Microsoft KB Archive/316524

Knowledge Base

You receive an "Administrators only" error message when you try to visit the Windows Update Web site or the Microsoft Update Web site

Article ID: 316524

Article Last Modified on 12/5/2007

---

APPLIES TO

• Microsoft Windows Update
• Microsoft Update

---

This article was previously published under Q316524

Important This article contains information about how to modify the registry. Make sure to back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows registry

SYMPTOMS

When you try to visit the Windows Update Web site or the Microsoft Update Web site, you may receive an error message that is similar to the following:

Error number: 0x8DDD0002

To install items from Windows Update, you must be logged on as an administrator or a member of the Administrators group. If your computer is connected to a network, network policy settings may also prevent you from completing this procedure.

You receive this message even though you are already logged on as an administrator or a member of the Administrators group.

Note For more information about the Windows Update site and the Microsoft Update site, see the "More Information" section.

CAUSE

This behavior may occur for any one of the following reasons:

1. You are not logged on as a user who belongs to the local Administrators group.
2. You do not have permission to specific registry keys or folders.
3. The operating system cannot read the data in the %Systemroot%\System32\Catroot2 folder.

RESOLUTION

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

To resolve this issue, use one of the following methods. If Method 1 does not resolve the problem, use Method 2.

• === Method 1 ===

  Verify that you are logged on as a user who belongs to the local Administrators group.
  
  

  Windows XP

  Click Start, click Run, type nusrmgr.cpl, and then click OK to open the User accounts window.
  
  If you are part of a network domain, follow these steps:

  1. In the User Accounts window, click to select your account from the list, and then click Properties.
  2. On the Group Membership tab, verify that you are in the Administrators group.

  If you are not part of a network domain, follow these steps:

  1. In the User Accounts window, click your account, and then verify that Computer Administrator appears under your account name.

  Windows 2000

  1. Click Start, click Run, type compmgmt.msc, and then click OK.
  2. In the Computer Management window, expand System Tools, expand Users and Groups, and then click the Users folder.
  3. In the right pane of the Computer management window, right-click the user whose user rights you want to verify, and then click Properties.
  4. On the Member Of tab, verify that Administrators is listed in the Member of box.

  After you logged on as an administrator, try to visit the Windows Update Web site or the Microsoft Update Web site again. If the problem is resolved, do not continue troubleshooting.

• === Method 2 ===

  Delete temporary Internet files. To do this, follow these steps:

  1. Open the Internet Explorer window, click Tools, and then click Internet Options.
  2. In the Internet Options window, click the General tab, under Temporary Internet files, click Delete Files, and then click OK.

  Try to visit the Windows Update Web site or the Microsoft Update Web site again. If the problem is resolved, do not continue troubleshooting.

• === Method 3 ===

  Verify the permissions on the registry keys that are used by the Windows Update client and the Microsoft Update client.

  1. Click Start, click Run, type regedit, and then click OK.
     
     Note In Microsoft Windows 2000 or in Microsoft Windows NT 4.0, type regedt32 instead of "regedit."
  2. Locate and select the following registry key:

     HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate

  3. On the Edit menu, click Permissions, click Add, and then type everyone in the dialog box that appears.
     
     Note In Windows 2000 or in Windows NT 4.0, click Permissions on the Security menu.
  4. Click Check Names, and then click OK.
  5. Select Everyone in the Group or user names list.
  6. Under Permissions for Everyone, click to select the Full Control check box in the Allow column.
     
     Note that the Read check box in the Allow column is now also selected.
  7. Select each user, in turn, in the Group or user names list, and then verify that no check boxes are selected in the Deny column. Click to clear any check boxes that are selected in the Deny column.
  8. Click Advanced, click to select the Replace permission entries on all child objects check box, and then click OK.
  9. Click YES if you are prompted for confirmation, and then click OK to close the dialog box.

  Try to visit the Windows Update Web site or the Microsoft Update Web site again. If the problem is resolved, do not continue troubleshooting.

• === Method 4 ===

  Verify the permissions for you on the folder structure used by the Windows Update client or by the Microsoft Update client.

  1. Click Start, click Run, type explorer, and then click OK.
  2. Expand My computer, expand System Drive, and then expand WINDOWS.
  3. Right-click SoftwareDistribution, and then click Properties.
  4. In the SoftwareDistribution Properties window, click the Security tab, and then verify that whether you are in the Group or user names list.
  5. In the Group or user names list, select Everyone. Under Permissions for Everyone, click to select the Full Control check box in the Allow column.
     
     Note that the Read check box in the Allow column is now also selected.

  Try to visit the Windows Update Web site or the Microsoft Update Web site again. If the problem is resolved, do not continue troubleshooting.

• === Method 5 ===

  Rename the Catroot2 folder. To do this, type the following commands at a command prompt, pressing ENTER after each line:

  net stop cryptsvc
  ren %systemroot%\system32\catroot2 oldcatroot2
  net start cryptsvc

  Then, try to visit the Windows Update Web site or the Microsoft Update Web site again. If the problem is resolved, do not continue troubleshooting.

• === Method 6 ===

  Rename the SoftwareDistribution folder. To do this, follow these steps.

  1. Restart the computer in Safe mode.
  2. Locate and then rename the Drive:\Windows\SoftwareDistribution folder to SoftwareDistribution.old.
     
     Note Drive is a placeholder for the system drive.
  3. Restart the computer in Normal mode.

MORE INFORMATION

You must be a local administrator to visit the Windows Update Web site or the Microsoft Update Web site. When you log on as a non-administrator, you cannot visit the Web site even if you use Run as to start Internet Explorer under an administrator account. This issue occurs because other system services are involved in the process. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

326686 You receive one or more error messages when the system administrator disables Windows Update or Microsoft Update

Keywords: kbwindowsupdatev6 kbenv kberrmsg kbprb ocsso KB316524

---

Send feedback to Microsoft

© Microsoft Corporation. All rights reserved.