XP SP3 non-admin update notifications

Hi,

In XP SP2, one can configure the machine to allow non-admin user to receive
updates notifications. This can be configured via the GpEdit.msc. This is
particularly useful for those running in LUA that does not use automatic
updates but has chosen to be notified and then select the downloads.

But in XP SP3, the GpEdit.msc templates for
"Computer Configuration\Administrative Templates\Windows Components\Windows
Update" does not contain the "Allow non-administrators to receive update
notifications" option.

Does anyone know how to enable this, either by means of registry hack or
installing templates?

I run my machine as LUA and hibernate all the time and I always do not use
automatic updates but rather the second option of receiving notification and
then selecting the updates.

Leon

Leon,

This is XP Pro or Home Edition ? XP Pro SP3 here does show the " Allow
non-administrators to receive update notifications " in
Computer Configuration\Administrative Templates\Windows
Components\Windows Update.
I wonder if not configuring " Configure Automatic Updates Properties "
is why it's not showing on your system:

> If the status is set to Not Configured, use of Automatic Updates is not specified at the Group
> Policy level. However, an administrator can still configure Automatic Updates through Control Panel.


MowGreen
===============
*-343-* FDNY
Never Forgotten
===============


Leon wrote:

> Hi,
>
> In XP SP2, one can configure the machine to allow non-admin user to
> receive updates notifications. This can be configured via the
> GpEdit.msc. This is particularly useful for those running in LUA that
> does not use automatic updates but has chosen to be notified and then
> select the downloads.
>
> But in XP SP3, the GpEdit.msc templates for
> "Computer Configuration\Administrative Templates\Windows
> Components\Windows Update" does not contain the "Allow
> non-administrators to receive update notifications" option.
>
> Does anyone know how to enable this, either by means of registry hack or
> installing templates?
>
> I run my machine as LUA and hibernate all the time and I always do not
> use automatic updates but rather the second option of receiving
> notification and then selecting the updates.
>
> Leon

Leon wrote:

> In XP SP2, one can configure the machine to allow non-admin user to
> receive updates notifications. This can be configured via the
> GpEdit.msc. This is particularly useful for those running in LUA that
> does not use automatic updates but has chosen to be notified and then
> select the downloads.
>
> But in XP SP3, the GpEdit.msc templates for
> "Computer Configuration\Administrative Templates\Windows
> Components\Windows Update" does not contain the "Allow
> non-administrators to receive update notifications" option.

I don't think this is true, i.e., I don't think SP3 is your problem. However,
the information you need to use registry settings rather than group policy is here:

<http://technet2.microsoft.com/WindowsServer/en/library/75ee9da8-0ffd-400c-b722-aeafdb68ceb31033.mspx?mfr=true>

http://technet2.microsoft.com/Window....mspx?mfr=true

Harry.

My Tablet XP is definitely XP Pro SP3. OK. Prior to my rebuilding my tablet
from scratch, I was running SP2 and definitely there is a template entry to
set up the dispatching update notification to non-Admin account, please see
http://tinyurl.com/9cnht6

On my VM running XP Pro SP3 that was upgraded from SP2, I have found that
entry in the template. But I was surprised not to have found it in my Tablet
PC version. I am just wondering if it could be because I updated it to SP3
immediately after I have recovered the tablet from the Recovery CD (SP2).

Anyway I definitely used this in all my current still XP Pro SP2 machines to
make all my LUA machine to receive such notification and I did not need to
touch the Registry.

On my recently rebuilt Tablet that I subsequently updated from XP Pro SP2 to
SP3, the template was not there.

So far, I have managed to add the ElevatedNonAdmin to
HKLM\Software\Policies\Microsoft\Windows\WindowsUp date
and setting its value to 1 and I have received update notification. I am not
sure if this registry key is the answer when I am not using WSUS. This
registry setting is what is prescribed in the technet article Harry
suggested. Also in that article it mentioned that you could use GpEdit.msc
but I could not find the familiar entry.

Long before the infamous 'Black Screen Attack' (http://tinyurl.com/nbondk),
I have always turn off 'automatic updates' preferring to select updates I am
sure are safe.

Thanks

Leon

"Harry Johnston [MVP]" <harry@scms.waikato.ac.nz> wrote in message
news:OaRN78i6JHA.1568@TK2MSFTNGP06.phx.gbl...
> Leon wrote:
>
>> In XP SP2, one can configure the machine to allow non-admin user to
>> receive updates notifications. This can be configured via the GpEdit.msc.
>> This is particularly useful for those running in LUA that does not use
>> automatic updates but has chosen to be notified and then select the
>> downloads.
>>
>> But in XP SP3, the GpEdit.msc templates for
>> "Computer Configuration\Administrative Templates\Windows
>> Components\Windows Update" does not contain the "Allow non-administrators
>> to receive update notifications" option.
>
> I don't think this is true, i.e., I don't think SP3 is your problem.
> However, the information you need to use registry settings rather than
> group policy is here:
>
> <http://technet2.microsoft.com/WindowsServer/en/library/75ee9da8-0ffd-400c-b722-aeafdb68ceb31033.mspx?mfr=true>
>
> http://technet2.microsoft.com/Window....mspx?mfr=true
>
> Harry.

Leon wrote:

> [...] So far, I have managed to add the ElevatedNonAdmin to
> HKLM\Software\Policies\Microsoft\Windows\WindowsUp date
> and setting its value to 1 and I have received update notification. I am
> not sure if this registry key is the answer when I am not using WSUS.
> This registry setting is what is prescribed in the technet article Harry
> suggested. [...]

This will definitely work regardless of whether or not you are using WSUS. In
fact, all the group policy template does is set this key, so it's exactly the
same whether you use gpedit.msc or set the key manually.

Harry.