Prevent local administrators from opting out of Microsoft Updates / accessing Windows Update "Change settings" page
Hello,
Is there a a group policy setting / dll file / registry setting that I can restrict access to that would either:
A) prevent local administrators from unchecking the "Give me updates for other Microsoft products when I update Windows" box?
or
B) prevent access to the "Change settings" option on the left side of Windows Update?
Thanks!
> referring to the "Remove access to use all Windows Update features"
Yes.
> enabling this group policy setting would disable Windows Update and
No. It removes access to windows update, not windows update itself. If
you enable it, you have to make sure that windows update is properly
configured:
http://gpsearch.azurewebsites.net/#2791
>
https://technet.microsoft.com/en-us/library/bb490846.aspx). This is not
This article is - hum - somewhat outdated :)
Greetings/Grüße,
Martin
Mal ein
gutes Buch über GPOs lesen?
Good or bad GPOs? - my blog…
And if IT bothers me -
coke bottle design refreshment (-:
Similar Messages
-
Restrict Local Administrators from change Network property
In my office Environment we are using Development machines on which every developer has Local Administrator rights on there system. We are using 2 Internet lines in which one line is fast speed and another one is slow one, due to slow internet speed on
second line some peoples manually change the Gateway IP and switch from slow to Fast one, to stop this we need to restrict those users from changing IP on windows 7. Only domain Administrator can able to change that Setting. we are using Window Server 2008
R2 as ADDS. is there any way to stop this using domain group Policy? or Local security policy?Hi Siddheshrsawant,
Sorry, we can’t restrict local administrators from changing network property via Group Policy, and this is by design.
For confirmation, the following thread also focused on the similar issue and can be referred to for information.
Unable to lock down Network Connections settings with Group Policy
http://social.technet.microsoft.com/Forums/windowsserver/en-US/32045ab3-0496-4f5e-b2c2-71ba0f2ed073/unable-to-lock-down-network-connections-settings-with-group-policy?forum=winserverGP
Best regards,
Frank Shen -
Can ZAM capture local Administrators from client?
Hi, my first time posting here. My organization uses Zenworks 11 SP1 (ZCM and ZAM). Can ZAM be configured to capture members of the local administrators group off of the client? Our client machines are Windows XP SP3, and local administrators can be found at My Computer-Manage-Local Users and Groups-Groups-Administrators on the client.
Our client services guys know ZAM much better than I do and they have never been able to find how to do this. I'm writing a custom app that needs requires this data. We have a workaround process in place, but it's a little clunky and it would really be ideal if we had a way to just capture this directly into ZAM since the large majority of the other data I need is already coming from ZAM. Was just wondering if any Zenworks gurus out there could shed a little light. Thank you in advance for any replies.Chris,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://forums.novell.com/ -
Preventing local admin from changing root password
Is it possible to prevent a local admin from changing the root password? I would like to set up a computer so that the user has admin rights, but cannot change the root password via a terminal shell to gain root access.
I can't provide you with details, but I'm sure that all you need to do is to edit the sudoers file. It needs to be edited with <visudo> when logged in as root in a Terminal. The location is </private/etc/sudoers>, but you don't need to know that when using <visudo>. From a first look I'd suppose you only have to uncomment the %admin line, but better get some more information. I never did this myself.
-
Hp stream running out of space due to windows updates.
So having had my stream 14 for a few months now it was in need of a clean up and so I decided to factory reset it and discovered a serious issue regarding lost drive space caused by windows updates.
In factory shipped condition, the system uses some sort of system that accesses the recovery partition to use the data on the WIM I believe, either way whatever it is doing is quite clever and leaves the system with a farly impressive 19.3GB of free space left over, however this situation rapidly degrades once windows starts to update itself.
Allowing Windows 8.1 X64 to update to the last available 'important' update reduces the available free space down to 10.8GB, that's a massive (when taken in context of how much is available) 8.5GB of space gone just by windows performing what are supposed to be important updates, not sure how much worse it will get with time either as it appears that any updated files are expanded to fill the available space rather than stored in the WIM image.
