I support a LAN of approximately 200 PCs, all of which receive antivirus software & updates from the antivirus server (which is also the domain controller). The end users do not have the appropriate permissions to install software, however such access is required in order to install many of the antivirus updates. Therefore, whenever antivirus updates are available, the users receive a prompt that tells them that a newer version is available & is being installed. This usually takes approximately 5+ minutes to complete, however since they don't have the appropriate permissions to install software, these updates aren't being made. So until someone with admin access logs onto their PC to allow the updates to install, the users have to wait 5+ minutes every time they log on while their system attempts to install the antivirus updates.

Server OS: Windows Server 2003
End User OS: Windows XP SP2
Antivirus S/W: Symantec Antivirus 10.0.0.359 (installed to client PCs via logon script)

Does anyone have any suggestions on how I can allow the updates to be installed on the end users' PCs without making everyone local admins on their computers?

Possibly a way to only allow the antivirus updates to install, but restrict any other software from being installed?

Or perhaps some way to configure the updates to be installed when the PC is turned on, before the logon prompt comes up? (right now the software attempts to be installed after someone logs in)

Any help and/or suggestions would be greatly appreciated.

Firstly, what anti-virus program are you running? And, is the limitation of installing updates within that software, or is it a GPO that's causing the problem?

Life is more painless for those who are brainless.

Everyone here is running Symantec Antivirus 10.0.0.359.

I don't know what the problem is. All I know is that unless you have the rights to install software on the local machine, the updates will not get installed.
Not allowing users to install software was implemented on purpose. I'm looking for a way to either allow the users to install the antivirus updates, while not being able to install any other software, OR have the updates install during boot-up.

Must be a limitation of your Local or Group Policies. We're running that same software and updates are pushed out and installed regardless of level of the user. It may be the script is the problem. Check your Server Console and make sure the settings are correct for remote updates.

Life is more painless for those who are brainless.

Good to know, but do your users have permissions to install any software they want, or do you regulate it somehow? Please explain.

Thanks.

The updates are controlled by the interraction of the Server and the client install. Level of privileges of the users is irrelevant.

Life is more painless for those who are brainless.

Thanks for the help.

Does anyone have any specific settings that should be set? Or perhaps a good place to start?

I've been on Symantec's site, checked all the settings on the antivirus server, but i'm still coming up with nothing.