User updates

I have a WSUS server service pack 1 version 3.0. I have group policy for my
windows updates with elevated privileges and enable user control over
installs enabled. In addition, I have Prohibit User Installs Enabled with a
setting of allow user installs. The updates come down fine no issues,
however the user can not install them. I have to log in as administrator in
order to get the updates to install on the users PC. Can anyone shed any
light????

Crossposted to the WSUS NG for the poster's convenience:

http://www.microsoft.com/communities...pdate_services

1xnyer wrote:

> I have a WSUS server service pack 1 version 3.0. I have group policy for my
> windows updates with elevated privileges and enable user control over
> installs enabled. In addition, I have Prohibit User Installs Enabled with a
> setting of allow user installs. The updates come down fine no issues,
> however the user can not install them. I have to log in as administrator in
> order to get the updates to install on the users PC. Can anyone shed any
> light????


MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============

> 1xnyer wrote:
>
>> I have a WSUS server service pack 1 version 3.0. I have group policy for
>> my windows updates with elevated privileges and enable user control over
>> installs enabled. In addition, I have Prohibit User Installs Enabled
>> with a setting of allow user installs.

Now... at this point... there are several contradictions.

First, if you have policy set to elevate privileges, then it would be
pointless to prohibit user installs, as prohibiting access to the WUA UI
pretty much renders pointless the elevating of privileges.

Second, the actual policy is "Remove access to use all Windows Update
features", and if it's ENABLED, then the users (or machine, depending on
which setting you actually configured), have NO access.

There is no policy called "Prohibit User Installs", and if it was set to
allow user installs, the actual policy "Remove all access to..." would be
DISABLED>

> The updates come down fine no issues,
>> however the user can not install them. I have to log in as administrator
>> in order to get the updates to install on the users PC. Can anyone shed
>> any light????

Yep.... sounds like you've done exactly what I speculated in the previous
paragraph. You "elevated" privileges (Allow non-admins to receive
notifications), but then you squashed that privilege by enabling "Remove
access to use all Windows Update features", which blocks *ALL* access to the
WUA UI for any login/machine affected by that policy.

--
Lawrence Garvin, M.S., MCITP(x2), MCTS(x5), MCP(x7), MCBMSP
Senior Data Architect, APQC, Houston, Texas
Microsoft MVP - Software Distribution (2005-2008)

MS WSUS Website: http://www.microsoft.com/wsus
My Websites: http://www.onsitechsolutions.com;
http://wsusinfo.onsitechsolutions.com
My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin