I am a administrator. Why no permission to update ?

[redbaron_snoopy]

Hi, I've this strange problem that even my network administrator can't solve.
It also happens to a number of my colleagues.

When I (we) tried to do windows update, after downloading, the installation process failed.
I then download aave a few of the patches manually and when I try to install, I get this error "You do not have permission to update Windows 2000. Please contact your system administrator".

I'm logged in as a administrator (local machine).

Please advice. Thanks

[ltmccaul]

Is this machine part of a domain, if so are there any GPOs that might rename the actual admin account to something else and disable it and to be even sneakier create a new dummy admin account with no privilages?

[redbaron_snoopy]

I don't understand quite understand what you mean. What should I check ?
Under local users and groups, I have these as administrators :

\s-1-5-21-1454471165-12292722821-682003330-1165
\s-1-5-21-1454471165-12292722821-682003330-512
administrator
op-ly

The last name is my office login name what are the 1st 2 administrator names?

Please advice. Thanks

[Digitalic]

What ltmccaul is referring to I believe is that Domain policy overides local policy. If you log onto a domain at your office, even if you are logged on as a local admin on your workstation you will not be able to run Windows Update if it is prohibited on the Domain unless you are a domain admin. Therefore you would have to check with your (domain) administrator to be granted such privileges.

edit: yes, there are workarounds but I do believe that would violate forum rules.

[ltmccaul]

Those 2 long numbers are SIDs (Security ID) of accounts on the machine, usually the lower ones like the one that ends in 512 are the built in accounts, that higher one maybe a system account or another user account, you can do a search on microsoft for those numbers, the SIDs for built in account are standard accross computers