How do large companies handle software updates for users without administrative rights?

Posted by CT on Server Fault See other posts from Server Fault or by CT
Published on 2010-05-26T15:57:42Z Indexed on 2010/05/26 16:03 UTC
Read the original article Hit count: 279

Filed under:

policy

|

users-rights

|

software-update

|

user-permissions

I just started working for a small-medium size company doing IT support. Maybe 150 or less users.

Right now every user has administrative rights to their own machine. This allows them to install updates or whatever else they would like to.

I'm tired of getting on user's machines that are bloated with crap they put on themselves. So my first thought would be to take away administrative rights to their computer. This would also have other advantages such as preventing a lot of drive-by malware on the web etc.

The problem arises that users are unable to install updates. (Even though I find most ignore these anyway)

How do large companies handle software updates on all client machines?

EDIT: Windows environment. Most servers are Windows Server 2003 Enterprise. Clients are all Windows. Win XP, Vista, and 7.

© Server Fault or respective owner

Related posts about policy

Active Directory Password Policy Problem

as seen on Server Fault - Search for 'Server Fault'
To Clarify: my question is why isn't my password policy applying to people in the domain. Hey guys, having trouble with our password policy in Active Directory. Sometimes it just helps me to type out what I’m seeing It appears to not be applying properly across the board. I am new to this environment… >>> More
How do I set a Group Policy's Password Policy in C#

as seen on Stack Overflow - Search for 'Stack Overflow'
I am trying to retrieve a group policy from a Windows Server 2008 Active Directory and change the minimum password age, maximum password age, and minimum password length in a C# application. Is there a way to do this? So far I have only found out how to create new Group Policy objects using Interop… >>> More
Problem with network policy rule in Network Policy Server

as seen on Server Fault - Search for 'Server Fault'
Trying to configure RADIUS for a college network, and have run into the following frustration: I can't set an "AND" condition for group membership of authenticated objects in the network policy rules, e.g. I'm trying to create a NPS rule that says, essentially "IF user is a member of [list of user… >>> More
Oracle Tutor: Installing Is Not Implementing or Why CIO's should care about End User Adoption

as seen on Oracle Blogs - Search for 'Oracle Blogs'
Eighteen months ago I showed Tutor and UPK Productive Day One overview to a CIO friend of mine. He works in a manufacturing business which had been recently purchased by a global conglomerate. He had a major implementation coming up, but said that the corporate team would be coming in to handle the… >>> More
AD User Passwords expiring without any notifications?

as seen on Server Fault - Search for 'Server Fault'
We setup password Policies in Active Directory to Expire peoples passwords after so many days. Well it looks like the time has come for the Expiration of the Passwords and people are getting locked out... There has been no warning of user passwords about to expire. They just come in to work and… >>> More

Related posts about users-rights

How to execute everything in the Local Area Network

as seen on Server Fault - Search for 'Server Fault'
We have a very small LAN here, but some peolpe here think we need Active Directory, though nobody knows how to maintain it. I am not in the position to change this. How can I get full access (on Linux it would be "execute" rights) also for files on network drives (the files are just on another machine… >>> More
How to execute files on LAN drives in a Windows Domain

as seen on Server Fault - Search for 'Server Fault'
We have a very small LAN here, but some peolpe here think we need Active Directory, though nobody knows how to maintain it. I am not in the position to change this. How can I get full access (on Linux it would be "execute" rights) also for files on network drives (the files are just on another machine… >>> More
How do large companies handle software updates for users without administrative rights?

as seen on Server Fault - Search for 'Server Fault'
I just started working for a small-medium size company doing IT support. Maybe 150 or less users. Right now every user has administrative rights to their own machine. This allows them to install updates or whatever else they would like to. I'm tired of getting on user's machines that are bloated… >>> More
auth user and exec a node app only with apache?

as seen on Server Fault - Search for 'Server Fault'
I couldn't find an answer on the web and I'm trying for days now so I hope that someone with more experience with apache can help me out. Iam writing an web editor and the user should be able to edit a file that is on the server in a directory the user has access to. The problem Iam facing is… >>> More
Protecting offline IRM rights and the error "Unable to Connect to Offline database"

as seen on Oracle Blogs - Search for 'Oracle Blogs'
One of the most common problems I get asked about Oracle IRM is in relation to the error message "Unable to Connect to Offline database". This error message is a result of how Oracle IRM is protecting the cached rights on the local machine and if that cache has become invalid in anyway, this error… >>> More