Solved

Windows will not update. Says administrator has disabled but group policy doesn't agree.

Posted on 2007-03-26
10
441 Views
Last Modified: 2013-11-21
First we use windows XP pro operating systems and we are on a server with Server 2003...

I am unable to update my widows operating system. I get an error, "Windows Update was by your administrator"  That is untrue.  I went myself into the group policy and have tried both the disable and not configured options, "disable in this case actually would mean enable since it is a double negative, I am disabling the "disable windows update feature".  I have tried via Internet explorer, and the OS update ooption both with the same problem.  I even downloaded a script (http://www.dougknox.com/xp/scripts_desc/xp_winupd_netpolicy.htm) that allowed the Internet explorer to get farther in the process but stalled out after saying I need to...
 
"Please change your Internet Explorer security settings
To save changes to your settings for this website, you need to enable userdata persistence for Internet Explorer. Complete the steps below, and then click Change settings to the left and try saving your changes again.
In Internet Explorer, on the Tools menu, click Internet Options.
Click the Security tab, click the Internet security zone icon, and then click Custom Level.
In the Settings dialog box, scroll to the Miscellaneous section.
Under Userdata persistence , select Enable.
Click OK and when the security warning dialog box appears, click Yes.  "

When I try this I find the setting are already correct.  So if it is not the group policy and my local computer is not limiting my access then how do I keep my computer updated.  I noticed this because of Day Light Savings Time but of course it relates to all security patches as well.  I am on a server obviously, as well as eight other computer all which are having the same problem.  The computers are supposed to look for updates daily at 2am which is set by the group policy.  Is there another way to block updates besides the group policy?  Please help!
0
Comment
Question by:RyWild
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 4
10 Comments
 
LVL 24

Expert Comment

by:Kenneniah
ID: 18794927
Have you looked at both local group policy (gpedit.msc on the local machine) and domain group policy (Group Policy Management Console GPMC on the server)?
0
 

Author Comment

by:RyWild
ID: 18795356
Yes I just double checked my local machine group policy, under both user and computer configurations, as well as logged into the server and disabled (Not Configured setting) any and all control of windows updating.  I restarted my pc and still same result.
0
 
LVL 24

Expert Comment

by:Kenneniah
ID: 18795482
Only other thing I could think of is a policy placed directly in the registry.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate
0
Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

 

Author Comment

by:RyWild
ID: 18795556
That says value not set...
0
 
LVL 24

Accepted Solution

by:
Kenneniah earned 500 total points
ID: 18795639
Where exactly are you looking in group policy?
There's actually two locations it can be set.
User Configuration\Administrative Templates\Start Menu and Taskbar\"Remove links and access to Windows Update"
and
User Configuration\Administrative Templates\Windows Update\"Remove access to use all Windows Update features"
0
 

Author Comment

by:RyWild
ID: 18796401
You have found the solution to the first half of the problem... Now I just keep running into that user persistence problem.  I went to this knowledge based article but I am not sure what it wants me to do where... http://support.microsoft.com/kb/909444 

Again I get to the update windows website and it tells me my user persistence option under security settings must be set to enable.  But it already is.
0
 
LVL 24

Expert Comment

by:Kenneniah
ID: 18800624
What that article is wanting you to do, is to open Windows Explorer, browse to C:\Windows\Registration and check the security permissions by right-clicking on the folder and the files, hitting properties, changing to the security tab, and hitting advanced.
Then it's also wanting you to make sure the Everyone group has the Bypass traverse checking right in User Rights Assignment in either gpedit.msc or secpol.msc

If you look in event viewer, are you getting any of the error messages mentioned in that article though?
Before you go through all that, go to Start|Run and type services.msc
Look at Automatic Updates. Is it set to Automatic and is it started? If not, will it let you manually start it or do you get an error message?


Also try updating the XML parser (msxml6.msi) from
http://www.microsoft.com/downloads/details.aspx?FamilyID=993C0BCF-3BCF-4009-BE21-27E85E1857B1&displaylang=en
0
 
LVL 24

Assisted Solution

by:Kenneniah
Kenneniah earned 500 total points
ID: 18800659
Also,, if you get some kind Access Denied message when trying to start the Automatic Updates service, open regedit to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv and delete the Security key. Incorrect or currupt security settings for that service could be causing your issue.
0
 

Author Comment

by:RyWild
ID: 18801937
Thanks for your help these solutions worked great...
0
 
LVL 24

Expert Comment

by:Kenneniah
ID: 18801987
Glad it got worked out :)
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Demoting old remnants of Domain Controller from Active Directory 9 54
2008 R2 time server is invalid 6 32
Changing logon server question 5 64
DNS/WINS in a domain 10 42
Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup" or a blinking cursor with black screen. A loop for Auto repair will start but fix nothing.  You will be panic as there are no back…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question