Preform Updates As Regular Domain User on Windows Vista and 7

Posted on 2014-01-20
Last Modified: 2014-02-20
Hello Everyone,

Was wondering if anyone could give me some assistance on allowing regular domain users to preform updates to programs on Windows 7 machines, in particular to java and to a program they use called UPS worldship.  Both of these programs require admin privileges when updating, the UPS program is particularly annoying because sometimes it will have two to three updates in the space of a day two, resulting in a time consuming support session involving logging into each of the 20 or so computers (and every computer on site runs java) that use the program and running the update.  I've read about programs such as ninite that will push out updates for programs but I don't see worldship in its listed supported software, and obviously making everyone local admins is out of the question.  Anyone got any ideas?

Thanks in advance for any help you can offer.
Question by:ctagle
LVL 53

Expert Comment

ID: 39795622
Please make your self familiar with MSI wrapping. With commands wrapped into MSIs, we can do things like
Setup /quiet
which will install without user interaction and, as it's wrapped into a (deployed) MSI, even elevated.
LVL 53

Expert Comment

by:Will Szymkowski
ID: 39796600
If you want to give domain users local access to update software without being local administrators you will need to use something like Priviledge Authority (dell). This software works with your group policy and allows you to create a "white list" for applications that users can have administrative rights to. You cannot do this natively with Group Policy, (allowing users to interact administratively with an applicaiton).

Priviledge Authority

LVL 53

Expert Comment

ID: 39796654
Hi Will. I'd like to comment on "You cannot do this natively with Group Policy, (allowing users to interact administratively with an applicaiton)."
Oh yes, we can. If you publish applications to user objects, then this is indeed possible.

Author Comment

ID: 39800412
Thank you for the replies, McKnife can you go more into detail on publishing applications to user objects, I would like to use gpo's if possible, makes managing things more simple
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

LVL 53

Expert Comment

ID: 39800484
It is explained here:
It is simply done in the user configuration section of a GPO. -> Policies ->Software settings.

Author Comment

ID: 39800811
so the idea behind this is to allow them to do the update themselves using the gpo, and not necessarily, pushing it out to the machine?
LVL 53

Accepted Solution

McKnife earned 500 total points
ID: 39802335
That is correct. What you publish to users can be seen as on-demand-installs. They may install it with non-admin rights, only if they need it.
I was in your situation once, where a manager requested to update a software on a group of computers on a weekly basis. In order to save me from fondling with MSIs every week, I created a wget job that pulled the setup from the internet to our server and deployed a scheduled task to these computers that ran with system rights, checked if the app was running, and if not, updated it (using system rights).
That's another approach that does not even require user interaction, nor restarts.
LVL 59

Expert Comment

ID: 39872880
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Resolve DNS query failed errors for Exchange
New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
This Micro Tutorial will teach you how to change your appearance and customize your Windows 7 interface to your unique preference. This will be demonstrated using Windows 7 operating system.
This Micro Tutorial will give you basic overview of the control panel section on Windows 7. It will depth in Network and Internet, Hardware and Sound, etc. This will be demonstrated using Windows 7 operating system.

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now