Window Update Automatic Installation for Administrative accounts

I have a SUS server setup and have implemented a group policy to point the workstations to that server and to also check for updates everyday at 3:00 AM.  They are set to automatically install the updates.  The problem I have is that a lot of the accounts on the workstations are setup as being members of the administrators group therefore the updates don't install automatically rather an icon is displayed on the taskbar saying the updates are ready to install.  Is there a way to setup a group policy or possibly something else to make it so the updates install automatically for administrator accounts as well?  I should note that a lot of the accounts are members of the administrators group because they need to be able to install/unistall software and also perform other admin tasks.

Thanks in advance.
GeekFuAsked:
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

x
 
Eagle6990Connect With a Mentor Commented:
Every domain user is a local admin of their PC.  Occasionally we'll have a user get that message, usually when they failed to log out for the night.  If you do not reschedule the install on login then it will just wait until the next scheduled time if it did miss it originally.
0
 
Debsyl99Commented:
Hi

Maybe try disabling access to windows update in the local group policy on the client pc's. this may allow the updates to go through without interaction,

gpedit.msc
User Config - Administrative Templates - Windows Components - Windows Update - Set policy Disable Access to Windows Update to enabled

Try test this on a workstation with a local admin logon. If it works you could push the registry change out with a script,

Deb :))
0
 
GeekFuAuthor Commented:
That won't work because the domain group policy will override the local group policy.  Everything is working as it was designed.  When a user is an administrator it's suppose to display the icon rather than install the update automatically.  I'm hoping there is a way to get around it.
0
Receive 1:1 tech help

Solve your biggest tech problems alongside global tech experts with 1:1 help.

 
Eagle6990Commented:
All of our users are local administrators and the updates still get installed at their scheduled time.  If we approve an update 3 days before the schedule install time, the icon will appear in their tray letting them know that updates are ready to be installed, but once the scheduled time hits, then the updates still install.  
0
 
GeekFuAuthor Commented:
Eagle6990,
I'm curious about your setup then.  What time do you have the updates scheduled for install?  Also do you have it set to reschedule if the update is missed?  If so how long do you wait?  

Thanks
0
 
Eagle6990Commented:
They are scheduled for 1:00 am and they are staggered throughout the week.  Our smaller sites get the update on Wed right after new patches come out and it progresses every day to larger and larger sites.  This way if something breaks we'll know with the smaller sites and stop the update.

If an update it missed, it is rescheduled for 1 minute after login.
0
 
GeekFuAuthor Commented:
And you're sure they are administrative accounts that the users are logged in as?  I'm skeptical because I've seen the window popup when a user logs in when they come to work in the morning (which means the install time has passed) and when they log in they get a popup window saying the following:

Windows is ready to begin installing the updates available for your computer.
Do you want windows to install the updates now?  

I don't want them to get this option otherwise some of them say no.

Thanks
0
 
GeekFuAuthor Commented:
sounds good.  I'll keep an eye on it and see what happens.  If nobody else has any advice in the next couple days, i'll give the points to you. thanks
0
All Courses

From novice to tech pro — start learning today.