GSEC · Question #251
To update from a Windows Server Update Services (WSUS) server, users of the machine must have what rights, If any?
The correct answer is D. Local Administrator. Installing Windows updates distributed by WSUS requires Local Administrator rights on the client machine because update installation makes privileged system-level changes.
Question
To update from a Windows Server Update Services (WSUS) server, users of the machine must have what rights, If any?
Options
- ANo user tights are required
- BNetwork User
- CLocal User
- DLocal Administrator
How the community answered
(16 responses)- A13% (2)
- B6% (1)
- C6% (1)
- D75% (12)
Why each option
Installing Windows updates distributed by WSUS requires Local Administrator rights on the client machine because update installation makes privileged system-level changes.
No user rights being required is incorrect; installing updates that modify core OS components requires elevated local privileges that a standard user account does not possess.
Network User is not a defined Windows rights level that grants the ability to install system updates; it does not provide the local elevation needed.
A Local User (standard user) account lacks the privileges to write to system directories and install software, which are required for applying Windows updates.
Applying Windows updates involves writing to protected system directories, modifying registry keys, and replacing system files - all of which require elevated privileges. The Local Administrator right grants the user the necessary token to authorize these operations when manually initiating or confirming an update installation from a WSUS-managed policy.
Concept tested: WSUS client update permission requirements
Source: https://learn.microsoft.com/en-us/windows-server/administration/windows-server-update-services/plan/plan-your-wsus-deployment
Topics
Community Discussion
No community discussion yet for this question.