Article ID: 888791 - View products that this article applies to.
Some Microsoft software updates use Update.exe as the Setup program. Update.exe version 220.127.116.11 and later versions require that the user who installs the software update is an administrator with certain user rights. This article lists those user rights requirements.
If a user does not have the required user rights and tries to install a software update package that uses Update.exe, they may receive the following error message:
If the software update installation was performed in unattended mode by specifying either the /quiet or /passive command-line switches, this error message is displayed in the installation log. By default, the installation log is located at %systemroot%/KB######.log, where ###### is the number of the Microsoft Knowledge Base article for the fix that was applied.
You do not have permission to update <OS name>. Please contact your system administrator.
To determine whether a software update uses Update.exe as the Setup program for packages released after July 2004, examine the Installer Engine value on the Version tab of the Properties dialog box for the software update package. For packages released before July 2004, you must extract the package contents to determine which installer is used and what version it is. For additional information about how to do this, click the following article number to view the article in the Microsoft Knowledge Base:
(https://support.microsoft.com/kb/832475/ )Description of the new features in the package installer for Windows software updates
The following table lists the user rights required by Update.exe.
For additional information about earlier versions of Update.exe and Debug programs that require that administrators have rights, click the following article number to view the article in the Microsoft Knowledge Base:
Collapse this tableExpand this table
(https://support.microsoft.com/kb/830846/ )Windows Product Updates may stop responding or may use most or all the CPU resources
To determine the missing user right, examine the installation log file. The installation log file contains the following similar error messages:
Note OS_name represents the operating system name. SE_SECURITY_PRIVILEGE represents the missing user right. X.X.X.X represents the version number.
2.744: d:\aab949b8ae7e35434dde6b\update\update.exe (version X.X.X.X)
2.744: Failed To Enable SE_SECURITY_PRIVILEGE
2.754: Setup encountered an error: You do not have permission to update OS_name. Please contact your system administrator.
2.764: You do not have permission to update OS_name.
To view and modify user rights, follow these steps:
(http://go.microsoft.com/fwlink/?LinkId=151500)for other considerations.
Article ID: 888791 - Last Review: July 1, 2010 - Revision: 5.0