Guest Sean Posted July 31, 2007 Posted July 31, 2007 We have a windows 2003 Domain and are using WSUS. Recently, the defult Domain Admin account password was changed to force other Domain Admins to use their own credentials instead and thereby provide an audit trail. Since doing this, they cannot view the presence of windows updates waiting to be installed on any Domain server. This is despite the fact that the Domain Admins group is also a member of the Built in Local Admins group. Does anyone have any ideas?
Guest Eddie Bowers [MSFT] Posted July 31, 2007 Posted July 31, 2007 The only thing I can think of that would cause this is if the user policy for "remove access to all windows update features" is enabled for these users. That would prevent the notifications. Eddie Bowers Security Support Microsoft Corporation This posting is provided "AS IS" with no warranties, and confers no rights.
Guest Sean Posted August 1, 2007 Posted August 1, 2007 Where would I find this policy? "Eddie Bowers [MSFT]" wrote: > The only thing I can think of that would cause this is if the user policy > for "remove access to all windows update features" is enabled for these > users. > That would prevent the notifications. > > Eddie Bowers > Security Support > Microsoft Corporation > > This posting is provided "AS IS" with no warranties, and confers no rights
Guest TaurArian [MS-MVP] Posted August 1, 2007 Posted August 1, 2007 Perhaps try the WSUS Newsgroup http://www.microsoft.com/technet/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.windows.server.update_services http://news://msnews.microsoft.com/microsoft.public.windows.server.update_services (OE client) xposted for convenience. -- ==================================== TaurArian [MS-MVP] 2005-2008 - Australia ==================================== How to make a good post: http://www.dts-l.org/goodpost.htm Defending your machine: http://defendingyourmachine2.blogspot.com/ http://taurarian.mvps.org/index.htm Emails will not be acknowledged - please post to the newsgroup so all may benefit. "Sean" <Sean@discussions.microsoft.com> wrote in message news:3A90FD6E-FA25-45DC-B147-7E9C6174F0DE@microsoft.com... | Where would I find this policy? | | "Eddie Bowers [MSFT]" wrote: | | > The only thing I can think of that would cause this is if the user policy | > for "remove access to all windows update features" is enabled for these | > users. | > That would prevent the notifications. | > | > Eddie Bowers | > Security Support | > Microsoft Corporation | > | > This posting is provided "AS IS" with no warranties, and confers no rights
Recommended Posts