Windows Updates

[Guest]

How do I set up a limited user account that can still receive Windows updates without having to give them administrative privelages?

 

[Shain Wray [MSFT]]

Hello,

You can setup Automatic Updates to Download and Schedule an install. This
requires no user interaction and runs under the System account so the
logged on user does not matter.

I assume this is on a domain, so you can set this in your domain GPO.
Download the update wuau.adm file located here, it is in Windows Server
2003 by default -

http://www.microsoft.com/downloads/details.aspx?FamilyId=D26A0AEA-D274-42E6-
8025-8C667B4C94E9&displaylang=en

Import it into your Computer Config\Admin Templates. Now you can set the
policy under Windows Components\Windows Update for Configure Automatic
Updates so that it will use Option 4 - Auto Download and Schedule an
install, then choose the day and time it will occur.

A non-admin user will now obtain updates from Windows Update automatically.

Best regards,
--
Shain Wray
Microsoft PSS Security Team

This posting is provided "AS IS" with no warranties and confers no rights.
Please reply to the newsgroup so that others may benefit. Thanks!
--------------------

From: =?Utf-8?B?UGFya2Vy?= <[email protected]>
Subject: Windows Updates
Date: Wed, 21 Jul 2004 06:24:01 -0700


How do I set up a limited user account that can still receive Windows
updates without having to give them administrative privelages?

 

[Guest]

Shain, thanks for the feedback but these are pc's are not on a domain at this point. They are on a peer to peer at this point.
Is there a method for stand alone boxes?

 

[Shain Wray [MSFT]]

Hello,

Yes, you can use the same method. Run GPEdit.msc from the Run line on each
computer and import the WUAU.adm file per the previous instructions.

Best regards,
--
Shain Wray
Microsoft PSS Security Team

This posting is provided "AS IS" with no warranties and confers no rights.
Please reply to the newsgroup so that others may benefit. Thanks!
--------------------
From: =?Utf-8?B?cGFya2Vy?= <[email protected]>
References: <[email protected]>
<[email protected]>
Subject: RE: Windows Updates
Date: Wed, 21 Jul 2004 20:48:03 -0700


Shain, thanks for the feedback but these are pc's are not on a domain at
this point. They are on a peer to peer at this point.
Is there a method for stand alone boxes?

 

[Guest]

We did exactly what you had explained. Here's the deal.....

I selected option 4 and then logged in as the user with no admin rights. When i went to access window updates it still told me that i could not access them cause i was not an admin.

Since I selected option 4, does this mean that it will work at the schedualed time and that the non admin user can never just go to the actuall update site and download them?

I really just want the users to be able to access the actuall webpage itself.


thanks in advance,

 

[Guest]

ohh by the way these are all 2000 boxes not XP

Hello,

Yes, you can use the same method. Run GPEdit.msc from the Run line on each
computer and import the WUAU.adm file per the previous instructions.

Best regards,
--
Shain Wray
Microsoft PSS Security Team

This posting is provided "AS IS" with no warranties and confers no rights.
Please reply to the newsgroup so that others may benefit. Thanks!
--------------------
From: =?Utf-8?B?cGFya2Vy?= <[email protected]>
References: <[email protected]>
<[email protected]>
Subject: RE: Windows Updates
Date: Wed, 21 Jul 2004 20:48:03 -0700


Shain, thanks for the feedback but these are pc's are not on a domain at
this point. They are on a peer to peer at this point.
Is there a method for stand alone boxes?

 

[Shain Wray [MSFT]]

Yes, this will work for Win2k also.

Best regards,
--
Shain Wray
Microsoft PSS Security Team

This posting is provided "AS IS" with no warranties and confers no rights.
Please reply to the newsgroup so that others may benefit. Thanks!
--------------------
Thread-Topic: Windows Updates
thread-index: AcRwxA+B47koK8BFSGaXqoZuv6/+sw==
X-WBNR-Posting-Host: 68.53.5.11
From: =?Utf-8?B?UGFya2Vy?= <[email protected]>
References: <[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
Subject: RE: Windows Updates
Date: Fri, 23 Jul 2004 07:48:04 -0700


ohh by the way these are all 2000 boxes not XP

 

[Shain Wray [MSFT]]

Correct, the AU Options are not for accessing WU, they are for downloaded
updates. If you are set to AU Option 4, then the AU service will download
and schedule the install behind the scenes and then install on the time/day
specified. This does not require any user interaction, which is the reason
for AU Option 4 on systems that have no Local Admin logged in.

Best regards,
--
Shain Wray
Microsoft PSS Security Team

This posting is provided "AS IS" with no warranties and confers no rights.
Please reply to the newsgroup so that others may benefit. Thanks!
--------------------
Thread-Topic: Windows Updates
thread-index: AcRww6R2HqfnSi2MT2Wp7dbpUrMiBg==
X-WBNR-Posting-Host: 68.53.5.11
From: "=?Utf-8?B?YnJvb2tseW4=?=" <[email protected]>
References: <[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
Subject: RE: Windows Updates
Date: Fri, 23 Jul 2004 07:45:05 -0700


We did exactly what you had explained. Here's the deal.....

I selected option 4 and then logged in as the user with no admin rights.
When i went to access window updates it still told me that i could not
access them cause i was not an admin.

Since I selected option 4, does this mean that it will work at the
schedualed time and that the non admin user can never just go to the
actuall update site and download them?

I really just want the users to be able to access the actuall webpage
itself.


thanks in advance,