Security updates - admin rights?

  • Thread starter Thread starter David Martin
  • Start date Start date
D

David Martin

Hi, do the Microsoft Security updates require local admin rights for them to
install OK? The text on the site doesn't say they do, in fact it advises
that the IE updates do NOT require admin rights but it doesn't say
specifically about the Windows and Office updates.

I wish to install to all of our workstations via the users login script but
I don't really want to grant admin rights to everyone.

Thanks,
David
 
Yes, these require elevated privs for install.
If you use a SUS server then these are installed with help
from the WIndows Installer service, so users do not need
to have elevated priv. If you have a Windows server able
to run SUS (Software Update Services) then this is the way
to go. Otherwise, if you have an uplevel domain you could
look at using software assigning through Active Directory
(although this is a long road where you will need to wrapper
them for distribution).
 
No, if you create a GPO that downloads and installs the updates it doesn't
require an admin. And, it won't automatically reboot, waits for the user.

Sorta kluge way to do it, but it beats marching around the department or
springing for an expensive program or running IIS, for that matter. I test
each machine for updates via Hfnetchk anyway. Then I massage the output (in
the same script that runs Hf) of the script and it pops out files showing
who's naughty and where they are.

At least that was the case up to yesterday's update.

Jerry
 
Back
Top