Getting notified for download but not to install-AutoUpdate-non-ad

I am trying to allow non-admin users access to receive windows update via
automatic updates without much success.

I have a SUS server that I am using for our LAN users but do not want to use
it for remote employees due to bandwidth issues.

I configured a group policy for the remote employees with notify to download
and notify to install and allow non-administrators to receive update
notifications

They are getting notified to download but they are never notifed to install.
The event viewer shows the file is ready to install but states I need to log
in as an admin.

I was thinking of configuring the automatic updates to auto download and
schedule install but there are some updates I do not want them to install
until it is tested.

Any ideas on why I can not install is appreciated?

Absent any Errors in your windowsupdate.log, you may be seeing a delay
caused by excessive demand on the servers. It can take up to 7 days for all
Automatic Update users to get new updates when so many have been released;
with the recent release of WinXP SP3, it might take 4-5 weeks, all told.

You can try downloading/installing the updates via Windows/Microsoft Update:
Understand that by doing so, you're pushing all the Automatic Updates users
further back in the queue (which may explain, at least in part, why
Automatic Updates hasn't brought them in for you yet).
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/


Eric wrote:
> I am trying to allow non-admin users access to receive windows update via
> automatic updates without much success.
>
> I have a SUS server that I am using for our LAN users but do not want to
> use
> it for remote employees due to bandwidth issues.
>
> I configured a group policy for the remote employees with notify to
> download
> and notify to install and allow non-administrators to receive update
> notifications
>
> They are getting notified to download but they are never notifed to
> install.
> The event viewer shows the file is ready to install but states I need to
> log
> in as an admin.
>
> I was thinking of configuring the automatic updates to auto download and
> schedule install but there are some updates I do not want them to install
> until it is tested.
>
> Any ideas on why I can not install is appreciated?

As a test I only downloaded IE 7 and the Windows Genuine Advantage
Notification. The event viewer shows both are downloaded and ready to
install.
"Installation Ready: The following updates are downloaded and ready for
installation. To install the updates, an administrator should log on to this
computer and Windows will prompt with further instructions: "


I am logged in a a non-admin account (standard user) and am not being
notified to install. If I log off and back in with an admin account the
shield and balloon popup for the install.

My goal is to keep my remote endusers with standard user permissions and
able to do automatic updates and choose which ones to download and install.

"PA Bear [MS MVP]" wrote:

> Absent any Errors in your windowsupdate.log, you may be seeing a delay
> caused by excessive demand on the servers. It can take up to 7 days for all
> Automatic Update users to get new updates when so many have been released;
> with the recent release of WinXP SP3, it might take 4-5 weeks, all told.
>
> You can try downloading/installing the updates via Windows/Microsoft Update:
> Understand that by doing so, you're pushing all the Automatic Updates users
> further back in the queue (which may explain, at least in part, why
> Automatic Updates hasn't brought them in for you yet).
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
> AumHa VSOP & Admin http://aumha.net
> DTS-L http://dts-l.net/
>
>
> Eric wrote:
> > I am trying to allow non-admin users access to receive windows update via
> > automatic updates without much success.
> >
> > I have a SUS server that I am using for our LAN users but do not want to
> > use
> > it for remote employees due to bandwidth issues.
> >
> > I configured a group policy for the remote employees with notify to
> > download
> > and notify to install and allow non-administrators to receive update
> > notifications
> >
> > They are getting notified to download but they are never notifed to
> > install.
> > The event viewer shows the file is ready to install but states I need to
> > log
> > in as an admin.
> >
> > I was thinking of configuring the automatic updates to auto download and
> > schedule install but there are some updates I do not want them to install
> > until it is tested.
> >
> > Any ideas on why I can not install is appreciated?
>
>

I changed my AU setting to download all updates and notify to install and am
still not being notified. Since all the downloads look like they have
finished downloading it now gives me the option to install when shutting
down. The problem with this is I do not want end users installing XP SP3
until we have fully tested it especially since I have seen issues with it.

"PA Bear [MS MVP]" wrote:

> Absent any Errors in your windowsupdate.log, you may be seeing a delay
> caused by excessive demand on the servers. It can take up to 7 days for all
> Automatic Update users to get new updates when so many have been released;
> with the recent release of WinXP SP3, it might take 4-5 weeks, all told.
>
> You can try downloading/installing the updates via Windows/Microsoft Update:
> Understand that by doing so, you're pushing all the Automatic Updates users
> further back in the queue (which may explain, at least in part, why
> Automatic Updates hasn't brought them in for you yet).
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
> AumHa VSOP & Admin http://aumha.net
> DTS-L http://dts-l.net/
>
>
> Eric wrote:
> > I am trying to allow non-admin users access to receive windows update via
> > automatic updates without much success.
> >
> > I have a SUS server that I am using for our LAN users but do not want to
> > use
> > it for remote employees due to bandwidth issues.
> >
> > I configured a group policy for the remote employees with notify to
> > download
> > and notify to install and allow non-administrators to receive update
> > notifications
> >
> > They are getting notified to download but they are never notifed to
> > install.
> > The event viewer shows the file is ready to install but states I need to
> > log
> > in as an admin.
> >
> > I was thinking of configuring the automatic updates to auto download and
> > schedule install but there are some updates I do not want them to install
> > until it is tested.
> >
> > Any ideas on why I can not install is appreciated?
>
>

As a second option since my main issue is bandwidth at my main office is
there a way to have the remote clients receive approval at my main office SUS
server and but download the updates from Microsoft?

