Automatic Updates as a Limited User

Author

All Replies

redxii
too big to fail
Premium,Mod
join:2001-02-26
Austin, TX

Host:
/dev/null
Broadband Tweaks
Suddenlink
ISDN
Fiber Optic

4 edits

Automatic Updates as a Limited User

Here are a few references:
»Catch-22 Limited Account vs. Auto Updtes
»auto updates and limited user

It is possible! However, this guide is geared towards 2000/XP Pro because a certain group policy setting has to be enabled. XP Home users will have to import this registry entry. XP Home users cannot use the builtin Administrator account except in Safe Mode.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"ElevateNonAdmins"=dword:00000001

Prerequisites:
-Windows Update V6
-One of the following:
--XP SP2
--XP SP1
--2000 SP4

Setup:
XP Pro SP2
Windows Update V6
Logged into an account under the Users group

Here's a shot of Add/Remove of XP Pro without any updates other than Service Pack 2:

First of all, as an administrator, you need to enable Automatic Updates. For my purposes, I chose the option to "Notify me but don't automatically download or install them." You can use whatever option you wish, the fully automated and scheduled install will also work.

The easiest way in your limited account to enable Automatic Updates without logging off into an admin account is to go into the Control Panel and hold shift, and right click on Automatic Updates and choosing RunAs. You'll need to run it as an account with admin privileges. Using an admin account without a password will not work!

Next, you need to open the Group Policy editor as an administrator. Alternatively, you may import the ElevateNonAdmins registry entry as admin and skip the group policy editor.

runas /user:Administrator cmd (press enter)
(enter admin password then press enter)
gpedit.msc (press enter)

Browse to the following: Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update. In the right pane, open "Allow non-administrators to receive update notifications," and set its property to Enabled. Apply and exit the Group Policy Editor.

Windows 2000 users will have to right-click Administrative Templates, and choose to add a template. Click "Add" and add wuau.adm.

XP Home users will have to, as admin, import the registry entry for ElevateNonAdmins.

You may need to log off to get the process going, or you may not have anything to update at all. Rebooting is not required!

Select updates to download:

Updates begin to download:

After updates are finished downloading, I selected Custom. I was going to pick all the updates anyway, but just wanted to see the list:

Updates are installing:

This is just to assure you that I am still running as a limited user, and wuauclt.exe running as SYSTEM and my account.

Updates are done! All installed successfully. Time to reboot.

After rebooting, all the updates appear in Add/Remove. For extra assurance, one update (in this case MS05-039) is shown to have properly been installed:

As you may or may not know, you won't be able to install new versions of programs this way. Say you decide to install WMP 10 or new version of DirectX, you can always go to »www.microsoft.com and download the setup. Use RunAs to install, and you are still saved a trip from *logging out, logging into admin, running Windows Update*.

Some might argue, that strictly only the administrator account needs to update Windows. For home users, this will be VERY helpful for non-admin users. Not all IT staffs may find this suitable where a large number of the users are non-admin, and strip to the bone of their account rights (especially schools).


Sunday, 05-Jul 15:34:50	Terms of Use \| Privacy Policy \| Hosting by www.nac.net - DSL,Hosting & Co-lo \| feedback \| contact over 9.5 years online! © 1999-2009 dslreports.com. page compression OFF