Member Avatar for Netking27

just installed win server in administrative role but on installing service pack2 or any service pack it gives a message stating "U DONT HAVE NECESSARY PERMISSIONS TO INSTALL UPDATES.CONTACT YOUR SYSTEM ADMINISTRTATOR"

but i am the system administrator... even after giving full rights to c:

pls help...

  • 2 Contributors
  • 3 Replies
  • 244 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by Netking27

Dani AI

Generated

Quick expert summary for (and in response to ): an "insufficient permissions" error when applying a Service Pack on a domain-joined server is usually one of a few things — the installer is not running with an elevated token (UAC/elevation on Server 2008+), a Group Policy/Restricted Groups setting removed domain administrative rights from the local Administrators group, the Windows Update/WSUS client is misbehaving, or file/registry ACLs block servicing. Domain Admins are, by default, members of each domain-joined computer's local Administrators group, but GPOs can change that membership. Appendix B: Privileged Accounts and Groups in Active Directory. Installer elevation and Admin Approval Mode (UAC) change how administrator accounts behave on newer servers. User Account Control overview. (learn.microsoft.com)

Quick troubleshooting checklist (run from a local/elevated console to avoid remote-elevation quirks):

whoami /groups
whoami /priv
gpresult /r > C:\gpresult.txt
net localgroup Administrators

If Domain Admins are missing from the local Administrators group or gpresult shows a Restricted Groups policy, fix the GPO. Reset the Windows Update components and clear the update cache with these commands before retrying the SP install:

net stop wuauserv
net stop bits
ren %windir%\SoftwareDistribution SoftwareDistribution.old
net start bits
net start wuauserv

Microsoft documents procedures and advice for resetting update components. Additional resources for Windows Update. (learn.microsoft.com)

Gather precise error evidence and policy context: check Event Viewer (Application/System) and the Windows Update client log, and produce a Group Policy results report with gpresult or the GPMC Resultant Set of Policy so any applied GPO that blocks updates or removes admin membership is obvious. Documentation for gpresult and Windows Update logs is here: gpresult and Windows Update log files. (learn.microsoft.com)

Other practical notes: run the standalone SP executable with "Run as administrator" or sign in with the built-in Administrator (it bypasses Admin Approval Mode on older server builds), temporarily disable third‑party AV/endpoint protection, and avoid jumping to wholesale ACL changes on production servers. If ACLs must be repaired, take a full system-state backup first and prefer Microsoft-recommended reset procedures (secedit or the supported update-reset workflows) rather than ad hoc scripts. Capture WindowsUpdate.log and the exact Event IDs before making destructive changes — those codes drive the correct fix.

Recommended Answers

All 3 Replies

Member Avatar for jbennet

Are you a full domain admin or just a local admin

Member Avatar for Netking27

i am domain admin..

Member Avatar for Netking27

also the srv has been included in our dom with c partition given full rights to admin...

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.