Non-admin users & windows update

From: David Jones (kk7gw_at_yahoo.com)
Date: 08/21/03


Date: Thu, 21 Aug 2003 10:35:04 -0700


I would urge you to reconsider your use of Power Users.
There are many many ways for Power Users to get
themselves to Administrator if they really want to, all
it takes is for them to get someone who is an
Administrator to log on to the machine after they've
figured out one of the ways to do this.

If they need to be Power Users, you might as well make
them Admins. You may want to investigate what rights
they truly need, then make them regular users with those
specific rights if you do not want to allow them to be
Administrators.

As to your question, the easiest answer is to buy SMS,
but when that's not possible, you can push out a logon
script that installs the updates as a domain admin.
You'd need to write the script to do this, and download
the various updates you want to install to a central
server.

>-----Original Message-----
>Is there anyway a poweruser can run his/her own
updates?
>We have several 100 machine and only admins are offered
>and can perform windows updates. All our users are
>poweruser, therefore they never receive updates. We
(the
>IT staff) have to visit each machine to run the
updates.
>I know there is a better way but can't seem to get any
>answers.
>.
>



Relevant Pages

  • Re: Local user privileges
    ... member of the power users or administrators. ... If he can create admins, then he is a member of the local admin group. ... or if you made the dom-user account a local administrator. ...
    (microsoft.public.win2000.group_policy)
  • Re: Administrator Only
    ... Scheduled install. ... > The user account you're logged in with has to have Administrator rights. ... only Power Users and I need to allow them to do Windows Updates ...
    (microsoft.public.windowsupdate)
  • Re: Power Users, AntiSpyware & CriticalUpdates
    ... If you can wait a day or two before deploying updates, ... Wait until day after patch tuesday. ... or two before you install an critical security patch. ... > Like don't make your users admins or power users and have them use a web ...
    (Security-Basics)
  • uite often Re: Start/stop Services for Power users
    ... automatic updates service needs to be restarted before it appears. ... One of our Power Users could ... If you are having to restart ... I know a GPO can be created to give permission ...
    (microsoft.public.windows.server.sbs)
  • windows update
    ... I have about 200 "Power Users" running WinXP and I'm ... updates on to their machines. ... logged in as Administrator or have administrator ... Users to install Windows Update automatically. ...
    (microsoft.public.windowsxp.security_admin)