Windows 2000 Automatic Update

  • Thread starter Thread starter mobUL
  • Start date Start date
M

mobUL

I am am administrator of a few computers that are
unsupported by the main IT department of my organisation.
The computers are required to be part of a domain that I
have no administration rights to.
After joining the domain the computers I control have
their automatic update settings locked even from
administrator account. They are forced to download and
install updates once a week.
I would like to release the computers from this automatic
update as the main IT department won't support the
computers as they are not to the standard build.

Michael
 
Automatic updates are not allowed to be performed by
anyone except administrators. Once your computers joined
the domain the domain admin become local admin by
default, the computers also inherit all policies and
procedures set up by the IT department from the domain.
These kick in wether you log into the domain or not as
the machines are still connected even if your local admin
account isn't. Solutions:- (1) talk to IT about any
policies preventing you from updating (2) become a domain
admin (3) Get IT, whom i assume own the domain, to make
your domain account a local admin (4) set up your own
domain (5)leave machines in a workgroup (6) inform your
IT department to stop being so anal.
Hope this helps.
John
 
Hi!

There seems to be a SUS server (or SMS/SUS) applying the
critical updates once a week through Group Policy
to "your" workstations.
You must contact your IT dep and discuss with them if it
is possible to have a GPO of your own with settings that
allows you to accept or deny downlaods/installs of these
security patches.
Why would these critical security patches be such a big
problem? It is in everyones interest that the workstations
are ASAP patched!?

Cheers & Peace
EBE
 
Hi John
I don't think I will get promoted to domain admin, I can't
use my own domain because we would then be prevented from
accessing other resources.
I can understand why it is being done as the dept is small
but has a large about of machines to maintain.
What would happen if I removed domain admins from the
local admin group.
The thing is that I am already a local admin and can't
understand how I am prevented from changing the setting
locally.
Any suggestions?
 
What are my options with regards to how the group policy
is applied.
I will be shortly adding a server to the same domain but
want to control the installation of the updates (where
files are stored(extracted), whether to create backup to
easier removal if needed)
 
Back
Top