joeled22 Posted March 17, 2011 Posted March 17, 2011 How do i configure so all my client computers install all windows updates using GPO? For an example if i have a normal user who gets info abt win7 sp1 is available in windows updates but when he tries to install it system wants administrator permissions etc etc. I dont use WSUS. Been playing around in computer configurations without any luck. I dont want to make my normal users domain admins to be able to install these updates. Any idea? Quote
ICTCity Posted March 17, 2011 Posted March 17, 2011 How do i configure so all my client computers install all windows updates using GPO? For an example if i have a normal user who gets info abt win7 sp1 is available in windows updates but when he tries to install it system wants administrator permissions etc etc. I dont use WSUS. Been playing around in computer configurations without any luck. I dont want to make my normal users domain admins to be able to install these updates. Any idea? Do you want to restrict windows updates installation except for administrator, right? From what I know, this is not possible. You can deploy updates via WSUS / SMS but domain admins are still able to install them. Excuse me... but HOW MANY domain admins do you have? "normal" users shouldn't be on that group... Quote -------------------------------------------------------- Tu peux aussi crire en franais. Du kannst auch auf Deutsch schreiben. Puoi scrivere anche in italiano. --------------------------------------------------------
joeled22 Posted March 18, 2011 Author Posted March 18, 2011 I just have two domain admins BUT i wasnt serious abt making all normal users domain admins. Did you really believe that??? :-) Excuse me... but HOW MANY domain admins do you have? "normal" users shouldn't be on that group... Quote
ICTCity Posted March 18, 2011 Posted March 18, 2011 I just have two domain admins BUT i wasnt serious abt making all normal users domain admins. Did you really believe that??? :-) You never know :P Months ago I found a person which told me that his website was hacked almost every day. After further investigation I understood he putted "everyone" under domain admins and just to be sure everything worked fine... he putted his website in his LAN not in DMZ... So... I can believe everything :) Have a nice day :) Quote -------------------------------------------------------- Tu peux aussi crire en franais. Du kannst auch auf Deutsch schreiben. Puoi scrivere anche in italiano. --------------------------------------------------------
Recommended Posts