Windows Update Using Gpo

[joeled22]

How do i configure so all my client computers install all windows updates using GPO? For an example if i have a normal user who gets info abt win7 sp1 is available in windows updates but when he tries to install it system wants administrator permissions etc etc. I dont use WSUS. Been playing around in computer configurations without any luck. I dont want to make my normal users domain admins to be able to install these updates.

Any idea?

 

[ICTCity]

How do i configure so all my client computers install all windows updates using GPO? For an example if i have a normal user who gets info abt win7 sp1 is available in windows updates but when he tries to install it system wants administrator permissions etc etc. I dont use WSUS. Been playing around in computer configurations without any luck. I dont want to make my normal users domain admins to be able to install these updates.

Any idea?

Do you want to restrict windows updates installation except for administrator, right?

From what I know, this is not possible. You can deploy updates via WSUS / SMS but domain admins are still able to install them. Excuse me... but HOW MANY domain admins do you have? "normal" users shouldn't be on that group...

 

[joeled22]

I just have two domain admins BUT i wasnt serious abt making all normal users domain admins. Did you really believe that???

Excuse me... but HOW MANY domain admins do you have? "normal" users shouldn't be on that group...

 

[ICTCity]

I just have two domain admins BUT i wasnt serious abt making all normal users domain admins. Did you really believe that???

You never know

Months ago I found a person which told me that his website was hacked almost every day. After further investigation I understood he putted "everyone" under domain admins and just to be sure everything worked fine... he putted his website in his LAN not in DMZ...

So... I can believe everything

Have a nice day