Need Domain Users to install Windows Updates

[arjuna]

I need help on how I can allow non-administratve Domain
Users the right to install Windows Updates. As it is now,
when these users go to Windows Update and attempt to scan
for updates they get the "Administrators Only" page that
states that they need to part of the Administrator group
to do the updates (we are a NT 4.0 domain and do not use
AD Group Policies to limit this - we do NOT have this
problem with our W2K machines).

I've already gone into the local Group Policy and disabled
the "Remove access to use all Window Update features". I
cannot add the Global Domain Users to the Local
Administrators group.

Am I overlooking a Group Policy or local security setting?

Any help would be greatly appreciated.

 

[Roger Abell]

If you were in an AD environment you could publish
out the updates wrappered so that the Windows Installer
service would install these with its elevated privileges.
But you are in an NT 4 domain.

Patchs need to be installed with Administrators privileges.

The best you can do is to install a SUS server and then
configure your machines as autoupdate clients of your SUS.
This will get the patches installed even though the users are
not administrators, if you set the local policies of the wuau.adm
administrative template to automatically install them.