SUS problem: Since the users are members of the their local admin group, they are prompted to install the updates

Posted on 2005-04-06
Last Modified: 2010-04-18
We have about 1500 users in our organization and 80% of them are members of their local admin group. We are using SUS and everything works fine for the regular users but not for the users with administrative rights. Our policy is to download the updates and install them automatically. Is there a way to force the updates to get installed without prompting for this admin users? This is a very specific question I am familiar how SUS works and how to setup policies, but this problem has not been documented. Thank you in advance
Question by:geiyer71
    LVL 51

    Expert Comment

    If these users log off at night, and the updates are set to install at 3am, then they will get installed.  As a local Admin, they will always see the AU icon in the tray when updates are ready - however, if they choose to ignore them and are logged off at the update time, the updates will install.

    I think it's just a matter of getting them to log off at night so the updates happen - it might be necessary to set a GPO for logging off the users when logon times expire and setting their logon times appropriately.  An example would be to enfore a GPO that enables the "logoff when time expires" element, then configure the logon times for those users to exclude 2:30am to 4am so that they get logged of for the update window of 3am.


    Author Comment

    some of our users are loging off, others are shutting down their computers. The problem is that the SUS server is designed to prompt for updates for users with administrative rights and i don't know a way around. We don't have AD in our organization so we applied a preconfigured template for every pc.

    Please advise
    LVL 51

    Accepted Solution

    That shouldn't be an issue.

    Your SUS server is still on the LAN and I take it you have either used the local Group Policy to point at it or used a reg file to do it - so this much is good.  Your options should be to download and install the updates at a predetermined time in the early morning.

    You can use the local Group Policy to also setup a logoff time.  It's here:

    Computer Configuration>Windows Settings>Security Settings>Local Policies>Security Options|Network Security:  Force logoff when logon hours expire.  Of couse, this is only available in a domain so to do something similar you can do this:

    1)  Create a CMD file to run the shutdown utility like this:  shutdown -f -r
    2)  Schedule this to run at 2am using the Scheduler and the Admin account.

    This should do the trick.


    Author Comment

    It makes sense to me .. I’ll try it
    Thank you very much for you assistance
    LVL 51

    Expert Comment


    Featured Post

    Highfive Gives IT Their Time Back

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Join & Write a Comment

    I have never ceased to be amazed how many problems you can encounter on a fresh install of a Windows operating system.  This is certainly case in point& Unable to complete ANY MSI installation.  This means Windows Updates are failing and I can't …
    So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
    In this sixth video of the Xpdf series, we discuss and demonstrate the PDFtoPNG utility, which converts a multi-page PDF file to separate color, grayscale, or monochrome PNG files, creating one PNG file for each page in the PDF. It does this via a c…
    Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now