Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Issue

How can Elevate Windows Update packages (*.msu filefiles) be elevated for non-admin users

...

by doing the following steps:

  1. Create a Win32 or File Specification filter for Wusa.exe.
  2. Create a Command Line filter for the .msu file.  Generally Note: Select partial matching in the command line filter should be selected.  Include name and include the name of the update file either with or without the .msu extension.
  3. Create a new Elevate Process Rights policy.
    1. Applications to Control tab
      1. Applications to control
        1. Applications: Filter for Wusa.exe
    Conditions Include: Commandline  
  4. In the policy settings under the Applications to Controltab, choose the Wusa.exe filter you created previously.
  5. Under Conditions > Include Only, choose the command line filter for the .msu file.
  6. Click the Policy Enforcement tab.
  7. Make sure the policy priority value does not interfere with other policies.
  8. Uncheck the two "Continue...." options as well as the Stage Two procession options.
  9. Create the proper target/collection to apply the policy and then enable and save the policyClick to clear the Continue enforcing policies after enforcing this policy and Continue enforcing policies for child processes after enforcing this policy check boxes.
  10. Under Applied To click Apply Toand target the desired policy.
  11. Click Save.