Manage updaters in an unmanaged environment

-d

Excludes the child process of the file from inheriting updater permissions.

sadmin updaters add –d <filename>

sadmin updaters add –d winlogon.exe

-n

Disables event logging for a file to be added as an updater.

sadmin updaters add –n <filename>

sadmin updaters add –n winlogon.exe

-l

Adds an execution file as an updater only when the specified library name is loaded for the execution file.

sadmin updaters add -l <associated libraryname> <filename>

sadmin updaters add –l system32\wuauserv.dll svchost.exe

-t

-p

Adds a file as an updater, only when its parent execution file is running.

sadmin updaters add -p <parentname> <filename>

sadmin updaters add –p svchost.exe iexplore.exe

-u

Adds a user as an updater. All update operations by the specified user name are allowed.

Note

When you specify the –u argument, other arguments, such as -l, -p, -d, and –n are not applicable.

sadmin updaters add –u <username>

Here's are the types of user names that can be added as updaters.

If you right-click a file and select Run as <updater user name>, the file can run as an updater only if the file is added to the allow list and authorized to run.