Solved

Allow a non administrator account to install updates or update in another manner?

Posted on 2010-08-23
14
801 Views
Last Modified: 2012-05-10
We support 350 macbooks.  the users are all bound to an OD OS X server running OS X server 10.5.  The problem is we want the users to be able to update their computers, but don't want to give them administrator access.  IS there any way to allow a non admin user to install updates?

Or can we use the mac remote desktop app to automatically push updates to the machines?
0
Comment
Question by:ccarmichael7
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 4
  • 3
14 Comments
 
LVL 20

Accepted Solution

by:
woolnoir earned 500 total points
ID: 33508679
You cant install software updates on the client side without admin rights. You can however use apple Remote Desktop to push out the updates centrally - and can even use the task server to do it... meaning you dont need all machines online at a specific time to do it.

At my current employer we have a OSX server setup as a Apple Software Update Server, ensuring we can approve individual updates and my team and told to run a update manually when they visit machines for support reasons.

In addition to that we will have a central update policy where we test updates and roll them out using ARD...

Unfortunately this is one area of weakness concerning apple and enterprise support.
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 33508692
There have also been many 'hacks' to go around this, some people have suggested allowing all accounts to be admins, and then using an OSX server together with managed preferences to restrict the account down ... most are just that 'hacks'.

Always best to use the right tools, and ARD together with a small amount of desk side stuff (for smaller updates) works a charm.
0
 
LVL 32

Expert Comment

by:nappy_d
ID: 33509184
You can permit this. If you have an OS X server and you configure it as an update server, you can then also set a preference which then permits users to install updates that you authorize.
0
Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

 
LVL 20

Expert Comment

by:woolnoir
ID: 33509233
nappy_d : where ? I have that setup and i havent managed to locate that setting anywhere, either in the MCX prefs for machines/users or the SUS configuration. I've tried getting this to work in the past and havent managed it, so if you know something i dont please fill me in. I cant seem to locate any information elsewhere confirming the ability either.
0
 
LVL 32

Expert Comment

by:nappy_d
ID: 33509595
This feature was available in as early as 10.4 for managed prefs. I haven't had to enable it in some time. As I've moved to Casper for managing app and OS updates. Will check on one of my servers.
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 33509603
If you could i would appreciate it, I cant see it on a 10.6 server so it may have been changed/removed or ive developed selecting blindness (stupidity) :)
0
 

Author Comment

by:ccarmichael7
ID: 33512834
Yes please do that is exactly what we are looking for.
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 33513014
Ive been looking into this all afternoon (on and off) and i cant see any way in 10.6 server of accomplishing non admin installations of updates. My money (if im a betting man) is that its not possible in 10.6 but nappy_d may have a way :)
0
 

Author Comment

by:ccarmichael7
ID: 33559694
Just curious Nappy_d, are you busy or are you over this question?
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 33559705
Ive looked at it some more and i dont see a way to do it - even checked with another ACSA friend of mine.
0
 
LVL 32

Expert Comment

by:nappy_d
ID: 33559724
Haven't had a chance to check an old 10.4 server at a client which is where I last remember seeing it.
0
 

Author Comment

by:ccarmichael7
ID: 33694170
I would like to award points, but I am still unsure how to do this?  Dop you plan on adding a final comment nappy_d?
0
 
LVL 20

Assisted Solution

by:woolnoir
woolnoir earned 500 total points
ID: 33694692
Not sure myself how to aware - i've never asked a question and had it answered.
0
 

Author Closing Comment

by:ccarmichael7
ID: 35160988
NAppy_d dropped out of the conversation, so the one who had the most helpful comments was Woolnoir even though there was no complete answer
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

An introduction to the wonderful sport of Scam Baiting.  Learn how to help fight scammers by beating them at their own game. This great pass time helps the world, while providing an endless source of entertainment. Enjoy!
Article by: Justin
In light of the WannaCry ransomware attack that affected millions of Windows machines, you might wonder if your Mac needs protecting. Yes, it does and here is how to do it.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question