Running Kaspersky Corporate for almost 2 months, all users running XP Pro on a domain. I have the computers locked for shutdown. That is, laptop users are Local Administrators so they can shut down their computers but, people who have desktops do not have the authority to shut down their computers.

Every so often, KAV gets an update that requires a restart. When users click on the "OK, restart my computer" on the pop-up, they then get told that they don't have the rights to restart.

Kaspersky was installed with elevated credentials, and has processes running at those elevated levels. Can't the users response of "OK, I'm ready for my reboot now, Mr. Kaspersky" be passed to the the higher level process? It's either that or, stop sending updates that require reboots! Otherwise I'm stuck rebooting all the computers after hours.

can't you schedule an out of hours reboot?

Maybe I'm just having senior moment but, I can't think of way to do that off the top of my head right now. At least, not administratively from my desk. And not in a way that guarantees that no user is logged on and working.

Besides, my point is: Kaspersky needs the reboot. Kaspersky has the rights to reboot. Why can't the user level pop-up (that doesn't have the rights) pass the users "it's ok to reboot right now" signal on to the process that has the rights? All it has to do is set a flag that the higher level process monitors.

Don't get me wrong - thanks for suggesting a work-around but, this is a product improvement suggestion forum. If it really bothered me that much, I'd have started in a different forum.

However: if I just haven't had enough coffee or am missing a simple way to schedule reboots, please educate me. Love learning new tools! And thanks for taking a moment to read and reply.

hey no problem I think it would be useful too, just thought that a work around in the meantime might help out. i guess i should have put that lol. it depends what server OS you use but I used to use a tool called shutdown.exe from the win 2000 resource kit to carry out exactly this procedure with Win XP pro client machines. Here is a technet article on the subject. it may still be possible on server 2003 or even 2008 if you can get hold of the shutdown program from the old resource kit.

Oh! Well, that's exactly what I have been doing. Remoting into a server after hours and executing:
shutdown /r /f /t 0 /m \\machine_name
Actually, I use the GUI interface - put a shortcut on the desktop so that I can do a bunch at once. Although the GUI doesn't give you the /f option and some people stay logged in with Outlook running - stops the reboot.

I've also found that I can use NetView 2.94 and select a group of computers.

I thought maybe you had a way to schedule through Group Policy or some other trick I hadn't heard of.