Hi,
I try to do automatic cleanup of WSUS parent and downstream servers.
My script run fine with my account (domain admin) but I want to run the script with low rights.
So, I created a local account on each server, member of WSUS Administrators local group.
This works fine for Windows 2008 (R2) downstream servers but for 2012 Servers, i get an error: acces denied when performing cleanup.
After reviewing WSUS logs, it seems that it's impossible to stop WSUS Service with this account accros WSUS Remoting API.
Why WSUS administrators group isn't sufficient for 2012 R2 servers ?
Thanks.