Re: SUS group policy

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Bill (bill.stegman_at_transcore.com)
Date: 07/16/04 

Date: Fri, 16 Jul 2004 09:26:34 -0700

To clarify my GPO. I have the 'auto download and install'
setting enabled and the 'no auto-restart for scheduled
automatic updates installations' enabled. Is it expected
behaviour that users not belonging to the local admins
group can not choose no to the 'Do you want to restart
your computer now' prompt?

>-----Original Message-----
>I have to disagree. I have 100+ machines using this
group
>policy, and only a few machines see this behaviour, the
no
>button grayed out. The rest can choose yes or no as to
>whether they want to reboot now or later.
>
>>-----Original Message-----
>>Bill-
>>
>>What you're seeing is expected behavior, with the no
>button and all. If you
>>set the GP to force install at download time, the users
>will see a
>>countdown.
>>
>>--
>>--
>>Brian Desmond
>>Windows Server MVP
>>desmondb@payton.cps.k12.il.us
>>
>>http://www.briandesmond.com
>>
>>
>>"Bill" <bill.stegman@transcore.com> wrote in message
>>news:2dc6001c46aab$4c7a4590$a401280a@phx.gbl...
>>> I've had my sus policy working for about a year now,
but
>>> recently some users who have been removed from the
local
>>> admin group of their machines, have had the no option
>>> during the reboot option, grayed out. I've got the 'no
>>> auto-restart for scheduled automatic updates
>installation'
>>> enabled and as i've mentioned hadn't had any problems.
>>> I've revisited some of the documentation regarding SUS,
>>> but didn't see any mention of the user having to be
part
>>> of the local admin group in order to receive the no
>option
>>> during the reboot phase, but did find this bit from
>>>
>http://www.microsoft.com/technet/security/guidance/secmod1
9
>>> 7.mspx
>>>
>>> "For users without local administrator rights, the
>update
>>> will install in the background at the scheduled time.
>>> These users can only delay a computer restart, if the
No
>>> auto-restart for scheduled Automatic Updates
>installations
>>> policy setting has been enabled."
>>>
>>> by "delay" I would imagine that meaning they could say
>no,
>>> but on these users machines it counts down and reboot
>>> automatically.
>>>
>>> thx,
>>> Bill
>>
>>
>>.
>>
>.
>

Relevant Pages

  • Re: Installing Software without being Local Admin?
    ... Some of you may remember back in June I posted a topic entitled 'Network Computer Games on Business Machines' which detailed the problem we were having with some of our users installing software & games on their machines, as they were local admins. ... So I need to find someway of allowing users to install fix packs/re-install the software, without giving them full local admin access. ...
    (microsoft.public.security)
  • Installing Software without being Local Admin?
    ... Computer Games on Business Machines' which detailed the problem we were ... as they were local admins. ... someway of allowing users to install fix packs/re-install the software, ...
    (microsoft.public.security)
  • Re: restricting software installation
    ... > Make sure users are not local admins on their machines. ... >> is restrict users from installing programs on their machine. ... >> to install a program they would have to call an Admin to do it. ...
    (microsoft.public.windows.server.security)
  • Local Administrator cant install
    ... install software, I receive the message 'do not have ... >>I have two XP machines where the network users, ... >>local admins on the machine, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: python interface to Firefox and Thunderbird
    ... auto install python 2.5 ... auto download and install Firefox3 and Thunderbird 2 ... Auto download and install FF3/TB2. ... Auto download and install Python. ...
    (comp.lang.python)