Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

On Windows 2003 Server: I know that for installing security windows updates you need an administrator account, but, exist any way to check for updates with an server operator account (or another account with less privileges than administrator)?

Thanks!

share|improve this question
1  
Do you have a WSUS installed? That could give you a lot more flexability. –  Nixphoe May 17 '11 at 2:49

2 Answers 2

Looks like Microsoft requires administrative rights to install on an XP workstation. So I doubt they would have anything less for a server.

The manual installation of operating system updates from the Microsoft Update Web site requires the operating system desktop to run with administrative rights http://technet.microsoft.com/en-us/library/bb456992.aspx

I would look into getting a WSUS server. You would be able to pull a lot of reports for all your servers (and workstations) through that.

share|improve this answer

Server Operators is a group of limited usefulness. It only exists on domain controllers, and only enables a member to perform a small number of specific functions. Installing updates requires Administrator permission to a much wider scope of the file system and registry, and elevated privileges.

Additionally, Server Operators is a 'protected group'. Windows further restricts access to the members of protected groups, which can lead to unusual and difficult to solve permissions, delegation, and inheritance issues. I would discourage using Server Operators, Account Operators, or Backup Operators.

More information:

Well-known security identifiers in Windows operating systems
http://support.microsoft.com/kb/243330

Delegated permissions are not available and inheritance is automatically disabled
http://support.microsoft.com/kb/817433

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.