Do HP consider it uneccesary to update windows or are they going to take action to somehow rectify the situation by maybe providing an updated system image that will allow a more recent updated version of windows to be used in the same manner the original installation was? Or is there something I can do to perform this function?
Any ideas?@Dano314 ,
Hello and thank you for posting on the HP support forums. The updates are put out there to resolve issues.
If you find you are running out of space. Consider using an external hard drive. The hard drive on your system is not made for huge file storage and so on.
On the other hand if you find your system is running ok then do updates when you seem to find you are running into issues.
Thanks again for posting and have a great day.
Please click the "Thumbs Up" on the bottom right of this post to say thank you if you appreciate the support I provide!
Also be sure to mark my post as “Accept as Solution" if you feel my post solved your issue, it will help others who face the same challenge find the same solution.
D5GR
I work on behalf of HP -
When an incoming message has a sizable attachment (say ~1 MB or more), I have to click manually on Get Messages many times before it finally downloads. Until I get lucky, the software seems to allow a period of about 30 seconds (I haven't clocked it) until it quits trying to download new messages. And until the message with the large attachment finally downloads, all other incoming messages are clogged behind it and can't get through. How do I adjust settings to prevent timing out or increase the time-out limit substantially to work around this difficulty? If there's no fix, I'll have to give up on Thunderbird and go directly to the provider website to get e-mail.
Is there any way you could get such attachments sent to you otherwise, such as file sharing? Thunderbird has a feature to address this, [https://support.mozilla.org/en-US/kb/filelink-large-attachments Filelink], in case the sending party is using Thunderbird it may be useful to let them know about.
Are you using POP or IMAP? Either way many settings can fine tune this, in different ways, please add this information so we can provide a more detailed answer. -
HT4515 Does turning off group texting prevent my replies from going out to the mass?
I receive responses to group texts. How can i assure my responses do go to everyone else as well? Just turn off group texting?
Hi Auntie_Em4!
I have an article for you here that can hopefully help you understand group messaging a little further:
iOS: Understanding group messaging
http://support.apple.com/kb/HT5760
Specifically, I believe this section of that article answers your question:
If you send a message to multiple recipients without group messaging in use by the sender and all recipients, an individual message will go to each recipient using either SMS or MMS. Responses to these messages will be delivered only to the original sender in seperate messaging threads.
Take care, and thanks for visiting the Apple Support Communities.
-Braden -
I use PaleMoon now trying to get rid of advertising sharks. I have WINXP still - need assistive-technology computer for pain so taking time on getting new computer.
I have been severely sabotaged by advertising conglomerates selling my private information. They have no right -yet they do whatever they want. Anyhow...I've tried to OPT-OUT of EVERYTHING POSSIBLE. I've tried 5 places found. Google, NAI, DAA, & FIREFOX HELP said go to about:config was instructed to turn "from false to true" the "privacy.tracking.protection.enabled" .But I couldn't keep this setting because this also has to be set to false to use any saved log-on's to my accounts., and add-on AD BLOCK PLUS 2.6.7 when I was on Firefox & had some ticks and now it is disabled because it won't work with PaleMoon 25.2.1
This case is about GOOGLE OPT-OUT. Starting here: http://www.google.com/settings/ads?hl=en&sig=ACi0TCgWymel0CNWxdcnEWPzWNs9wDd7cVQHxHsmtz4w30CAyHk7MqyzzZdGh3m6FpDaJsKmunTLEvJZY5LAm3h6gIdzE30L-Q
There are 2 columns. The left one "ADS ON GOOGLE" NEVER RETAINS AFTER LOG-OFF. The right column "Google ads across the web
" seems to retain sometimes - if I remember right it falls off after a period of time as opposed to after just LOGGING-OFF. Below the columns there are options, but I don't have a GOOGLE ACCOUNT.
Also down there is this link: https://support.google.com/adsense/troubleshooter/1631343?hl=en ...you see the box with this: Advertising industry program participation
Google is a participating member of groups that have developed industry privacy standards like the Ad-Choices icon for online advertising.
