Solved

Installing Windows Updates without Local Admin Rights

Posted on 2004-10-18
5
1,265 Views
Last Modified: 2008-03-10
Hi,

Can anyone tell me if there is a way of installing the Windows Updates on an XP client directly from the MS website when the user does not have local administrator rights.

We are giving our sales force laptops and are trying to lock them down so they can't install unauthorised software by not giving them local admin rights, and locking it down with Group Policies.  

I have found that removing the user from the Local Admin group prevents the MS Windows Update site from downloading and installing the updates for XP.  Is there any way around this, or are we going to have to put all these user in the local admin group so the machines remain up to date?

Thanks for your help.

0
Comment
Question by:Dak
5 Comments
 
LVL 8

Accepted Solution

by:
pjcrooks2000 earned 500 total points
ID: 12339324
Yes you have to be logged on as an Administrator to install updates, as far as I know Users will be restricted from installing updates due to the effects that these can have on any current Administrator poilicies.

Good luck

pjcrooks2000
0
 
LVL 22

Expert Comment

by:Christopher McKay
ID: 12340006
Hi Dak,

Have you considered using SUS on your network?
http://www.microsoft.com/windowsserversystem/sus/default.mspx

Hope this helps!

:o)

Bartender_1
0
 
LVL 49

Expert Comment

by:sunray_2003
ID: 12340649
Hi Dak,

You may have to test this tho

How to configure automatic updates by using Group Policy or registry settings
http://support.microsoft.com/default.aspx?scid=kb;EN-US;328010

I would think SUS is the way to go pushing updates from server..
SR..
0
 

Author Comment

by:Dak
ID: 12346505
Thanks for all your quick responses.

Bartender/Sunray, we have got SUS installed on our main network already and it is pusing the updated out to the clients.  These new sales people are using laptops with Vodafone 3G cards so they are jumping directly onto the internet, so they can't get updates from our internal SUS server.

Looks like we'll just have to give them local admin rights and lock them down with group policies.

Thanks again for your help.

Cheers, Dak.
0
 
LVL 8

Expert Comment

by:pjcrooks2000
ID: 12347126
Thanks for accepting dak.  :)  Yes SUS is for internal networked machine as I am sure you will have found out already.  Not very good for remote users.  Unless perhaps they were to login via a VPN in which case I am still not sure whether this will be possible.

I hope it all goes well for you!
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you build your web application in Visual Studio you'll get at least a few binaries, or .DLL, files in your bin folder. However, there is more compiling to be done. Normally this would happen when an ASP.NET resource within the web site is request…
Can I legally transfer my OEM version of Windows to another PC?  (AKA - Can I put a new systemboard in my OEM PC?) Few of us are both IT and legal experts but we all have our own views of Microsoft's licensing rules and how they apply.  There are…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question