SUS problem: Since the users are members of the their local admin group, they are prompted to install the updates

Posted on 2005-04-06
Medium Priority
Last Modified: 2010-04-18
We have about 1500 users in our organization and 80% of them are members of their local admin group. We are using SUS and everything works fine for the regular users but not for the users with administrative rights. Our policy is to download the updates and install them automatically. Is there a way to force the updates to get installed without prompting for this admin users? This is a very specific question I am familiar how SUS works and how to setup policies, but this problem has not been documented. Thank you in advance
Question by:geiyer71
  • 3
  • 2
LVL 51

Expert Comment

ID: 13720432
If these users log off at night, and the updates are set to install at 3am, then they will get installed.  As a local Admin, they will always see the AU icon in the tray when updates are ready - however, if they choose to ignore them and are logged off at the update time, the updates will install.

I think it's just a matter of getting them to log off at night so the updates happen - it might be necessary to set a GPO for logging off the users when logon times expire and setting their logon times appropriately.  An example would be to enfore a GPO that enables the "logoff when time expires" element, then configure the logon times for those users to exclude 2:30am to 4am so that they get logged of for the update window of 3am.


Author Comment

ID: 13728535
some of our users are loging off, others are shutting down their computers. The problem is that the SUS server is designed to prompt for updates for users with administrative rights and i don't know a way around. We don't have AD in our organization so we applied a preconfigured template for every pc.

Please advise
LVL 51

Accepted Solution

Netman66 earned 1500 total points
ID: 13732580
That shouldn't be an issue.

Your SUS server is still on the LAN and I take it you have either used the local Group Policy to point at it or used a reg file to do it - so this much is good.  Your options should be to download and install the updates at a predetermined time in the early morning.

You can use the local Group Policy to also setup a logoff time.  It's here:

Computer Configuration>Windows Settings>Security Settings>Local Policies>Security Options|Network Security:  Force logoff when logon hours expire.  Of couse, this is only available in a domain so to do something similar you can do this:

1)  Create a CMD file to run the shutdown utility like this:  shutdown -f -r
2)  Schedule this to run at 2am using the Scheduler and the Admin account.

This should do the trick.


Author Comment

ID: 13765260
It makes sense to me .. I’ll try it
Thank you very much for you assistance
LVL 51

Expert Comment

ID: 13765980

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
This video shows how to quickly and easily deploy an email signature for all users in Office 365 and prevent it from being added to replies and forwards. (the resulting signature is applied on the server level in Exchange Online) The email signat…
Whether it be Exchange Server Crash Issues, Dirty Shutdown Errors or Failed to mount error, Stellar Phoenix Mailbox Exchange Recovery has always got your back. With the help of its easy to understand user interface and 3 simple steps recovery proced…

571 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question