Group Location
Network Advertising Initiative United States
Digital Advertising Alliance (DAA) United States
European Digital Advertising Alliance Europe
Digital Advertising Alliance of Canada Canada
....I clicked OPTED OUT FOR NAI on their link http://www.networkadvertising.org/
...I clicked OPTED OUT FOR DAA on their link http://www.aboutads.info/
...I clicked PROTECT MY CHOICES and downloaded the app.
These 1st 2 links used to have the same trouble and didn't retain ANYTHING and wouldn't re OPT-OUT ANY UNTIL THEY WERE SATIATED - saying I didn't have 3rd party cookies allowed when I did - this took hours.
I sent numerous trouble reports to them that they ignored - then I think I sent one to Firefox and it is much better but still not completely right. Today DAA retains 106 out of 122 and if I repeatedly RE-OPT-OUT successively I can get it to 121 out of 122 - never completely. (currently the one not taking is Accuen Inc. but it changes periodically - makes me think they set one up to take my info and then share it with all of them - lol )
Same for NAI currently I started with 94 out of 96 - next re-OPTED-OUT got it to 95 out of 96 and no further and same co. Accuen Inc (accuenmedia.com ) wouldn't update.
NOTE: I was copy/pasting the list of NON-OPT-OUT'S to them and my own document file to try and find trends/problems...now NAI programmers protected the list from being able to be COPIED AND PASTED!!! That's the opposite of being open and interested in making this work, right? Why would they want to allow us to OPT-OUT of their criminal espionage behavior...RIGHT? (lol) FYI: I recorded that the big one that was always retained before this one was...MEDIA MATH INC.
MANY Opt-outs would drop off while on-line and ALL would drop-off once logged-off. Now it's retaining most once logged off - but it hasn't been long enough to tell if they'll fall back into their bad habits as they've done before...
This has been going on forever for me - I've been reporting this malfunction since 2013.
Of course I downloaded PROTECT MY CHOICES FOR FIREFOX via NAI AND DAA'S links ...http://www.aboutads.info/PMC#protect-your-choices-for-firefox ............they both go to the same place???.....PROTECT MY CHOICES http://www.aboutads.info/plugin/install/firefox....that seems odd...it's as if they are the same entity then. ABOUTADS is DAA'S WEBSITE. NAI'S IS NETWORKADVERTISING.ORG so why would NAI use DAA'S PROTECT MY CHOICES app?
Lastely, I also requested that the COOKIES NAMES BE UNIFORMLY IDENTIFIABLE. All the OPT-OUT COOKIES that are to be forevermore retained on my computer and that I am to trust the EVERY FUNCTION OF - well they all have different COOKIE NAMES!! Most of the names you can not tell that they are OPT-OUT COOKIES!! - SO NOWWW They have created another problem.
We can no longer just "DELETE ALL COOKIES".
PLUS, we can no longer go through our cookies and delete individual ones that snuck through.
Every one of the OPT-OUT COOKIES SHOULD SAY "OPT-OUT" IWITHIN THEIR NAME OF THEIR COOKIE - PERIOD. RIGHT? (LOL) For real. Why was this mess was allowed?
REALLY IN MY OPINION THESE COMPANIES SHOULD BE BLOCKED AT THE LOCAL PHONE COMPANIES LEVEL - IN OUR SERVERS. We should not have to deal with them. Same thing with viruses, malware and such beasts. But I digress.
In summary:
1.)Google Analytics OPT-OUT Browser Add-on 0.9.6 doesn't retain OPT-OUT settings
2.) JAVA refuses to create updates for WinXP/FireFox/PaleMoon.
3.) DAA & NAI still don't retain ALL OPT-OUT settings and never completely OPT-OUT all companies.
4.) OPT-OUT cookies should be uniformly names with the words OPT-OUT in their titles.
5.) Ad Block Plus 25.6.7 doesn't work for Pale Moon and there is no alternative - (didn't work great in FireFox)
Right now I'm mainly interested in #1)retaining my GOOGLE OPT-OUTS while on line AND while logged off since it is attacking my computer and steeling all the speed until it freezes my keyboard.
