. Log on to the system with an administrator account.
2. Click Start and click Run, type gpedit.msc in the open box and hit OK.
3. In the left pane, expand [Computer Configuration]\[Windows Settings]\[Security Settings]\[Local Policies] and highlight [User Rights Assignment].
4. In the right pane, double click the item [Manage auditing and security log].
5. In "Manage auditing and security log" dialog box, click "Add User or Group" button, and enter "Administrators" (without the quotation marks). Please use the "Check Names" button to ensure the entries are correct.
6. Click OK
7. Make sure the following users are in the list and have sufficient rights.
********************
Everyone
System
Administrators (if you find more than one administrators in the list, please add them all)
Your log on user name
********************
8. Repeat the same steps for the following user rights
- Restore files and directory
- Manage auditing and security logs
- Backup files and directories
- Take ownership of files and folders.
9. Make sure the following users are in the list and have sufficient rights.
********************
Everyone
System
Administrators (if you find more than one administrators in the list, please add them all)
Your log on user name
********************
10. Exit group policy and try to install the update again. We may need to restart the computer so that the changes can take effect.
After trying the above suggestion, please try to install the update again on the Windows Update site.
If the issue persists, this can be caused by a domain group policy. I suggest using the rsop.msc tool gather the group policy status that are applied to the server and check whether these rights are currently configured. If so, you can modify the corresponding group policy to grant appropriate right.
To use rsop.msc tool, you can perform the following steps:
a. Logon as the problematic user, click Start -> Run -> RSoP.msc
b. Review the results for [Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Restore files and directory] item to see whether this policy is defined. If so, the the "Source GPO" column will display the group policy that defines this setting.
c. Repeat the Step b for other rights.
After you locate the policy that defines this setting, please open the corresponding group policy in the Group Policy Editor to ensure Administrators is granted this right. If the administrator group is not listed there, please click "Add user or group" and type in "administrator". After that, please run the following command to refresh policy on both the domain controller and the client:
gpupdate /force
Whats the result now?
Tim Quan - MSFT
May 25th, 2009 9:04am
Hello,
How are things going? We have not heard back from you in a few days and wanted to check on the status of the issue. Please let us know how things turned out.
Tim Quan - MSFT
Free Windows Admin Tool Kit Click here and download it now
May 27th, 2009 8:35am
Thanks Scorprio,Tim for your replay. you are right it was a privalige problem. i checked the domain GP and i found the administrators Groupalready exist under all the user right that you refered to.I just added the follwoing Group "MYDomain\Domain Admin" then the problem solved and all the updates now runing correctly.Thanks again for your care.
May 27th, 2009 11:36am


