If you don’t want to implement the company’s managed client software, you can use either method on a single machine, a group of machines, or across an enterprise. The article "Restricted users cannot run LiveUpdate under Windows 2000" (Document ID: 2000100614565548) offers two methods for running LiveUpdate without local administrator rights.
I found an article that explains how to fine tune how LiveUpdate operates. I searched Symantec's support site for the terms “administrator,” ”rights,” and “liveupdate” and turned up a whopping 94 articles, most of which affirmed that you can't run Symantec’s LiveUpdate utility without local administrator rights. I also need to acknowledge that the client is running Antivirus Corporate 7.5, and newer versions might already have addressed these concerns. I’m singling out Symantec only because I had to solve this particular client's problem I’m sure other valid examples exist (HP’s Photosmart software, for one). I recently took on the task of eliminating Symantec’s Antivirus Corporate Edition administrator requirement for a mid-sized business. Implementing internal update servers and push technology as a workaround for the local administrator rights problem shouldn't be necessary. Small and mid-sized businesses have smaller budgets and less technical acumen thus they're more vulnerable to cyber threats and damages. Implementing internal update servers is a manageable task for companies with a large budget and requisite technical expertise. (Aside to vendors: Are you aware of any security flaws in your online update or push software? Do you test new versions for potential security holes? Do you disseminate such information?)
You also need to monitor security holes that can let a malicious user compromise each vendor’s online update and push software. Push technology adds another layer of complexity to managing desktop security: You need the hardware and disk space to store updates you must learn how to install and configure each vendor’s push application you need to verify that updates are downloaded successfully you might need to review, test, and manually approve updates and you must verify that the push technology is actually distributing updates and backing up each push application and its associated patch files. In some cases, you can avoid granting local administrative rights by installing and configuring each vendor’s push technology. Most major hardware and software players, including vendors of virus and spyware scanners, offer this technology. In today’s patch-or-die world, online updates are fast becoming an industry standard.
With local administrator rights, malware can inflict greater damage on the local system and systems on which the local account has elevated rights. Last month, I reviewed some frightening trends in our cyber-insurgency universe and closed with a plea to vendors that provide online updates to eliminate the local administrator rights requirement.
0 kommentar(er)
