Access is denied when installing SP2

[bombergirl]

Hi:

I have recently updated all my servers to SP2. However here is this server that has been giving me headache. It always give me the error that Windows Server 2003 Service Pack 2 installation failed. Access is denied.

Any idea what could be the problem. This server has a cryptographic usb device installed by my vendor. I have an exact model of this server, so i do a ghost image, disable the USB device and remove all software being used by the cryptographic device. Try to install and fails again.

Any ideas will be greatly appreciated. Thanks

 

[ITPangaeaArchitect]

id be curious what a filemon and regmon output looks like when attempting to start the install. That should point you to wherever the access denied is occurring within the registry and the file system.
Its also possible a policy application problem may be preventing the system from getting the proper user rights and security options.

any userenv events inside the application event logs, or scecli events?

-Brandon Wilson
MCSE00/03, MCSA:Messaging00, MCSA03, A+
Manager - Global AD Operations
ACS, Inc.

 

[GrimR]

Did you read this article

http://support.microsoft.com/kb/873148

 

[bombergirl]

ADGod:

This is only the message that i see on my event viewer.

Event Type: Error
Event Source: NtServicePack
Event Category: None
Event ID: 4373
Date: 3/28/2008
Time: 4:18:49 PM
User: ABC\admin
Computer: ABC
Description:
Windows Server 2003 Service Pack 2 installation failed.
Access is denied.

GIMR - is this applicable for Windows 2003 Sp2 also? I will take a look at the svcpack.log then...

 

[GrimR]

It says so. Also check %windir%\setupapi.log.
Check your permissions in the registry make sure administrator has full control, on all keys

 

[ITPangaeaArchitect]

right on for the registry

filemon and regmon being ran at the time of an install attempt will provide everyplace the access is being denied for both the reg and file system. it will not address user rights assignment however....

-Brandon Wilson
MCSE00/03, MCSA:Messaging00, MCSA03, A+
Manager - Global AD Operations
ACS, Inc.

 

[bombergirl]

After checking both the svcpack.log and setupapi.log files, from the MS article, i cannot find any error related to registry: Error 5: Access is denied

 

[ITPangaeaArchitect]

Is this a DC or member server? Could you possibly provide a gpresult /z output for me? This is to verify user rights are not mucked predominantly...it should be ran while logged on as the account you are trying to install SP2 with obviously.

Download regmon from:

http://technet.microsoft.com/en-us/sysinternals/bb896652.aspx

All you do is double click the exe to run the program (unless theyve changed it very recently)

There will be an icon to stop capturing (magnifying glass with X over it if i remember right)...by default, when you open it, it will capture. We want a timed capture....
Start program, stop capture, start install of SP2, start regmon when on first page of wizard (or just before you normally get access denied), then walk through the wizard until you get access dnied, then immediately stop regmon. This will put any errors toward the end of the file and make them easier to find. You can do a string search within regmon if I remember right (find command or something like that), and use the string of "denied" (no quotes). This should find any access denials on the registry.
If you find some access denied in there, then you should probably download and run filemon as well performing the same steps to ensure no file system issues exist too.

This reads like its alot, but youll find its a fast test to do.

-Brandon Wilson
MCSE00/03, MCSA:Messaging00, MCSA03, A+
Manager - Global AD Operations
ACS, Inc.