force windows updates yepiknowiam 12/18/2008 7:43:01 PM We currently use group policy to download and install windows updates automatically. Some updates do not install automatically and require user interaction to click "I accept". Is there a way around this or does this need to be done through wsus?

Re: force windows updates "Lanwench [MVP - Exchange]" <lanwench[ at ]heybuddy.donotsendme.unsolicitedmailatyahoo.com> 12/19/2008 7:28:44 PM yepiknowiam wrote: [Quoted Text] > We currently use group policy to download and install windows updates > automatically. Some updates do not install automatically and require > user interaction to click "I accept". > > Is there a way around this or does this need to be done through wsus? You really need to use WSUS. Also, your users shouldn't be *able* to accept or decline updates - the fact that they get notified at all suggests that they have local admin rights, which is ill-advised.

Re: force windows updates yepiknowiam 12/19/2008 8:59:08 PM I am not totally sure if users are getting this message. I'm am going off my own experience. All the users except a couple in IT and management are in the power users group. I get prompted at times if I want to install an update. Otherwise it is set up in group policy to autmatically download and install updates. In regards to the WSUS, I've done some testing a long time ago, can this be setup in on a virtual XP system or does it need to be it's own Server 2003 system without anything else running? We have approx 30 workstations. "Lanwench [MVP - Exchange]" wrote: [Quoted Text] > yepiknowiam wrote: > > We currently use group policy to download and install windows updates > > automatically. Some updates do not install automatically and require > > user interaction to click "I accept". > > > > Is there a way around this or does this need to be done through wsus? > > You really need to use WSUS. Also, your users shouldn't be *able* to accept > or decline updates - the fact that they get notified at all suggests that > they have local admin rights, which is ill-advised. > > >

Re: force windows updates "Lanwench [MVP - Exchange]" <lanwench[ at ]heybuddy.donotsendme.unsolicitedmailatyahoo.com> 12/20/2008 2:59:57 AM yepiknowiam wrote: [Quoted Text] > I am not totally sure if users are getting this message. I'm am > going off my own experience. All the users except a couple in IT and > management are in the power users group. That's essentially the same as administrators - I'd avoid it. Users should be users. > > I get prompted at times if I want to install an update. Otherwise it > is set up in group policy to autmatically download and install > updates. > > In regards to the WSUS, I've done some testing a long time ago, can > this be setup in on a virtual XP system or does it need to be it's > own Server 2003 system without anything else running? We have approx > 30 workstations. I'm fairly certain it has to run on Windows server, but there's no reason that can't be in a VM - or perhaps run on an existing W2003/2008 server in your domain > > "Lanwench [MVP - Exchange]" wrote: > >> yepiknowiam wrote: >>> We currently use group policy to download and install windows >>> updates automatically. Some updates do not install automatically >>> and require user interaction to click "I accept". >>> >>> Is there a way around this or does this need to be done through >>> wsus? >> >> You really need to use WSUS. Also, your users shouldn't be *able* to >> accept or decline updates - the fact that they get notified at all >> suggests that they have local admin rights, which is ill-advised.