Currently I am trying to remember to run through 3. OPT-OUTS every time I log on.
Thanks so much!hello, palemoon's support forums are here: http://forum.palemoon.org/
-
When I installed iTunes 10.0.0.68 this morning, the splash screen warned me that I need to opt out of Ping sharing to prevent my info from going to Apple. I understood that to mean that I was opted in, unless I chose to opt out.
Is it enough that my Account Information page says "Ping: Off"?
Or, is there some other step that I need to take?Correction on the version number.
According to the Help dropdown, I'm running 10.0.0.68.
But according to the Windows uninstall page, I'm running 10.0.1.22.
Apparently, the Help screen didn't update when I did the upgrade. -
Unable to switch from Windows Update to Microsoft Update
On a new Windows 7 64 bit computer I am unable to access Microsoft updates. Windows update works fine, but when I click the link to get updates for other Microsoft Products it will only take me to the screen that tells me to use the start menu to check for
updates. I have also tried other links to Microsoft Update from other Microsoft webpages and end up with the same result.
I have Office 2013 Standard installed and activated, and from previous installation experience know that I should be able to access numerous updates through this method.
To verify that I am able to install updates for Office I manually downloaded and installed one Office 2013 update through the Microsoft download site.
How do I get this machine to switch to Microsoft Update?Hi,
According to your description, I think you may had a misunderstand between these two updates installation. Here is a paragraph which talking about Use Windows Update to Check for Updates to other Microsoft Products:
By default, Windows Update can download and install updates for Windows 7 and features that are part of the operating system (such as Internet Explorer). You can also merge the functionality of Microsoft Update—a service for managing updates to Microsoft
Office and several other Microsoft products—into Windows Update so that you no longer need to visit Office Online to get updates.
If you do not already have Windows Update integrated with Microsoft Update, you will see the message “Get updates for other Microsoft products” on the Windows Update home page. To enable checking for other products, click the Find Out More option shown beside
this message. This will take you to the Microsoft Update site for some quick installation steps. You only need to do this once. Thereafter, the Windows Update home page will indicate that you receive updates “For Windows and other products from Microsoft Update.”
From: http://technet.microsoft.com/en-us/magazine/ff642466.aspx
Hope this helps. If you need further assistance on this particular issue or any other Windows related issue, let us know and we will be glad to assist you.
Roger Lu
TechNet Community Support -
Opting out of BT Wifi being made impossible by fru...
For the last week I have been trying to opt out of BT Wifi FON, however when I click the link on the BT site and go to
www.bt.com/btfon my BT internet address I set up for for mail is not recognised and says "invalid username/password" (incidentally the email I set up BT ID was a non-BT email so there is no option to input this).
After twenty five frustrating minutes on the phone to customer services trying to explain that my problem was NOT that I couldn't connect to BT wifi FON (I am readily able to do that with my BT internet address) but that it was that I couldnt log into www.bt.com/btfon to opt out, I finally got put through to someone who said I needed a 'registered' BT email address. She set one up for me and said I would be emailed with a password within 24hrs to my non-BT email (ie the BT ID email address I had set up). Incidentally I was advised that they could not opt me out of BT wifi at their end and that I would need to do this myself through the www.bt.com/btfon site.
Predictably this email never arrived and so I called again and after another half hour of trying to explain the same thing to a different adviser who had no idea about the email I had set up by the previous advisor, this advisor uttered the dreaded words "so you can't connect to BT wifi?". Aaaaaargh! I CAN CONNECT TO BT WIFI, I JUST NEED TO BE ABLE TO LOG INTO www.bt.com/btfon!!!!!!!!!!!!!!!!
Ended up putting phone done in sheer frustration (how many more times can I explain that I CAN CONNECT TO WIFI, THATS NOT THE PROBLEM!!!) and submitting a complaint. I just hope it's dealt with by someone who actually finally knows what they are doing!
