AV software updates

  • Thread starter Thread starter wibble
  • Start date Start date
W

wibble

Hi All

Hope you can help - I deploy a number of laptops throughout europe-I don't
want to allow local users any admin rights as they have a habit of breaking
things, (no surprise there). I want to allow admin rights to update AV
softwar (Sophos). I was thinking of using a logon script as opposed to
setting up another account to allow this. Would you go this route or would
/can you suggest another course?

Cheers
 
Hi All

Hope you can help - I deploy a number of laptops throughout europe-I don't
want to allow local users any admin rights as they have a habit of breaking
things, (no surprise there). I want to allow admin rights to update AV
softwar (Sophos). I was thinking of using a logon script as opposed to
setting up another account to allow this. Would you go this route or would
/can you suggest another course?

Cheers
Click to expand...

If the laptops are all Win2K or XP, and if they are logging into an
Active Directory domain then you can use StartUp scripts via Group
Policy. StartUp/ShutDown scripts run with local System privileges and
can (unlike regular System scripts) have network access based on
Domain Computer permissions.

You can also leverage Scheduled Tasks, but it may be problematic to
deploy the tasks via JT.exe or Schtasks.exe.

Clay Calvert
(e-mail address removed)
Replace "W" with "L"
 
wibble said:
Hope you can help - I deploy a number of laptops throughout europe-I don't
want to allow local users any admin rights as they have a habit of breaking
things, (no surprise there). I want to allow admin rights to update AV
softwar (Sophos). I was thinking of using a logon script as opposed to
setting up another account to allow this. Would you go this route or would
/can you suggest another course?
Click to expand...

Hi

In addition to Clay's suggestions:

You might get something to work using a Runas wrapper utility or similar,
take a look here:

http://groups.google.com/[email protected]
 
wibble said:
Hi All

Hope you can help - I deploy a number of laptops throughout europe-I don't
want to allow local users any admin rights as they have a habit of breaking
things, (no surprise there). I want to allow admin rights to update AV
softwar (Sophos). I was thinking of using a logon script as opposed to
setting up another account to allow this. Would you go this route or would
/can you suggest another course?

Cheers
Click to expand...

Thanks Guys for the quick answer
 
Back
Top