+ Post New Thread
Results 1 to 7 of 7
Windows Thread, Stop laptop users downloading windows updates at home? in Technical; Now bear with me on this one, Our staff have laptops which they have a local account on as well ...
  1. #1
    tosca925's Avatar
    Join Date
    Aug 2005
    Location
    Midlands
    Posts
    1,547
    Thank Post
    4
    Thanked 4 Times in 4 Posts
    Rep Power
    22

    Stop laptop users downloading windows updates at home?

    Now bear with me on this one,

    Our staff have laptops which they have a local account on as well as using their network account at school. We use WSUS in school to deploy all our approved updates. My problem is when staff are at home logged on to the local account on the local laptop (which has admin rights) they can manually download the Windows Updates without our control. Now most of this i suppose is OK but something like IE 7 which we have not deployed yet or even attempted to use the ADM templates for is a pain. I have users coming up and complaining abut IE stuff just because they don't know how to or like the look of IE 7.

    Is this possible to block the local user account from doing Updates even though this account is an admin account?

    My other dilemma is i guess the 6 weeks holidays if i stop the WU. I guess there should normally be only one patch Tuesday for WSUS to deliver out updates but its still a month before they come back to school.


    What are your thoughts on this?

    @Grumbledook. I know you have the same type of set up with your staff laptops, how do you handle this?

  2. #2
    eean's Avatar
    Join Date
    May 2006
    Location
    Seoul
    Posts
    572
    Thank Post
    71
    Thanked 57 Times in 41 Posts
    Rep Power
    31

    Re: Stop laptop users downloading windows updates at home?

    Most people consider users being able to update their own laptops at home a good thing - especially if the staff are connecting to the internet and not bringing them in regularly.
    There is a registry key about, which should be fairly simple to deploy, that will stop IE7 from downloading.
    I'm surprised that looks to the public update if you have WSUS installed, the settings are machine based and should work regardless.

  3. #3
    Bestbett's Avatar
    Join Date
    Apr 2007
    Location
    Hiding
    Posts
    46
    Thank Post
    4
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Stop laptop users downloading windows updates at home?

    If his WSUS is set via user gpo then it would only get it when logged in locally. You could configure a local firewall setting to block all the ports for updating if your that worried, and have another part of your gpo that sets wsus unblock those ports.

    In general though I would never allow a user that takes a laptop home to be an administrator of that laptop. To me this is just a bad bad idea. Think of the licensing issues alone, they can install whatever they want to that thing, including bittorrent and start sharing/downloading/installing with free reign on a system that in the end, at least here, Im responsible for, um no. Not even our head of schools is an administrator of thier own machine.

  4. #4

    GrumbleDook's Avatar
    Join Date
    Jul 2005
    Location
    Gosport, Hampshire
    Posts
    10,074
    Thank Post
    1,384
    Thanked 1,889 Times in 1,170 Posts
    Blog Entries
    19
    Rep Power
    614

    Re: Stop laptop users downloading windows updates at home?

    We encourage them to run the updates if any appear ... for updates we don't want we use reg tools to block them (which we still have done for IE7 and had previously done for 2 other patches)

    The only issue arises when a nasty "I am going to break you" patch comes out during a long holiday ...

    So far we have only had a few machines go wrong ... but they were fo unimportant peopl ... head of PE, a food tech teacher and the Head ... noone important.

    I am more confident than I used to be about patches from MS now ... so I tend to wait until someone moans that there machine is broken.

    Then again ... I don't do support anymore and have an army of minions.

  5. #5
    tosca925's Avatar
    Join Date
    Aug 2005
    Location
    Midlands
    Posts
    1,547
    Thank Post
    4
    Thanked 4 Times in 4 Posts
    Rep Power
    22

    Re: Stop laptop users downloading windows updates at home?

    I'll have to look into the IE7 patch to stop installs. Is it easily removed when you want to allow IE7?

  6. #6

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,850
    Thank Post
    110
    Thanked 598 Times in 514 Posts
    Blog Entries
    1
    Rep Power
    227

    Re: Stop laptop users downloading windows updates at home?

    If you actually do want this to work properly, you must make sure you set the WinHTTP proxy settings correctly.

  7. #7
    mortstar's Avatar
    Join Date
    Jan 2007
    Location
    Oxford
    Posts
    341
    Thank Post
    13
    Thanked 29 Times in 18 Posts
    Rep Power
    22

    Re: Stop laptop users downloading windows updates at home?

    Could you use the HOSTS file to stop access to windowsupdate sites?

    As you use WSUS, that shouldn't affect your own sanctioned updates.



SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 11
    Last Post: 30th November 2007, 12:43 PM
  2. Replies: 7
    Last Post: 21st August 2007, 02:11 PM
  3. Stop users closing bat/cmd shell at logon
    By apeo in forum How do you do....it?
    Replies: 10
    Last Post: 8th May 2007, 01:37 PM
  4. Replies: 2
    Last Post: 30th April 2007, 03:43 PM
  5. IE7 gone from Windows Updates.
    By eejit in forum Windows
    Replies: 5
    Last Post: 22nd February 2007, 04:52 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •