Our NT 4.0 domain controller is responsible for scripting necessary drive maps to domain users. Our scripts also push other critical enterprise network settings that can only be obtained during log in.
One of the drive maps is a share that allows users to access windows security patches/updates and install them as directed. Our users do not have Internet access. All domain users can access this folder, but only the 9x clients can install the updates/patches successfully, the 2K/XP clients receive ?You do not have permission to update windows. Contact your system administrator? and cannot complete the update process.
We know one fix for this is to have the 2K/XP users log on locally to their PC rather than directly to the domain. This allows them to inherit the necessary rights to complete the update, but unfortunately logging on locally defeats the drive scripting and required network settings push that is received from logging into the domain. We have discussed the idea of going to all 2K/XP clients and mapping their drives manually and still allowing them to log on locally, but for many reasons this is not practical and will not work for our network environment.
My question is this: Does anyone know if there is a way of setting the NT domain security settings (Per user/group) so that they will inherit the appropriate rights to install the updates, or (2) is there something we can do on the 2K/XP client side that will allow them appropriate rights to update their own systems while at the same time logging into the domain rather than locally.
Any suggestions on this would be greatly appreciated.
Thanks in advance.