Restricted users cannot run LiveUpdate under Windows 2003/XP/2000

Article:TECH98932  |  Created: 2000-01-06  |  Updated: 2010-08-13  |  Article URL
Article Type
Technical Solution



You run Symantec AntiVirus on Windows 2003/XP/2000. When you log on as a restricted user (a member of the Users group), you cannot run LiveUpdate. The LiveUpdate button is disabled.



restricted users have restricted access.



Before you begin: This document does not apply to Symantec Client Security 3.1, Symantec AntiVirus 10.1, or LiveUpdate 3.x.
For help with these product versions, read Restricted users cannot run LiveUpdate in Symantec Client Security 3.1 and Symantec AntiVirus 10.1.

To work around the problem, set the EnableAllUsers registry value to 1 on the affected clients. Then, change a setting in Symantec System Center if you have managed clients.

To set the EnableAllUsers registry value to 1

  1. Log on to the computer with at least Power User-level permissions.
  2. Download the EnableAllUsers.reg file to the client computer.
  3. Double-click the EnableAllUsers.reg file.
  4. Click Yes .

If you want to deploy this registry change to all your managed clients, you can edit the registry on the parent server

To deploy the EnableAllUsers registry value to managed clients

  1. On the parent server, start the Windows Registry Editor.
  2. Go the following key:


  3. In the left pane, right-click the PatternManager key, and then click New > DWORD Value.
  4. Type EnableAllUsers for the value's name and then press Enter.
  5. In the right pane, double click the EnableAllUsers value.
  6. In the Value data box, type 1 and then click OK.
  7. If you use client groups, go to the following key:


    where <GroupName>is the name of a client group.

  8. Repeat steps 3-6 for each client group.
  9. Exit the "Registry Editor."
  10. Start Symantec System Center, and unlock the server group.
  11. Right-click the parent server, and then click All Tasks > Symantec AntiVirus > Client Auto-Protect Options.
  12. Click Reset All, and then click OK.

To enable LiveUpdate on managed clients

  1. Start Symantec System Center.
  2. Right-click a parent server or client group, and then click All Tasks > Symantec AntiVirus > Virus Definition Manager.
  3. Uncheck Do not allow client to manually launch LiveUpdate.
  4. Click OK.

Technical Information
Restricted users in Windows 2003/XP/2000 do not have the access to write to certain registry keys. LiveUpdate depends on the information that is contained in the registry to determine when the last update was performed. If a restricted user runs LiveUpdate, then the registry keys are not updated, which will cause problems the next time LiveUpdate is executed. Because restricted users do not have the necessary rights to run LiveUpdate, the LiveUpdate button is disabled.


Supplemental Materials


Legacy ID


Article URL

Terms of use for this information are found in Legal Notices