I am using trying to setup Microsoft SUS. Yes, I know about WSUS but we don’t want .net right now. Anyway,we have single domain and use the domain global policies for the domain computers. I setup an Organizational Unit that will hold only those computers we want to update. It has its own global policy which is identical to the domain policy except that Automatic Updates is turned on. The problem is that an ordinary domain user cannot install scheduled updates. Only an administrator can do so when he logs in. What rights are missing from domain users? The Everyone group has Read rights to the c:\Sus directory and below on the Update server. Microsoft says that ordinary users can install updates if they are scheduled updates.