"PA Bear [MS MVP]" wrote:

> Absent any Errors in your windowsupdate.log, you may be seeing a delay
> caused by excessive demand on the servers. It can take up to 7 days for all
> Automatic Update users to get new updates when so many have been released;
> with the recent release of WinXP SP3, it might take 4-5 weeks, all told.
>
> You can try downloading/installing the updates via Windows/Microsoft Update:
> Understand that by doing so, you're pushing all the Automatic Updates users
> further back in the queue (which may explain, at least in part, why
> Automatic Updates hasn't brought them in for you yet).
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
> AumHa VSOP & Admin http://aumha.net
> DTS-L http://dts-l.net/
>
>
> Eric wrote:
> > I am trying to allow non-admin users access to receive windows update via
> > automatic updates without much success.
> >
> > I have a SUS server that I am using for our LAN users but do not want to
> > use
> > it for remote employees due to bandwidth issues.
> >
> > I configured a group policy for the remote employees with notify to
> > download
> > and notify to install and allow non-administrators to receive update
> > notifications
> >
> > They are getting notified to download but they are never notifed to
> > install.
> > The event viewer shows the file is ready to install but states I need to
> > log
> > in as an admin.
> >
> > I was thinking of configuring the automatic updates to auto download and
> > schedule install but there are some updates I do not want them to install
> > until it is tested.
> >
> > Any ideas on why I can not install is appreciated?
>
>

Inline

Eric wrote:
> As a test I only downloaded IE 7 and the Windows Genuine Advantage
> Notification. The event viewer shows both are downloaded and ready to
> install.
>
> "Installation Ready: The following updates are downloaded and ready for
> installation. To install the updates, an administrator should log on to
> this
> computer and Windows will prompt with further instructions: "
>
> I am logged in a a non-admin account (standard user) and am not being
> notified to install. If I log off and back in with an admin account the
> shield and balloon popup for the install.
>
> My goal is to keep my remote endusers with standard user permissions and
> able to do automatic updates and choose which ones to download and
> install.

WYSIWYG if you attempt to update manually via Windows Update website when
logged in to a User Account without administrative privileges.

While Windows Update website may offer WinXP SP3, that doesn't mean
Automatic Updates will offer it yet.

> I changed my AU setting to download all updates and notify to install and
> am
> still not being notified. Since all the downloads look like they have
> finished downloading it now gives me the option to install when shutting
> down. The problem with this is I do not want end users installing XP SP3
> until we have fully tested it especially since I have seen issues with it.

Download details: Windows Service Pack Blocker Tool Kit:
http://www.microsoft.com/downloads/d...0-E2A72099EDB7

> As a second option since my main issue is bandwidth at my main office is
> there a way to have the remote clients receive approval at my main office
> SUS server and but download the updates from Microsoft?

Doubtful, but you could ask this question in the WSUS-specific newsgroup:
microsoft.public.windows.server.update_services
--
~PA Bear

> "PA Bear [MS MVP]" wrote:
>> Absent any Errors in your windowsupdate.log, you may be seeing a delay
>> caused by excessive demand on the servers. It can take up to 7 days for
>> all Automatic Update users to get new updates when so many have been
>> released; with the recent release of WinXP SP3, it might take 4-5 weeks,
>> all told.
>>
>> You can try downloading/installing the updates via Windows/Microsoft
>> Update: Understand that by doing so, you're pushing all the Automatic
>> Updates users further back in the queue (which may explain, at least in
>> part, why Automatic Updates hasn't brought them in for you yet).
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
>> AumHa VSOP & Admin http://aumha.net
>> DTS-L http://dts-l.net/
>>
>>
>> Eric wrote:
>>> I am trying to allow non-admin users access to receive windows update
>>> via
>>> automatic updates without much success.
>>>
>>> I have a SUS server that I am using for our LAN users but do not want to
>>> use
>>> it for remote employees due to bandwidth issues.
>>>
>>> I configured a group policy for the remote employees with notify to
>>> download
>>> and notify to install and allow non-administrators to receive update
>>> notifications
>>>
>>> They are getting notified to download but they are never notifed to
>>> install.
>>> The event viewer shows the file is ready to install but states I need to
>>> log
>>> in as an admin.
>>>
>>> I was thinking of configuring the automatic updates to auto download and
>>> schedule install but there are some updates I do not want them to
>>> install
>>> until it is tested.
>>>
>>> Any ideas on why I can not install is appreciated?