
12-17-2008
|
|
|
|
MS Access 2002 update failed.
I just attempted to install the following update: 'Update for Access 2002
(KB904018)'. The installation failed with the following error:
Event Type: Error
Event Source: MsiInstaller
Event Category: None
Event ID: 11321
Date: 12/16/2008
Time: 12:51:33 AM
User: Jxxxxxxx\Jxxxxxxxx
Computer: Jxxxxxxx
Description:
Product: Microsoft Office XP Professional with FrontPage -- Error 1321.
Setup cannot modify the file C:\Program Files\Microsoft
Office\Office10\MSACCESS.EXE. Verify that the file exists in your system and
that you have sufficient permissions to update it.
Tracking this down, The error is:
ERROR_MEMBER_NOT_IN_GROUP 1321 0x529
The specified user account is not a member of the specified group account.
So I go to the MSACCESS.EXE file and check the security settiongs and as far
as I looked, they are the same as say WINWORD.EXE. So in an attempt to allow
more permissions on the file I set Full Control on the Security Properties
box. Then when I re-ran the update it succeeded. Now when I look at the
permissions on the updated file, they are radically different than those for
WINWORD.EXE and OUTLOOK.EXE. For example, on WinWord, for the Power user, the
only Allow box enabled is 'Full Control' but on the msaccess.exe file, all
boxes are enabled. In Advanced, for winword.exe, there's 4 Permission entries
and all say 'Inherited From'=C:\Program Files\' but for msaccess.exe that
column has <not inherited> and 'Parent Object' for SIX entries! There are two
enties for Power Users (Jxxxxxxx\Power Users) and Users(Jxxxxxx\Users)
My question is: What's the easiest way to set the correct permissions? Is
there any insight into why this file in the update had the security problem
to begin with?
I suppose there's not much harm in leaving it alone but I wonder if this is
a more general problem,
Thanks,
John
|