[prev in list] [next in list] [prev in thread] [next in thread] 

List:       patchmanagement
Subject:    RE: SUS and updating computers whit local admin-rights
From:       "Free, Bob" <RWF4 () pge ! com>
Date:       2004-01-22 22:56:24
Message-ID: 87B3A4F8672F7A4CB13170595A607FF57DE6B9 () exchange100 ! utility ! pge ! com
[Download RAW message or body]

Wesley T. Scott <mailto:TScott@uwyo.edu> wrote:
> Unfortunately I don't believe that you can 100% force a reboot
> through SUS when your users are local administrators. Local
> administrators can stop a reboot from occurring because they will
> always be given a choice if they are logged on. 


The other nice 'feature' is an administrator can choose to decline an update. Say you \
push out a set of updates, he/she hits the more info button and de-selects one or \
more. As far as AU is concerned, that's it for that update. Once they reboot for the \
other updates and the AU begins a new cycle, those declined updates are ignored from \
then on unless there is intervention from 'above'. If your systems have a file named \
hidden.xml, someone is declining updates.

Bob Free
Sr Network Specialist
PG&E Auburn, Ca.
 
> 
> -----Original Message-----
> From: Pontus Ireteg [mailto:Pontus.Ireteg@enea.se]
> Sent: Thursday, January 22, 2004 12:56 AM
> To: Patch Management Mailing List
> Subject: SUS and updating computers whit local admin-rights
> 
> Hi list,
> 
> I have installed a SUS-server at our company to manage the
> clients patch- and hotfix-updates, but I have run in to some
> problems.
> 
> We have a policy that let every user at our domain to be a
> local admin on his/her computer.
> The problem is that even if I have choosen to force the computer
> to reboot when SUS have updated the computer, it dosenīt.
> 
> But if I try to put a computer in the SUS-OU and the user
> isīnt a local administrator it works just fine.


---
To unsubscribe send a blank email to leave-patchmanagement@patchmanagement.org


[prev in list] [next in list] [prev in thread] [next in thread]