Manual updates and windows 2003 R2

[UKDTweak]

Hi

I have dc server running 2003 R2.
As it is a PCI compliant server, it does not have direct network/internet with our domain, therefore to update windows I have to download the cat files, copy them to a flash stick>server, then run mbsacli.exe to check for missing updates, then download the updates on another PC, copy them to the flash stick>server and install them....

There are actually Two domain controllers.... dcn01 and dcn02. Bot Identical.

The updates installed fine on dcn02, but I cannot run them on dcn01.. I get an error stating I might not have permissions?

If I right click on 1 of the updates and try Runas I get the same error, if I do the same with Any other .exe, it works fine???
I copied the updates to a local folder... same error, tried running them from a share off the other DC... same error...

I got around this by opening a cmd prompt and running each of the updates from DOS... seamed to work fine...

Anybody come accross this before, have any ideas why this is happening?

 

[UKDTweak]

Not to worry, I have found the cause, If I right click on one of the updates, click properties and then click Unblock, the file runs as normal, seams that although the two servers are built on the same hardware with the same software build, dcn01 has some security differences somewhere, as I did not need to do this with dcn02???

It may have something to do with IE8 and Enhanced Security mode, when I recently updated Both boxes to IE8 a few weeks ago, dcn01 appears to be using the mode even though it is OFF in control panel...