wsus-auto download and sheduled install

Dear, all.

I use wsus, and set all my clients AUOption=auto download and scheduled
install through group policy.
Before the scheduled installation-time, client-part software always hit:
already downloaded and ready to install. My users could freedom choose what
they want to install or not before install-time.

How to limit user right to readonly, I mean, if appove some updates for
install, users could only read want update will be installed, not change it?

Thanks.

Frank

Frank wrote:

> I use wsus, and set all my clients AUOption=auto download and scheduled
> install through group policy.
> Before the scheduled installation-time, client-part software always hit:
> already downloaded and ready to install. My users could freedom choose what
> they want to install or not before install-time.
>
> How to limit user right to readonly, I mean, if appove some updates for
> install, users could only read want update will be installed, not change it?
>
Hi,

If you apply the user policy "Remove access to use all Windows
Update features" the current user is always treated as a
non-administrator, as far as the Automatic Client is concerned.

This means that even if the user is a local admin, it will remove
all update notifications in the notification area of the task bar
(but not the reboot dialog box, and the reboot dialog will not
give you the Restart later option).




--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scr...r/default.mspx

Thanks Torgeir.

Frank


“Torgeir Bakken (MVP)�编写：

> Frank wrote:
>
> > I use wsus, and set all my clients AUOption=auto download and scheduled
> > install through group policy.
> > Before the scheduled installation-time, client-part software always hit:
> > already downloaded and ready to install. My users could freedom choose what
> > they want to install or not before install-time.
> >
> > How to limit user right to readonly, I mean, if appove some updates for
> > install, users could only read want update will be installed, not change it?
> >
> Hi,
>
> If you apply the user policy "Remove access to use all Windows
> Update features" the current user is always treated as a
> non-administrator, as far as the Automatic Client is concerned.
>
> This means that even if the user is a local admin, it will remove
> all update notifications in the notification area of the task bar
> (but not the reboot dialog box, and the reboot dialog will not
> give you the Restart later option).
>
>
>
>
> --
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/scr...r/default.mspx
>