Purpose
This document outlines how to run a Patch Repair task as a specific user. This can be used as a way to apply patches similar to using 'Run as Administrator'.
Affected Platform
LDMS Core: 9.6 SP1
Steps
Running Patch Repairs tasks as a specific user can only be delegated on the Distribution and Patch setting, not per vulnerability/patch. Because of this, it is recommended to setup a new Agent Setting | Distribution and Patch for use on patches that require the 'run as' option.
- Click Tools | Configuration | Agent Settings
- Click Agent Settings | My Agent Settings or Public Agent Settings | Distribution and Patch | Create New Setting
- Within the Distribution and Patch setting select MSI Information
- Under the Run as Informationsection fill out the credentials of the user to 'run as'
- Using an admin account will have the effect as 'run as administrator'
- Using an admin account will have the effect as 'run as administrator'
- Click Save to commit
Note: For the purposes of this document, the MSI Information | Run as Information is the only relevant option that needs configured. The other options within this setting may be configured specific to your environmental needs.
- With the new setting created, schedule the repair of the patch.
- In the Scheduled Task window select Agent Settings
- Under Distribution and Patch select the new Distribution and Patch - Run as Admin setting
- The name of the setting will vary depending on what you called it
- Save the task and run
When this task runs on the client machine, it will run the repair job as the specific user with the rights defined for that user.