Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I cannot install Windows Updates on any server while logged in as the domain administrator.

Windows Update cannot currently check for updates

The domain controller was recently migrated from a Server 2003 machine to a Server 2008 machine. This included an old administrator account with a different username. This user account can install updates.

I'd like to get rid of the old administrator account and continue on with the new one, however I can't see the differences between these two accounts that would effect installing Windows Updates (e.g. group memberships).

share|improve this question
add comment

1 Answer

up vote 4 down vote accepted

This doesn't look like a problem with the account that you're using. It sounds like you have a Computer GPO configured to restrict Windows Update. You can verify this by running gpresult /H and viewing the output. It should be obvious where the offending GPO is.


If this really is a group membership problem, you can view detailed group information for each account by logging in and running whoami /groups.

share|improve this answer
    
Thanks! It was a GPO - User Configuration/Windows Components/Windows Update. –  Ash May 23 '12 at 1:07
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.