Allow non-administrators to receive update notificationsID: oval:org.secpod.oval:def:18784 | Date: (C)2014-05-29 (M)2023-07-14 |
Class: COMPLIANCE | Family: windows |
The Allow non-administrators to receive update notifications machine setting should be configured correctly.
This policy setting allows you to control whether non-administrative users will receive update notifications based on the "Configure Automatic Updates" policy setting. If you enable this policy setting, Windows Automatic Update and Microsoft Update will include non-administrators when determining which logged-on user should receive update notifications. Non-administrative users will be able to install all optional, recommended, and important content for which they received a notification. Users will not see a User Account Control window and do not need elevated permissions to install these updates, except in the case of updates that contain User Interface , End User License Agreement , or Windows Update setting changes. If you disable or do not configure this policy setting, then only administrative users will receive update notifications.
Fix:
(1) GPO: Computer Configuration\Administrative Templates\Windows Components\Windows Update\Allow non-administrators to receive update notifications
(2) KEY: HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\ElevateNonAdmins
Platform: |
Microsoft Windows Server 2008 R2 |