Install updates in Windows 2000 without admin rights

  • Thread starter Thread starter Keith Lessert
  • Start date Start date
K

Keith Lessert

We have a Windows 2000 mixed mode environment. However,
we have Windows 2000 installed on all of our desktops.
Here is my question... Is it possible to install updates,
service packs, etc. via login script without giving users
admin rights?

I have several login scripts that I wrote to install
service packs and other updates without any user
intervention. However, when testing it always fails
because the users do not have rights to install software
on their machines. If I make them a local admin,
everything works fine.

We are using local policies to lock down the machines in
many different areas. I thought at first I had a policy
enabled that was preventing the user from installing
software on their machine. However, I tested the same
process on a base Windows 2000 machine with no policies
enabled, and got the same results.

Can anyone help me out?

Thanks!

Keith Lessert
Network Engineer
Focused Health Solutions
(e-mail address removed)
 
Keith said:
We have a Windows 2000 mixed mode environment. However,
we have Windows 2000 installed on all of our desktops.
Here is my question... Is it possible to install updates,
service packs, etc. via login script without giving users
admin rights?

I have several login scripts that I wrote to install
service packs and other updates without any user
intervention. However, when testing it always fails
because the users do not have rights to install software
on their machines. If I make them a local admin,
everything works fine.

We are using local policies to lock down the machines in
many different areas. I thought at first I had a policy
enabled that was preventing the user from installing
software on their machine. However, I tested the same
process on a base Windows 2000 machine with no policies
enabled, and got the same results.
Click to expand...

Hi

If Active Directory:

You can do it in a computer startup script (with a GPO) that runs as part of
the boot up process (before the user logs in). It runs under the system context
and has admin rights, but no implicit network authentication, so you will need
to authenticate to the network with a hard coded network username/password for
access to a share with the install source for the updates (the network user
should not have any more rights on the network than read access to this share).



Alternatively:

Some 3rd party RunAs solutions that "hides" (encrypt) username/password
are listed in the link below (buy solutions). Can be run from network shares,
so nothing needs to be installed on the client computers.

http://groups.google.com/[email protected]
 
Back
Top