Forcing Windows Updates

[Deborah]

I have a client who finally agrees with me that Windows
Update patches must be installed. Took the MS-Blaster
virus to convince them that updates are a "good" thing,
but that's another story.

Right now I have configured them all to be automatic, at
a scheduled time. However, one individual keeps turning
off the automatic updates, and the auto only works at the
scheduled time. Today, for example, a critical patch
came out and they won't get it applied 'till early next
week.

I want to find a registry fix that forces Windows Update
installs when they become available. I've found LOTS
that tell me how to DISABLE user interaction with Windows
Update, but none that tell me how to bypass the schedule
and just install the darned things, no matter WHAT the
user sets up.



Anyone know?

 

[Kevin]

Check the Microsoft site for the White Paper on Software
Update Services. In the white paper, there is registry
settings that will allow you to miss a scheduled update
and the machine will update on first startup. This way,
you can set it to check daily and it will hit when
something is available.

 

[Ron Chamberlin]

Deborah,
The person with Admin rights can go in thru MMC and disable the ability of
the user to fool around with the settings for Windows update.
They should also publish an Acceptable Use Policy which would explain that
fooling around where they need not be is the equivalent of not needing to
come to work anymore.

 

[Deborah]

Thank you, Kevin...will check it out.

Ron, I TOTALLY agree with you. But as I am just the "gun
for hire" when "things go wrong", I've already fought the
Windows Update battle with them (and lost, at the time).
However, after MS-BLASTER hit, they decided that maybe I
was right after all <grin>.

Hence the "force the issue" for a couple of employees who
still believe that MS has time/energy/desire to scan and
read their hard drive. (My question is...what is on
one's work computer that one is worried about MS seeing
anyway <grin>...??)