Automating updates

rmg1

Hi all

I usually get roped in to sort out peoples laptops (with the usual help from people on here) after they've installed something random and it's !!!!!!ed something up so I'm after a bit of advice.

I usually set most people up with User access (and no password, they can add one if they feel like it) and myself up with Admin access (password protected) just so they can't go installing random bits of software.

I've set up Windows updates to be available to everyone for installation and the AV installs updates automatically but that's about it.

What I'd like to do is the following:-
If it's an update or a newer version of a currently installed program (Ccleaner for example), let them install it (I can live with removing bloatware and random toolbars every once in a while).
If it's a new piece of software (i.e. not previously installed), don't allow them to install it without my admin password.

So to my question, is what I want to do possible?
If it is, how do I go about it?

I get the feeling I'm going to need some sort of policy but after that I haven't a clue.

WTFH

Are these people ones you work with?
If so, do you have a server?
If it's running SBS, you can manage updates through the server and automatically push them out to the clients.

rmg1

No, these are my neighbours at home.

rmg1

Anyone any ideas?
Please?

RobTang

You cant do exactly what you want, if it needs escalation it needs escalation and that will always require an admin level user.


The only way round it is to have a package manager running constantly as an admin level user, then the real user can interact with the package manager.


OR you could just have the package manger auto update without user intervention (ie run on schedule)


Both are limited by whatever packages are available.


I've heard good things about http://chocolatey.org/ although its more focused towards the development community, there's probably enough packages to get you going.