SUS and Local admin rights

[Nwtest]

I just need a clarification.

I apply a SUS using a GPO to all my Clients in my AD

If a user is a normal user and doesnt have local admin
rights in his/her local PC.Can he managed to install the
updates?

If he needs to then how can I let him install it without
giving a local admin rights.

Second Question is : What is the sched of the client to
talk to SUS server and ask for update.I sthere any sched
or time..

Please advise

 

[Mark Stinson]

Short answer: "yes" to both.

Long answer: both options are in the first autoupdate policy (there are four
autoupdate policies in Win2000; I would guess that 2003 is the same, but
don't know). Set the install as a scheduled install and the logged on user
will not need local admin rights. The other three install options require
that the user have local admin rights. You set the day/time of the scheduled
install at this policy, too.

If you want to keep the mob of angry users with pitchforks and torches away
from your office, either set the fourth policy to no automatic reboot or
schedule your install at a time when the users won't be doing anything where
a reboot will cause their work to be interrupted.

Mark Stinson
El Paso, Texas