Re: User account to run WSUS under

I suppose you could log on as the local admin account, I'm not sure what that gives you, since the domain admin is also a member of the local admin's group...still a highly priviledged user account and group membership...

<I guess we should feel privileged at this time that we can at least specify the SQL Server instance it goes against.>
And comments like these are not likely to win you any brownie points.

Strong passwords, a good firewall, and making sure that only the required ports (port 80 is not required) are allowed in to your network and this really shouldn't be an issue.
--
Cris Hanna [SBS - MVP]
Co-Author, Windows Small Business Server 2008 Unleashed
http://www.amazon.com/Windows-Small-Business-Server-Unleashed/dp/0672329573/ref=pd_bbs_sr_1?ie=UTF8&s=books&qid=1217269967&sr=8-1

------------------------------------
MVPs do not work for Microsoft
Please do not submit questions directly to me.

"SPEnthusiast" <SPEnthusiast@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:8E1678EF-8305-409F-A351-06F8874CC57C@xxxxxxxxxxxxxxxx
I logged onto my SBS machine as a domain admin and installed WSUS 3.0.
Everything works, but there's just this one problem - WSUS services, and the
way it accesses my SQL Server instance are done using my domain admin
credentials. I would like to restrict WSUS so that it uses less privileged
credentials.

Can I install WSUS 3.0 by logging onto my SBS machine as a local admin?

And why couldn't Microsoft let us specify a less privileged domain user
account while installing WSUS 3.0? I guess we should feel privileged at this
time that we can at least specify the SQL Server instance it goes against.

Thanks.


.

Relevant Pages

  • Re: Administrator--Client installation account problem
    ... I have most of the services attached with the Domain Admin account, ... You do not have to be in advanced security to push the client. ... > account needs to be a local admin on the client machines.) ...
    (microsoft.public.sms.admin)
  • Re: You must be logged on using the built-in administrator account
    ... with a local admin account rather than domain admin, ... How to install Small Business Server 2003 in an existing Active Directory ... Administrator account, you verified that it's in that Users AD container? ...
    (microsoft.public.windows.server.sbs)
  • Re: Client Push Installation Security
    ... Client push account doesn't need to be a domain Admin account but it needs ... If you have an account which is a local admin ... it doesn't need to be a domain admin. ...
    (microsoft.public.sms.swdist)
  • Account issues
    ... When we just installed SMS 2003 we installed it under the local admin ... account. ... Now if we try to run it while logged in under Domain admin, ...
    (microsoft.public.sms.setup)
  • Re: Domain Profiles Borked - Cant Grant Admin Rights - HELP!!!
    ... > status of their account. ... local Admin rights were given to ... > afflicted machine and give them local Admin rights, ... the SID of your users is no longer the same as it was. ...
    (microsoft.public.windowsxp.setup_deployment)