Windows updates fail under user accounts except for administator to the domain.

Posted on 2006-04-21
Last Modified: 2013-12-04
While I was out at a client site I was asked why his windows updates failed and would not install either via automatic updates or from the web. I was able to log in as the administrator to the domain and install them fine. This user is also in the domain admin group as well as a local admin to the PC. I started believing it was an issue with his profile and even created a new one but that failed as well. He suggested I use system restore to go back a few days before he noticed the issue. When I attempted to run sys restore from his account, I received a message that he did not have the proper privilages to run that application. Again, he is a member of the Domain Admins.
I could only run sys restore from the administrator to the domain. This told me there is something funky going on with the security/policy so I tested this on another machine. No matter what user I log in with on any machine, I can download updates but then they fail during the install portion. However, if I log in as the admin I can install them just fine.

I have looked and searched for this online but have yet to locate anything that will help resolve this issue. According to the client, nothing has changed on the server for this to happen.

Any ideas??

Thank you in advance
Jeremy Johnston
Question by:dynasis
    LVL 87

    Accepted Solution

    There is probably a policy which applies to the OU these accounts are created in. The administrator will be located in the normal user's OU which active directory installs by default. Other users will probably be in another OU to which the policy applies to.
    LVL 38

    Assisted Solution

    by:Rich Rumble

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Maximize Your Threat Intelligence Reporting

    Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

    As I write this article, I am finishing cleanup from the Qakbot virus variant found in the wild on April 18, 2011.  It was a messy beast that had varying levels of infection, speculated as being dependent on how long it resided on the infected syste…
    This is a short article about OS X KeRanger, and what people can do to get rid of it.
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now