SIMS and Automatic Updates

[techyphil]

We have a SIMS man here atm trying to see why we cant install sims on workstations.

 

Now he's told us it maybe many different things and advised us that we should always use DOMAIN administrator account when installing even though I thought that was bad practise and also we are the only school that uses WSUS to deploy updates!

 

Strange... So we are not allowed to use updates either now. What about you lot? Heh

 

Im sure 70% of you all have a WSUS server.

[Skoggmeiger]

We use the Domain admin password.

 

The problem is, there is 'best-practice' and there is working in a school! The two rarely go hand in hand.

[NetworkGeezer]

Domain admin password? You are kidding aren't you?

 

Anway, I think you can use GPO to make other accounts local administrators.

 

Altertively, login as a local admin and map the S: drive using a domain account password.

 

Either way you get installion rights without endangering your network.

 

Using a domain admin account on client PC is probably like interactively using a root account on a *nix box. very bad.

[ctbjs]

we put all our sims users into a local group called "sims" and add that to the local administrator group on the workstation. That way they have local admin rights to install SIMS. Saves having to run round and install every time.

[PaulBM]

Are you talking Windows updates or SIMS updates?

 

We use the simsperm.bat to give the teacher the necessary rights to allow them to install the SIMS updates. The S drive is mapped via a logon script.

 

We use WSUS server for our windows updates.

[zag]

right click on my computer >> management >> local users and groups >> groups >> power users

 

Add your AD teachers group in there. Then sims will install perfectly for any teacher user.

[techyphil]

Thanks you guys...

 

Yeh Windows Updates, he claims its a no no and they dunt recommend schools use it - as every update needs testing. Its like he wanted us to phone them every time we wanted to install anything.

 

If simsperm.bat / ws_security.exe (apparently the same thing) set it then we have been doing it right as we have always ran that.

 

I want to ensure its working but not repeat tasks if they are already in place.

 

Anyone got a copy of the SIMS installation precedures? The 2004 version is listed on their website but its really different. Cheers

[Geoff]

You might want to have a look at Autopatcher.

 

http://www.autopatcher.com/

[MkII]

That's nutz phil.. and rediculously belt and braces for (the continual beta software we all run) running a secure and patched system.

 

We run WSUS no problem with SIMS, and auto install SIMS too - there's guidance on Capita's site to do it.

 

This is just some anal database guy - they're made that way and can't help it if they were born with their heads up their *****

[techyphil]

This is just some anal database guy - they're made that way and can't help it if they were born with their heads up their *****

 

LMAO Indeedy

 

Yeh Geoff, Im always using Unattended Setups with RYANSVM update pack then AutoPatcher just to initially update the other large portion of the updates and tweaks. Thats another way that IE7 occurs on our machines as IE7 is selected by default with it, as well as staff installing it themselfs at home. "WHICH SIMS DOESNT WORK WITH" < :/