Questions and Advice Required, about ADS, GPO's and Unattended Updates WITH administrator privilege

S

Serial # 19781010

Saw your posting in the Windows 2000 Newsgroup

I posted this in another thread, but forgot a crucial bit of
information....

I work as a Sr. Consultant for a LARGE Microsoft supplied account in
Ottawa Canada (Government, 26,000 Devices)


I would require your help in putting down on paper the best way for
doing unattended updates, application installs, etc ect to a Windows
2000 environment.



Environment:



Server: Windows 2000 Datacenter

Desktop: Windows 2000 Prof. SP1

Installer: either MSI OR InstallShield AdminStudio

Large Active Directory Install, with 26,000 User Accounts and 42,000
Devices...

I FORGOT TO SAY THAT right now, we need to locally logon or run a very
bad kludge to logon and reboot as ADMINISTRATOR with these PRIVILEGES
, as our users obviously do not have administrator. (of course, I
know).
So apart from my questions at the bottom, how can I invoke an
unattended update WITH ADMINISTRATOR privileges, without running our
kludge or locally loggin on...


We need to Deploy the following:



1- Microsoft Updates, such as Security Fixes, Hotfixes, and Patches/
Updated versions, to Windows 2000 Prof. desktops only.

2- legacy applications, such as Runtime COBOL, C, C++, but deployed
ONLY to Windows 2000 prof. Desktops.

3- Sorry about this, :), but I need to Deploy Java/J2EE applications
as well, to Windows 2000 Prof. Desktops only...



What we need is a best practices document for performing the above
task, making unattended and segmented in regions (200 users at a time)
and Domains.....



If you can get me some information, and some documentation on this, I
would be eternally grateful



I have been tasked with this, but have not been given any support in
writing this up, even if this document WILL become the new Corporate
standard.



Thx to all

Jean



P.S. If anyone in Ottawa Can help me, from your Ottawa Office
supporting the Government Department HRDC, I would like them to get in
contact with me…





Jean M. Gauthier

Sr. Technology & Information Architect

Gauthier Internet Working Solutions Inc [GINS]

M: 715-3978

W: 997-9838

19 Cellini Court

Ottawa, Ontario

K1G 5J7

Canada
 
S

Serial # 19781010

in fact I will recommend the hold Windows 2000 Server - Deploy Guide.

http://www.microsoft.com/technet/tr...nol/windows2000serv/deploy/depopt/remosad.asp

(Sorry for my re-posting)
Click to expand...

With elevated privileges, i.e. administrator access without rebooting
or having to go to the machine itself ?

I need the best option for an ADS managed, unattented
MSI/Installshield deployments, without having to kick the existing
user off his/her machine, and without having to send someone there
(the SysAdmin) or having to reboot the person's machine ..

How does RIS fit in with all the deplloiyment stuff I need to do ?

Thx
Jean
 
C

Chriss3

Hello, the only thing you need to kick of a unattended installation with RIS
is.

reboot the computer and press F12 if it support network boot, just type a
username and password and select in a list of images and then the
installation will finish automatically with out NO input for the end user.

You can simply assign software's like Office with Group Policy Software
installation. So the process is full automatically for the end user. I work
much with implementations of RIS, WINPE and Group Policy Software
installation here in Sweden to full automatically the installation process
for the end user. I have been out and done this to a few offices, all have
been working good.

if you want to contact me by e-mail chrisse at itsystem.se <-- antispam

But to answer, the process is full automatically and the computer reboots
after the installation and are ready for the end-user. in fact if you lose
the network connection, RIS can resume from where is was in the installation
part. It´s very safe and fast

take care ,and Happy New Year
 
J

Joe Richards [MVP]

Your most likely responses will be SUS, SMS, and AD GPOs.

As MS is really pushing patch management and you are a good medium sized business you may be able to engage some MCS
services relatively cheaply to work up some official paperwork. I know they are in our company now (250k users, hundreds
of thousands of devices) really pushing for SUS/SMS solutions with heavy emphasis on SMS.

joe
 
Top