Re: Permission to act

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

One can be logged on as the "Administrator" or logged on
as a member of the "Administrators Group" in order to
install Windows Updates.

You can configure Automatic Updates by using Group Policy
in an Active Directory environment, or by using registry settings
in a non-Active Directory environment. For more information
about how to configure Automatic Updates by using these methods,
click the following article number to view the article in the
Microsoft Knowledge Base:

How to configure automatic updates by using Group Policy or registry settings
http://support.microsoft.com/kb/328010/

"Administrator" is an account. If a permission or privilege
is granter to the Administrator, it can be done only by someone
logged in with the Administrator account. That is, the account
whose name defaults to "Administrator".

"Administrators", on the other hand, is a "group". If you are
a member of the "Administrators Group", you have been granted
administrator privileges on that particular computer. It is
membership in the "Administrators Group" that people refer to
when they say things like "I'm an administrator on this computer".

--
Carey Frisch
Microsoft MVP
Windows - Shell/User
Microsoft Community Newsgroups
news://msnews.microsoft.com/

---------------------------------------------------------------------------­----------------

"GrahamH" wrote:

| The ability to acknowledge and act on update messages on a client, when set
| for administrators only, is a good thing. Does anyone know if/how this
| ability could be further restricted to, for example, members of an AD group?
| I'm in a situation where it's great to have only administrators log onto a
| box and manually apply the patches made available by WSUS, but also where
| there are just too many administrators.

.

Relevant Pages

  • PPTP Connection for Power Users
    ... I created a new PPTP connection under Win2K Pro as the Administrator and ... made the connection available to all users. ... However, when logged in as someone who is a member of the Power Users group, ... If I make the user a member of the Administrators group -- no problem. ...
    (microsoft.public.win2000.security)
  • Re: Windows Service - Event Log
    ... I didn't say the Administrator account. ... Administrators group on the local machine." ... I didn't advocate using a member of the Administrator's group; ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Restriction
    ... Only a user that is also in the local administrators group ... can manage membership in the local administrators group. ... 'change my account type' and make themselves administrator. ... My question is, as administrator, how do you change the limited account ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Installing XP Pro Tablet Edition and restricting users?
    ... You can configure Automatic Updates by using Group Policy ... "Administrator" is an account. ... a member of the "Administrators Group", ... | Interestingly during setup I entered a password and also setup the one & ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Exchange 2000 & Administrator Rights
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... Exchange Administrator on an ... |Administrators group gets over Exchange which make membership of this ...
    (microsoft.public.exchange2000.setup.installation)