Solved

Allow a non administrator account to install updates or update in another manner?

Posted on 2010-08-23
14
796 Views
Last Modified: 2012-05-10
We support 350 macbooks.  the users are all bound to an OD OS X server running OS X server 10.5.  The problem is we want the users to be able to update their computers, but don't want to give them administrator access.  IS there any way to allow a non admin user to install updates?

Or can we use the mac remote desktop app to automatically push updates to the machines?
0
Comment
Question by:ccarmichael7
  • 7
  • 4
  • 3
14 Comments
 
LVL 20

Accepted Solution

by:
woolnoir earned 500 total points
Comment Utility
You cant install software updates on the client side without admin rights. You can however use apple Remote Desktop to push out the updates centrally - and can even use the task server to do it... meaning you dont need all machines online at a specific time to do it.

At my current employer we have a OSX server setup as a Apple Software Update Server, ensuring we can approve individual updates and my team and told to run a update manually when they visit machines for support reasons.

In addition to that we will have a central update policy where we test updates and roll them out using ARD...

Unfortunately this is one area of weakness concerning apple and enterprise support.
0
 
LVL 20

Expert Comment

by:woolnoir
Comment Utility
There have also been many 'hacks' to go around this, some people have suggested allowing all accounts to be admins, and then using an OSX server together with managed preferences to restrict the account down ... most are just that 'hacks'.

Always best to use the right tools, and ARD together with a small amount of desk side stuff (for smaller updates) works a charm.
0
 
LVL 32

Expert Comment

by:nappy_d
Comment Utility
You can permit this. If you have an OS X server and you configure it as an update server, you can then also set a preference which then permits users to install updates that you authorize.
0
 
LVL 20

Expert Comment

by:woolnoir
Comment Utility
nappy_d : where ? I have that setup and i havent managed to locate that setting anywhere, either in the MCX prefs for machines/users or the SUS configuration. I've tried getting this to work in the past and havent managed it, so if you know something i dont please fill me in. I cant seem to locate any information elsewhere confirming the ability either.
0
 
LVL 32

Expert Comment

by:nappy_d
Comment Utility
This feature was available in as early as 10.4 for managed prefs. I haven't had to enable it in some time. As I've moved to Casper for managing app and OS updates. Will check on one of my servers.
0
 
LVL 20

Expert Comment

by:woolnoir
Comment Utility
If you could i would appreciate it, I cant see it on a 10.6 server so it may have been changed/removed or ive developed selecting blindness (stupidity) :)
0
 

Author Comment

by:ccarmichael7
Comment Utility
Yes please do that is exactly what we are looking for.
0
Get up to 2TB FREE CLOUD per backup license!

An exclusive Black Friday offer just for Expert Exchange audience! Buy any of our top-rated backup solutions & get up to 2TB free cloud per system! Perform local & cloud backup in the same step, and restore instantly—anytime, anywhere. Grab this deal now before it disappears!

 
LVL 20

Expert Comment

by:woolnoir
Comment Utility
Ive been looking into this all afternoon (on and off) and i cant see any way in 10.6 server of accomplishing non admin installations of updates. My money (if im a betting man) is that its not possible in 10.6 but nappy_d may have a way :)
0
 

Author Comment

by:ccarmichael7
Comment Utility
Just curious Nappy_d, are you busy or are you over this question?
0
 
LVL 20

Expert Comment

by:woolnoir
Comment Utility
Ive looked at it some more and i dont see a way to do it - even checked with another ACSA friend of mine.
0
 
LVL 32

Expert Comment

by:nappy_d
Comment Utility
Haven't had a chance to check an old 10.4 server at a client which is where I last remember seeing it.
0
 

Author Comment

by:ccarmichael7
Comment Utility
I would like to award points, but I am still unsure how to do this?  Dop you plan on adding a final comment nappy_d?
0
 
LVL 20

Assisted Solution

by:woolnoir
woolnoir earned 500 total points
Comment Utility
Not sure myself how to aware - i've never asked a question and had it answered.
0
 

Author Closing Comment

by:ccarmichael7
Comment Utility
NAppy_d dropped out of the conversation, so the one who had the most helpful comments was Woolnoir even though there was no complete answer
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

The error "There was an error performing the update" occurred on a Mac OS X client workstation running  Symantec AntiVirus for Mac (http://www.symantec.com/business/products/purchasing.jsp?pcid=pcat_security&pvid=825_1) - the Enterprise product vers…
Apple's Mac OS X has become an official member of the malware club. The Flashback Trojan has affected over half million Macs, worldwide. It is behavior that ultimately gets malware onto a person’s computer. Obsolete or out-of-date software helps…
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now