As a new customer I am totally fed up with BT already. I am trying to solve what should be a simple problem and have been left frustrated and inconvenienced by the appalling customer service. The telephone advisors seemed to have no knowledge of the trail of events in my case (don't they have an electronic log of these somewhere they can look at to see what earlier advisors have done?) and just seemed to select their response from a selection of pre-defined phrases rather than actually understanding and responding to the problem.
Came to BT from TalkTalk expecting an improvement in service, not more of the same.
And finally, why on earth aren't customers able to disable Wifi with FON through the homehub admin settings? Absolutely frustrating.
Rant over (for now).
Solved!
Go to Solution.Many thanks to the moderator who has offered to resolve this, much appreciated but the matter is now resolved.
However to update- after another frstrating call from customer services that offered no solution (just the same repetitive misunderstanding of my problem which I won't go over again as I've ranted about this in previous posts!) I stumbled upon a seperate button in the My BT pages that said to press to opt out of wifi.
I expected it to just take me to the link that I have been unable to log into (for the reasons given in my previous posts) but it didn't, and gave me an immediate message saying that I would be opted out of Bt Wifi within 24hrs. Must admit I didnt expect it to work but it did. I subsequently ignored my callback messages from BT customer services as I just couldnt deal with the hassle, having already wasted about 3 hours on the phone trying to sort this out. Not one single advisor had mentioned that I could use this button instead of the BT wifi opt out opt page I had been trying to access.
In conclusion, if you are trying to opt out of BT Wifi and cant log into the page that the BT site links you to (due to not having a registered BT email address), dont waste your time trying to explain it to BT customer services unless you want to be repeatedly told that your problem is logging into a BT hotspot when it isn't and that you will be given a registered email (that will never work- despite having one set up and being given a password by an adviser over the phone this was still rejected by the bt wifi opt out page). Instead, have a dig around on your My BT and look for the opt out button.
Once again, thankyou to the moderator DavidM that offered to help but I am going to leave it here as the outcome I wanted has been achieved ie I have finally been able to opt out. No thanks to BT for the utterly useless and inconsistent advice provided by their offshore call centres. -
Stop Photo Booth from 'timing out' and freezing
Hi,
Is there a way one can prevent Photo Booth from 'timing out'?
When one launches Photo Booth, one sees a preview of what the camera can see. If one switches to another window, then after around 30 seconds this preview 'stops'. To resume the preview, one must click on the application again to make it the active window.
Is there a workaround to prevent this from happening?
Alternatively, are there any pieces of software which show me what my camera can see which do not 'stop' after a small amount of time? I realise that Photo Booth was not written with this use in mind, so I can understand the limitation.
With Windows, there was a plethora of applications which served this purpose, but I'm not familiar with the Mac alternatives. I used a piece of software called 'CamViewer' on Windows, however running the camera in a virtual machine just to get this functionality would be an inconvenience to me.
Thank you for your help with this,
Joseph.Just a follow up, DO NOT use HeadsUp. At least, not until the developer has fixed some problems with it. Just having the app open makes my rMBP's temperatures soar to over 100 degrees with some serious fan noise.
-
You have an opt out option.
THIS opt out option has a forever option.
IT DOES NOT WORK.
I have opted out forever on the stupid )(&**%^*&()*^ tab that occurs in the MIDDLE OF MY SCREEN, covering a THIRD of my screen (and at 62cm - this is over kill!) .... FAIL. (at least 4 times)
I have opte dout forever on the stupid tab on the RIGHT side of my screen......FAIL.(at least 8 times)
I am unable to opt out forever on the tab that appears on the bottom of my screen, as the opt out options appears BEHIND the window I wish to opt out forever of. (I call this EPIC fail.)
When I am reading a story on line, I DO NOT WANT TO SHOP. If I am shopping in Amazon for a book, I will be reading about that book. IT IS ANNOYING TO HAVE TO CLOSE OUT WINDOWS EVERY TIME I SEARCH FOR A NEW BOOK - consider that I search/buy around 15 books at a time - after checking out maybe 50 that these tabs open over the TOP of.
