locked
domain admin account cannot search for windows updates. RRS feed

  • Question

  • Hi,

    One of my customer is having an issue where when we  try to do a windows update in the domain controllers (there are three DCs) via the domain admin account unable to click on the "check for updates". Its disabled, There is no WSUS server. Also in Internet Explorer when you go to, Tools>Options>Security then cannot add websites to the zones such as Trusted,Restricted etc.. 

    This account has schema admin, enterprise admin, domain admin rights

    Thanks.

     

    Wednesday, May 11, 2011 11:07 AM

Answers

  • Hello,

    please run gpresult /h GPResult.html and check the output for applied settings about Windows update options.

    http://technet.microsoft.com/en-us/library/cc733160(WS.10).aspx


    Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
    • Marked as answer by Ckanishka Friday, May 13, 2011 3:56 AM
    Wednesday, May 11, 2011 11:31 AM
  • As Meinolf has suggested, this is likely result of a Group Policy. For group policy related questions, refer to  http://social.technet.microsoft.com/Forums/en/winserverGP/threads

    hth
    Marcin

    • Marked as answer by Ckanishka Friday, May 13, 2011 3:56 AM
    Wednesday, May 11, 2011 11:54 AM
  • I concur as well, gpo issue.

    --
    Paul Bergson
    MVP - Directory Services
    MCITP: Enterprise Administrator
    MCTS, MCT, MCSE, MCSA, Security+, BS CSci
    2008, Vista, 2003, 2000 (Early Achiever), NT4
    http://www.pbbergs.com    Twitter @pbbergs
    http://blogs.dirteam.com/blogs/paulbergson

    Please no e-mails, any questions should be posted in the NewsGroup. This posting is provided "AS IS" with no warranties, and confers no rights.

    • Marked as answer by Ckanishka Friday, May 13, 2011 3:56 AM
    Wednesday, May 11, 2011 11:57 AM
  • Run RSOP.MSC on any one of the DC & check the GPO settings applied or any deny option has been configured.

    http://support.microsoft.com/kb/323276

     

     

    Regards


    Awinish Vishwakarma| CHECK MY BLOG 

    Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.

    • Marked as answer by Ckanishka Friday, May 13, 2011 3:56 AM
    Wednesday, May 11, 2011 1:01 PM
  • Hi All,

    After running gpresult /h i found this setting, and this could be the reason for this issue. I will check this thank you very much for the responses.

     

    Policy                                                     Settings

    Remove access to use all windows            Enabled

    update features 

     

    thanks again.

    • Proposed as answer by Meinolf Weber Thursday, May 12, 2011 6:13 AM
    • Marked as answer by Ckanishka Friday, May 13, 2011 3:55 AM
    Thursday, May 12, 2011 3:36 AM

All replies

  • Hello,

    please run gpresult /h GPResult.html and check the output for applied settings about Windows update options.

    http://technet.microsoft.com/en-us/library/cc733160(WS.10).aspx


    Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
    • Marked as answer by Ckanishka Friday, May 13, 2011 3:56 AM
    Wednesday, May 11, 2011 11:31 AM
  • As Meinolf has suggested, this is likely result of a Group Policy. For group policy related questions, refer to  http://social.technet.microsoft.com/Forums/en/winserverGP/threads

    hth
    Marcin

    • Marked as answer by Ckanishka Friday, May 13, 2011 3:56 AM
    Wednesday, May 11, 2011 11:54 AM
  • I concur as well, gpo issue.

    --
    Paul Bergson
    MVP - Directory Services
    MCITP: Enterprise Administrator
    MCTS, MCT, MCSE, MCSA, Security+, BS CSci
    2008, Vista, 2003, 2000 (Early Achiever), NT4
    http://www.pbbergs.com    Twitter @pbbergs
    http://blogs.dirteam.com/blogs/paulbergson

    Please no e-mails, any questions should be posted in the NewsGroup. This posting is provided "AS IS" with no warranties, and confers no rights.

    • Marked as answer by Ckanishka Friday, May 13, 2011 3:56 AM
    Wednesday, May 11, 2011 11:57 AM
  • Run RSOP.MSC on any one of the DC & check the GPO settings applied or any deny option has been configured.

    http://support.microsoft.com/kb/323276

     

     

    Regards


    Awinish Vishwakarma| CHECK MY BLOG 

    Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.

    • Marked as answer by Ckanishka Friday, May 13, 2011 3:56 AM
    Wednesday, May 11, 2011 1:01 PM
  • Hi All,

    After running gpresult /h i found this setting, and this could be the reason for this issue. I will check this thank you very much for the responses.

     

    Policy                                                     Settings

    Remove access to use all windows            Enabled

    update features 

     

    thanks again.

    • Proposed as answer by Meinolf Weber Thursday, May 12, 2011 6:13 AM
    • Marked as answer by Ckanishka Friday, May 13, 2011 3:55 AM
    Thursday, May 12, 2011 3:36 AM