SUS Administrator Notification

[DVader]

I'm using Software Update Services(SUS) on my network. My clients are getting updates just fine. My problem is, the local accounts on the computer are members of the local administrators group and thus, they are getting pop-ups and notifications to install updates and cancell if wanted. Is there a way to turn this off for the Administrators group as well? I havn't been able to find anything on MS website.

[NooNoo]

This might be helpful but I haven't played with SUS, just my best guess.

[DVader]

Thanks for the info. I am already doing what the web page you gave has on it and using the ADM file. The trouble comes when local Administrators on the system login and that group gets notices and popups about SUS and are given the option to cancel installation at this time, thus in a way overriding the ADM file.

I'm hoping SUS users who have this issue will have a reg fix or something.

[confus-ed]

If the end user is part of the local administrators group, he or she will be able to interact with Automatic Updates (AU) by initiating downloads or installs. If the end user is not part of the local administrators group, he or she will not be able to interact with AU and will not see the AU balloon or tray icon. For end users who are not local administrators, the only way that AU will properly update their machine is if scheduled installs are set

The only way I've fathomed is leaving all the machines on & scheduling updates to occur when there are no admins about , but shouldn't folks with admin privilage know not to mess with required updates? Otherwise if you ask me they shouldn't be administrators ...

Or you could just run them as is .. then work out who denied any with the reporting tool & GO SHOUT AT THEM !

[Fubarian]

Using gpedit.msc and setting a time to update is your best bet, if not better than doing the manual regedit. We recently setup an SUS server and until you set the local policy (or if your "lucky" and have Active Directory, do it a-la-mass) to run the updates at a certain time, they'll always get that junk.

The users will STILL see the lil globe icon and off the top of my head, can't remember if you'll get the ballon, I don't think you do.

To make your life easy (again, if you don't have AD) you CAN copy the %systemroot%/system32/GroupPolicy folder onto other computers, it might take a second to apply, but it does work ...or you can always log off, log back on.

btw, fyi, SUS now does service pack rollouts

[PuterGeekGirl]

Ours is setup to run at 3 a.m. if users are there and logged in it will run and the next morning they are greeted with a screen asking them to reboot. If the machine is on and NOT logged in, it does its thing and reboots itself. All is good. If the machine is off within 1 minute of login they are getting the update and then they have the option to reboot at that time or not.

Admins do see things a lil different...some folks here have admin rights to their local machines but are good about running them when prompted as if they don't they just keep getting it every time they log in. Even as admins they still only get whatever I push down.

I don't know of any way to make this mandatory for the admins.

Do all your users have admin rights?