I also wish to get rid of the underlines with the green circle-thingy arrows that open pop up windows if I mouse over them. (there are 3 of them under this box I am typing in as I type, and nudging the mouse out of the way has opened up at least 4 stupid pop up windows - which I have blocked pop ups in the options...so WHY???????)
I realise this can not be fixed on the spot, as it is going to require an actual programmer to fix it but please, pass this up to or over to whoever CAN fix it. I have used firefox since before patch 4 after it went live. I ADORED the old "you are F****d (etc" page you used to have that was directly opposed to internet explorers page not found - and I actually took the time to read it and had a terrible time stopping the laughter (at work of all places) when I did. I do not want to change browser, but these *features* do not enthrall me - especially since *features* should be optional, and turning them off should work.
Thank you for your help, and I hope you have a great day/night and no more horribly painful people like me. <3 x othankyou. THANK you.
thankyouthankyouthankyou!
sorry about no screenie but the first option worked (at least so far!)
THANKYOUTHANKYOUTHANKYOUTHANKYOUTHANKYOUTHANKYOUTHANKYOUTHANKYOU -
How do prevent HTML snippets from being listed on search engines?
I just created a new website using iWeb 3.0.1. On a couple of my pages I embedded flash music players and video players using the HTML Snippet widget. I did a quick search of my website on google and noticed that the HTML widgets were showing in the results as separate pages. I then clicked on these HTML Snippet pages and up came the widget on a separate page by itself. How do I prevent search engines from listing any HTML Snippets on my iWeb site as separate pages?
Thanks
athafranPaste this in the HTML Snippet.
In the <body> ... </body> part you paste the code you currently use for your Snippet.
I haven't tried it, the noindex part, but the code itself is accepted by iWeb.
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="robots" content="noindex,nofollow">
<meta name="description" content="instructions for excluding search engine robots">
<title>Search Engine exclusion</title>
</head>
<body>
Here your current code.
</body> -
i made a dual boot of windows 7 and mac os x lion in my macbook pro .i installed m icrosoft support software also. now, can i install windows updates? do i turn on the automatic updating of updates? does hot fix of microsoft i.e, " support.microsoft.com/kb/979491" helps in stop freezing in dual boot mechanism?
Windows has a software updater built into Windows and when you install the Boot Camp drivers then it will install an Apple software updater also. I believe Windows is set to automatically download and install your updates as does the Apple software Updater. They both will update the individual files it needs to periodically.
"Microsoft updates" and "Windows updates" are basically the same thing in Windows. Are you talking about the "Windows support software" when downloading from Boot Camp Assistant? Apple installs a software updater for it's Boot Camp drivers in Windows 7 so you can do it manually or automatically.
The "Hot Fix" your referring to is only for certain motherboards built from other Windows only computer manufacturers and does NOT pertain to any Apple computers.
If you have a problem with your computer then it's best to ask a specific question so we can help better.
Maybe you are looking for
-
HT201250 How do I restore a volume that no longer shows up in Finder?
I had a hard drive in an external firewire case. It came to a bad end. I have a Time Machine backup (Mac is running 10.6.8). How do I get to the backup of that volume so I can restore it?
-
How can I buy English version of OS X Snow Leopard in non-English speaking country (Switzerland)?
Apple Store offers French or German versions only.
-
Sound Blaster Audigy Advanced MB prob
So, I purchased the upgrade and then it said that I should run a program named "MBsetup.exe" which I should have received but didnt, cant find it anywhere and I'm getting pretty pissed off by this now. Cant contact creative by email or download that
-
How can user specify HAVING clause in Interactive Report
How can user specify HAVING clause in Interactive Report after making the group by selection? Under Actions/Format, the user sees just the Group By-Sort and Group By options.
-
Ridc query for list of WebSites
I am just starting with RIDC and with UCM, developing a web app to allow access to UCM via IDC. I need to get back data for presenting lists to my users, like: list of websites maintained by UCM, list of sections within particular websites, etc. I am