See the link below and select the option to install updates automatically by schedule
[require SP3 at least I believe] which allows updates to happen on a computer without
administrator intervention, though at some time the user may need to reboot to allow
updates to take effect. If you are concerned about updates being installed without
testing, then consider installing a Software Update Services computer on your network
and use Group Policy to configure it to be the server where computers get updates
from and you have the advantage of approving updates first. SUS require the use of a
W2K/W2003 server on your network running IIS, ideally as the only website on the
server. There is a newsgroup dedicated to SUS and Updates if you are interested or
have more questions and refer to the links below for more info. --- Steve
http://www.microsoft.com/security/protect/update.asp
http://www.microsoft.com/windowsserversystem/sus/default.mspx
http://www.microsoft.com/windowsserversystem/sus/susfaq.mspx
http://www.bris.ac.uk/is/services/computers/operatingsystems/sus/configuring.html
rwhite said:
How do I configure a Windows 2000 Pro workstation so that Windows updates can be
installed by a domain user logging on to the local machine using a windows domain
account with a roaming profile without granting the domain user administrative
priveleges to the local machine? I want users to be able to keep their workstations
current with the latest W2k critical updates but I do not want them to be able to
install other applications (especially spyware). Now that I have enabled the
administrator account for users in my domain so they can run Windows updates, I have
1-2 computers disabled by spyware every week.
