Configuring WU Security

You should be cognitive of the fact that users who are members of the Administrators group have the ability to install updates via WU. If a non-administrative user tries to launch a WU session, he or she receives an error, as shown in Figure 14-3.

Figure 14-3

In addition, only the administrative users are notified of updates upon logging into the machine. You can also explicitly deny users' access to WU via a local policy setting (see Figure 14-4).

Figure 14-4

Your browser also may need configuring to support WU. Ensure Internet Explorer (IE) security is set to medium or lower, that active scripting is enabled, and that initialization of ActiveX controls is enabled. Note that these are the default IE settings, so unless you have changed them you should be fine.