I cannot install Windows Updates on any server while logged in as the domain administrator.

Windows Update cannot currently check for updates

The domain controller was recently migrated from a Server 2003 machine to a Server 2008 machine. This included an old administrator account with a different username. This user account can install updates.

I'd like to get rid of the old administrator account and continue on with the new one, however I can't see the differences between these two accounts that would effect installing Windows Updates (e.g. group memberships).


This doesn't look like a problem with the account that you're using. It sounds like you have a Computer GPO configured to restrict Windows Update. You can verify this by running gpresult /H and viewing the output. It should be obvious where the offending GPO is.

If this really is a group membership problem, you can view detailed group information for each account by logging in and running whoami /groups.

  • Thanks! It was a GPO - User Configuration/Windows Components/Windows Update. – Ash May 23 '12 at 1:07

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.