Window Update Automatic Installation for Administrative accounts

I have a SUS server setup and have implemented a group policy to point the workstations to that server and to also check for updates everyday at 3:00 AM.  They are set to automatically install the updates.  The problem I have is that a lot of the accounts on the workstations are setup as being members of the administrators group therefore the updates don't install automatically rather an icon is displayed on the taskbar saying the updates are ready to install.  Is there a way to setup a group policy or possibly something else to make it so the updates install automatically for administrator accounts as well?  I should note that a lot of the accounts are members of the administrators group because they need to be able to install/unistall software and also perform other admin tasks.

Thanks in advance.
GeekFuAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Debsyl99Commented:
Hi

Maybe try disabling access to windows update in the local group policy on the client pc's. this may allow the updates to go through without interaction,

gpedit.msc
User Config - Administrative Templates - Windows Components - Windows Update - Set policy Disable Access to Windows Update to enabled

Try test this on a workstation with a local admin logon. If it works you could push the registry change out with a script,

Deb :))
0
GeekFuAuthor Commented:
That won't work because the domain group policy will override the local group policy.  Everything is working as it was designed.  When a user is an administrator it's suppose to display the icon rather than install the update automatically.  I'm hoping there is a way to get around it.
0
Eagle6990Commented:
All of our users are local administrators and the updates still get installed at their scheduled time.  If we approve an update 3 days before the schedule install time, the icon will appear in their tray letting them know that updates are ready to be installed, but once the scheduled time hits, then the updates still install.  
0
Newly released Acronis True Image 2019

In announcing the release of the 15th Anniversary Edition of Acronis True Image 2019, the company revealed that its artificial intelligence-based anti-ransomware technology – stopped more than 200,000 ransomware attacks on 150,000 customers last year.

GeekFuAuthor Commented:
Eagle6990,
I'm curious about your setup then.  What time do you have the updates scheduled for install?  Also do you have it set to reschedule if the update is missed?  If so how long do you wait?  

Thanks
0
Eagle6990Commented:
They are scheduled for 1:00 am and they are staggered throughout the week.  Our smaller sites get the update on Wed right after new patches come out and it progresses every day to larger and larger sites.  This way if something breaks we'll know with the smaller sites and stop the update.

If an update it missed, it is rescheduled for 1 minute after login.
0
GeekFuAuthor Commented:
And you're sure they are administrative accounts that the users are logged in as?  I'm skeptical because I've seen the window popup when a user logs in when they come to work in the morning (which means the install time has passed) and when they log in they get a popup window saying the following:

Windows is ready to begin installing the updates available for your computer.
Do you want windows to install the updates now?  

I don't want them to get this option otherwise some of them say no.

Thanks
0
Eagle6990Commented:
Every domain user is a local admin of their PC.  Occasionally we'll have a user get that message, usually when they failed to log out for the night.  If you do not reschedule the install on login then it will just wait until the next scheduled time if it did miss it originally.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
GeekFuAuthor Commented:
sounds good.  I'll keep an eye on it and see what happens.  If nobody else has any advice in the next couple days, i'll give the points to you. thanks
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 2000

From novice to tech pro — start learning today.