Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

On Windows 2003 Server: I know that for installing security windows updates you need an administrator account, but, exist any way to check for updates with an server operator account (or another account with less privileges than administrator)?


share|improve this question
Do you have a WSUS installed? That could give you a lot more flexability. – Nixphoe May 17 '11 at 2:49

Looks like Microsoft requires administrative rights to install on an XP workstation. So I doubt they would have anything less for a server.

The manual installation of operating system updates from the Microsoft Update Web site requires the operating system desktop to run with administrative rights

I would look into getting a WSUS server. You would be able to pull a lot of reports for all your servers (and workstations) through that.

share|improve this answer

Server Operators is a group of limited usefulness. It only exists on domain controllers, and only enables a member to perform a small number of specific functions. Installing updates requires Administrator permission to a much wider scope of the file system and registry, and elevated privileges.

Additionally, Server Operators is a 'protected group'. Windows further restricts access to the members of protected groups, which can lead to unusual and difficult to solve permissions, delegation, and inheritance issues. I would discourage using Server Operators, Account Operators, or Backup Operators.

More information:

Well-known security identifiers in Windows operating systems

Delegated permissions are not available and inheritance is automatically disabled

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.