Prevent group from installing windows updates - how to.

  • Thread starter Thread starter Ward
  • Start date Start date
W

Ward

I am wondering how to add a user (an adiminstrator) to a group that
does not allow them to update the computer (clicking the little yellow
shield in the task bar).

The user must have admin privileges to run a few certain installed
programs.

But I do NOT want to allow them to use the windows update feature.

Can this be done?

System is XP Pro with all updates applied.

Thank you,

Ward
 
Ward said:
I am wondering how to add a user (an adiminstrator) to a group that
does not allow them to update the computer (clicking the little yellow
shield in the task bar).

The user must have admin privileges to run a few certain installed
programs.

But I do NOT want to allow them to use the windows update feature.

Can this be done?

System is XP Pro with all updates applied.

Thank you,

Ward
Click to expand...

No. You could turn off autoupdates, or use WSUS or something, but if a user
has admin rights, there is not much you can do to control the PC in general.

I'd suggest you look at Process Monitor (Sysinternals, now owned by
Microsoft) - find out where your applications are trying to write, in both
the file system & registry, and adjust the permissions. Oh, and holler at
the !@#$ developers to fix their software; users should not need admin
rights.
 
Back
Top