Problems running update command script

[daveb]

I have deployed the \wsusoffline\client folder to 3 client machines through SMS 2003 with a bat file to run the update cmd script. but it fails creating the WOUTempAdmin account.
Is it because I am trying to run this with the SMS service account, and I have to have to be phyisically logged with a local account with admin privleges?

If you could advise how I could do this. It would be gratefully appreciated.
Thanks is Advance.

DaveB

[WSUSUpdateAdmin]

Hi!

Maybe this is one of the machines where the "automatic recall" feature leads to problems.
Please don't use the "/autoreboot" switch when you call Update.cmd/DoUpdate.cmd and reboot/recall manually.

Regards
Torsten Wittrock

[boco]

To create the temporary account (for the automatic reboot and rerun feature), you need administrative privileges on the machine in question. Usually installing updates requires admin rights, too.

[daveb]

Many thanks for your swift replies.

If I created the woutempadmin account locally. would it still hold the reboot and recalls . we have many remote machines and cannot stand by each machine to do this manually.
Thanks
DaveB

[boco]

The temp. account is created automatically with a random password and deleted at the end. I fear pre-creation of that account won't work.

On the other hand, reboot and recall is required for a few updates only currently, like Service Packs, Internet Explorer, Dotnet Framework. The ''normal'' monthly security patches install in one go.

[daveb]

Thanks again for your reply.

As you say it creates a temp user and random pword. I think my issue is just doing it remotely to what would be over 50 clients using the SMS service account maybe in does not have enough privileges set on it to create the woutempadmin account? but the sms account has already privilages to run other installs.

Have you every got around this issue before.

In the wsusofflineupdate.log we can see the the user (user: username.) when we run it mannually.

when I use the automated script there is no username in there its just blank. can you help.
Regards
DaveB

[boco]

Unfortunately not much. I have no experience with SMS, does it use RDP/TS? If so, note that usually shutdown is denied to all Remote Desktop Protocol/Terminal Services connections*. The reason is, that by shutting down/rebooting you may get the remote PC into a situation requiring physical intervention. There may be ways to override that (group policies?), you'd have to consult the SMS/TS manual.

*As an example, if you have a remote session using Remote Desktop Connection, all Shutdown, Hibernate, Sleep and Reboot options are removed from the start menu/button and only available via Windows Security.