I am responsible for keeping a number of machines (around 900 or so) up to date with all the latest Windows Updates. Recently I noticed that a number (around 15 or so that I am sure of) weren’t installing particular updates. I have seen this in the past, but the particular updates that wouldn’t apply weren’t of real concern to me, so I didn’t really investigate. The latest updates were of concern though so I started looking into it. Here are the errors that I am getting:
Description:
Installation Failure: Windows failed to install the following update with error 0x80070643: Visual Studio 2005 Service Pack 1.Description:
The installation of C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ZNWF10\VS80sp1-KB926601-X86-ENU.msp is not permitted due to an error in software restriction policy processing. The object cannot be trusted.
As you can see, this particular update is for Visual Studio Service Pack 1. After a little digging, I found this:
http://support.installshield.com/kb/view.asp?articleid=Q111207
It basically says that there is a problem with the way the local security policy is configured. When I looked, it appeared that the local security Software Restrictions Policy wasn’t configured. I “added” a policy and put the dot in the “All users except local administrators”. After that the install ran fine.