Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I cannot install Windows Updates on any server while logged in as the domain administrator.

Windows Update cannot currently check for updates

The domain controller was recently migrated from a Server 2003 machine to a Server 2008 machine. This included an old administrator account with a different username. This user account can install updates.

I'd like to get rid of the old administrator account and continue on with the new one, however I can't see the differences between these two accounts that would effect installing Windows Updates (e.g. group memberships).

share|improve this question
up vote 4 down vote accepted

This doesn't look like a problem with the account that you're using. It sounds like you have a Computer GPO configured to restrict Windows Update. You can verify this by running gpresult /H and viewing the output. It should be obvious where the offending GPO is.

If this really is a group membership problem, you can view detailed group information for each account by logging in and running whoami /groups.

share|improve this answer
Thanks! It was a GPO - User Configuration/Windows Components/Windows Update. – Ash May 23 '12 at 1:07

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.