Hi!!! I'm trying to implement a SUS server (local windows update) I-ve already solved my problem to modify registry in order to establish windows update configuration. Now i've a quiestion all my client logon my samba PDC enusing a netconfig.pol isend all configuration everithing works ok. But i've a trouble, my users don't have privileges to install anything and i don't want to give them privileges. So is there another way to update my system , i mean something like sudo o something like that in order to get privileges and install updates? Or is there another way to do that?
On Wed, 09 Mar 2005 11:52:06 -0600 Cesar Sanabria Pineda <csanab@ife.org.mx> wrote: CSP> Hi!!! CSP> CSP> I'm trying to implement a SUS server (local windows update) CSP> CSP> I-ve already solved my problem to modify registry in order to establish CSP> windows update configuration. CSP> CSP> Now i've a quiestion all my client logon my samba PDC enusing a CSP> netconfig.pol isend all configuration everithing works ok. But i've a CSP> trouble, my users don't have privileges to install anything and i don't CSP> want to give them privileges. So is there another way to update my CSP> system , i mean something like sudo o something like that in order to CSP> get privileges and install updates? CSP> CSP> Or is there another way to do that? Why not rely on the automatic update? When making the NTConfig.pol: In Configure automatic updating choose: 4 - Auto download and schedule the install You can be kind to users and have a question asked before the probable reboot. Choose: No auto-restart for scheduled Automatic Updates installations This is what we are using and it works without users having any kind of privileges. -- Jean-Jacques Moulis Tel: (013) 281684 ISY Fax: (013) 139282 Link?ping University E-mail: jj@isy.liu.se 581 83 Link?ping
Cesar Sanabria Pineda schrieb:>Hi!!! > >I'm trying to implement a SUS server (local windows update) > >I-ve already solved my problem to modify registry in order to establish >windows update configuration. > >Now i've a quiestion all my client logon my samba PDC enusing a >netconfig.pol isend all configuration everithing works ok. But i've a >trouble, my users don't have privileges to install anything and i don't >want to give them privileges. So is there another way to update my >system , i mean something like sudo o something like that in order to >get privileges and install updates? > >Or is there another way to do that? > > >Hi, if you use a NTconfig.POL and set your internal susserver ip and updatetime etc. with adm to the default computers you will not have any problem with user permission, cause the update service ist started by a privileged system service on the win client machine which will do the update anyway. There should no manual update needed by Domain Users Group in this case or giving privileg to do so. If you want to force a susupdate you have to use tools like forcesus.exe and start them at logon of the user with a runas command ( cpau is a good choice ) as a member of Adminstrator Group ( Domain Admins etc...) you can also start forcesus.exe with psexec. Regards