"You do not have permission to update Windows XP (...)"

[Nite Krawlerr]

"(...) Please contact your system administrator".
I get this message box when I try to update Windows XP Service Pack 2.
All the files are downloaded, but not installed.
I am in a corporate network, I am an administrator of this machine, with
full permissions, I believe.

The "svcpack.log" file in Windows folder shows the following:
3.365:
================================================================================
3.375: 2004/10/13 18:32:36.388 (local)
3.395:
C:\WINDOWS\SoftwareDistribution\Download\6ca7b3a8efd5a9b6f87fff395a2eb989\update\update.exe (version 5.5.1005.0)
3.395: Failed To Enable SE_SHUTDOWN_PRIVILEGE
3.395: Failed To Enable SE_TAKE_OWNERSHIP_PRIVILEGE
3.405: Setup encountered an error: You do not have permission to update
Windows XP.
Please contact your system administrator.
3.405: UnRegisterSpuninstForRecovery, failed to delete SpRecoverCmdLine
value, error 0x2
3.405: DoInstallation: Failed to unregistering spuninst.exe for recovery.
3.405: You do not have permission to update Windows XP.
Please contact your system administrator.
98.362: Message displayed to the user: You do not have permission to update
Windows XP.
Please contact your system administrator.
98.362: User Input: OK
98.362: Update.exe extended error code = 0xf004

I have tried:
- to run the 272 MB EXE for admins;
- to compare my "Local Security Settings" with another functional computer;
- to search the FAQ, Knowledge Base, Windows Update Help and Support, and
now these newsgroups.

If at least I could find someone with the same problem... :-/
It's been a month since I'm trying to make this work.
And there is no answer in the knowledge base yet, which make me think my
case is unfortunately unique. :(

Anyway, thanks for having the patience to read through this.

[Jerry Farrell]

If you are in a networked environment you will need administrator rights to
the domain. Have your sys admin do the update or have him grant you temporary
admin rights to the domain so you can do the update then return you to your
current permission.

[Yan]

Hi,
I have the same problem on many computer with w2k SP4 "(...) Please contact
your system administrator".
when i try to install MS04-029 to MS04-038. I'm entreprise admin and local
admin. Please help me.

[Nite Krawlerr]

I'll try that, to turn one domain admin into a local admin in my machine,
and ask him to install SP2 instead of me.
I forgot to mention, but I tried to use "Run As" in the SP2 EXE file, logged
with a Domain Admin account, and it didn't work, I got the same message box...

What makes me think is the fact that my colleague (the one which I compared
my security option with) is NOT a Domain Admin, just like me.
And he managed to install SP2.
He has the "Failed To Enable SE_SHUTDOWN_PRIVILEGE" message in his
svcpack.log, but don't have the "Failed To Enable
SE_TAKE_OWNERSHIP_PRIVILEGE".

I saw his "Local Security Policy" (Control Panel / Administrative Tools),
under the node "Local Policies", then "User Rights Assignment".
He has the "Take ownership of files or other objects" item set just like
mine, with the value "CORP\Domain Admins".
And both of us can't change this value, it is disabled probably because of
network policies or something (we're not network admins)...

I think it has a simple solution, maybe "give full access to a certain
file", but the log is not that specific... :(