Security updates - admin rights?

[David Martin]

Hi, do the Microsoft Security updates require local admin rights for them to
install OK? The text on the site doesn't say they do, in fact it advises
that the IE updates do NOT require admin rights but it doesn't say
specifically about the Windows and Office updates.

I wish to install to all of our workstations via the users login script but
I don't really want to grant admin rights to everyone.

Thanks,
David

 

[Roger Abell [MVP]]

Yes, these require elevated privs for install.
If you use a SUS server then these are installed with help
from the WIndows Installer service, so users do not need
to have elevated priv. If you have a Windows server able
to run SUS (Software Update Services) then this is the way
to go. Otherwise, if you have an uplevel domain you could
look at using software assigning through Active Directory
(although this is a long road where you will need to wrapper
them for distribution).

 

[Jerry Parlee]

No, if you create a GPO that downloads and installs the updates it doesn't
require an admin. And, it won't automatically reboot, waits for the user.

Sorta kluge way to do it, but it beats marching around the department or
springing for an expensive program or running IIS, for that matter. I test
each machine for updates via Hfnetchk anyway. Then I massage the output (in
the same script that runs Hf) of the script and it pops out files showing
who's naughty and where they are.

At least that was the case up to yesterday's update.

Jerry