SUS server and patch roll out

[Robert Musick]

We are playing around with the Software Update Server.
We have about 1000 computers and wanted to find out if we
used the program will an administrator have to log in to
the workstation each time patches roll out. These are
machines where the only rights the user has is power
user. The patches would have to roll out in the off
hours. can anyone help? is there a way to force them
out and apply them without a user being logged in?

 

[Robert Moir]

We are playing around with the Software Update Server.
We have about 1000 computers and wanted to find out if we
used the program will an administrator have to log in to
the workstation each time patches roll out. These are
machines where the only rights the user has is power
user. The patches would have to roll out in the off
hours. can anyone help? is there a way to force them
out and apply them without a user being logged in?

If you set the patches to download and install on a schedule, rather than
download and ask a user, then they'll install in the background on a machine
that is not logged in quite happily.


--

 

[Ron Chamberlin]

Robert,
Your GPO's will handle over the Power Users. Even when a user is logged on,
the patches will fire off at the scheduled time, then if a reboot is called
for it will inform the users. Users won;t be able to stop or cancel the
updates either.
No more 'sneaker.net applying patches!

Ron Chamberlin
MS-MVP

 

[Roger Abell]

Yes to all of the expressed needs.
You should download and read the Sus Deployment Guide
as it does explain all of this. If you use the GPO settings
for the wuau.adm template (which you might need to import
the dated version of) in the correct set of choices your
clients will randomize +/- 30 minutes around the scheduled
hour, and will install without user intervention using elevated
privs of the Windows Installer service.